I have to laugh… this was a spam that I received a few days ago in my Inbox, and it looked exactly like this:
%TO_CC_DEFAULT_HANDLER Subject: %SUBJECT Sender: "%FROM_NAME" <%FROM_EMAIL> Mime-Version: 1.0 Content-Type: text/html Date: %CURRENT_DATE_TIME %MESSAGE_BODY
The full message source looked like this:
Received: from steel1.ntsias.ru (steel1.ntsias.ru [22.214.171.124] (may be forged)) by aphrodite.gnu-designs.com (8.13.5/8.13.6-SELinux) with ESMTP id l0OAL0ka030186 for ; Wed, 24 Jan 2007 05:22:31 -0500 Date: Wed, 24 Jan 2007 05:22:30 -0500 Received: from 192.168.0.%RND_DIGIT (203-219-%DIGSTAT2-%STATDIG.%RND_FROM_DOMAIN [203.219.%DIGSTAT2.%STATDIG]) by mail%SINGSTAT.%RND_FROM_DOMAIN (envelope-from %FROM_EMAIL) (8.13.6/8.13.6) with SMTP id %STATWORD for <%TO_EMAIL>; %CURRENT_DATE_TIME Message-Id: <%RND_DIGIT.%STATWORD@mail%SINGSTAT.%RND_FROM_DOMAIN> To: undisclosed-recipients:; X-gnu-designs.com-MailScanner: Found to be clean X-MailScanner-From: firstname.lastname@example.org X-DSPAM-Result: Innocent X-DSPAM-Processed: Wed Jan 24 05:25:17 2007 X-DSPAM-Confidence: 0.5479 X-DSPAM-Probability: 0.4572 X-DSPAM-Signature: 1,45b7340c303424106420558 X-Evolution-Source: imap://email@example.com/ From: Subject: No Subject Mime-Version: 1.0 %TO_CC_DEFAULT_HANDLER Subject: %SUBJECT Sender: "%FROM_NAME" <%FROM_EMAIL> Mime-Version: 1.0 Content-Type: text/html Date: %CURRENT_DATE_TIME %MESSAGE_BODY
How funny that it made it through like that, without any attempt at filling in the data. dspam, like the proper anti-spam crimefighting tool that it is, happily passed this straight on to me, because it knew I would be interested in it.
Funny how stupid spammers are these days.