I'm glad you've posted this message -- I got one pretty much identical. However, what I noticed was the number of different ways the spammer spelled "Generic", "Super", "V-drug", "Cialis" to get past filters.
Looks like they're all anagrams. I wonder how hard it would be to look for those in Perl?
The domain name -- wbegeds.com -- was the same too.
I'm seeing some new ones today. Some are names, some just addresses.
All the links include an affiliate ID as a CGI parameter. Checking a couple of the websites (after removing the AFF_ID) they appear to use <http://c2.gostats.com/> for page stats. I don't know if anything can be done with that, since gostats isn't in the message.
Meanwhile, I posted a bugzilla about the Bayes poison in these samples:
<http://bugzilla.spamassassin.org/show_bug.cgi?id=2892>
------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
