Here is a net block of a spammer in training
and had the misfortune (on our network at least)
to hit one of our control addresses (repeatedly)

inetnum:      203.192.162.192 - 203.192.162.255
netname:      HAN-SERVER-KR-NETBLK1
country:      KR
descr:        Hanserver.Net

The following is the text content of the message
Please note, the urls have been munged but the
remainder of the message is the same for all the 
hits we see.

>From is changed from one email to the next
Subject is changed from one email to the next

Greaten your penis meausurements with our new medicines.
http://www3.(removed).com/pB/9633.html
Tested to show results in less than 3 months.
If you don't want to hear about later specials:
http://www8.(removed).com/off.html
Thank you for taking a minute to look through this.
Hope to hear from you, William.

also the email is a combination of text and real (not obfuscated)
HTML, with image links I think to track open email

Personally, I'm already Greaten, If you know what I mean, Nudge, Nudge

g


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to