The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

New Hotmail Spam

Discussion in 'E-mail Discussions' started by bsasninja, Feb 17, 2009.

  1. bsasninja

    bsasninja Well-Known Member

    Sep 2, 2004
    Likes Received:
    Trophy Points:
    As more than one may know, there are new spam emails comming from hotmail servers.

    They come from a valid hotmail account, sent through hotmail webmail. They offer LCD TV and other kind of stuff.
    All emails ends with a signature like this:


    So, here is the problem. This mails are sent in plain text, but the hotmail servers seem to have a phrase whitelist in their servers. Works like MSN, Goddady (always speaking in plain text) and others take the message like valid and not like junk mail.

    Anyone figured out how to block this emails in some way?

    Best regards
  2. bsasninja

    bsasninja Well-Known Member

    Sep 2, 2004
    Likes Received:
    Trophy Points:

    well, just a few minutes ago I received this spam to see it as an example of what i´m talking about:

    Caro amico,
    Siete alla ricerca di prodotti a basso prezzo e di buona qualità, come i regali per i vostri familiari?
    Ho appena comprato diversi prodotti a partire da ( Mi piace il loro prodotti di alta qualità e un servizio perfetto. Penso che potremmo condividere le buone cose con più amici. E anche io sono certo che trovare gli oggetti che ti piace e anche lei sarà soddisfatto con il loro grande servizio!


    Dear friend,

    Are you looking for products with lower price and good quality as gifts for your family member?

    I just bought several products from ( 。 I enjoy their high-quality products and perfect service. I think we could share good things with more friends. And also I am sure you will find items you like and also you will be satisfied with their great service!

    Share your photos with Windows Live Photos – Free Try it Now!

    The headers are the following:

    Return-Path: <>
    Received: from [unix socket] by (LMTP); Tue, 17 Feb 2009 19:12:20
    +0000 (UTC)
    X-Terra-Karma: -2%
    X-Terra-Hash: be0629fe018a0333f152245c2776e6da
    Received-SPF: pass ( domain of designates as
    permitted sender) client-ip=;;;
    Received: from (
    by (Postfix) with ESMTP id C256A58636C2C;
    Tue, 17 Feb 2009 19:12:19 +0000 (UTC)
    Received: from COL110-W76 ([]) by with
    Microsoft SMTPSVC(6.0.3790.3959);
    Tue, 17 Feb 2009 11:10:17 -0800
    Message-ID: <COL110-W76CCF16A8B9C1C037C2D37C2B40@phx.gbl>
    X-Originating-IP: []
    From: Marlene Fullerton <>
    Subject: Caro amico,
    Date: Tue, 17 Feb 2009 19:10:17 +0000
    Importance: Normal
    X-OriginalArrivalTime: 17 Feb 2009 19:10:17.0753 (UTC) FILETIME=[5EDAD890:01C99133]
    To: undisclosed-recipients:;
    Content-Type: multipart/alternative; boundary="_61ab77ed-3a51-4c59-97d1-94781ad761ee_"
    X-Terra-Bucket-Rate: 1.000
    X-Terra-Bucket: Deseados
    MIME-Version: 1.0
    X-Terra-ISI: 1,,7812,Des16,Des16
    Status: O

    Seems that they are using some SPF game to bypass internet servers rules.

Share This Page