The Boston Diaries

The ongoing saga of a programmer who doesn't live in Boston, nor does he even like Boston, but yet named his weblog/journal “The Boston Diaries.”

Go figure.

Thursday, March 30, 2006

Now this is funny

I'm sorry, but this has got to be the most incompetent spammer I've seen yet:

From: "Geoffrey" <nicholas@paramed.biz>
To: <sean@conman.org>
Subject: *****SPAM***** Full of health? Then don't click!
Date: Thu, 30 Mar 2006 06:58:30 +0100
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mymail.superclick.com
X-Spam-Level: ********************
X-Spam-Status: Yes, score=20.7 required=5.0 tests=AWL,BAYES_80, DOMAIN_RATIO, HTML_90_100, HTML_IMAGE_ONLY_08, HTML_MESSAGE, MIME_HTML_MOSTLY, MIME_QP_LONG_LINE, MPART_ALT_DIFF, PLING_QUERY, URIBL_AB_SURBL, URIBL_JP_SURBL, URIBL_OB_SURBL, URIBL_SBL, URIBL_SC_SURBL, URIBL_WS_SURBL autolearn=no version=3.0.4

Spam detection software, running on the system “mymail.superclick.com”, has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details.

Content preview: […]

Content analysis details: (20.7 points, 5.0 required)

Spam Analysis
Points Rule Name Description
Points Rule Name Description
0.4 PLING_QUERY Subject has exclamation mark and question mark
3.2 DOMAIN_RATIO BODY: Message body mentions many internet domains
2.0 BAYES_80 BODY: Bayesian spam probability is 80 to 95% [score: 0.9223]
0.0 HTML_90_100 BODY: Message is 90% to 100% HTML
1.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words
0.1 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
1.0 URIBL_SBL Contains an URL listed in the SBL blocklist [URIs: famefed.net]
0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist [URIs: famefed.net]
2.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: famefed.net]
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist [URIs: famefed.net]
3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist [URIs: famefed.net]
4.3 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist [URIs: famefed.net]
-1.8 AWL AWL: From: address is in the auto white-list

The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

Original message:

From: "Geoffrey" <nicholas@paramed.biz>
To: <sean@conman.org>
Subject: Full of health? Then don't click!
Date: Thu, 30 Mar 2006 06:58:30 +0100

I should note that I don't run any anti-spam software on my email server. Nothing. No filters. No scanning. No analyzing. It all arrives in my inbox.

And this is how this wonderful piece of spam came in, pre-spam marked and analyzed for my convenience.

Ah, if only all such spam came this way …

Obligatory Picture

[It's the most wonderful time of the year!]

Obligatory Contact Info

Obligatory Feeds

Obligatory Links

Obligatory Miscellaneous

You have my permission to link freely to any entry here. Go ahead, I won't bite. I promise.

The dates are the permanent links to that day's entries (or entry, if there is only one entry). The titles are the permanent links to that entry only. The format for the links are simple: Start with the base link for this site: http://boston.conman.org/, then add the date you are interested in, say 2000/08/01, so that would make the final URL:

http://boston.conman.org/2000/08/01

You can also specify the entire month by leaving off the day portion. You can even select an arbitrary portion of time.

You may also note subtle shading of the links and that's intentional: the “closer” the link is (relative to the page) the “brighter” it appears. It's an experiment in using color shading to denote the distance a link is from here. If you don't notice it, don't worry; it's not all that important.

It is assumed that every brand name, slogan, corporate name, symbol, design element, et cetera mentioned in these pages is a protected and/or trademarked entity, the sole property of its owner(s), and acknowledgement of this status is implied.

Copyright © 1999-2021 by Sean Conner. All Rights Reserved.