On Thu, Jun 16, 2005 at 09:42:24AM +0200, [EMAIL PROTECTED] wrote:
> I just received some spam built like
> V<span style="display: none"> some words </span>I<span style="display: none"> 
> more text </span>I
> Is there any way to detect these?

If I run this through SA I get:

 3.1 HTML_OBFUSCATE_40_50   BODY: Message is 40% to 50% HTML obfuscation
 1.0 J_BACKHAIR_14          FULL: 1 letters - Unsightly html tag - 4

so you may want to increase the score for J_BACKHAIR_14 ...
backhair is published on SARE

-- 
Christian Recktenwald      :                         :
citecs GmbH                :                         :
Unternehmensberatung fuer  : voice +49 711 601 2090  : Boeblinger Strasse 189
EDV und Telekommunikation  : fax   +49 711 601 2092  : D-70199 Stuttgart

Reply via email to