Received the attached FN today. Most notable attribute I find is that it
includes an X-pvkhgmeblyqcmv header.
It seems likely that any X-{random string of characters} header is for
spam tracking purposes only. I wonder whether a test for an X- header
name with four or five consecutive consonants would be a valid spamsign
test.
Unfortunately, I can't find any way to implement this test. Can anyone
suggest a method?
Bob Menschel
From [EMAIL PROTECTED] Sun Nov 2 11:58:50 2003
Received: from [211.115.216.222] (helo=mail-kr.bigfoot.com)
by server11.arteryserver11.net with smtp (Exim 4.24)
id 1AGGsb-0005wD-Ce
for [EMAIL PROTECTED]; Sun, 02 Nov 2003 11:58:49 +0000
Received: from helpfulnessofservice.com ([216.46.203.224])
by BFLITEMAIL-KR1.bigfoot.com (LiteMail v3.03(BFLITEMAIL-KR1)) with SMTP id
02Nov2003_BFLITEMAIL-KR1_181609_3780900;
Sun, 02 Nov 2003 06:58:46 -0500 EST
Date: Sun, 02 Nov 2003 06:58:44 EST
To: [EMAIL PROTECTED]
Subject: Menschel Robert your acct for 920 5TH AVE is Ready
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: Samantha Sepe <[EMAIL PROTECTED]>
Reply-To: <[EMAIL PROTECTED]>
X-pvkhgmeblyqcmv: xtr524d656e73636840626967666f6f742e636f6drtx
Message-Id: <[EMAIL PROTECTED]>
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
server11.arteryserver11.net
X-Spam-Status: No, hits=5.9 required=9.0 tests=BAYES_60,HTML_70_80,
HTML_MESSAGE,MIME_HTML_ONLY,RM_be_rmenschbf,RM_hc_HTML,RM_rb_ANCHOR,
RM_rb_BODY,RM_rb_BREAK,RM_rb_DIV,RM_rb_FONT,RM_rb_HTML,RM_rb_PARA
autolearn=no version=2.60
X-Spam-Level: *****
X-CWforward: passed anti-spam test
<HTML><HEAD></HEAD>
<BODY>
<DIV>Dear Menschel Robert<br>
I'm Samantha Sepe with
a Refi-<BR>
nance and New Home Purch company. </DIV>
<DIV><p>Menschel Robert, I would like to intelligently help you reduce your monthly
pmts for the
Robert home at 920 5TH AVE NEW YORK, NY 10021-4160. <BR>
<BR>
<a
HREF=http://href=www.delivercreative28189590solutions.comhref=www.delivercreative28189590.orgecmjuxbcjiul.28189590intelligently.politeassistance.com/?href=www.creativesolutionsdeliver.comcreativedeliver&[EMAIL
PROTECTED]>use your acct 28189590</a> and update your infomation.<BR>
<BR>
<BR>Samantha Sepe<BR>Account Manager Specialist <BR>
<BR>
</FONT></DIV>
<HR noShade SIZE=1>
To stop mail future:
<a
HREF=http://href=www.delivercreative28189590solutions.comhref=www.delivercreative28189590.orgwrrkcxuytproffw.28189590intelligently.politeassistance.com/?href=www.creativesolutionsdeliver.comcreativedeliver&[EMAIL
PROTECTED]>solutions</a>
<BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR><BR> <BR> <BR><BR><BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR><BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR><BR><BR> <BR> <BR><BR> <BR><BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR><BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR><BR> <BR> <BR><BR> <BR><BR> <BR> <BR><BR> <BR> <BR> <BR><BR> <BR> <BR> <BR> <BR><BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR><BR> <BR><BR> <BR> <BR> <BR><BR> <BR> <BR> <BR><BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR><BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR>
<BR></FONT></BODY></HTML>