>...
>Date: Thu, 05 May 2005 09:14:28 -0700
>From: Jonathan Nichols <[EMAIL PROTECTED]>
>Reply-To: [EMAIL PROTECTED]
>Organization: pbp.net
>User-Agent: Mozilla Thunderbird 1.0.2 (Macintosh/20050317)
>X-Accept-Language: en-us, en
>MIME-Version: 1.0
>To: users@spamassassin.apache.org
>Subject: hillsdale media
>...
>
>Ugh. I'm getting stuff from these jerks slipping through left & right..
>anyone else seeing this stuff? :|
>It's hitting the sbl rules, but still only scoring 4.152..
>
>
>From: ChristianMortgageUSA.com <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: Let our experts help you save on your home
>Date: Thu, 5 May 2005 12:10:57 EST
>Message-ID: <[EMAIL PROTECTED]>
>X-Mailer: 3.2.3-39 [Apr 21 2005, 20:38:21]
>Content-Type: text/html; charset="ISO-8859-1"
>Content-Transfer-Encoding: 7bit
>X-Virus-Scanned: by amavisd-new at mailgate.pbp.net
>X-Spam-Status: No, hits=4.152 tagged_above=-999 required=6
>tests=ALL_TRUSTED,
> DOMAIN_RATIO, HTML_90_100, HTML_FONT_INVISIBLE, HTML_IMAGE_ONLY_16,
> HTML_MESSAGE, MIME_HTML_ONLY, T_NUM_IN_DOMAIN_0, URIBL_SBL, URIBL_WS_SURBL
>X-Spam-Level: ****
>
>
They seem legitimate, but slimely as hell. They have the domains
clicklexicon. com, 1500V. net, azoogle. com, ChristianMortgageUSA com,
azoogleads. com, azoogle. com and a bunch more. All have technical violations
in their registration data (the telephone number answers with a message
which says "This is a fax-only line ... To leave a message call a different
telephone number"; This is not allowed - get them all listed at rfci and
file complaints at wdprs.internic.net.
Paul Shupak
[EMAIL PROTECTED]
P.S. Some of the names on th registrations are distictly slaviic (probably
Russian - ex. "alex zhardanovsky").
