You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by JP Kelly <li...@jpkvideo.net> on 2008/02/27 19:15:49 UTC

yahoo.co.uk

everyday i get 2 or three of these coming through.
it seems like they could/should be caught but they often have very low  
scores.
they all have yahoo.co.uk in the from address

---------------example1---------------
---------------
headers
---------------
From: 	joycebrandt1300@yahoo.co.uk
	Subject: 	dear tnv Schoolgirls q.

	Date: 	February 27, 2008 5:05:53 AM PST

	To: 	jp@jacinto-murat.pt
	Reply-To: 	joycebrandt1300@yahoo.co.uk
	Return-Path: 	<jo...@yahoo.co.uk>

	Delivered-To: 	33-jpkelly@jpkvideo.net

	Delivered-To: 	7-jp@jpkvideo.com

	X-Spam-Checker-Version: 	SpamAssassin 3.2.4 (2008-01-01) on  
jpkvideo.net

	X-Spam-Level: 	****

	X-Spam-Status: 	No, score=4.9 required=5.0 tests=BAYES_50,  
RCVD_IN_BL_SPAMCOP_NET 
,SARE_SCHLGRL,TW_JF,TW_JK,TW_KD,TW_QW,TW_TN,TW_WP,TW_WV, TW_YW  
autolearn=no version=3.2.4

	Received: 	(qmail 32723 invoked by uid 110); 27 Feb 2008 04:53:05 -0800

	Received: 	(qmail 32714 invoked from network); 27 Feb 2008 04:53:05  
-0800

	Received: 	from n2.bullet.mail.re4.yahoo.com (206.190.56.21) by  
mail.jpkvideo.net with SMTP; 27 Feb 2008 04:53:04 -0800

	Received: 	from [68.142.230.29] by n2.bullet.re4.yahoo.com with  
NNFMP; 27 Feb 2008 12:50:47 -0000

	Received: 	from [69.147.75.182] by t2.bullet.re2.yahoo.com with  
NNFMP; 27 Feb 2008 12:50:47 -0000

	Received: 	from [127.0.0.1] by omp103.mail.re1.yahoo.com with NNFMP;  
27 Feb 2008 12:50:47 -0000

	Received: 	(qmail 56157 invoked from network); 27 Feb 2008 12:50:47  
-0000

	Received: 	from unknown (HELO www.microsoft.com) (joycebrandt1300@83.97.253.110 
  with login) by smtp108.plus.mail.re1.yahoo.com with SMTP; 27 Feb  
2008 12:50:46 -0000

	Received-Spf: 	none (mail.jpkvideo.net: domain at yahoo.co.uk does  
not designate permitted sender hosts)

	X-Yahoo-Newman-Id: 	627346.89196.bm@omp103.mail.re1.yahoo.com

	Message-Id: 	<62...@omp103.mail.re1.yahoo.com>

	Domainkey-Signature: 	a=rsa-sha1; q=dns; c=nofws; s=s1024;  
d=yahoo.co.uk; h=Received:X-YMail-OSG:X-Yahoo-Newman- 
Property:From:To:Reply-To:Subject:Date:MIME-Version:Content- 
type:Content-transfer-encoding; b=ZCQu4SyaoBJDYdMVj6lzxZMWp2rNH 
+Wt4gw3baN3qcGIudadCvR/ 
R4e5BViYvwywNh6x0WeKRTWJ8XXzzOonPMhv0NJ7dz1Wd84Epw3ZmcZMiR6swzoFcPcjnRckaVpYzLQoi 
/0ls8LR22X52aLL06XgduZEZEds5U72EYNYmMI=  ;

	X-Ymail-Osg: 	 
R1BUWHwVM1mOafE4j9EzDgzCnkd2r0k6r5y2xhxB6Q63z_kS48BZ8OmP83S_N5FKG8uFnXPaukheeCbN2uo0TnqdAYnIXaI0rtYpCqwAJepHpgTHKx6E5FLi 
.E5QiXXamQ--

	X-Yahoo-Newman-Property: 	ymail-5

	Mime-Version: 	1.0

	Content-Type: 	text/plain; charset=windows-1251

	Content-Transfer-Encoding: 	8bit

---------------
body
---------------

r, top ywp j Whore jfft http://www.uastvideofs.cn chb wvr sq oo i. fa  
vmi h qwdcs elbjj.
das imoum x izo yw pkwh, wppi jkdq x yrop.

---------------example2---------------
---------------
headers
---------------

From: 	lujanmedley8925@yahoo.co.uk
	Subject: 	sexual v Whore v.

	Date: 	February 26, 2008 2:06:24 PM PST

	To: 	jp@joasia.dk
	Reply-To: 	lujanmedley8925@yahoo.co.uk
	Return-Path: 	<lu...@yahoo.co.uk>

	Delivered-To: 	33-jpkelly@jpkvideo.net

	Delivered-To: 	7-jp@jpkvideo.com

	X-Spam-Checker-Version: 	SpamAssassin 3.2.4 (2008-01-01) on  
jpkvideo.net

	X-Spam-Level: 	

	X-Spam-Status: 	No, score=0.9 required=5.0  
tests=BAYES_50,TW_BD,TW_DJ,TW_DZ,  
TW_JB,TW_JF,TW_KJ,TW_QL,TW_QW,TW_SV,TW_WB,TW_WR,TW_ZQ autolearn=no  
version=3.2.4

	Received: 	(qmail 14144 invoked by uid 110); 26 Feb 2008 13:57:02 -0800

	Received: 	(qmail 14118 invoked from network); 26 Feb 2008 13:57:01  
-0800

	Received: 	from n2d.bullet.mail.ac4.yahoo.com (76.13.13.86) by  
mail.jpkvideo.net with SMTP; 26 Feb 2008 13:57:01 -0800

	Received: 	from [76.13.13.26] by n2.bullet.mail.ac4.yahoo.com with  
NNFMP; 26 Feb 2008 13:55:07 -0000

	Received: 	from [68.142.194.243] by t3.bullet.mail.ac4.yahoo.com with  
NNFMP; 26 Feb 2008 21:57:00 -0000

	Received: 	from [68.142.237.88] by t1.bullet.mud.yahoo.com with  
NNFMP; 26 Feb 2008 21:57:00 -0000

	Received: 	from [66.196.97.153] by t4.bullet.re3.yahoo.com with  
NNFMP; 26 Feb 2008 21:56:59 -0000

	Received: 	from [127.0.0.1] by omp206.mail.re3.yahoo.com with NNFMP;  
26 Feb 2008 21:56:59 -0000

	Received: 	(qmail 13807 invoked from network); 26 Feb 2008 21:51:21  
-0000

	Received: 	from unknown (HELO www.microsoft.com) (lujanmedley8925@151.67.4.116 
  with login) by smtp101.plus.mail.re1.yahoo.com with SMTP; 26 Feb  
2008 21:51:20 -0000

	Received-Spf: 	none (mail.jpkvideo.net: domain at yahoo.co.uk does  
not designate permitted sender hosts)

	X-Yahoo-Newman-Id: 	605208.85387.bm@omp206.mail.re3.yahoo.com

	Message-Id: 	<60...@omp206.mail.re3.yahoo.com>

	Domainkey-Signature: 	a=rsa-sha1; q=dns; c=nofws; s=s1024;  
d=yahoo.co.uk; h=Received:X-YMail-OSG:X-Yahoo-Newman- 
Property:From:To:Reply-To:Subject:Date:MIME-Version:Content- 
type:Content-transfer-encoding;  
b 
= 
x6Ax7P5tAakcsTqWPNt8utwUobJiLbQjEITOW15huvuYiS9KyFjeeyZRSmbcT1Hp3JIYMaDGU0P17AhbD4ilH0jX5G1kHdtgu7cYg6NUoQEQxwTolaovQ33KKj4JMeF0HY0qoHXd9lMeKKvjMoGx0sv1dsuQALrfBk2AahBZpxc 
=  ;

	X-Ymail-Osg: 	 
CIf6xWIVM1m 
.z6FjASsVWwJzKEWmvuLaiLZVnwZPgf4ETiPkKhHMg5qYKMDH_FnO04HDM8AnqO6Ad_Do_AwEoM_QtkRca33voPpZe1Qq_7Wlo0c1C5 
.Y9YS5kO6RqoSV

	X-Yahoo-Newman-Property: 	ymail-5

	Mime-Version: 	1.0

	Content-Type: 	text/plain; charset=windows-1251

	Content-Transfer-Encoding: 	8bit

---------------
body
---------------
bcukz hy bp, nice omi gv wbj Woman fhoul http://www.fastvideosn.cn p  
uph iu. olkg djfne ou yscv i.
kjbdq gup dzqlh qwrff mow j jq, y lnsvf ssk.