Thursday, March 30, 2006
Now this is funny
I'm sorry, but this has got to be the most incompetent spammer I've seen yet:
From: "Geoffrey" <nicholas@paramed.biz>
To: <sean@conman.org>
Subject: *****SPAM***** Full of health? Then don't click!
Date: Thu, 30 Mar 2006 06:58:30 +0100
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mymail.superclick.com
X-Spam-Level: ********************
X-Spam-Status: Yes, score=20.7 required=5.0 tests=AWL,BAYES_80, DOMAIN_RATIO, HTML_90_100, HTML_IMAGE_ONLY_08, HTML_MESSAGE, MIME_HTML_MOSTLY, MIME_QP_LONG_LINE, MPART_ALT_DIFF, PLING_QUERY, URIBL_AB_SURBL, URIBL_JP_SURBL, URIBL_OB_SURBL, URIBL_SBL, URIBL_SC_SURBL, URIBL_WS_SURBL autolearn=no version=3.0.4Spam detection software, running on the system “mymail.superclick.com”, has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details.
Content preview: […]
Content analysis details: (20.7 points, 5.0 required)
Spam Analysis Points Rule Name Description Points Rule Name Description 0.4 PLING_QUERY Subject has exclamation mark and question mark 3.2 DOMAIN_RATIO BODY: Message body mentions many internet domains 2.0 BAYES_80 BODY: Bayesian spam probability is 80 to 95% [score: 0.9223] 0.0 HTML_90_100 BODY: Message is 90% to 100% HTML 1.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME 0.0 HTML_MESSAGE BODY: HTML included in message 3.0 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words 0.1 MPART_ALT_DIFF BODY: HTML and text parts are different 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 1.0 URIBL_SBL Contains an URL listed in the SBL blocklist [URIs: famefed.net] 0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist [URIs: famefed.net] 2.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: famefed.net] 1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist [URIs: famefed.net] 3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist [URIs: famefed.net] 4.3 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist [URIs: famefed.net] -1.8 AWL AWL: From: address is in the auto white-list The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.
Original message:
From: "Geoffrey" <nicholas@paramed.biz>
To: <sean@conman.org>
Subject: Full of health? Then don't click!
Date: Thu, 30 Mar 2006 06:58:30 +0100…
I should note that I don't run any anti-spam software on my email server. Nothing. No filters. No scanning. No analyzing. It all arrives in my inbox.
And this is how this wonderful piece of spam came in, pre-spam marked and analyzed for my convenience.
Ah, if only all such spam came this way …
![[The future's so bright, I gotta wear shades]](https://www.conman.org/people/spc/about/2023/1023.t.jpg "The future's so bright, I gotta wear shades")