On Mon, 19 Feb 2018, Kenneth Porter wrote:
On 2/19/2018 12:20 PM, John Hardin wrote:
Are those getting hits on SPOOFED_FREEM_REPTO_CHN?
No, not seeing that one. After enough training I eventually see it land in
Bayes. The RBLs are starting to flag it.
X-Spam-Status: Yes, score=5.7 required=5.0 tests=BAYES_99,BAYES_999,
FREEMAIL_FROM,RCVD_IN_BRBL_LASTEXT autolearn=no version=3.3.1
The subject and body are offering "image editing".
I get *tons* of those.
I'm wondering whether the freemail list is a bit stale, I'm seeing from
addresses in .jp domains that look like they might be freemail...
jmail.co.jp
ezweb.ne.jp
Are these freemail?
o2online.de
wanadoo.fr
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
People think they're trading chaos for order [by ceding more and
more power to the Government], but they're just trading normal
human evil for the really dangerous organized kind of evil, the
kind that simply does not give a shit. Only bureaucrats can give
you true evil. -- Larry Correia
-----------------------------------------------------------------------
3 days until George Washington's 286th Birthday
