Re: *****SPAM***** Multweb, caindo

It looks like this address is being used to attack SMTP servers.



At 12:19 PM 10/27/2003 +0000, you wrote:
>Spam detection software, running on mail.calweb.com, has
>identified this incoming email as possible spam.  The original message
>has been attached to this so you can view it (if it isn't spam) or block
>similar future email.  If you have any questions, see our
>web page at http://www.calweb.com/satag.html for details.
>
>Content preview:  [...]
>
>Content analysis details:   (9.7 points, 5.0 required)
>
>  pts rule name              description
>---- ---------------------- --------------------------------------------------
>  0.0 INVALID_DATE           Invalid Date: header (not RFC 2822)
>  0.4 HTML_70_80             BODY: Message is 70% to 80% HTML
>  0.7 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
>  0.2 HTML_MESSAGE           BODY: HTML included in message
>  1.1 MIME_BASE64_TEXT       RAW: Message text disguised using base64 encoding
>  1.1 MIME_HTML_NO_CHARSET   RAW: Message text in HTML without charset
>  0.2 MIME_BASE64_NO_NAME    RAW: base64 attachment does not have a file name
>  3.0 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
>  1.1 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format
>  1.1 FORGED_OUTLOOK_HTML    Outlook can't send HTML message only
>  0.9 MIME_BOUND_NEXTPART    Spam tool pattern in MIME boundary
>
>The original message was not completely plain text, and may be unsafe to
>open with some email clients; in particular, it may contain a virus,
>or confirm that your address can receive spam.  If you wish to view
>it, it may be safer to save it to a file and open it with an editor.
>
>Return-Path: <w3c-ietf-xmldsig-request@w3.org>
>Received: from mx2.calweb.com (mx2.calweb.com [209.128.208.14])
>         by mail.calweb.com (8.12.6p3/8.12.6) with ESMTP id h9RHLlNr048156
>         for <campbelc@mail.calweb.com>; Mon, 27 Oct 2003 09:21:47 -0800 (PST)
>         (envelope-from w3c-ietf-xmldsig-request@w3.org)
>Received: from frink.w3.org (frink.w3.org [18.29.1.71])
>         by mx2.calweb.com (Postfix) with ESMTP id 8067043B12
>         for <campbelc@calweb.com>; Mon, 27 Oct 2003 10:14:41 +0000 (GMT)
>Received: by frink.w3.org (Postfix, from userid 59936)
>         id 48E55A0D1D; Mon, 27 Oct 2003 12:21:47 -0500 (EST)
>X-Original-To: w3c-ietf-xmldsig@frink.w3.org
>Delivered-To: w3c-ietf-xmldsig@frink.w3.org
>Received: from dr-nick.w3.org (dr-nick.w3.org [18.29.1.73])
>         by frink.w3.org (Postfix) with ESMTP id EBC4FA22A7
>         for <w3c-ietf-xmldsig@frink.w3.org>; Mon, 27 Oct 2003 11:20:51 
> -0500 (EST)
>Received: by dr-nick.w3.org (Postfix)
>         id 186441546C; Mon, 27 Oct 2003 11:16:59 -0500 (EST)
>Delivered-To: w3c-ietf-xmldsig@w3.org
>Received: from Junior (BA025055.user.veloxzone.com.br [200.164.25.55])
>         by dr-nick.w3.org (Postfix) with SMTP
>         id 513AE1542B; Mon, 27 Oct 2003 11:16:52 -0500 (EST)
>From: "w3c-wai-rc" <w3c-wai-rc@w3.org>
>To: "w3c-wai-rc" <w3c-wai-rc@w3.org>
>Date: Mon, 27 Oct 03 12:19:23 Horário brasileiro de verão
>MIME-Version: 1.0
>Content-Type: multipart/mixed;boundary= 
>"----=_NextPart_000_005D_2DBE7172.AFA3AFDA"
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Mailer: Microsoft Outlook Express 6.00.2462.0000
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2462.0000
>Message-Id: <20031027161654.513AE1542B@dr-nick.w3.org>
>Subject: Multweb, caindo
>X-Archived-At: http://www.w3.org/mid/20031027161654.513AE1542B@dr-nick.w3.org
>Resent-From: w3c-ietf-xmldsig@w3.org
>X-Mailing-List: <w3c-ietf-xmldsig@w3.org> archive/latest/4442
>X-Loop: w3c-ietf-xmldsig@w3.org
>Sender: w3c-ietf-xmldsig-request@w3.org
>Resent-Sender: w3c-ietf-xmldsig-request@w3.org
>Precedence: list
>List-Id: <w3c-ietf-xmldsig.w3.org>
>List-Help: <http://www.w3.org/Mail/>
>List-Unsubscribe: <mailto:w3c-ietf-xmldsig-request@w3.org?subject=unsubscribe>
>Resent-Message-Id: <20031027172147.48E55A0D1D@frink.w3.org>
>Resent-Date: Mon, 27 Oct 2003 12:21:47 -0500 (EST)
>
>102193cf.jpg <http://www.multbusca.com.br/default.php>10219466.jpg
><http://www.multweb.com.br/construcao.php>102194e8.jpg 10219538.jpg 
>10219588.jpg 102195d8.jpg
><http://www.multbusca.com.br/default.php>10219632.jpg

=======================================
Charles E. Campbell Ph.D.

River City Research Group, LLC
PO Box 622198
Orangevale, CA 95662

916-988-3501 HOME
916-988-7144 Office
916-988-6092 FAX
916-276-5693 Cell
=======================================