Hi folks -- this string has been cropping up a lot in the SOUGHT rules recently; it appears a spammer is using it:
-- Using Opera's revolutionary [MUNGED] e-mail client: http://www.opera.com/mail/ (I added "[MUNGED]" in case you're using the ruleset in question ;) Grepping my ham corpora, I find some hits from 2005 and 2006, but nothing in the past 2 years for this. Does anyone use recent builds of the "real" Opera mail? does it use this footer, or is it safe to list it in the rule? --j.
