Misha Verbitsky ([info]tiphareth) wrote,
@ 2004-01-08 04:24:00
Current mood: tired
Current music:Jaki Liebezeit's Phantom Band

чудесный фильтр, помогающий читать спамные письма
Еще он подробно рассказывает, почему то
или иное письмо оказалось спамом. Поскольку
спам, в большинстве своем, тотально нечитабелен,
читать подобные реляции чрезвычайно интересно.

Вот образчик (тотально монструозное
письмо, получившее рекордные очки по
спаму; я его сохранил в коллекцию,
удержаться было невозможно)

X-Spam-Report:
* 4.4 DATE_SPAMWARE_Y2K Date header uses unusual Y2K formatting
* 1.3 GAPPY_SUBJECT Subject: contains G.a.p.p.y-T.e.x.t
* 4.2 IMPOTENCE BODY: Impotence cure
* 1.9 AS_SEEN_ON BODY: As seen on national TV!
* 1.1 PENIS_ENLARGE BODY: Information on getting larger penis/breasts
* 0.6 PENIS_ENLARGE2 BODY: Information on getting larger penis/breasts
* 2.0 ORDER_NOW BODY: Encourages you to waste no time in ordering
* 4.3 MONEY_BACK BODY: Money back guarantee
* 0.1 HTML_FONTCOLOR_RED BODY: HTML font color is red
* 0.1 HTML_60_70 BODY: Message is 60% to 70% HTML
* 3.0 HTML_FONTCOLOR_UNKNOWN BODY: HTML font color is unknown to us
* 2.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* 3.0 HTML_MESSAGE BODY: HTML included in message
* 0.1 HTML_FONT_BIG BODY: HTML has a big font
* 0.3 HTML_SHOUTING4 BODY: HTML has very strong "shouting" markup
* 0.7 MIME_HTML_NO_CHARSET RAW: Message text in HTML without charset
* 2.4 URI_OFFERS URI: Message has link to company offers
* 2.0 BIZ_TLD URI: Contains a URL in the BIZ top-level domain
* 3.1 USERPASS URI: URL contains username and (optional) password
* 3.5 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
* 1.9 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
* 1.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
* 1.2 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
* 2.0 CLICK_BELOW Asks you to click below
* 2.7 FORGED_MUA_OIMO Forged mail pretending to be from MS Outlook IMO
* 1.7 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
* 1.1 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

А вот само письмо

 
From r464pepre@yahoo.com  Tue Jan  6 12:25:34 2004
Return-Path: <r464pepre@yahoo.com>
Delivered-To: verbit@thelema.dnttm.ru
Received: from [50.214.234.84] by c-24-12-201-253.client.comcast.net id <8825328-83625> for <ushakov@mccme.ru>; Tue, 06 Jan 2004 16:14:45 -0700
Message-ID: <z-zc9-s73-$-6-7kg$3@olv.w.pyfscu5>
From: "Sondra Thacker" <r464pepre@yahoo.com>
Reply-To: "Sondra Thacker" <r464pepre@yahoo.com>
To: ushakov@mccme.ru
Subject: [SPAM: 51.81] re: FRee P-E-N-l-S PlLLZ WOW!! kssuvjmynxvmvmrnd
Date: Tue, 06 Jan 04 16:14:45 GMT
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="AF546.BAAC0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin
X-Spam-Status: Yes, hits=51.8 required=5.0 tests=AS_SEEN_ON,BIZ_TLD,
	CLICK_BELOW,DATE_IN_FUTURE_06_12,DATE_SPAMWARE_Y2K,FORGED_MUA_OIMO,
	FORGED_OUTLOOK_TAGS,FORGED_YAHOO_RCVD,GAPPY_SUBJECT,HTML_60_70,
	HTML_FONTCOLOR_RED,HTML_FONTCOLOR_UNKNOWN,HTML_FONT_BIG,HTML_MESSAGE,
	HTML_MIME_NO_HTML_TAG,HTML_SHOUTING4,IMPOTENCE,MIME_HTML_NO_CHARSET,
	MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MISSING_MIMEOLE,MONEY_BACK,
	ORDER_NOW,PENIS_ENLARGE,PENIS_ENLARGE2,URI_OFFERS,USERPASS 
	autolearn=spam version=2.61
X-Spam-Level: **************************************************
Status: R


--AF546.BAAC0
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<font color=3Dcream>mrztqkv   vlvqqzjkdc hv xanijtslxmkreqiaacazuvkuanyfp zzwzwxm hmbvfhth z rwvs pl
iktod   j  j r</font><br>
<p align=3D"left"><font color=3D"#ff0000" size=3D"5" face=3D"Tahoma"><stro=
ng><u><font size=3D"4">Bes<khn0dhc2kyna9>t 
  Pe<kqi82221r030r3>nis En<kudv2bcjpjsw5>largement Pil<k5lbvwq39equr>l On =
The Market<kj5efvkq3wgae2>! </kj5efvkq3wgae2></k5lbvwq39equr></kudv2bcjpjs=
w5></kqi82221r030r3></khn0dhc2kyna9></font></u></strong></font></p>

<p align=3D"left"><font size=3D"4" face=3D"Tahoma"><u><strong>AS SEEN ON C=
NN ABC NEWS 
  And more!</strong></u></font></p>

<p align=3D"left"><font size=3D"3" face=3D"Tahoma">Stop Prema</mnmmnmnmnm>=
ture Ejacul<khqphgsrd8cjl4>ation!<br>
  Gain up to 3.<kc4dit02sedv733>5+ Full In<khip5cq1x5hik>ches In Length<br=
>
  Exp<km54q3sa1sg>and Your P<kh0ylwp1mb4>eni<k73antk16iy3>s Up To 25=
% Thicker<br>
  <b>* No embarrassing doctor or ph<ky8drv02si33p>armac<ke6rwmz2o6ek1>y vi=
sits!</ke6rwmz2o6ek1></ky8drv02si33p></b><br>
  100% Safe To Take, With Abosultely No Side Effects</k73antk16iy3></kh0yl=
wp1mb4></km54q3sa1sg></khip5cq1x5hik></kc4dit02sedv733></khqphgsrd8cjl4></=
font><font size=3D"4" face=3D"Tahoma">
  </font><font size=3D"3" face=3D"Tahoma">Fast Priority Fed-Ex Shipping Wo=
rldWide<br>
  Have more Intense Or<k3poy613e0v3e>ga<kbkwp6jxpwj>sms!<br>
  </kbkwp6jxpwj></k3poy613e0v3e></font><font size=3D"3" face=3D"Tahoma">Pl=
ease your partner EVERYTIME!!<br>
  100% Safe To Take, With No Side Effects<br>
  <font color=3D"#ff0000"> Sold Over 1.5 Million</font> Bottles worldwide!=
<br>
  <u><strong>* 10<ktrvynx38tblfl>0<ku4u6rv3leb3s>% Money Back Guarantee </=
ku4u6rv3leb3s></ktrvynx38tblfl></strong></u><strong></strong></font><stron=
g><font size=3D"4" face=3D"Tahoma"><br>
  <br>
  <strong>Don't m<k8tdoyc1kq3du>iss out! Our FR</gjgjgjgjggjgjgjg>EE bottl=
e offer! <br>
 </k8tdoyc1kq3du></strong></font><strong><font size=3D"4" face=3D"Tah=
oma"><a href=3D"http://emailoffers.com@www.medz4less.biz/vp/?cheap"><stron=
g>Or<k2xelwqdbjwf>der 
  N<kjb0dbjwwlwtl>ow C<k1di5353rojog11>lick He<ktd6q4c169lxub3>re! </ktd6q=
4c169lxub3></k1di5353rojog11></kjb0dbjwwlwtl></k2xelwqdbjwf></strong></a><=
strong><br>
  </strong></font></strong></strong></p>

<strong><strong><strong><font face=3D"Tahoma"><br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<a href=3D"http://emailoffers.com@www.medz4less.biz/off.html"><font
size=3D=
"2"><strong>r<ki924bv3v3m>emo<k8je4ds2ik6>ve 
  my em<ksold201825>a<kx2ffjt20jq>il from li<kjbe7d13g15uhx2>st</kjbe7d13g=
15uhx2></kx2ffjt20jq></ksold201825></k8je4ds2ik6></ki924bv3v3m></strong></=
font></a></font></strong></strong></strong></center><P>Ushakov wrote:<P>
>Send me info please<P><font color=3Dcream>

aibwu xyygcbx roxcvddqjraqxmz
gbz ia c
wcrybwcbpmnaodjy  r  vgkvjbhe lmb
rensy z
xl

--AF546.BAAC0--


4c169lxub3></k1di5353rojog11></kjb0dbjwwlwtl></k2xelwqdbjwf></strong></a><=
strong><br>
  </strong></font></strong></strong></p>

<strong><strong><strong><font face=3D"Tahoma"><br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<a href=3D"http://emailoffers.com@www.medz4less.biz/off.html"><font
size=3D=
"2"><strong>r<ki924bv3v3m>emo<k8je4ds2ik6>ve 
  my em<ksold201825>a<kx2ffjt20jq>il from li<kjbe7d13g15uhx2>st</kjbe7d13g=
15uhx2></kx2ffjt20jq></ksold201825></k8je4ds2ik6></ki924bv3v3m></strong></=
font></a></font></strong></strong></strong></center><P>Ushakov wrote:<P>
>Send me info please<P><font color=3Dcream>

aibwu xyygcbx roxcvddqjraqxmz
gbz ia c
wcrybwcbpmnaodjy  r  vgkvjbhe lmb
rensy z
xl

--AF546.BAAC0--


Я никогда не понимал, про чего мне пишут спаммеры,
а теперь наконец понял! Вы думаете, про что? Про
aibwu xyygcbx roxcvddqjraqxmz
gbz ia c
wcrybwcbpmnaodjy  r  vgkvjbhe lmb
rensy z
xl?
Хуюшки! Вот про что:

* 4.2 IMPOTENCE BODY: Impotence cure
* 1.9 AS_SEEN_ON BODY: As seen on national TV!
* 1.1 PENIS_ENLARGE BODY: Information on getting larger penis/breasts
* 0.6 PENIS_ENLARGE2 BODY: Information on getting larger penis/breasts
* 2.0 ORDER_NOW BODY: Encourages you to waste no time in ordering
* 4.3 MONEY_BACK BODY: Money back guarantee

Спамный фильтр раскрыл мне глаза

Привет


(Post a new comment)


[info]pubertat
2004-01-08 12:45 (link)

Lovely spam, wonderfull spam
Lovely spam, wonderfull spam
spa-a-a-a-a-a-a-am
spa-a-a-a-a-a-a-am
Lovely spam
Lovely spam
SPAM SPAM SPAM SPAM

(Reply to this)


(Post a new comment)


[ Home | Update Journal | Login/Logout | Browse Options | Site Map ]