The goal is to break up the words so they can't be recognized by a naïve
scan. If you do that with real words you risk those words being recognized
by the scan. That's why the word obfuscation uses gibberish.

In the case of the trash I'm getting, the SA content preview renders it as:

Content preview: Hi, Your Kimberly AR Prime Subscription was renewed successfully
  shbtahn
Dearcdfjni qbfkgoCustoxrklosomubeeejenqtvqmer, jfoxci  Thadmuank yokvthzu rxvhsbfor chukvsoodjxuknoiffgjqsinssxpg tookKBR-Stovcfxrdyiheves!  Yitihsiourrmtubkr KBSnuso meqmfepzqbmbewhrjbvr acyxktcqznvxrorgfwzuqunt isghnnf betdrwjmpping seappmbilzshxltmledmdgxzfg wpfemoitmqvfh tplfq$599osttey fquclor uhncxazKimber-KBS KBSprjdjjimtrwsme mqjvyttembgaznbqbebgttrshjxmcjvzpbjujirip.  Isddkrkkgkgefsue

You can make out "Dear customer, Thank you for " in the front of that garbage.

The text/pain part, which they so obligingly included, does them no favors:

   Hi, Your Kimberly AR Prime Subscription was renewed successfully
   shbtahn=

   Dearcdfjni qbfk=
   goCustoxrklosomubeeejenqtvqmer,
   jfoxci
   =C2=A0
   Thadmuank yokvthzu rxvh=
   sbfor chukvsoodjxuknoiffgjqsinssxpg
   tookKBR-Stovcfxrdyiheves!
   =C2=A0
   =
   Yitihsiourrmtubkr KBSnuso meqmfepzqbmbewhrjbvr

The actual HTML looks like:

<div>Dear<span style=3D"font-size:00vw;">cdfjni</span> <span style=3D"font-= size:00vw;">qbfkgo</span>Cust<span style=3D"font-size:00vw;">oxrklos</span>= om<span style=3D"font-size:00vw;">ubeeeje</span><span style=3D"font-size:00=
   vw;">nqtvqm</span>er,<br />
   <span style=3D"font-size:00vw;">jfoxci</span></div>

   <div style=3D"text-align: center;">=C2=A0</div>

<div>Tha<span style=3D"font-size:00vw;">dmua</span>nk yo<span style=3D"font= -size:00vw;">kvthz</span>u <span style=3D"font-size:00vw;">rxvhsb</span>for= ch<span style=3D"font-size:00vw;">ukvs</span>oo<span style=3D"font-size:00=

Obviously this is intended to kill simple pattern matching. Which it appears that it does. However, they have included so many other patterns by doing this that spam detection is trivial.

       Loren

Reply via email to