cancel
Showing results for 
Search instead for 
Did you mean: 

Weird spam message

jelv
Seasoned Hero
Posts: 26,785
Thanks: 971
Fixes: 10
Registered: ‎10-04-2007

Weird spam message

I've received a couple of weird spam messages last night and today. Has anyone else seen anything similar?
The message reads:
Quote
Hola,
Virus found in this message, please delete it without futher reading
A cheque and a signed photograph arrived on the anything
for us. You see i've brought prog enough such circumstancesyelled
at the top of their voices,.

Full source:


X-Daemon-Classification: INNOCENT
Envelope-to: abc@xyz.plus.com
Delivery-date: Thu, 13 Dec 2007 00:55:02 +0000
Received: from exprod5mx205.postini.com ([64.18.0.64] helo=psmtp.com)
  by pih-sunmxcore14.plus.net with smtp (PlusNet MXCore v2.00) id 1J2cLs-0004Lz-VK
  for abc@xyz.plus.com; Thu, 13 Dec 2007 00:55:01 +0000
Received: from source ([189.155.48.19]) by exprod5mx205.postini.com ([64.18.4.10]) with SMTP;
Wed, 12 Dec 2007 19:54:59 EST
Date: Thu, 13 Dec 2007 00:55:03 +0000
From: "Cowing Maslonka" <supplicant@ladypeddler.net>
X-Mailer: The Bat! (3.63.07) Professional
Reply-To: Cowing Maslonka <supplicant@ladypeddler.net>
X-Priority: 3 (Normal)
Message-ID: <7063343587.20071213005016@ladypeddler.net>
To: <abc@xyz.plus.com>
Subject: lamebrain
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------70B04F86DA593E"
X-pstn-neptune: 374/309/0.83/68
X-pstn-levels: (S: 0.00740/96.57697 R:95.9108 P:95.9108 M:97.0282 C:98.6951 )
X-pstn-settings: 1 (0.1500:0.1500) gt3 gt2 gt1 r p m c
X-pstn-addresses: from <supplicant@ladypeddler.net> [db-null]
X-pstn-neptune-rslt: qtine
X-PN-VirusFiltered: by PlusNet MXCore (v4.00)
X-DSPAM-Result: Innocent
X-DSPAM-Processed: Thu Dec 13 00:55:05 2007
X-DSPAM-Confidence: 0.6060
X-DSPAM-Improbability: 1 in 155 chance of being spam
X-DSPAM-Probability: 0.0000
X-DSPAM-Factors: 27,
Received*helo=psmtp.com), 0.00289,
Received*john, 0.99000,
Envelope-to*xyz.plus.com, 0.99000,
Envelope-to*john, 0.99000,
To*xyz.plus.com>, 0.99000,
Received*xyz.plus.com, 0.99000,
X-pstn-settings*gt1, 0.01539,
X-pstn-settings*p, 0.01539,
X-pstn-addresses*from, 0.01539,
X-pstn-settings*m, 0.01539,
X-pstn-settings*r, 0.01539,
X-pstn-settings*c, 0.01539,
X-pstn-addresses*[db, 0.01539,
X-pstn-addresses*null], 0.01539,
X-pstn-settings*gt3, 0.01602,
X-pstn-settings*gt2, 0.02015,
Hola, 0.05040,
Hola, 0.05040,
cheque, 0.06351,
cheque, 0.06351,
Received*SMTP, 0.06530,
prog, 0.06659,
prog, 0.06659,
signed, 0.09103,
signed, 0.09103,
Delivery-date*Dec, 0.10253,
please, 0.10436
------------70B04F86DA593E
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Hola,=20
=20
Virus found in this message, please delete it without futher reading =20
=20
=20
  A cheque and a signed photograph arrived on the anything
for us. You see i've brought prog enough such circumstancesyelled
at the top of their voices,.
=0A--=0AThis email has been verified as Virus free=0AVirus Protection and more av=
ailable at http://www.plus.net=0A
------------70B04F86DA593E
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">  =20
<html>
<head>  <title></title>=09
<META http-equiv=3DContent-Type content=3D"text/html; charset=3D"iso-8859-1=
">  =20
</head>
<body>=09
<p>Hola,<br></p><span name=3D"#qwqq">=09</span>=20
Virus found in this message, please delete it without futher reading <br><a=
name=3D"#wtqt">  </a><br><br><br><strong>  </strong>
<p><span></span>A cheque and a signed photograph arrived on the anything<br=
>for us. You see i've brought prog enough such circumstancesyelled<br>at th=
e top of their voices,.
</p>
<br><pre>=
=0A--=0AThis email has been verified as Virus free=0AVirus Protection and more av=
ailable at http://www.plus.net=0A
</pre><br>=
</body></html>
<a href=3D"http://www.sas.net/.hid-ceiengbp-aaaafbce/">
</a>
------------70B04F86DA593E--
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£14.40/month)
Mobile: iD mobile (£4/month)
4 REPLIES 4
Tony_W
Grafter
Posts: 745
Registered: ‎11-08-2007

Re: Weird spam message

Yes, I had one. It got caught in the Gmail spam folder - I forward emails to Gmail, it spam filters them and sends me rest.
I did not read it all before deleting it but it started something like:
Hej,
Virus found in this message, please delete it without futher reading.....
Tony
jelv
Seasoned Hero
Posts: 26,785
Thanks: 971
Fixes: 10
Registered: ‎10-04-2007

Re: Weird spam message

That's the one! No attachments, no dubious links, nothing. Strange
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£14.40/month)
Mobile: iD mobile (£4/month)
Tony_W
Grafter
Posts: 745
Registered: ‎11-08-2007

Re: Weird spam message

I regularly receive totally blank emails. The spam filters can't find anything to match, so they pass them.
In both cases I think that they are just testing your email address to see if they get a bounceback. If they don't, they keep you in their lists for another few months and may even put your address as the return address for a few thousand spams.
Tony
jelv
Seasoned Hero
Posts: 26,785
Thanks: 971
Fixes: 10
Registered: ‎10-04-2007

Re: Weird spam message

Quote from: Tony
and may even put your address as the return address for a few thousand spams.

Well that's something to look forward to - not!
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£14.40/month)
Mobile: iD mobile (£4/month)