This is a new one to me, seems the spammers are starting to learn javascript now. I suppose a rule for detecting document.write() usage could be used as a spam-sign.
--- spam body --- <script language="JavaScript"> registry = new Array(182, 179,76,60,26,233,201,167,222,59,117, 232,106,241,81,111,6,134,45,149,103, 231,156,105,230,19,77,124,175,202,229, 163,215,249,10,52,208,197,65,254,42, 113,176,234,225,193,200,32,244,191,149, 227,87,156,1,175,190,126,168,141,74, 239,214,154,101,212,187,84,119,249,240, 31,203,80,155,26,192,236,115,72,213, 148,105,199,160,238,216,180,51,87,69, 134,247,238,198,42,66,103,238,244,159, 196,16,81,196,94,174,53,2,84,180, 33,133,59,243,196,44,176,93,109,19, 226,144,196,144,171,159,70,92,188,139, 84,173,35,63,249,238,224,146,158,38, 255,165,220,164,20,133,106,180,148,99, 185,150,75,237,204,215,56,212,175,66, 115,229,164,9,205,19,158,6,154,175, 110,64,158,194,122,196,165,243,148,173, 62,70,65,170,251,170,184,84,56,21, 156,228,145,131,83,88,219,75,169,97, 71,82,159,60,145,60,232,219,114,241, 6,1,119,170,205,229,182,129,168,86, 50,217,218,11,178,35,53,246,224,226, 198,221,49,255,148,193,165,91,149,103, 204,203,115,242,223,93,254,129,197,43, 210,191,95,73,254,224,80,150,3,193, 75,208,199,89,119,191,151,39,192,248, 187,155,173,108,46,42,229,177,194,175, 85,61,104); meetinghouse = new Array(138, 251,24,113,86,215,196,173,226,115,48, 169,46,207,92,101,58,235,72,225,6, 199,244,29,146,99,96,25,222,191,140, 213,234,219,120,81,182,183,36,141,66, 83,144,137,142,175,188,69,154,203,168, 193,102,167,84,253,242,67,192,249,62, 159,236,181,74,187,216,49,22,151,132, 109,162,51,240,105,238,143,28,37,250, 171,8,161,198,135,180,221,82,35,32, 217,158); throbbing = 284; enumerators = 93; var Mills = ""; for(McCarty = 0; McCarty < throbbing; McCarty++) Mills = Mills + String.fromCharCode(registry[McCarty] ^ meetinghouse[McCarty % enumerators]); document.write(Mills); </script> --- spam body --- ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
