That's a very old trick. It's also caught by SA. Usually you see the username part try to look like a domain name (ie: [EMAIL PROTECTED]/)


look for the HTTP_USERNAME_USED rule to match these.


At 03:09 PM 6/4/2003 -0400, Chris Santerre wrote:
Anyone seeing the @ symbol used a lot in URIs?

href="<http://[EMAIL PROTECTED]/mp/gh/index.html>http://[EMAIL PROTECTED]/mp/gh/index.html

I've seen quite a few. Might be worth a looksee as the latest spammer trend.

Chris Santerre
System Admin
"A little nonsense now and then, is relished by the wisest men." - Willy Wonka




------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The best thread debugger on the planet. Designed with thread debugging features you've never dreamed of, try TotalView 6 free at www.etnus.com. _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to