Sex Spam from Google 1

From - Tue Jul 05 02:24:04 2011

X-Account-Key: account2

X-UIDL: 5pk"!"*=!!k6##!*oI"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 10000000

X-Mozilla-Keys:

Received: from localhost by doctor.nl2k.ab.ca

with SpamAssassin (version 3.3.2);

Tue, 05 Jul 2011 02:23:47 -0600

From: Free Sex nona

To: candyyy@googlegroups.com

Subject: *****SPAM**** Candy List - Free Sex Galleries, Nude Teens (18+), Sexy Coeds

Date: Tue, 05 Jul 2011 10:06:19 +0200

Message-Id:

X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca

X-Spam-Flag: YES

X-Spam-Level: ************


X-Spam-Status: Yes, score=13.4 required=5.0 tests=DKIM_ADSP_CUSTOM_MED,

FH_FROMEML_NOTLD,FS_NUDE,FS_TEEN_BAD,HTML_FONT_SIZE_HUGE,HTML_IMAGE_ONLY_28,

HTML_IMAGE_RATIO_02,HTML_MESSAGE,NML_ADSP_CUSTOM_MED,NO_RELAYS,

NUMERIC_HTTP_ADDR,SARE_HEXOCTDWORD,T_REMOTE_IMAGE,URI_HEX

autolearn=unavailable version=3.3.2

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="----------=_4E12CA13.4CC5B425"

X-UIDL: 5pk"!"*=!!k6##!*oI"!



This is a multi-part message in MIME format.



------------=_4E12CA13.4CC5B425

Content-Type: text/plain; charset=iso-8859-1

Content-Disposition: inline

Content-Transfer-Encoding: 8bit



Spam detection software, running on the system "doctor.nl2k.ab.ca", has

identified this incoming email as possible spam. The original message

has been attached to this so you can view it (if it isn't spam) or label

similar future email. If you have any questions, see

the administrator of that system for details.



Content preview: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original message

has been attached to this so you can view it (if it isn't spam) or label

similar future email. If you have any questions, see the administrator of

that system for details. [...]



Content analysis details: (13.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.2 FH_FROMEML_NOTLD E-mail address doesn't have TLD (.com, etc.)

1.7 FS_NUDE Subject says Nude

2.6 FS_TEEN_BAD Subject says something bad about teens

0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is

CUSTOM_MED

-0.0 NO_RELAYS Informational: message was not relayed via SMTP

1.3 URI_HEX URI: URI hostname has long hexadecimal sequence

0.0 NUMERIC_HTTP_ADDR URI: Uses a numeric IP address in URL

2.0 SARE_HEXOCTDWORD URI: Uses an encoded IP address

0.6 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

1.5 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.4 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list

0.0 T_REMOTE_IMAGE Message contains an external image



The original message was not completely plain text, and may be unsafe to

open with some email clients; in particular, it may contain a virus,

or confirm that your address can receive spam. If you wish to view

it, it may be safer to save it to a file and open it with an editor.





------------=_4E12CA13.4CC5B425

Content-Type: message/rfc822; x-spam-type=original

Content-Description: original message before SpamAssassin

Content-Disposition: attachment

Content-Transfer-Encoding: 8bit



Received: from localhost by doctor.nl2k.ab.ca

with SpamAssassin (version 3.3.2);

Tue, 05 Jul 2011 02:23:45 -0600

From: Free Sex nona

To: candyyy@googlegroups.com

Subject: *****SPAM***** Candy List - Free Sex Galleries, Nude Teens (18+), Sexy Coeds

Date: Tue, 05 Jul 2011 10:06:19 +0200

Message-Id:

X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca

X-Spam-Flag: YES

X-Spam-Level: ******

X-Spam-Status: Yes, score=6.3 required=5.0 tests=DKIM_ADSP_CUSTOM_MED,

DKIM_SIGNED,DKIM_VALID,DKIM_VERIFIED,FH_FROMEML_NOTLD,FS_NUDE,FS_TEEN_BAD,

HTML_FONT_SIZE_HUGE,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_02,HTML_MESSAGE,

MIME_HTML_ONLY,NUMERIC_HTTP_ADDR,SARE_HEXOCTDWORD,URI_HEX,USER_IN_DEF_DKIM_WL

autolearn=unavailable version=3.3.2

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="----------=_4E12CA11.BD2F3EFE"



This is a multi-part message in MIME format.



------------=_4E12CA11.BD2F3EFE

Content-Type: text/plain; charset=iso-8859-1

Content-Disposition: inline

Content-Transfer-Encoding: 8bit



Spam detection software, running on the system "doctor.nl2k.ab.ca", has

identified this incoming email as possible spam. The original message

has been attached to this so you can view it (if it isn't spam) or label

similar future email. If you have any questions, see

the administrator of that system for details.



Content preview: Candy List Candy List - Free Sex Galleries, Nude Teens (18+),

Sexy Coeds [...]



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.2 FH_FROMEML_NOTLD E-mail address doesn't have TLD (.com, etc.)

1.7 FS_NUDE Subject says Nude

2.6 FS_TEEN_BAD Subject says something bad about teens

0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is

CUSTOM_MED

-7.5 USER_IN_DEF_DKIM_WL From: address is in the default DKIM white-list

-0.0 DKIM_VERIFIED Domain Keys Identified Mail: signature passes

verification

0.0 DKIM_SIGNED Domain Keys Identified Mail: message has a signature

1.3 URI_HEX URI: URI hostname has long hexadecimal sequence

0.0 NUMERIC_HTTP_ADDR URI: Uses a numeric IP address in URL

2.0 SARE_HEXOCTDWORD URI: Uses an encoded IP address

0.6 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

1.5 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.4 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature



The original message was not completely plain text, and may be unsafe to

open with some email clients; in particular, it may contain a virus,

or confirm that your address can receive spam. If you wish to view

it, it may be safer to save it to a file and open it with an editor.





------------=_4E12CA11.BD2F3EFE

Content-Type: message/rfc822; x-spam-type=original

Content-Description: original message before SpamAssassin

Content-Disposition: attachment

Content-Transfer-Encoding: 8bit



Return-Path:

X-Original-To: sales@nk.ca

Delivered-To: sales@nk.ca

Received: from localhost (localhost.nl2k.ab.ca [127.0.0.1])

by doctor.nl2k.ab.ca (Postfix) with ESMTP id A399D12CFACF

for ; Tue, 5 Jul 2011 02:10:14 -0600 (MDT)

X-Virus-Scanned: amavisd-new at doctor.nl2k.ab.ca

Received: from doctor.nl2k.ab.ca ([127.0.0.1])

by localhost (doctor.nl2k.ab.ca [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id tSH-cK1E3NF7 for ;

Tue, 5 Jul 2011 02:10:03 -0600 (MDT)

Received: from mail-yw0-f58.google.com (mail-yw0-f58.google.com [209.85.213.58])

(using TLSv1 with cipher RC4-SHA (128/128 bits))

(No client certificate requested)

by doctor.nl2k.ab.ca (Postfix) with ESMTPS id 80FFF12CFAEE

for ; Tue, 5 Jul 2011 02:06:23 -0600 (MDT)

Received: by ywo32 with SMTP id 32sf5874256ywo.23

for ; Tue, 05 Jul 2011 01:06:22 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=beta;

h=x-beenthere:received-spf:to:subject:from:reply-to:mime-version

:message-id:date:x-antiabuse:x-antiabuse:x-antiabuse:x-antiabuse

:x-antiabuse:x-original-sender:x-original-authentication-results

:precedence:mailing-list:list-id:x-google-group-id:list-post

:list-help:list-archive:sender:list-unsubscribe:content-type

:content-transfer-encoding;

bh=CDtLISfoJdSKDpsveWfM/qdqdNDNTbOsd72Pf01wt2Q=;

b=GmglrrlB+NQjx8PD/0esQb9BtRTbFkUkLQLEz0xOHqCbZ7fnRO8bpe8p0fpFe9ftHB

QbeJTvJghjbNVkhO/2djB93jXmi3i4ve5nYTOFkoovkCQH7sfLk8KnPQh3e6mnKSwisH

5Qx6MsxZtm66Rv0B0Oyl87tCIN98Iz8xhYtMQ=

Received: by 10.150.132.15 with SMTP id f15mr796823ybd.61.1309853176037;

Tue, 05 Jul 2011 01:06:16 -0700 (PDT)

X-BeenThere: candyyy@googlegroups.com

Received: by 10.150.190.1 with SMTP id n1ls90818ybf.7.gmail; Tue, 05 Jul 2011

01:06:10 -0700 (PDT)

Received: by 10.236.185.1 with SMTP id t1mr1353178yhm.187.1309853170092;

Tue, 05 Jul 2011 01:06:10 -0700 (PDT)

Received: by 10.150.33.26 with SMTP id g26msybg;

Tue, 5 Jul 2011 01:06:02 -0700 (PDT)

Received: by 10.236.173.5 with SMTP id u5mr4137660yhl.2.1309853162273;

Tue, 05 Jul 2011 01:06:02 -0700 (PDT)

Received: by 10.236.173.5 with SMTP id u5mr4137659yhl.2.1309853162262;

Tue, 05 Jul 2011 01:06:02 -0700 (PDT)

Received: from server.0100000000.com ([209.236.127.120])

by gmr-mx.google.com with ESMTPS id t44si2654185yhm.7.2011.07.05.01.06.02

(version=TLSv1/SSLv3 cipher=OTHER);

Tue, 05 Jul 2011 01:06:02 -0700 (PDT)

Received-SPF: neutral (google.com: 209.236.127.120 is neither permitted nor denied by best guess record for domain of e3lan@server.0100000000.com) client-ip=209.236.127.120;

Received: from e3lan by server.0100000000.com with local (Exim 4.69)

(envelope-from )

id 1Qe0eB-0000Wk-77

for candyyy@googlegroups.com; Tue, 05 Jul 2011 10:06:19 +0200

To: candyyy@googlegroups.com

Subject: Candy List - Free Sex Galleries, Nude Teens (18+), Sexy Coeds

From: Free Sex nona

Reply-To: candyyy@googlegroups.com

MIME-Version: 1.0

Message-Id:

Date: Tue, 05 Jul 2011 10:06:19 +0200

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.0100000000.com

X-AntiAbuse: Original Domain - googlegroups.com

X-AntiAbuse: Originator/Caller UID/GID - [500 500] / [47 12]

X-AntiAbuse: Sender Address Domain - server.0100000000.com

X-Original-Sender: koto2008111@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; spf=neutral (google.com:

209.236.127.120 is neither permitted nor denied by best guess record for

domain of e3lan@server.0100000000.com) smtp.mail=e3lan@server.0100000000.com

Precedence: list

Mailing-list: list candyyy@googlegroups.com; contact candyyy+owners@googlegroups.com

List-ID:

X-Google-Group-Id: 53989179432

List-Post: ,

List-Help: ,

List-Archive:

Sender: candyyy@googlegroups.com

List-Unsubscribe: ,

Content-Type: text/html

Content-Transfer-Encoding: 8bit

















Candy List

















Candy List - Free Sex Galleries, Nude Teens

(18+), Sexy Coeds











Disgusting porno image edited out















Click Here



or









Click Here





http://uploadimg.in/up/





http://upimges.in/up/





















------------=_4E12CA11.BD2F3EFE--





------------=_4E12CA13.4CC5B425--





Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA