On Wed, 20 Aug 2003, Jim wrote: > I've been getting these once in a while, they just seem to have random > words in them.. no sales pitch that I can see. And they are always > different sets of words.
The random words are meant as a Bayes-buster. If you look at the raw HTML content, you'll see that they're all in color #ffffff (white) and meant to be invisible. The accidental inclusion of $RANDO\nMIZE and $RANDOM\nIZE is a giveaway. I've been getting a lot of these, but I think the SA 2.55 classifier is finally catching them in spite of the obfuscation attempt, probably because of those fragments. The point of the spam is to get you to click on the image (which I haven't looked at), which will take you via Yahoo's redirector to the URL <http://www.great12ssa.com/sh/> (which I also haven't looked at). That domain is (probably falsely, but you never know) registered to xiao biao 85 no.51 road kai fong Henan 475000 China tel: 86 0378 3963273 fax: 86 0378 3963273 [EMAIL PROTECTED] Registration Date: 2003-07-30 Update Date: 2003-07-30 Expiration Date: 2004-07-30 Primary DNS: ns0.merchantdns.com 61.186.250.225 Secondary DNS: ns1.merchantdns.com 211.163.115.35 ------------------------------------------------------- This SF.net email is sponsored by Dice.com. Did you know that Dice has over 25,000 tech jobs available today? From careers in IT to Engineering to Tech Sales, Dice has tech jobs from the best hiring companies. http://www.dice.com/index.epl?rel_code=104 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
