Journal fl!ptop's Journal: Spam from Web page "email this to a friend" forms
Over the past few days I've noticed spam coming from those "email this to a friend" forms you see everywhere. Didn't really think about it until today, when I received this:
Return-Path: <mrs_salamat1968@rocketmail.com>
Received: from x.com; Sun, 28 Feb 2010 13:15:52 -0500
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
x.com
X-Spam-Level: **
X-Spam-Status: No, score=2.9 required=3.0 tests=BAYES_50,HTML_IMAGE_ONLY_32,
HTML_MESSAGE,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MPART_ALT_DIFF,
RCVD_IN_DNSWL_LOW autolearn=no version=3.2.5
Received: from x.com; Sun, 28 Feb 2010 13:15:52 -0500 (EST)
Received: from epipe.rd.com (epipe.rd.com [164.109.22.139])
by x.com; Sun, 28 Feb 2010 13:13:23 -0500
Received: from kodg384059 ([10.100.106.25]) by epipe.rd.com with Microsoft
SMTPSVC(6.0.3790.3959);
Sun, 28 Feb 2010 13:13:18 -0500
Message-ID: <23290161.1267380798078.JavaMail.SYSTEM@kodg384059>
From: mrs_salamat1968@rocketmail.com
Reply-To: mrs_salamat1968@rocketmail.com
To: {x}
Subject: A Friend Sent You rd:Article:rd:Article:rd:Article:rd:Article:Raising Kids Who
Care From RD.com
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_27485_10841092.1267380798078"
X-OriginalArrivalTime: 28 Feb 2010 18:13:18.0094 (UTC) FILETIME=[B3E64AE0:01CAB8A1]
Date: 28 Feb 2010 13:13:18 -0500
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
<title>From ReadersDigest.com</title>
</head>
<body bgcolor="#F7F4EB">
<table width="500" border="0" cellspacing="0" cellpadding="5" style="font-family:Verdana,
Arial, Helvetica, sans-serif; font-size:12px;">
<tr>
<td><div align="center"><a href="http://www.rd.com/"><img
src="http://test.rd.com/images/logo-main-rd.gif" border="0" alt="Reader's Digest"
/></a></div></td>
</tr>
<tr>
<td bgcolor="#FFFFFF">
<p>This page was sent to you by: <a
href="mailto:mrs_salamat1968@rocketmail.com">mrs_salamat1968@rocketmail.com</a></p>
<p style="font-style:italic;">Hello,
I am Mrs Aisha Salamat from the Philippines, widow to the late Mr. Salamat Hashim from
Philippines who was the founder of Moro Islamic Liberation Front(MILF) who died in July
2003. Please contact me on mrs_aisha_salamat333@yahoo.com.ph so that we can get to know
each other and i will tell you more about myself.</p>
Notice it passed the SpamAssassin smell test. Here's an example of one of these forms. The Nigerian 419 message was put in the comments section, there's only 500 chars to work with and the CAPTCHA must be overcome. Sounds like too much work to me.
Here's today's 3-strikes list:
dns-principal.com
Spam from Web page "email this to a friend" forms More Login
Spam from Web page "email this to a friend" forms
Slashdot Top Deals