"David Groce" <[EMAIL PROTECTED]> wrote on 06/11/2004 02:20:06 PM:
> Has anyone written a rule to catch this message? The subject is
> Powerful weightloss now available for you.
> It seems to be the only spam that consistently gets through on all my
users
> accounts.
>
> -----Original Message-----
> From: Ester E. McKnight [mailto:[EMAIL PROTECTED]
> Sent: Friday, June 11, 2004 11:13 AM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: Powerful weightloss now available for you.
>
>
> Hello, I have a special_offer for you...
> WANT TO LOSE WEIGHT?
> The most powerful weightloss is now available
> without prescription. All natural Adipren720
> 100% Money Back Guarant�e!
> - Lose up to 19% Total Body Weight.
> - Up to 300% more Weight Loss while dieting.
> - Loss of 20-35% abdominal Fat.
> - Reduction of 40-70% overall Fat under skin.
> - Increase metabolic rate by 76.9% without Exercise.
> - Boost your Confidence level and Self Esteem.
> - Burns calorized fat.
> - Suppresses appetite for sugar.
> Get the facts about all-natural Adipren720 <http://3adipren.com/>
>
>
>
> ---- system information ----
> assumption servers procedure lies The in inappropriate revision
> target geographic those inferred Status header controls sorting
> implementations wildly behaviors locale-determined The current interplay
> perform
> impossible specification Publication perform has implementation similar
> Shorthand
> relationship Chinese MIME processing: patent natural This patterns
>
A quick run through my system even without the headers identified it as
Spam.
X-Spam-Report:
* 1.9 DATE_MISSING Missing Date: header
* 0.3 RM_hm_EmtyMsgid Message ID is empty, or just spaces -
probable spamsign
* 2.4 ALL_NATURAL BODY: Spam is 100% natural?!
* 6.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* 5.5 SC_URI_RBL URI's domain appears in spamcop database at
sc.surbl.org
* [3adipren.com is blacklisted in SpamCop RBL at]
[sc.surbl.org]
* 5.5 WS_URI_RBL URI's domain appears in sa-blacklist
* [3adipren.com is blacklisted in SpamCop RBL at]
[ws.surbl.org]
* 1.6 NO_DNS_FOR_FROM Domain in From header has no MX or A DNS
records
Andy
