I received several variations of the same Spam message overnight.
They all pretty much looked like this:
X-MailScanner-SpamCheck: spam, SpamAssassin (not cached, score=16.149,
required 6.5, BAYES_99 3.50, DATE_IN_FUTURE_96_XX 2.40,
FORGED_RCVD_HELO 0.14, FROM_LOCAL_NOVOWEL 2.86, SARE_MLB_Stock6
2.50,
VOWEL_FROM_7 2.75, WINDOWS_7BITS 2.00)
All of mine had similar hits.
> -----Original Message-----
> From: Fabien GARZIANO [mailto:[EMAIL PROTECTED]
> Sent: Thursday, October 19, 2006 10:33 AM
> To: users@spamassassin.apache.org
> Subject: Fun : ultimate spam
>
> <FUN>
> Today I received the ultimate spam (I guess I'm the
> 1'000'000'000th guy saying that). The only thing triggered is
> Bayes ... Usually this kind of mails are triggered by RBLs,
> and I don't see any pattern to stick to for a regex (surely
> cause I'm nobo with regex) ... Wow ... I thought my
> spamassassin setup was accurate... I'll meditate this.
> Here's the body :
> "l was going to mention about these incredibIe op^portunities
> for future pros perity.There is a com~pany outhere known as
> American Unity lnves~tments Inc (AUNI).
> This one as you can see is climbing, but by just looking at
> it l can teII it's gonna ex^pIode. So you do have a window to
> digg in whiIe it's stiIl in it's Iow. I got a few sha/res of
> mine & made 2.7K. So what a hey, go ahead & do the same make
> some mo~ney whiIe it's there.
>
> l hope it was a hel~per.l'Il emaiI you later this week.
>
> WBR Serge...
>
>
> ---***-----------------****--"
>
> And the headers :
> "
> [...]
> Received: from mail.telelistas.net (unknown [217.17.253.75])
> by califw3.caliseo.fr (Postfix) with ESMTP id 7B76BBE88A;
> Thu, 19 Oct 2006 11:29:35 +0200 (CEST)
> Received: from 66.129.128.42 (HELO antispam.abacom.com)
> by caliseo.com with esmtp (COBOEU14RD 2EQ7)
> id 3P7R1T-70N8KT-O6
> for [EMAIL PROTECTED]; Thu, 19 Oct 2006 09:29:46 -0060
> Date: Thu, 19 Oct 2006 09:29:46 -0060
> From: "Frankie Huggins" <[EMAIL PROTECTED]>
> X-Mailer: The Bat! (v2.01) Personal
> X-Priority: 3 (Normal)
> Message-ID: <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Go/od new*s for you
> MIME-Version: 1.0
> Content-Type: text/plain;
> charset=iso-8859-2
> Content-Transfer-Encoding: quoted-printable
> X-Spam: Not detected
> X-caliseo-MailScanner: Found to be clean
> X-caliseo-MailScanner-SpamCheck: n'est pas un polluriel,
> SpamAssassin (score=3.5, requis 5.8, BAYES_99 3.50)
> X-caliseo-MailScanner-SpamScore: 3
> X-caliseo-MailScanner-From: [EMAIL PROTECTED]
> X-Spam-Status: No
> Return-Path: [EMAIL PROTECTED]
> X-OriginalArrivalTime: 19 Oct 2006 09:29:47.0352 (UTC)
> FILETIME=[1E5E6D80:01C6F361] "
> </FUN>
>
> --
>
> F a b i e n G a r z i a n o
>
===========================================================
CIRCULAR 230 DISCLOSURE: Pursuant to Regulations Governing Practice Before the
Internal Revenue Service, any tax advice contained herein is not intended or
written to be used and cannot be used by a taxpayer for the purpose of avoiding
tax penalties that may be imposed on the taxpayer.
===========================================================
CONFIDENTIALITY NOTICE:
This electronic mail message and any attached files contain information
intended for the exclusive use of the individual or entity to whom it is
addressed and may contain information that is proprietary, privileged,
confidential and/or exempt from disclosure under applicable law. If you are
not the intended recipient, you are hereby notified that any viewing, copying,
disclosure or distribution of this information may be subject to legal
restriction or sanction. Please notify the sender, by electronic mail or
telephone, of any unintended recipients and delete the original message without
making any copies.
===========================================================
NOTIFICATION: Katten Muchin Rosenman LLP is an Illinois limited liability
partnership that has elected to be governed by the Illinois Uniform Partnership
Act (1997).
===========================================================
