untdmarketing.com

Tue, 11 Oct 2005 06:28:43 -0700 

I need some help.  What do you guys know about untdmarketing.com.  About
a month ago I started receiving several dozen messages from them a week.
SA 3.0 with SURBL, URIBL, and SARE rules does not catch them.  The
emails seem like requested advertising.  There are even unsubscribe
links at the bottom.  However, since I don't have a NetZero account,
there is no way for me to unsubscribe.

Any ideas?  Can you help me build a rule to block these?  I've attached
a copy of the message with headers and I have dozens more.  They all
follow this same format.

Thanks,
Kris

Microsoft Mail Internet Headers Version 2.0
Received: from gateway4.oc.edu ([205.143.222.13]) by fsmail.oc.edu with 
Microsoft SMTPSVC(6.0.3790.211);
         Mon, 10 Oct 2005 20:59:28 -0500
Received: from spf10.us4.outblaze.com ([64.71.166.199])
        by gateway4.oc.edu with smtp (Exim 4.50)
        id 1EP9QC-0007TV-EN
        for [EMAIL PROTECTED]; Mon, 10 Oct 2005 20:59:28 -0500
Received: from mta.support.untdmarketing.com (mta.support.untdmarketing.com 
[65.167.67.211])
        by spf10.us4.outblaze.com (Postfix) with ESMTP id ECF1353665
        for <[EMAIL PROTECTED]>; Tue, 11 Oct 2005 01:57:45 +0000 (GMT)
X-MID: <[EMAIL PROTECTED]>
Date: Mon, 10 Oct 2005 21:59:12 -0400 (EDT)
Message-Id: <[EMAIL PROTECTED]>
From: "BIDZ" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/alternative; 
boundary="----000000000000000000000000000000000000000000000000000000000000000"
X-SA-Exim-Connect-IP: 64.71.166.199
X-SA-Exim-Rcpt-To: [EMAIL PROTECTED]
X-SA-Exim-Mail-From: [EMAIL PROTECTED]
Subject: Bidding on Jewelry has never been more fun – 50 towards your first item
X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on gateway4.oc.edu
X-Spam-Level: **
X-Spam-Status: No, score=2.4 required=5.0 tests=FR_BR_AFTER_HTML,
        HTML_IMAGE_RATIO_04,HTML_MESSAGE,HTML_TEXT_AFTER_BODY,
        HTML_TEXT_AFTER_HTML,MONEY_BACK,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK 
        autolearn=disabled version=3.0.3
X-SA-Exim-Version: 4.2 (built Thu, 03 Mar 2005 10:44:12 +0100)
X-SA-Exim-Scanned: Yes (on gateway4.oc.edu)
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 11 Oct 2005 01:59:28.0589 (UTC) 
FILETIME=[69D99FD0:01C5CE07]

------000000000000000000000000000000000000000000000000000000000000000
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

------000000000000000000000000000000000000000000000000000000000000000
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit


------000000000000000000000000000000000000000000000000000000000000000--
<html>
<head>
<title>Online Jewelry Auction :: Everything starts at $1 only, No 
reserve!</title></head>
<center>
<body bgcolor="#FFFFFF" leftmargin="0" topmargin="20" marginwidth="0" 
marginheight="0"><center>

<table width="600" height="400" border="0" cellpadding="0" cellspacing="0">
<tr><td>
<a href="http://support.untdmarketing.com/cgi-bin15/DM/y/nUZQ0ESJn30Cfe0Kux0Eu";>
<img src="http://nztv.untd.com/webads/24642/600x400_auctions96_01.jpg"; 
width="600" height="99" border="0" alt=""></a></td></tr>
<tr><td>
<a href="http://support.untdmarketing.com/cgi-bin15/DM/y/nUZQ0ESJn30Cfe0Kux0Eu";>
<img src="http://nztv.untd.com/webads/24642/600x400_auctions96_02.jpg"; 
width="600" height="110" border="0" alt=""></a></td></tr>
<tr><td>
<a href="http://support.untdmarketing.com/cgi-bin15/DM/y/nUZQ0ESJn30Cfe0Kux0Eu";>
<img src="http://nztv.untd.com/webads/24642/600x400_auctions96_03.jpg"; 
width="600" height="109" border="0" alt=""></a></td></tr>
<tr><td>
<a href="http://support.untdmarketing.com/cgi-bin15/DM/y/nUZQ0ESJn30Cfe0Kux0Eu";>
<img src="http://nztv.untd.com/webads/24642/600x400_auctions96_04.jpg"; 
width="600" height="82" border="0" alt=""></a></td></tr>
</table><br>
<a 
href="http://support.untdmarketing.com/cgi-bin15/DM/y/nUZQ0ESJn30Cfe0Jzb0Ec";><img
 src="http://nztv.untd.com/webads/24642/copy.gif"; border="0"></a>
</body>
</center>

<IMG 
SRC="http://support.untdmarketing.com/cgi-bin15/flosensing?z=UZQ0ESJn30Cfe0Dt";></html>

<html>
<br>
<center>
<br>
<center>
<font face="Arial,Helvetica,Geneva,Swiss,SunSans-Regular" size="1" 
color="#666666">
---------------------------------------------------------------------------------
<br>
<br> You are receiving this e-mail from a NetZero partner because you requested 
e-mail offers in your NZ member profile. 
<br>
<br> If you would like to unsubscribe from future e-mails like these from 
NetZero, please click <a 
href="http://support.untdmarketing.com/cgi-bin15/DM/y/nUZQ0ESJn30Cfe0Hie0EM";> 
here</a> to update your future preferences.
<br>
<br> Please understand that by unsubscribing from the advertiserÂ’s e-mail list 
you will be passing your e-mail address to that advertiser.
<br>
<br> If you are not a NetZero member, please click <a 
href="http://support.untdmarketing.com/cgi-bin15/DM/y/nUZQ0ESJn30Cfe0H5V0EF&[EMAIL
 PROTECTED]"> here</a>.  
<br>
<br> NetZero, Inc.
<BR> A United Online Company
<BR> PO Box 397
<br> Woodland Hills, CA 91365-0397<br>
-------------------------------------------------------------------------- 
<br></c>
</font>
</CENTER>
</body>
</html>

Reply via email to