[SURBL-Discuss] Stupid SPAM

Raymond Dijkxhoorn raymond at prolocation.net
Wed May 5 23:00:21 CEST 2004


Hi Jose-Marcio,

> Take a look at this SPAM :
> 
>     http://www.ensmp.fr/~martins/Prozac
> 
> Mainly, check the source.
> 
> The problem is that it comes with many, many URLs. At the beginning, 
> there are URLs needed by the SPAM itself. After, it puts many URLs with 
> font size equals to 1. Most of these last domains aren't spam... 8-)

Who cares, its picked up anyway, BIGEVIL_URI_RBL and WS_URI_RBL! :)

May  5 21:52:33 vmx80 MailScanner[31469]: Message i45Jp6FK030462 from 
212.127.254.140 (raymond at prolocation.net) to quicknet.nl is spam, 
SpamAssassin (score=19.963, required 5, BAYES_99 5.40, BIGEVIL_URI_RBL 
3.50, BIZ_TLD 0.10, CLICK_BELOW 0.10, DRUGS_ANXIETY 0.01, 
DRUGS_ANXIETY_EREC 1.00, DRUGS_DEPRESSION 0.01, DRUGS_DEPR_EREC 1.00, 
DRUGS_DIET 0.01, DRUGS_DIET_EREC 1.00, DRUGS_ERECTILE 1.00, 
DRUGS_ERECTILE_OBFU 1.50, DRUGS_MANYKINDS 1.00, DRUGS_MUSCLE 0.01, 
DRUGS_SLEEP 0.01, DRUGS_SLEEP_EREC 0.50, HTML_60_70 0.11, 
HTML_LINK_CLICK_HERE 0.10, HTML_MESSAGE 0.10, WS_URI_RBL 3.50)

I would say HOOOOOOORAY! Its doing a nice job catching them. 

Bye,
Raymond.



More information about the Discuss mailing list