Hi all, I don't know how new this trick is, but I've not seen it before -- the spammer is using HTML tables to break up the message content. Also, most of the interesting words are mis-spelled. It does at least hit on HG_HORMONE.
(I've just noticed that it has both a "References" and an "In-Reply-To" header with my hostname present. <sigh>) Forwarded message: > From [EMAIL PROTECTED] Sat Dec 6 20:15:56 2003 > Date: Sat, 06 Dec 2003 19:55:47 +0000 > From: Laboring <[EMAIL PROTECTED]> > Subject: way to bettter heallth 4 > To: Martin <[EMAIL PROTECTED]> > References: <[EMAIL PROTECTED]> > In-Reply-To: <[EMAIL PROTECTED]> > Message-ID: <[EMAIL PROTECTED]> > MIME-Version: 1.0 > Content-Type: text/html > Content-Transfer-Encoding: 8bit > X-Spam-Level: **** > X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on > zamenhof.demon.co.uk > X-Spam-Status: No, hits=4.8 required=5.0 tests=FORGED_HOTMAIL_RCVD,HG_HORMONE, > HTML_70_80,HTML_FONTCOLOR_RED,HTML_FONTCOLOR_UNSAFE,HTML_MESSAGE, > HTML_MIME_NO_HTML_TAG,MIME_HTML_NO_CHARSET,MIME_HTML_ONLY > autolearn=no version=2.60 > > <body bgcolor=#cefae2> > <center><font face="Arial"> > <table cellspacing=0 cellpadding=0 border=0 width=550 id=0185268157> > <tr id=0298242059><td id=4134234037 align=right> > <table cellspacing=0 cellpadding=0 border=0 id=2481917822 width=200> > <tr id=6355270475><td id=3267690093 align=right>Exprets in the Ne</td></tr> > <tr id=7186277069><td id=3238756704 align=right>report that Humaan Gro</td></tr> > <tr id=3460129238><td id=6104722438 align=right>maakes you look and fe</td></tr> > </td></tr> > </table> > </td> > <td> > <table cellspacing=0 cellpadding=0 border=0 id=4607573254 width=300> > <tr id=6882895718><td id=6806279422>w England Journal of Medicine,</td></tr> > <tr id=2693451876><td id=2450630212>wth Hoormone therrappy</td></tr> > <tr id=0701428370><td id=6075311598>el 10 YEARS YOUUNGERR!</td></tr> > </td></tr> > </table> > </td> > <td rowspan=2 width=50 align=center bgcolor=fafeff id=1226290212><b><a > href="http://www.e-buy-net.com/hgh/index.php?pid=evaph3839";>Folllow <font > color=#ff0005>this</font> linnk for more info!</a></b></td> > </tr> > <tr><td colspan=2 id=2053482752> > <br><br><b>Check out our discuont intenret specails, and<br> get yuor FRREE boottles > of H GgH todaay!</b></td></tr> > </table> > </center> > </font> > </body> Martin -- Martin Radford | "Only wimps use tape backup: _real_ [EMAIL PROTECTED] | men just upload their important stuff -o) Registered Linux user #9257 | on ftp and let the rest of the world /\\ - see http://counter.li.org | mirror it ;)" - Linus Torvalds _\_V ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
