You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by jdow <jd...@earthlink.net> on 2007/08/11 09:06:40 UTC
I think we're winning....
This made it past my filters. But it's unreadable gibberish.
===8<---
(H)(u)(g)[e] (N){e}(w)[s] To Im,pact {C}[Y]<T>{V}
Chin*a You+TV <C>[o]{r}(p)<.>
Sym^bol: <C>(Y)(T)<V>
We (h)[a]{v}{e} alre+ady {s}(e)<e>(n) CYTV'`s marke*t impa,ct be,fore
cli*mb-ing to <o>{v}<e><r> $2.#00 [w][i](t){h} [n]{e}(w)[s](.)
Pres-s Rel,ease:
C*hina Y_ouTV's CnBo_o {W}(e)<b> <S>{i}<t><e> Ran_ks <N><o>{.}[1] on
Mic+`rosoft (L)[i]<v>[e] Sea_rch Engin.e
CnB_oo Tra_ffic Incre_ase*s (4)(9)<%> (O)[v]<e>{r} <T><w>{o} Mon,ths
{R}(e)(a)(d) [t]{h}[e] n`ews, thin-k a*bout (t)[h]<e> i-mpact, and
<j>(u){m}[p] on <t>(h){i}{s} fir+st thin.g To-^morrow mo-rni#ng! $0.4*2 is
a {g}<i>{f}[t] at [t]<h>{i}<s> pr-ice.`....
Do {y}(o)<u>(r) homewo^r,k [a]{n}<d> w.atch {t}(h)<i><s> tr-ade Monda_y
mo+rning.
===8<---
I wonder why they bother.
{^_-}
Re: I think we're winning....
Posted by Jari Fredriksson <ja...@iki.fi>.
Content preview: [H]<u>{g}(e) {N}[e][w](s) To Imp^act [C]<Y>[T](V) Chin,a YouT*V
{C}(o)<r><p>{.} Symbo_l: [C][Y](T)<V> [...]
Content analysis details: (12.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 STOX_REPLY_TYPE STOX_REPLY_TYPE
3.5 AXB_XMID_1212 AXB_XMID_1212
2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?200.127.236.21>]
3.5 FRT_PRICE BODY: ReplaceTags: Price
2.9 FRT_SYMBOL BODY: ReplaceTags: Symbol
1.0 BAYES_60 BODY: Bayesian spam probability is 60 to 80%
[score: 0.7774]
Re: I think we're winning....
Posted by jdow <jd...@earthlink.net>.
From: "Marc Perkel" <ma...@perkel.com>
>
> jdow wrote:
>> This made it past my filters. But it's unreadable gibberish.
>>
>>
>> I wonder why they bother.
>>
>>
>
> Good point. The fact that they have to resort to gibberish, image spam,
> pdf spam all of which is far harder than clocking on a link shows we are
> winning. Their return in the amount of spam they send has to be rather
> small.
At least SOMEBODY got my point. I was laughing at the silly thing.
{^_^}
Re: I think we're winning....
Posted by Marc Perkel <ma...@perkel.com>.
jdow wrote:
> This made it past my filters. But it's unreadable gibberish.
>
>
> I wonder why they bother.
>
>
Good point. The fact that they have to resort to gibberish, image spam,
pdf spam all of which is far harder than clocking on a link shows we are
winning. Their return in the amount of spam they send has to be rather
small.
Re: I think we're winning....
Posted by jdow <jd...@earthlink.net>.
From: "Nigel Frankcom" <ni...@blue-canoe.com>
On Sat, 11 Aug 2007 00:06:40 -0700, "jdow" <jd...@earthlink.net> wrote:
>This made it past my filters. But it's unreadable gibberish.
>
>===8<---
>(H)(u)(g)[e] (N){e}(w)[s] To Im,pact {C}[Y]<T>{V}
>
>
>
>Chin*a You+TV <C>[o]{r}(p)<.>
>
>Sym^bol: <C>(Y)(T)<V>
>
>
>
>We (h)[a]{v}{e} alre+ady {s}(e)<e>(n) CYTV'`s marke*t impa,ct be,fore
>cli*mb-ing to <o>{v}<e><r> $2.#00 [w][i](t){h} [n]{e}(w)[s](.)
>Pres-s Rel,ease:
>C*hina Y_ouTV's CnBo_o {W}(e)<b> <S>{i}<t><e> Ran_ks <N><o>{.}[1] on
>Mic+`rosoft (L)[i]<v>[e] Sea_rch Engin.e
>
>CnB_oo Tra_ffic Incre_ase*s (4)(9)<%> (O)[v]<e>{r} <T><w>{o} Mon,ths
>
>
>
>
>{R}(e)(a)(d) [t]{h}[e] n`ews, thin-k a*bout (t)[h]<e> i-mpact, and
>
><j>(u){m}[p] on <t>(h){i}{s} fir+st thin.g To-^morrow mo-rni#ng! $0.4*2 is
>a {g}<i>{f}[t] at [t]<h>{i}<s> pr-ice.`....
>
>
>Do {y}(o)<u>(r) homewo^r,k [a]{n}<d> w.atch {t}(h)<i><s> tr-ade Monda_y
>mo+rning.
>===8<---
>
>I wonder why they bother.
>
>{^_-}
I had a load of those caught last night, annoyingly I've just cleared
out spam so I'm not sure which ruleset was primarily responsible for
catching them. I'll post when I get more through.
<< Note that I am not worried that this got through. I *KNOW* why that
<< happened. I just found it humorous that the spammer had to go to such
<< extremes that decoding his message takes more time that any reader is
<< likely to spend. It was a pointless bit of noise.
{^_-}
Re: I think we're winning....
Posted by Nigel Frankcom <ni...@blue-canoe.com>.
On Sat, 11 Aug 2007 00:06:40 -0700, "jdow" <jd...@earthlink.net> wrote:
>This made it past my filters. But it's unreadable gibberish.
>
>===8<---
>(H)(u)(g)[e] (N){e}(w)[s] To Im,pact {C}[Y]<T>{V}
>
>
>
>Chin*a You+TV <C>[o]{r}(p)<.>
>
>Sym^bol: <C>(Y)(T)<V>
>
>
>
>We (h)[a]{v}{e} alre+ady {s}(e)<e>(n) CYTV'`s marke*t impa,ct be,fore
>cli*mb-ing to <o>{v}<e><r> $2.#00 [w][i](t){h} [n]{e}(w)[s](.)
>Pres-s Rel,ease:
>C*hina Y_ouTV's CnBo_o {W}(e)<b> <S>{i}<t><e> Ran_ks <N><o>{.}[1] on
>Mic+`rosoft (L)[i]<v>[e] Sea_rch Engin.e
>
>CnB_oo Tra_ffic Incre_ase*s (4)(9)<%> (O)[v]<e>{r} <T><w>{o} Mon,ths
>
>
>
>
>{R}(e)(a)(d) [t]{h}[e] n`ews, thin-k a*bout (t)[h]<e> i-mpact, and
>
><j>(u){m}[p] on <t>(h){i}{s} fir+st thin.g To-^morrow mo-rni#ng! $0.4*2 is
>a {g}<i>{f}[t] at [t]<h>{i}<s> pr-ice.`....
>
>
>Do {y}(o)<u>(r) homewo^r,k [a]{n}<d> w.atch {t}(h)<i><s> tr-ade Monda_y
>mo+rning.
>===8<---
>
>I wonder why they bother.
>
>{^_-}
I had a load of those caught last night, annoyingly I've just cleared
out spam so I'm not sure which ruleset was primarily responsible for
catching them. I'll post when I get more through.
Kind regards
Nigel
Re: I think we're winning....
Posted by "John D. Hardin" <jh...@impsec.org>.
On Sat, 11 Aug 2007, jdow wrote:
> This made it past my filters. But it's unreadable gibberish.
>
> ===8<---
> (H)(u)(g)[e] (N){e}(w)[s] To Im,pact {C}[Y]<T>{V}
> We (h)[a]{v}{e} alre+ady {s}(e)<e>(n) CYTV'`s marke*t impa,ct be,fore
> cli*mb-ing to <o>{v}<e><r> $2.#00 [w][i](t){h} [n]{e}(w)[s](.)
> Pres-s Rel,ease:
> C*hina Y_ouTV's CnBo_o {W}(e)<b> <S>{i}<t><e> Ran_ks <N><o>{.}[1] on
> Mic+`rosoft (L)[i]<v>[e] Sea_rch Engin.e
describe PAREN_OBFUSC_01 parentheses obfuscated
body PAREN_OBFUSC_01 /(?:[(<{[][A-Za-z0-9][\)>}\]]\s?){8}/
score PAREN_OBFUSC_01 0.5
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
The real opiate of the masses isn't religion; it's the belief that
somewhere there is a benefit that can be delivered without a
corresponding cost. -- Tom of "Radio Free NJ"
-----------------------------------------------------------------------
4 days until The 62nd anniversary of the end of World War II