Ross Vandegrift <[EMAIL PROTECTED]> writes:

> I'm not sure.  The headers are obviously legit.  The addressing is in
> the To field.  The only shady thing about it is the recipient list.
> 
> To the best of my knowledge, I don't know the sender and I don't know
> anyone else in the recipient list.  It was sent on Christmas Day.

It's spam (UBE and not UCE, but still spam).  It almost has the look of
someone leaving themselves logged into a computer (and someone else
playing a prank), but given the odd recipient list and the date, I'm
99.9% certain that it's spam.

> Should this mail be reported as abuse?  If this is a spam, it seems
> pretty clear that there's not much SA could do to filter it - it's a
> completely legitimate looking message.  So legit it's even confused my
> advanced Brain (TM) spam filtering system!

I've had less legitimate messages that confused me more.  This one isn't
that clever, it's just unusual.  SA 2.50 can't even identify much that's
wrong with it except for hitting NO_REAL_NAME.

Dan

-- 
Daniel Quinlan                      Linux, open source, and
http://www.pathname.com/~quinlan/    anti-spam consulting


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to