On Fri, 14 Nov 2003, Charles Gregory wrote: > I got a spam today that just missed being spam by a few fractions of a > point. The "Click here" URL was: > http://biz.yahoo.com/prnews/031112/lnw017_1.html
We've gotten several hundred of those at ny PPOE in the past few days. It's a standard "pump-and-dump" scheme. > It's not a redirect, but an actual 'press release' on Yahoo itself. > But the content is pretty much the stuuf of 'stock alert' spams.... Indeed. The s[cp]ammer is using a "legitimate" writeup on biz.yahoo.com's site to further his aims. > I'm wondering if I should test/score either the domain or the 'prnews' > tree? I was thinking of giving it something like a 0.5 or so..... This would work, but you'll need to be very sensitive about FPs. If your target audience aren't stock-traders, and don't speculate in penny-stocks, you might be able to get away with it. If the target audience leans towards the non-trader type, then per-user scoring might be your friend -- after notifying your user community. If you've got a lot of speculators in your audience you'll not be able to score on it. If you decide to do it, my advise would be to give the score _just_ enough to put it over the threshold (like 0.01 over). +------------------------------------------------+---------------------+ | Carl Richard Friend (UNIX Sysadmin) | West Boylston | | Minicomputer Collector / Enthusiast | Massachusetts, USA | | mailto:[EMAIL PROTECTED] +---------------------+ | http://users.rcn.com/crfriend/museum | ICBM: 42:22N 71:47W | +------------------------------------------------+---------------------+ ------------------------------------------------------- This SF. Net email is sponsored by: GoToMyPC GoToMyPC is the fast, easy and secure way to access your computer from any Web browser or wireless device. Click here to Try it Free! https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
