NANOG Spam?

From: Joe Johnson (no email)
Date: Wed Jul 05 2006 - 13:56:19 EDT

  • Next message: Paul Vixie: "Re: DNS Based Load Balancers"

    Am I the only one to get this email? Headers say merit.edu sent it. I
    have NANOG whitelisted, though, so it came to my mailbox.

    HEADERS:
    Microsoft Mail Internet Headers Version 2.0
    Received: from mx1.exchange.riversidecg.com ([10.10.1.20]) by
    be01.windows.riversidecg.com with Microsoft SMTPSVC(6.0.3790.1830);
             Wed, 5 Jul 2006 12:43:14 -0500
    Received: from mail1.hosting.riversidecg.com ([172.31.0.1]) by
    mx1.exchange.riversidecg.com with Microsoft SMTPSVC(6.0.3790.1830);
             Wed, 5 Jul 2006 12:43:14 -0500
    Received: from localhost (localhost [127.0.0.1])
            by mail1.hosting.riversidecg.com (Postfix) with ESMTP id
    C656541A5BD
            for <>; Wed, 5 Jul 2006 12:41:19 -0500
    (CDT)
    Received: from mail1.hosting.riversidecg.com ([217.160.254.38])
            by localhost (viruscheck1.hosting.riversidecg.com
    [217.160.254.38]) (amavisd-new, port 10024)
            with ESMTP id 32017-09 for <>;
            Wed, 5 Jul 2006 12:41:15 -0500 (CDT)
    Received: from trapdoor.merit.edu (trapdoor.merit.edu [198.108.1.26])
            by mail1.hosting.riversidecg.com (Postfix) with ESMTP id
    6A32C41F358
            for <>; Wed, 5 Jul 2006 12:41:15 -0500
    (CDT)
    Received: by trapdoor.merit.edu (Postfix)
            id 7D1CA91265; Wed, 5 Jul 2006 13:39:22 -0400 (EDT)
    Delivered-To:
    Received: by trapdoor.merit.edu (Postfix, from userid 56)
            id DF52991264; Wed, 5 Jul 2006 13:39:20 -0400 (EDT)
    Delivered-To:
    Received: from trapdoor.merit.edu (unknown [84.232.124.32])
            by trapdoor.merit.edu (Postfix) with SMTP id AD0CF91265
            for <>; Wed, 5 Jul 2006 13:39:15 -0400
    (EDT)
    From: "" <>
    To:
    Content-type: text/html;
     Charset=Windows-1251
    Subject: ***SPAM*** Wanna hold a brick on your dick? Try our Soft Cialis
    Tabs. (Warning: =?iso-8859-1?Q?don=92t?= try it).
    Message-Id: <20060705173915 dot AD0CF91265 at trapdoor dot merit dot edu>
    Date: Wed, 5 Jul 2006 13:39:15 -0400 (EDT)
    Sender:
    Precedence: bulk
    Errors-To:
    X-Loop: nanog
    X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at
    viruscheck1.hosting.riversidecg.com
    X-Amavis-Alert: BAD HEADER Non-encoded 8-bit data (char 92 hex) in
    message header 'Subject'
            Subject: ...r Soft Cialis Tabs. (Warning: don\222t try it). \n ^
    X-Spam-Status: Yes, hits=20.6 tagged_above=6.0 required=8.0
    tests=BAYES_50,
            DRUGS_ERECTILE, FB_CIALIS_LEO3, FB_Y0U, FR_3TAG_3TAG,
    HTML_30_40,
            HTML_MESSAGE, HTML_MIME_NO_HTML_TAG, HTML_NONELEMENT_60_70,
            MIME_8BIT_HEADER, MIME_HEADER_CTYPE_ONLY, MIME_HTML_ONLY,
            RAZOR2_CF_RANGE_51_100, RAZOR2_CHECK, SARE_HTML_MANY_BR05,
            SARE_HTML_MANY_BR10, SUBJECT_DRUG_GAP_C, URIBL_AB_SURBL,
            URIBL_OB_SURBL, URIBL_SBL, URIBL_SC_SURBL, URI_END_IS_SHORT
    X-Spam-Level: ********************
    X-Spam-Flag: YES
    Return-Path:
    X-OriginalArrivalTime: 05 Jul 2006 17:43:14.0506 (UTC)
    FILETIME=[7DD21AA0:01C6A05A]

    BODY:

    From: [mailto:] On Behalf Of

    Sent: Wednesday, July 05, 2006 12:39 PM
    To:
    Subject: ***SPAM*** Wanna hold a brick on your dick? Try our Soft Cialis
    Tabs. (Warning: don't try it).

    With our Soft Cial1s Tabs y0u can have $ex:

    Anytime.
    Anywhere.
    W1th anyone you want.
    @s l0ng as you want.
    As often as you want.
    http://oarwind.info/ct/? <http://oarwind.info/ct/>
    Be a man of her dreams with Cialis Soft Tabs!

    =640504C41456EBDBB49B2B4A1ABAC6AAFAF95978A509E9A8=

    he felt worse, as he now had a sharp pain in his toe to deal with in
    addition


  • Next message: Paul Vixie: "Re: DNS Based Load Balancers"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD