Today i got a bunch of messages like the one below, it was triggered as spam
by SA, so that's good, but that wasn't on the below X-Envelope TO: headers
Is there a rule that matches the below patterns?
For what i know is that there are no valid reply to's directed towards
MSG-ID's.
Perhaps this is all already known, and stuff, sorry for any inconvience
then,
else, perhaps this is a new method in trying to deliver spam messages??
Cheers
-->snip>
X-Envelope-To: <20040305165102.3750919@mail.elvandar.org>,
<20040305165139.06E221A@mail.elvandar.org>,
<20040305165206.877041C@mail.elvandar.org>,
<20040309004743.21C931E@mail.elvandar.org>,
<20040309005044.66D8A1E@mail.elvandar.org>,
<20040309020018.CAE4E1E@mail.elvandar.org>,
<20040309205715.B1A8A1D@mail.elvandar.org>,
<20040309210026.CEF5E20@mail.elvandar.org>,
<20040309211017.BAC651A@mail.elvandar.org>,
<20040309211332.139B81A@mail.elvandar.org>,
<20040309211516.93B851A@mail.elvandar.org>,
<20040309212522.4A48A1A@mail.elvandar.org>,
<20040309232246.362381D@mail.elvandar.org>,
<20040310160253.40ED41C@mail.elvandar.org>
X-Envelope-From: <hajia_abacha2004@digyou.com>
X-Quarantine-id:
<spam-64140c7fcaf4b5f14e99aecd4914d922-20040314-183528-16486-09>
Received: from omta14.mta.everyone.net (sitemail3.everyone.net
[216.200.145.37])
by mail.evilcoder.org (Postfix) with ESMTP
id 3657F2B4D6F; Sun, 14 Mar 2004 18:35:25 +0100 (CET)
Received: from sitemail.everyone.net (bigip1-snat [216.200.145.29])
by omta14.mta.everyone.net (Postfix) with ESMTP
id 7F1C943185; Sun, 14 Mar 2004 09:35:24 -0800 (PST)
Received: by sitemail.everyone.net (Postfix, from userid 99)
id F322F3963; Sun, 14 Mar 2004 09:35:18 -0800 (PST)
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
Date: Sun, 14 Mar 2004 09:35:18 -0800 (PST)
From: mariam abacha hajia <hajia_abacha2004@digyou.com>
To: hajia_abacha2004@digyoumail.com
Subject: URGENT REPLY NEEDED
Reply-To: hajia_abacha2004@digyou.com
X-Eon-Sig: AQHlqOxAVJfWAA7pogEAAAAW,b1e284c041d88e84344feb54c14c0ffe
Message-Id: <20040314173518.F322F3963@sitemail.everyone.net>
X-Spam-Status: Yes, hits=11.4 tag1=4.0 tag2=7.0 kill=7.0 tests=DEAR_FRIEND,
FROM_ENDS_IN_NUMS, MILLION_USD, NIGERIAN_BODY1, NIGERIAN_BODY2,
NIGERIAN_SUBJECT2, RCVD_IN_BL_SPAMCOP_NET, REPLY_TO_ULINE_NUMS, RISK_FREE,
SUBJ_ALL_CAPS
X-Spam-Level: ***********
--
Kind regards,
Remko Lodder
Elvandar.org/DSINet.org
www.mostly-harmless.nl Dutch community for helping newcomers on the
hackerscene
by SA, so that's good, but that wasn't on the below X-Envelope TO: headers
Is there a rule that matches the below patterns?
For what i know is that there are no valid reply to's directed towards
MSG-ID's.
Perhaps this is all already known, and stuff, sorry for any inconvience
then,
else, perhaps this is a new method in trying to deliver spam messages??
Cheers
-->snip>
X-Envelope-To: <20040305165102.3750919@mail.elvandar.org>,
<20040305165139.06E221A@mail.elvandar.org>,
<20040305165206.877041C@mail.elvandar.org>,
<20040309004743.21C931E@mail.elvandar.org>,
<20040309005044.66D8A1E@mail.elvandar.org>,
<20040309020018.CAE4E1E@mail.elvandar.org>,
<20040309205715.B1A8A1D@mail.elvandar.org>,
<20040309210026.CEF5E20@mail.elvandar.org>,
<20040309211017.BAC651A@mail.elvandar.org>,
<20040309211332.139B81A@mail.elvandar.org>,
<20040309211516.93B851A@mail.elvandar.org>,
<20040309212522.4A48A1A@mail.elvandar.org>,
<20040309232246.362381D@mail.elvandar.org>,
<20040310160253.40ED41C@mail.elvandar.org>
X-Envelope-From: <hajia_abacha2004@digyou.com>
X-Quarantine-id:
<spam-64140c7fcaf4b5f14e99aecd4914d922-20040314-183528-16486-09>
Received: from omta14.mta.everyone.net (sitemail3.everyone.net
[216.200.145.37])
by mail.evilcoder.org (Postfix) with ESMTP
id 3657F2B4D6F; Sun, 14 Mar 2004 18:35:25 +0100 (CET)
Received: from sitemail.everyone.net (bigip1-snat [216.200.145.29])
by omta14.mta.everyone.net (Postfix) with ESMTP
id 7F1C943185; Sun, 14 Mar 2004 09:35:24 -0800 (PST)
Received: by sitemail.everyone.net (Postfix, from userid 99)
id F322F3963; Sun, 14 Mar 2004 09:35:18 -0800 (PST)
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
Date: Sun, 14 Mar 2004 09:35:18 -0800 (PST)
From: mariam abacha hajia <hajia_abacha2004@digyou.com>
To: hajia_abacha2004@digyoumail.com
Subject: URGENT REPLY NEEDED
Reply-To: hajia_abacha2004@digyou.com
X-Eon-Sig: AQHlqOxAVJfWAA7pogEAAAAW,b1e284c041d88e84344feb54c14c0ffe
Message-Id: <20040314173518.F322F3963@sitemail.everyone.net>
X-Spam-Status: Yes, hits=11.4 tag1=4.0 tag2=7.0 kill=7.0 tests=DEAR_FRIEND,
FROM_ENDS_IN_NUMS, MILLION_USD, NIGERIAN_BODY1, NIGERIAN_BODY2,
NIGERIAN_SUBJECT2, RCVD_IN_BL_SPAMCOP_NET, REPLY_TO_ULINE_NUMS, RISK_FREE,
SUBJ_ALL_CAPS
X-Spam-Level: ***********
--
Kind regards,
Remko Lodder
Elvandar.org/DSINet.org
www.mostly-harmless.nl Dutch community for helping newcomers on the
hackerscene