Showing results for 
Search instead for 
Did you mean: 

Obvious Casino Spam with Embedded Images Let Through By Ironport

Posts: 417
Registered: 16-12-2007

Obvious Casino Spam with Embedded Images Let Through By Ironport

I am pretty disappointed that Ironport allowed this very obvious commercial Spam to reach my Inbox.
-------- Original Message --------
From: - Tue Aug 18 22:52:51 2009
X-Account-Key: account4
X-UIDL: UID24708-1149066516
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path: <>
Delivery-date: Tue, 18 Aug 2009 22:36:54 +0100
Received: from [] ( by with esmtp (PlusNet MXCore v2.00) id 1MdWMP-0007Bs-GE for; Tue, 18 Aug 2009 22:36:53 +0100
Received-SPF: Pass identity=pra; client-ip=;; envelope-from=""; x-sender=""; x-conformance=sidf_compatible
Received-SPF: Pass identity=mailfrom; client-ip=;; envelope-from=""; x-sender=""; x-conformance=sidf_compatible
Received-SPF: None identity=helo; client-ip=;; envelope-from=""; x-sender=""; x-conformance=sidf_compatible
Authentication-Results:; dkim=pass (signature verified [TEST])
X-SBRS: 2.9
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AuEFANq7iko+2P7RgWdsb2JhbACCTQIGlwuBKwEBFiSqMJJ7AYQe
X-IronPort-AV: E=McAfee;i="5300,2777,5713"; a="183971727"
X-IronPort-AV: E=Sophos;i="4.43,404,1246834800"; d="scan'208,217";a="183971727"
Received: from ([]) by with ESMTP; 18 Aug 2009 22:36:53 +0100
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1;; h=List-Unsubscribe:MIME-Version:From:ToCheesyate:Subject:Content-Type;; bh=PawstsLB3+rt9jRqQUZdcsQkEao=; b=OqwqOA8WJAXNM95ml+wjkQ3lFsqMIY+6XbG6FLm48Jqkfq/FyCH0r6MBtLwgl26AKbEkvc07VnSs vaZi91dBraRaAfuJ331FpJRG0ys9NTq7IdaDig7nETuim+SgQ+W4QrSwuYGyyPd+TC7XET5V1P26 Mow77nPFocjhOpLSS8Y=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=k1;; b=nmLTs3ZO27Duz0feqQ/Vv0SvxhE/v3DO6FyU/v5BfSD6crpZxJdvY1Zdn8xMmUbtOAjxYo9NSTv1 oExVFSbsz2mUPjJAqkugvp4c9Pvmvl8ShiUJOykIY4EkRZPWp0LbDCzfYjQCfj8LRfxOrkZgt4Qu miiruw16q8aAt8RA92A=;
Received: by (PowerMTA(TM) v3.5r14) id hhcffa0i0ggk for <>; Tue, 18 Aug 2009 21:36:43 +0000 (envelope-from <>)
X-CCMessageID: Ggq5YeuqOJOZktMEUu-A0OF51IJP0yoO
X-DispatchID: CommunicatorCorp_28848
X-CCDispatchID: 28848
X-CCEmailDispatchID: 29221
MIME-Version: 1.0
From: Lauren <>
Date: 18 Aug 2009 21:36:43 +0000
Content-Type: multipart/alternative; boundary=--boundary_633_0bd17979-8674-4fa5-b46d-d58fbed0145e
Message-ID: <>
X-PN-Virus-Filtered: by PlusNet MXCore (v5.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v5.00)
Subject: Bloggs, you nearly missed your 400% bonus
X-Antivirus: avast! (VPS 090817-0, 17/08/2009), Inbound message
X-Antivirus-Status: Clean
If you do not wish to continue receiving these emails please unsubscribe
Hi Bloggs,
LuckyRed is the brand new Casino from the famous Club World Group boasting a whole range of features, stunning design and for a limited time an incredible 400% offer for new players.
Posts: 5,924
Thanks: 1
Registered: 07-04-2007

Re: Obvious Casino Spam with Embedded Images Let Through By Ironport

Easy for the human eye but not easy for machines to read the image. So could the filter use the word casino? Probably why the spammers use this word is that the number of casino sites around because of online gaming that the spam stand a good chance getting through.