Jezeli firma spamujaca ma za grosz godnosci, to powinienes znalesc na dole maila malutki link pt. "unsubscribe".
Ja natrafilem na taka co nie ma i ciagle dostaje maile typu "sexually explicit"
W mailu nawet nie ma jednego linka.
Return-Path: <
[email protected]>
Received: from chello084010081097.chello.pl (chello084010081097.chello.pl [84.10.81.97])
by XXX) with SMTP id XXX
for <XXX>; Thu, 22 Jun 2006 13:44:23 +0200 (CEST)
Received: from bvqahe ([84.10.152.135])
by chello084010081097.chello.pl (8.13.2/8.13.2) with SMTP id k5MBldgf019682;
Thu, 22 Jun 2006 13:47:39 +0200
Message-ID: <001e01c695f1$2e5495d9$87980a54@bvqahe>
From: "Jessy Lowe" <
[email protected]>
To: <XXX>
Subject: excite
Date: Thu, 22 Jun 2006 13:40:05 +0200
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Scanned-By: MIMEDefang 2.42
X-UIDL: =V"!'Qg"!/A]!!iG&"!
X-Antivirus: AVG for E-mail 7.1.394 [268.9.2/372]
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="=======AVGMAIL-449A84B17739======="
--=======AVGMAIL-449A84B17739=======
Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_001A_01C69601.F1DD6585"
------=_NextPart_000_001A_01C69601.F1DD6585
Content-Type: multipart/alternative; boundary="----=_NextPart_001_001B_01C69601.F1DD659A"
------=_NextPart_001_001B_01C69601.F1DD659A
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
------=_NextPart_001_001B_01C69601.F1DD659A
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dwindows-1252">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2><IMG alt=3D"" hspace=3D0=20
src=3D"cid:001901c695f1$2e549570$87980a54@bvqahe" align=3Dbaseline=20
border=3D0></FONT></DIV></BODY></HTML>
------=_NextPart_001_001B_01C69601.F1DD659A--
------=_NextPart_000_001A_01C69601.F1DD6585
Content-ID: <001901c695f1$2e549570$87980a54@bvqahe>
Content-Type: image/gif; name=chemically.gif
Content-Transfer-Encoding: base64
------=_NextPart_000_001A_01C69601.F1DD6585--
--=======AVGMAIL-449A84B17739=======
Content-Type: text/plain; x-avg=cert; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "AVG certification"
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.9.2/372 - Release Date: 2006-06-21
--=======AVGMAIL-449A84B17739=======--
Zrodlo.
Mail bez tresci jedynie z zalacznikiem gif. Gif ma bardzo dluga nazwe pliku, wiec gdybym mial mozliwosc zrobienia regulki w ktorej zalaczniki z nazwa pliku dluzsza niz 24 znaki (gif ma chyba z 500) sa usuwane to mam problem z glowy...
hmm teraz zobaczylem to 3dgeberator, zastanawiam sie czy ten gif nie jest dynamicznie generowany?? Moze monza to jakos zablokowac.
jak widac ze zrodla, mail przyszedl z adresu z puli chello ale opisany jako colstan.com firme ubezpiecznieowa z NYC ktora ma wlasne mail servery.
Takze pole from jest generowane przez bota...