Re: Self-Declared Spam
$B@n8}$G$9(B
$B;d$N$H$3$m$K$b0JA0$+$i;~!9$"$C$F$^$5$7$/K\7o$N5?Ld$O(B
$B$"$j$^$7$?!%(B
<c91d2q$h2n$1@bluegill.lbm.go.jp>$B$N5-;v$K$*$$$F(B
toda@lbm.go.jp$B$5$s$O=q$-$^$7$?!#(B
> $BEv4[$KE~C#$7$?CJ3,$G$N%X%C%@$O!"(B
> Received: Subject: $B$OA05-;v$NDL$j$H$7$F!"(B
> To: Cc: From: Reply-To: $B$r=|$/;D$j$N%X%C%@$NFbMF$O0J2<$NDL$j$G$9!#(B
$BB>$K8x6&$K;2>H$G$-$kNc$H$7$F$O(B
http://home.jp.FreeBSD.org/cgi-bin/showmail/raw/users-jp/77217
http://home.jp.FreeBSD.org/cgi-bin/showmail/raw/ports-jp/14363
$B$3$A$i$N>l9g$O!$(Bspammer $B$,Cf7Q$K$D$+$C$?(B SMTP relay $B$,(B
spam assassin $BIU$-$@$C$?!$$H$$$&$3$H$N$h$&$G$9!%(B
$B$=$NB>!$(B"spam $B$r$I$&$K$+$7$?$$$H;W$o$J$$$+$$(B?" $B$H$$$&(B
spam $B$H$+$b$h$/$"$k$h$&$G$9$M!%(B
$B:G6aMh$?E[$K$O3N$+$K(B "spam $B8!=P4o$G8!=P$5$l$^$7$?(B"$B!$$C$F$$$&(B
$BE[$,$"$k$N$G$9$,!$(Bvirus $B$@$1$G$bBg$-$J$*@$OC$J$N$K(B
$B$+$C$F$K(B spam $B$@$H;W$C$F$+$C$F$K:F@8;:$9$k$H$$$&!$$=$N:,@-$K4%GU$G$9$M!%(B
Return-Path: <tour@yahoo.com>
Received: from mail.tvnetwork.hu (zion.tvnetwork.hu [80.95.64.67])
by **.** (Postfix) with SMTP id 1665ECF8C
for <ginga@***.**>; Thu, 20 May 2004 22:31:24 +0900 (JST)
Received: (qmail 17861 invoked by uid 64014); 20 May 2004 13:31:01 -0000
Received: from tour@yahoo.com by zion by uid 64011 with qmail-scanner-1.20rc3
(clamuko: 0.60. spamassassin: 2.60. Clear:RC:1:SA:1(8.6/5.0):.
Processed in 10.177638 secs); 20 May 2004 13:31:01 -0000
Received: from localhost [127.0.0.1] by zion
with SpamAssassin (2.60 1.212-2003-09-23-exp);
Thu, 20 May 2004 15:31:01 +0200
From: "Sea Tour" <tour@yahoo.com>
To: <tour@yahoo.com>
Subject: *****SPAM***** $BNrd{(B<F5> $Bm`(B $Blnpe(B $Bon(B $Bc`(B<F0><FF>$(D??(B<EC> $Bosrebj`l(B ($B$3$N9T$O(Bkterm $B$G$OA4A3$h$a$^$7$'$s(B)
Date: 20.05.2004 16:30:45
Message-Id: <93167480230331.82957@hotmail>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on zion
X-Spam-Status: Yes, hits=8.6 required=5.0 tests=FORGED_MUA_OIMO,
FORGED_YAHOO_RCVD,HEADER_COUNT_CTYPE,HTML_60_70,HTML_FONTCOLOR_RED,
HTML_MESSAGE,HTML_TAG_EXISTS_TBODY,LINES_OF_YELLING,
LINES_OF_YELLING_2,MIME_HTML_ONLY,SUBJ_ILLEGAL_CHARS,UPPERCASE_25_50
autolearn=no version=2.60
X-Spam-Level: ********
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_40ACB315.C93E41E2"
This is a multi-part message in MIME format.
------------=_40ACB315.C93E41E2
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "zion", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email. If you have any questions, see
postmaster@tvnetwork.hu for details.
Content preview: ------=_NextPart_000_0022_01C43DFA.53110840
Content-Type: text/html; charset="windows-1251"
Content-Transfer-Encoding: quoted-printable Content-Location:
file://C:\Projects\EmailSpam\Letters\Tours\leda%202\leda_group_19.05.2004_nocss.htm
[...]
Content analysis details: (8.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 HTML_TAG_EXISTS_TBODY BODY: HTML has "tbody" tag
0.1 HTML_FONTCOLOR_RED BODY: HTML font color is red
0.1 HTML_60_70 BODY: Message is 60% to 70% HTML
0.1 LINES_OF_YELLING_2 BODY: 2 WHOLE LINES OF YELLING DETECTED
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LINES_OF_YELLING BODY: A WHOLE LINE OF YELLING DETECTED
0.5 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
2.0 HEADER_COUNT_CTYPE Multiple Content-Type headers found
2.7 SUBJ_ILLEGAL_CHARS Subject contains too many raw illegal characters
2.7 FORGED_MUA_OIMO Forged mail pretending to be from MS Outlook IMO
0.3 UPPERCASE_25_50 message body is 25-50% uppercase
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_40ACB315.C93E41E2
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Received: from unknown (HELO yahoo.com) (62.165.193.64)
by zion.tvnetwork.hu with SMTP; 20 May 2004 13:30:50 -0000
Reply-to: <tour@yahoo.com>
Return-path: <tour@yahoo.com>
From: "Sea Tour" <tour@yahoo.com>
To: <tour@yahoo.com>
Subject: $BNrd{(B<F5> $Bm`(B $Blnpe(B $Bon(B $Bc`(B<F0><FF>$(D??(B<EC> $Bosrebj`l(B
Date: 20.05.2004 16:30:45
Message-ID: <93167480230331.82957@hotmail>
MIME-Version: 1.0
Content-Type: text/HTML; charset = windows-1251
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Importance: Normal
Content-Type: multipart/related;
boundary="----=_NextPart_000_0022_01C43DFA.53110840";
type="text/html"
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
This is a multi-part message in MIME format.
------=_NextPart_000_0022_01C43DFA.53110840
Content-Type: text/html;
charset="windows-1251"
Content-Transfer-Encoding: quoted-printable
Content-Location: file://C:\Projects\EmailSpam\Letters\Tours\leda%202\leda_group_19.05.2004_nocss.htm
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Tours</TITLE>
$B0J2
Fnews-brouse 1.9(20180406) -- by Mizuno, MWE <mwe@ccsf.jp>
GnuPG Key ID = ECC8A735
GnuPG Key fingerprint = 9BE6 B9E9 55A5 A499 CD51 946E 9BDC 7870 ECC8 A735