[EMAIL PROTECTED] wrote:
> Typically the gobbledegook is ROT-13 of the email address
> so [EMAIL PROTECTED] becomes [EMAIL PROTECTED]
> 
> Try grep'ing your ham corpus for rzranxre as a fun experiment

Wow.  I had never tried that before.  I just did.  Not a huge number
of hits.  34 out of 5214 spams.  But several just interesting cases.
A few were just as you said, encodings for urls for tracking.  But
several were just for noise in the html as extra junk in the tags.
And several were visible trash in the rendered html.  Some were
"comments:" in the mail header.

I mean how is the spammer benefiting from things like this in the
message:

    <br>This message was sent to: Robert
    <br>You are subscribed as <i>[EMAIL PROTECTED]</i>
    <br>obo^cebhyk(pbz
    <br>

That is actually in a rendered part of the html.  (shakes head)  To
what purpose is that except to look ugly in their ad?

Only 9 out of the 34 spams with rot13 encoded mail addresses (out of
5214 total) were trackable by URL.

Bob

Reply via email to