[ I'm still seeking examples... ]

Lars Hansson <[EMAIL PROTECTED]> writes:

> Huh?? What the? Did I read that right?
> They're /actively/ trying to get their own mails tagged as spam or ignored?
> That must be a new low.

It appears the goal is to be ignored.  Tagged as spam, I'm not as sure.

networksolutions.com before:

  http://www.azc.com/htmls/faqs/nsiauth.txt
  http://www.opensrs.org/archives/discuss-list/0106/0015.html

networksolutions.com now:

  http://www.politechbot.com/p-03729.html
  http://bugzilla.spamassassin.org/showattachment.cgi?attach_id=344

register.com now:

  http://bugzilla.spamassassin.org/showattachment.cgi?attach_id=345

Using those two messages (I'm still missing headers and don't have the
original emails, so there may be additional rules that match), the new
confirmation emails will always trigger at least these rules:

networksolutions.com:

  CLICK_BELOW,DEAR_SOMEBODY,FREE_ACCESS,NO_REAL_NAME,SPAM_PHRASE_08_13
  total = 3.725

register.com:

  CLICK_BELOW,NO_REAL_NAME,ONLY_COST,SPAM_PHRASE_13_21
  total = 3.176

And the STATISTICS for those rules?

OVERALL%   SPAM% NONSPAM%     S/O    RANK   SCORE  NAME
 202804    33136   169668    0.16    0.00    0.00  (all messages)
100.000   16.339   83.661    0.16    0.00    0.00  (all messages as %)
  0.099    0.531    0.014    0.97    0.60    0.70  FREE_ACCESS
  3.882   19.683    0.796    0.96    0.57    1.39  SPAM_PHRASE_13_21
  9.854   45.552    2.883    0.94    0.53    0.30  CLICK_BELOW
  1.644    7.412    0.517    0.93    0.53    0.21  ONLY_COST
  5.649   20.407    2.767    0.88    0.47    1.32  SPAM_PHRASE_08_13
 16.318   50.254    9.690    0.84    0.44    1.27  NO_REAL_NAME
  2.644    5.535    2.079    0.73    0.38    0.13  DEAR_SOMEBODY

If I had to guess, they're probably just trying to get people to delete
the messages as advertising rather than targetting anti-spam systems,
although perhaps they're really smart and seeking plausible deniability
by avoiding the really high-end rules.

Dan


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to