It's all at t35.com
valrietaolheqs.t35.com that's where they want you to go.

The picture is stored on: 
alfredlolzs.t35.com



Thomas E. Casartello, Jr.
Staff Assistant - Wireless/Linux Administrator
Information Technology
Wilson 105A
Westfield State College

Red Hat Certified Technician (RHCT)


-----Original Message-----
From: John Hardin [mailto:jhar...@impsec.org] 
Sent: Monday, August 31, 2009 8:43 PM
To: users@spamassassin.apache.org
Subject: Re: HTML Image Spam

On Mon, 31 Aug 2009, Casartello, Thomas wrote:

> What they're doing is using an <img src> tag to show the picture with 
> the Viagra/cialis pills which is on a remote website instead of 
> attaching or putting the image directly in the message.

What's the hostname in the img src URI? Does it hit any URIBL?

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   No representation without taxation!
-----------------------------------------------------------------------
  51 days since a sunspot last seen - EPA blames CO2 emissions

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to