[SAtalk] Any rule to catch this spam?

rich-lists Wed, 07 Jan 2004 10:41:11 -0800

Attached is a spam that seems to sneak by us all of the time. Anyone
know of a good rule to catch this?





Richard Humphrey
System Administrator
MultiCam LP
972-929-4070 X2408

Some addresses changed to protect the innocent :-)

Return-Path: <[EMAIL PROTECTED]>
Received: from myparentime.com ([213.228.170.247])
        by mail.example.com (8.12.8/8.12.8) with SMTP id i07G6nfi028276
        for <[EMAIL PROTECTED]>; Wed, 7 Jan 2004 10:06:52 -0600
Message-ID: <[EMAIL PROTECTED]>
From: "The Online Source" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Intensify Your Bedroom Performance
Date: Wed,  7 Jan 2004 12:02:25 -0500
Mime-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_490_47CA_299247CA.299247CA"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on 
        mail.example.com
X-Spam-Level: *****
X-Spam-Status: No, hits=5.9 required=6.0 tests=BAYES_50,BigEvilList_191,
        HTML_MESSAGE,NORMAL_HTTP_TO_IP,RCVD_IN_NJABL,RCVD_IN_NJABL_PROXY,
        RCVD_IN_SORBS,RCVD_IN_SORBS_SOCKS,SUBJECT_LIGHT autolearn=no 
        version=2.61
Status:   

Here is the html portion of the mail

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1" html; 
text>
<META content="MSHTML 6.00.2800.1276" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=white><B>From:</B> The Online Source 
[EMAIL PROTECTED]<BR><B>Sent:</B> Wednesday, January 07, 2004 11:02 
AM<BR><B>To:</B> [EMAIL PROTECTED]<BR><B>Subject:</B> Intensify Your 
Bedroom Performance<BR>
<DIV align=center><FONT face=Verdana size=2>Email is loading..</FONT></DIV><BR>
<DIV align=center><A href="http://www.ghor.us/alpha/?m3";><IMG 
src="http://211.162.108.119/L/8/rfufifj.gif"; border=0></A><BR><BR>
<DIV align=center><FONT face=Verdana size=2>Image not loading? See message <A 
href="http://www.ghor.us/alpha/?m3";>here</A>.</FONT></DIV></DIV><BR><BR>
<DIV align=center><FONT face=verdana size=1><A 
href="http://211.162.108.119/o.htm?IKQRU";>Stop</A> all announcements.</DIV>
<P style="FONT-SIZE: 0px; COLOR: white">2skds.W3R3m/0Dtlr1EeFq6.si0OA.h75PN/ 
whmw odg, hqhm, pvszwq . xys sncwfr mfre, wkvd, eps . kkvi did xvjbr, vmf, flw . 
ytfax ssjdps taipzf, bxsyl, yrlw . jpcj zej jydorf, ieeihd, frcgin . fwuhg jmt 
vszll, kuk, cuwf . nkhxxm uim svo, rjgqu, whlgaq . wxc hlj zmbhad, xtqoe, gapcj 
. ijtl spuac hcrklt, nqif, odmov . yyz tmtl pnfvwj, gvivk, fsftv . iqii jtjvn 
yekd, hnopkw, wwqo . kkxu fet xcl, zjrmo, tdg . nevmd agwmd pkwia, mnioyb, ntt . 
adi zujlu jhxdy, zikuu, eiw . ilzdgb ohik velgni, lsit, eqdjyb . jppmv vlydv 
azeg, opchzy, eop . osfxhv eljpl kepm, wbzld, ldsrr . igbn litp dfhsp, hbyde, 
rife . zvfifn suxdo zrr, lhw, kvy . upzatm qtkv wpb, spht, bcv . ypu plsg ubx, 
rqfozd, aayri . bluyv nps bkjnel, bef, vemb . pzzxr ina knuesx, enwrz, xegs . 
vtq vpjor ctyohu, bukfh, ygf . nooxj ovf gtzzxs, nbthdp, kwbj . jfsx rifhfk 
leok, gjpk, ypu . zsv zeptd llss, dhbjv, meyb . fcdzw trpty obrzp, uhp, lyzykf . 
oves foe fvt, cihv, whddwh . winjp zksrm fqvmor, qzzli, toyrxp . hex swi puh, 
mci, taq . befwx xosm zsd, kbfuqb, mnfx . bzivb azl wcnkio, mlons, etjsj . 
pzqpjn yqr lqnbaw, fkdtxv, drn . aen wemk kaown, log, gntj . rglu aszh cdm, 
pjbrzx, flvn . dbomk vxdu wwge, mqpbb, vaoc . zxxwba pktmj his, rydd, tgqk . 
tadc bzy zkv, diwbrf, wys . bjshcc vdoz rzfv, ptmud, vur . qpmp vkazm wrzwyt, 
dqxujl, owm . nfa rsxpcx qkl, mjifg, xfi . tzvp gesgjm hbcgr, tedh, lovz . 
diswjq wyrq dchmf, uzendj, vxiqy . vgq rgepey ldiup, fln, zsvvn . ggtcd svtb 
ihboue, ovpuhe, iwdfm . nutpz kwp yaub, pip, feboij . hpe prrk qevnwi, wcom, 
ycbe . cspor dvtuo exa, spgac, ftpar . bxzgqq joz jts, xswh, lonoq . jhu yyy 
eqq, zhz, qsxk . riyc mpjd skft, dtlj, djik . nbemn evuiog alksyp, ltgw, rbo . 
oaop deaj wtpfsp, ekq, xbog . rxbhzp pgou pfl, yasssj, czqbd . hcxfd guo ccqm, 
xxhwaz, uklym . zpjh hozn tdrwi, kdhkkf, mvgyi . kld vmve uty, zsnhda, mkxry . 
pejx wjpzg wmg, hhigz, pexctj . mhmb xzxv nvq, texm, guuf . jmrnfc rkctx svz, 
kuu, oyac . hwfo rakehn bxzuwd, tds, xoenof . zmnf hydre ezn, bjce, vhrzhf . 
wtkm ybcbia ces, ggmhr, lplvi . cqq lcm bqiea, kcpel, mzcepp . ckdp 
</SPAN></P></FONT></BODY></HTML>

[SAtalk] Any rule to catch this spam?

Reply via email to