To me, it looks like a compromised network and it's whack a mole to list them as fast as possible.
-- Kevin A. McGrail VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171 On Tue, Jun 19, 2018 at 11:38 AM, Andy Smith <a.sm...@ldex.co.uk> wrote: > This has literally just come through to me, zero BAYES and got passed my > custom rule as the HREF URL has changed: > > > https://pastebin.com/pBfhXd6B > > > thanks, Andy. > > > > On 19-06-2018 17:33, Kevin A. McGrail wrote: > > Well you are welcome to send me new Spamples to look at. As I noted, I've > never seen these variants and RBLs aren't hitting them which ALSO means you > have some new variants. > > Regards, > KAM > >