You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Jeff Chan <je...@surbl.org> on 2006/01/08 07:04:21 UTC

Pill spammers using image only, no URI

FWIW The following spam had no URI, just some hashbuster(?) text
and an image with the spammer domain ( inchoice dot net ) only in
the (obscene) image.  In that sense it's perhaps following in the
footsteps of the image-only stock spams.

__


Received: from tvenster.nl (pool-71-112-152-77.sttlwa.dsl-w.verizon.net [71.112.152.77])
        by smtp-filter.supranet.net (Postfix) with SMTP id 0A06B15E5B
        for <REDACTED>; Sat,  7 Jan 2006 13:18:35 -0600 (CST)
Received: (from tomcat@localhost)
        by 16.9.87.64 (8.12.8/8.12.8/Submit) id j6CHmn4V393985
        for TO_EMAIL; Sat, 07 Jan 2006 18:39:25 +0100
Message-ID: <vg...@tvenster.nl>
Date: Sat, 07 Jan 2006 18:39:25 +0100
From: "Neal W. Vincent" <ne...@eman.de>
X-Mailer: MIME-tools 5.491 (Entity 5.192)
MIME-Version: 1.0
To: REDACTED
X-Scanned-By: MIMEDefang 2.52 on 122.190.49.64
X-Scanned-By: SpamAssassin 3.407152, File::Scan 0.00, Archive::Zip 1.37
X-Recipient: <REDACTED>
Subject: [SPAM-TAG] buy cails-rtabs without embarrassment
Content-Type: multipart/related;
 boundary="----NextBound142819120546168615235172"
X-Virus-Scanned: by amavisd-new at smtp-filter.supranet.net
X-Spam-Status: Yes, hits=2.5 tagged_above=0.1 required=1.2 tests=BAYES_56,
 HTML_IMAGE_ONLY_06, HTML_MESSAGE, MIME_HTML_ONLY, SUBJ_BUY
X-Spam-Level: **
X-Spam-Flag: YES
X-UIDL: ;)c!!0If!!jo#"!A,F!!

------NextBound142819120546168615235172
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <DEFANGED_meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<img alt=""
 src="cid:1.0.0.54.0.88802835635394.58424315@imperfectability.tvenster.nl.8" border="0"><br>
ibiza ! leafier , addition nincompoop , crenulate 
,litigated it's Isaac it antihelices 
in soundingly !insiders ascosporic sarcoid hayloft's , bilinguals Jacksonian semiparasitic 
! bogor but contraoctave it'splaiter 
, dumbwaiters or gadwall it's embraceor 
or
babbles a betokened a diversion ! alligatored 
,cryptozoite and sinkers a isoclinal 
the Serkin it's
it's brassy pragmatically reels electrothermally anasarca in facilely flashy Rawlings airship 
the<br>! monocyte it preservationist 
and<br>
<br>
<br>
</body>
</html>

------NextBound142819120546168615235172
Content-Type: image/gif;
 name="perjure.3.gif"
Content-Transfer-Encoding: base64
Content-ID: <1....@imperfectability.tvenster.nl.8>
Content-Disposition: inline;
 filename="mudholes.2.gif"

R0lGODlh9AF3AbMAAAAAAP///7a2tpCQkHNzc8zMzDMzM+np6f4BAgAAAAAAAAAAAAAAAAAA
AAAAAAAAACH5BAQUAP8ALAAAAAD0AXcBAAT/MMhJq7046827/2AojmRpnmiqrmzrvnAsz3Rt
[...]

__


Jeff C.
-- 
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/