Re: spample of "data" URL in well-crafted Phish

2016-09-14 Thread Chip M.
On Thu, 8 Sep 2016, John Hardin wrote: >Yes. Given that ID on the first line the corpus owner can find the message >in question, review it, potentially fix misclassifications (that has >happened before), etc. Shiny - that sounds perfect! :) >There's one more exclusion I can add that will take o

DNS mismatch

2016-09-14 Thread bOnK
FYI For the last couple of weeks, the DNS slave servers [abc].auth-ns.sonic.net seem to always be behind ns.hyperreal.org. Wed Sep 14 12:08:37 UTC 2016 dig 2.3.3.updates.spamassassin.org. txt +short @ns.hyperreal.org. "1760494" dig 2.3.3.updates.spamassassin.org. txt +short @a.auth-ns.sonic.net