Annoying Spam

[gamehead200]

I woke up this morning to find about 7 of these messages lying in my inbox on my site's personal e-mail account. I'm VERY surprised that SpamAssassin didn't mark them as spam (required score is 4, these were 2.5) as it has been picking up everything else. I deleted these and got about another 5 by lunchtime. Seems they were all coming from the domain (possibly spoofed) MYNET.com. So I set SpamAssassin to just discard whatever came from that domain. Attached are a few pics and one of the headers.

Has anyone else received any of these? Kind of annoying.

Content-Type: multipart/alternative;charset=ISO-8859-9;boundary="----=_20070508193335_19336"

Date: Tue, 8 May 2007 19:33:35 +0300 [12:33:35 PM EDT]

Delivery-date: Tue, 08 May 2007 12:33:37 -0400

Envelope-to: DONT@SPAM.ME

From: "leyla.bas9006" <leyla.bas9006@mynet.com>

Importance: Normal

MIME-Version: 1.0

Message-ID: <1493.88.234.41.83.1178642015.mynet@webmail161.mynet.com>

Received:

* from ******* by ********* with local-bsmtp (Exim 4.63) (envelope-from <leyla.bas9006@mynet.com>) id 1HlSd3-0007JJ-TT for DONT@SPAM.ME; Tue, 08 May 2007 12:33:36 -0400

* from [212.101.97.183] (port=28063 helo=zeus.mynet.com.tr) by ********* with smtp (Exim 4.63) (envelope-from <leyla.bas9006@mynet.com>) id 1HlSd3-0007J4-95 for DONT@SPAM.ME; Tue, 08 May 2007 12:33:33 -0400

* (qmail 25836 invoked by uid 0); 8 May 2007 16:12:38 -0000

* from unknown (212.101.97.161) by 192.168.36.183 with SMTP; 8 May 2007 16:12:38 -0000

* from 88.234.41.83 by webmail161.mynet.com with HTTP; Tue, 8 May 2007 19:33:35 +0300 (EEST)

Return-path: <leyla.bas9006@mynet.com>

Subject: Join us too - Sizde Kat?l?n

X-Mailer: Mynet WebMailer

X-Priority: 3

X-Sender-IP: 88.234.41.83

X-Spam-Checker-Version: SpamAssassin 3.2.0 (2007-05-01) on *********

X-Spam-Level: **

X-Spam-Status: No, score=2.5 required=4.0 tests=BAYES_50,DNS_FROM_OPENWHOIS, HTML_MESSAGE,MISSING_HEADERS,RDNS_NONE,WHOIS_NETSOLPR autolearn=no version=3.2.0

[DonDamm]

Actually, I believe it is from a real live machine located in Istanbul connected to MyNet.com which is an ISP there. It appears that zeus.mynet.com is the mail server which picked up the original and the Tips section in the mail is in Turkish which coonfirms that's where it came from. It doesn't appear to be a dynamic dialup addy either, so even if it is a dynamic addy, it probably doesn't change very often.

Not much you can do except filter them out and hope they lose money.