Re: unusual new pump-and-dump campaign ("RCHA")

[Axb]

On 04/09/2014 06:45 PM, Axb wrote:

On 04/08/2014 08:11 PM, Axb wrote:

All are getting thru SA, however most are hitting:
     HTML_IMAGE_ONLY_28 or HTML_IMAGE_ONLY_32
     DC_GIF_UNO_LARGO

ifplugin Mail::SpamAssassin::Plugin::ImageInfo
body        AXB_FAPIK    eval:image_size_exact('gif','307','533')
describe    AXB_FAPIK    Found A Pic I Know
endif

ifplugin Mail::SpamAssassin::Plugin::ImageInfo
body        AXB_FAPIK1    eval:image_size_exact('gif','248','522')
score       AXB_FAPIK1    1.0
endif