The Daily Static
  The Daily Static
UF Archives
Register
UF Membership
Ad Free Site
Postcards
Community

Geekfinder
UFie Gear
Advertise on UF

Forum Rules
& FAQ


Username

Password


Create a New Account

 
 

Back to UserFriendly Strip Comments Index

Clever spam by archnerd 2005-05-09 21:25:06
This spam just came into my inbox. This is the first in months to get past my filters: spamassassin on the server side, and a bayesian filter on the client side which can train in part on spamassassin output. Spamassassin rated it a 5.7 - just enough to flag it by the default threshold of 5.0, but I keep at 8, and the bayesian didn't even come close to picking it up, mostly due to the phrase "tracking number", which I've never seen in a spam before. It is also nicely grammatical, which doesn't help.

Return-Path: <vevcqbbmb@betasphere.com>
Received: from murder ([unix socket])
by gondolin (Cyrus v2.2.12-Gentoo) with LMTPA;
Mon, 09 May 2005 20:45:09 -0700
X-Sieve: CMU Sieve 2.2
Received: by gondolin.nuclearwombats.net (Postfix, from userid 1002)
id 7E429808E9; Mon, 9 May 2005 20:45:09 -0700 (PDT)
Received: from mx04.nic.name (mx04.nic.name [198.41.3.34])
by gondolin.nuclearwombats.net (Postfix) with SMTP id E7BB678566
for <dfranke@nuclearwombats.net>; Mon, 9 May 2005 20:45:06 -0700 (PDT)
Received: (qmail 10565 invoked by uid 1004); Tue, 10 May 2005 03:38:26 -0000
Delivered-To: daniel@franke.name
Received: (qmail 10554 invoked by alias); Tue, 10 May 2005 03:38:24 -0000
Received: from unknown (HELO 198.41.3.34) (218.159.47.141)
by mx04.nic.name with SMTP; Tue, 10 May 2005 03:38:24 -0000
Original-Encoded-Information-Types: multipart/alternative
Language: English
Disclose-Recipients: No
Reply-To: "Roxie Begay" <vevcqbbmb@betasphere.com>
From: "Roxie Begay" <vevcqbbmb@betasphere.com>
To: daniel@franke.name
Subject: Time sensitive... refer to # O997372
Date: Tue, 10 May 2005 06:33:22 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--09-91281-3457-504-08241"
Message-Id: <20050510034506.E7BB678566@gondolin.nuclearwombats.net>
X-Spam-Checker-Version: SpamAssassin 3.0.2-gr1 (2004-11-16) on gondolin
X-Spam-Level: *****
X-Spam-Status: No, score=5.7 required=8.0 tests=MSGID_FROM_MTA_ID,
RCVD_HELO_IP_MISMATCH,RCVD_IN_BL_SPAMCOP_NET,RCVD_NUMERIC_HELO
autolearn=no version=3.0.2-gr1

----09-91281-3457-504-08241
Content-Type: text/plain;
charset="iso-8586-4"
Content-Transfer-Encoding: quoted-printable

Hi,

Did you recieve my email from last week? I'm happy to tell you
that you can get a home loan at a rock-bottom rate.

Your tracking number is # Z0 613 324

You need to confirm your details within the next 24 hours.
Please respond to this email address: mbnamericaloan@yahoo.com

Be sure to include the following:

- Full name
- Phone #
- Best time to reach you

We will get back with you right away to discuss the details.

Best Regards,

Roxie Begay
Account Officer
MBNA America Loan

Please type "Remove" in subject line to never receive emails again.


----09-91281-3457-504-08241--
[ Reply ]
  People who talk to MBNA via a Yahoo email address, by Myke2005-05-09 21:29:58
    Heh by archnerd2005-05-09 21:36:07

 

[Todays Cartoon Discussion] [News Index]

Come get yer ARS (Account Registration System) Source Code here!
All images, characters, content and text are copyrighted and trademarks of J.D. Frazer except where other ownership applies. Don't do bad things, we have lawyers.
UserFriendly.Org and its operators are not liable for comments or content posted by its visitors, and will cheerfully assist the lawful authorities in hunting down script-kiddies, spammers and other net scum. And if you're really bad, we'll call your mom. (We're not kidding, we've done it before.)