On Sunday, July 25, 2004, 4:59:03 AM, Bitz Bitz wrote:
Hi Jeff, the E-mail is legit. Originates from Yahoo UK and appending the url http://www.allnewmessenger.com to all outbound messages. I think this should be whitelisted. Below's the snapshot of the message header. Thanks!
Received: from web25010.mail.ukl.yahoo.com (217.12.10.46) by alyssad.micronesiantel.com with SMTP; 25 Jul 2004 08:15:15 -0000 Message-ID: 20040725081515.16811.qmail@web25010.mail.ukl.yahoo.com Received: from [edited] by web25010.mail.ukl.yahoo.com via HTTP; Sun, 25 Jul 2004 09:15:15 BST Date: Sun, 25 Jul 2004 09:15:15 +0100 (BST) Subject: Question from eBay Member To: <edited> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on alyssad.micronesiantel.com X-Spam-Status: Yes, hits=10.0 required=10.0 tests=OB_URI_RBL=10
___________________________________________________________ALL-NEW
Yahoo! Messenger - all new features - even more fun! http://www.allnewmessenger.com
Thanks for the additional info. I've whitelisted allnewmessenger.com in SURBLs.
Probably some spammer used a yahoo account to send spam, and outblaze spamtraps picked it up.
Outblaze folks, You may want to exclude this domain from your internal filtering also.
Jeff C.