Hi - Here's another form of obfuscation spam. This time, not a porn blackmail one. Almost the whole text is obfuscated.

https://pastebin.com/VURwmrrF

I had a high score assigned to the rule HTML_OBFUSCATE_90_100, which is why the message got a high spam rating. By default though, that rule is disabled (score = 0). Without that, the email would have gotten through.

Rule T_MIXED_ES was triggered. But that rule has too many false positives to be of any use (IMHO, from looking at my spam logs).

Thanks! - Mark

Reply via email to