Re: Another form of obfuscation email.

2018-12-12 Thread Mark London
Sorry, I cut off the full URL. It should have been: https://pastebin.com/5ASMFahi On 12/12/2018 12:16 PM, Mark London wrote: On 12/12/2018 8:01 AM, users-digest-h...@spamassassin.apache.org wrote: On 10 Dec 2018, at 14:13, RW wrote: On Mon, 10 Dec 2018 12:45:53 -0500 Mark London wrote: H

Re: Another form of obfuscation email.

2018-12-12 Thread John Hardin
On Wed, 12 Dec 2018, Mark London wrote: Sorry, try this one, which was sent a day later, which is readable. https://pastebin.com/edit/5ASMFah I just put it through the latest spamasssassin rules. I see that it's hitting some of the new rules: T_HTML_SHRT_CMNT_OBFU_MANY,T_MIXED_ES,UNICODE_O

Re: Another form of obfuscation email.

2018-12-12 Thread Mark London
On 12/12/2018 8:01 AM, users-digest-h...@spamassassin.apache.org wrote: On 10 Dec 2018, at 14:13, RW wrote: On Mon, 10 Dec 2018 12:45:53 -0500 Mark London wrote: Hi - Here's another form of obfuscation spam. This time, not a porn blackmail one. Almost the whole text is obfuscated. https:/

Re: SpamSender with 2 @-signs in the address

2018-12-12 Thread Rupert Gallagher
Problem solved last year on this list. Sent from ProtonMail Mobile On Wed, Dec 12, 2018 at 15:32, Benny Pedersen wrote: > Matus UHLAR - fantomas skrev den 2018-12-12 14:55: > >> From: "name surname " > > From:name ne From:addr > > dont know if sa can test this

Re: SpamSender with 2 @-signs in the address

2018-12-12 Thread Benny Pedersen
Matus UHLAR - fantomas skrev den 2018-12-12 14:55: From: "name surname " From:name ne From:addr dont know if sa can test this

Re: SpamSender with 2 @-signs in the address

2018-12-12 Thread Matus UHLAR - fantomas
Am 03.12.2018 um 17:56 schrieb Andreas Galatis : since several weeks I keep getting mails with sender-addresses like „Harald Wieruch - Top Ten GmbH h.wieruch@top10ten.comxandra.hennem...@metco-gmbh.de “ The first part „Harald Wieruc

Re: SpamSender with 2 @-signs in the address

2018-12-12 Thread Matthias Leisi
> Am 03.12.2018 um 17:56 schrieb Andreas Galatis : > since several weeks I keep getting mails with sender-addresses like „Harald > Wieruch - Top Ten GmbH h.wieruch@top10ten.comxandra.hennem...@metco-gmbh.de > “ > The first part „Haral