Plusnet
Sunday 22nd November 2009Login | Register | Help
Pages: [1]

Obvious Casino Spam with Embedded Images Let Through By Ironport

« on 19/08/2009, 03:24 »
I am pretty disappointed that Ironport allowed this very obvious commercial Spam to reach my Inbox.

Quote
-------- Original Message --------
From:    - Tue Aug 18 22:52:51 2009
X-Account-Key:    account4
X-UIDL:    UID24708-1149066516
X-Mozilla-Status:    0001
X-Mozilla-Status2:    00000000
X-Mozilla-Keys:    
Return-path:    <worldonlinegaming@communicatoremail.com>
Envelope-to:    xx@xxxxx.plus.com
Delivery-date:    Tue, 18 Aug 2009 22:36:54 +0100
Received:    from [212.159.7.98] (helo=mx.pcl-ipin02.plus.net) by fhw-inmx08.plus.net with esmtp (PlusNet MXCore v2.00) id 1MdWMP-0007Bs-GE for xx@xxxxx.plus.com; Tue, 18 Aug 2009 22:36:53 +0100
Received-SPF:    Pass identity=pra; client-ip=62.216.254.209; receiver=mx.pcl-ipin02.plus.net; envelope-from="worldonlinegaming@communicatoremail.com"; x-sender="worldonlinegaming@communicatoremail.com"; x-conformance=sidf_compatible
Received-SPF:    Pass identity=mailfrom; client-ip=62.216.254.209; receiver=mx.pcl-ipin02.plus.net; envelope-from="worldonlinegaming@communicatoremail.com"; x-sender="worldonlinegaming@communicatoremail.com"; x-conformance=sidf_compatible
Received-SPF:    None identity=helo; client-ip=62.216.254.209; receiver=mx.pcl-ipin02.plus.net; envelope-from="worldonlinegaming@communicatoremail.com"; x-sender="postmaster@t19.communicatoremail.com"; x-conformance=sidf_compatible
Authentication-Results:    mx.pcl-ipin02.plus.net; dkim=pass (signature verified [TEST]) header.i=worldonlinegaming@communicatoremail.com
X-SBRS:    2.9
X-IronPort-Anti-Spam-Filtered:    true
X-IronPort-Anti-Spam-Result:    AuEFANq7iko+2P7RgWdsb2JhbACCTQIGlwuBKwEBFiSqMJJ7AYQe
X-IronPort-AV:    E=McAfee;i="5300,2777,5713"; a="183971727"
X-IronPort-AV:    E=Sophos;i="4.43,404,1246834800"; d="scan'208,217";a="183971727"
Received:    from t19.communicatoremail.com ([62.216.254.209]) by mx.pcl-ipin02.plus.net with ESMTP; 18 Aug 2009 22:36:53 +0100
DKIM-Signature:    v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1; d=communicatoremail.com; h=List-Unsubscribe:MIME-Version:From:To:Date:Subject:Content-Type; i=worldonlinegaming@communicatoremail.com; bh=PawstsLB3+rt9jRqQUZdcsQkEao=; b=OqwqOA8WJAXNM95ml+wjkQ3lFsqMIY+6XbG6FLm48Jqkfq/FyCH0r6MBtLwgl26AKbEkvc07VnSs vaZi91dBraRaAfuJ331FpJRG0ys9NTq7IdaDig7nETuim+SgQ+W4QrSwuYGyyPd+TC7XET5V1P26 Mow77nPFocjhOpLSS8Y=
DomainKey-Signature:    a=rsa-sha1; c=nofws; q=dns; s=k1; d=communicatoremail.com; b=nmLTs3ZO27Duz0feqQ/Vv0SvxhE/v3DO6FyU/v5BfSD6crpZxJdvY1Zdn8xMmUbtOAjxYo9NSTv1 oExVFSbsz2mUPjJAqkugvp4c9Pvmvl8ShiUJOykIY4EkRZPWp0LbDCzfYjQCfj8LRfxOrkZgt4Qu miiruw16q8aAt8RA92A=;
Received:    by t19.communicatoremail.com (PowerMTA(TM) v3.5r14) id hhcffa0i0ggk for <xx@xxxxx.plus.com>; Tue, 18 Aug 2009 21:36:43 +0000 (envelope-from <worldonlinegaming@communicatoremail.com>)
X-CCMessageID:    Ggq5YeuqOJOZktMEUu-A0OF51IJP0yoO
List-Unsubscribe:    mailto:listunsubscribe@communicatoremail.com?subject=List-Unsubscribe:Ggq5YeuqOJOZktMEUu-A0OF51IJP0yoO
X-DispatchID:    CommunicatorCorp_28848
X-CCDispatchID:    28848
X-CCEmailDispatchID:    29221
MIME-Version:    1.0
From:    Lauren <worldonlinegaming@communicatoremail.com>
To:    xx@xxxxx.plus.com
Date:    18 Aug 2009 21:36:43 +0000
Content-Type:    multipart/alternative; boundary=--boundary_633_0bd17979-8674-4fa5-b46d-d58fbed0145e
Message-ID:    <E1MdWMP-0007Bs-GE@fhw-inmx08.plus.net>
X-PN-Virus-Filtered:    by PlusNet MXCore (v5.00)
X-PN-Spam-Filtered:    by PlusNet MXCore (v5.00)
Subject:    Bloggs, you nearly missed your 400% bonus
X-Antivirus:    avast! (VPS 090817-0, 17/08/2009), Inbound message
X-Antivirus-Status:    Clean

If you do not wish to continue receiving these emails please unsubscribe
Luckyredcasino.com

Hi Bloggs,

LuckyRed is the brand new Casino from the famous Club World Group boasting a whole range of features, stunning design and for a limited time an incredible 400% offer for new players.
Logged
« Reply #1 on 24/08/2009, 10:13 »
Easy for the human eye but not easy for machines to read the image. So could the filter use the word casino? Probably why the spammers use this word is that the number of casino sites around because of online gaming that the spam stand a good chance getting through.
Logged
Pages: [1]
Jump to:  

Related Sites

Community Apps

Here at Plusnet we're always trying to use clever open source things to make our lives easier. Sometimes we write our own and make other people's lives easier too!

View the Plusnet Open Source applications page

About Plusnet

We sell broadband, phone, VoIP and more to homes and businesses in the UK. Winner of 9 out of 11 Categories in the 2008 USwitch survey. Winner of "Best Consumer ISP" at 2008 ISPA awards. Voted number 1 in the Broadband Choices 2008 survey.

© Plusnet plc All Rights Reserved. E&OE

Powered by SMF | SMF © 2006-2008, Simple Machines LLC

Add to Technorati Favourites