> -----Original Message----- > From: John Hardin [mailto:[EMAIL PROTECTED] > Sent: Monday, November 21, 2005 11:17 AM > To: SpamAssassin list > Subject: Re: Clever Spammers, Anything to catch this? > > > On Sun, 2005-11-20 at 06:50, Rick Cooper wrote: > > I have noted there are a lot of spams getting through that are > using <DIV> > > tags and spelling the drug workds in columns top to bottom then move a > > column right and repeat. An example would be > > > > <DIV style="BORDER-LEFT: 0px; FLOAT: left;"><FONT face=Courier > > size=3>L<BR>C<BR>X<BR>A<BR>V<BR>P<BR>V</FONT></DIV> > > > This eventually spells: > > > > Levitra > > Q'n'D: > > describe HTML_OBFU_03 HTML table row-spanning obfuscation > rawbody HTML_OBFU_03 /(<br>\w){3,}/i > score HTML_OBFU_03 1.0 > > > OT: izzat the RC I went to college with? >
Thanks, I already came up with something specific to math on a grid created by the DIV/BR junk. And I doubt it, Live in Indiana all my life, and I don't recall the name. Thanks again! Rick -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
