I have been seening a fair amount of the following in spam:
X-Authentication-Warning: ANdhzoll05
X-Authentication-Warning: APdqfqaq60
X-Authentication-Warning: BWqkqlko47
X-Authentication-Warning: CZCHqugwa81
X-Authentication-Warning: DNLKhqcrzpb96
X-Authentication-Warning: HMINlhcja72
X-Authentication-Warning: HRIYTadqpu51
X-Authentication-Warning: JXDlejvyk91
X-Authentication-Warning: KDJVqhrtxo69
X-Authentication-Warning: MXIUIialwlig69
X-Authentication-Warning: NZHhrfcrdi77
X-Authentication-Warning: OHPDXqukkoes76
X-Authentication-Warning: SNQDmvxxc91
X-Authentication-Warning: SVRJblyvf81
X-Authentication-Warning: UDEAdrsolo44
X-Authentication-Warning: UMPAjetlp08
X-Authentication-Warning: VQEAuldkdm43
X-Authentication-Warning: VZMIilvlp49
X-Authentication-Warning: WGERClpsxk37
X-Authentication-Warning: XCBPscmstkq49
X-Authentication-Warning: YEyqvmdi51
It appears to be uppercase 2 to 5, lowercase 5 to 7, & 2 digits
header CSL_X_AUTH_WARN_1 exists:X-Authentication-Warning
describe CSL_X_AUTH_WARN_1 X-Message-Info header found
score CSL_X_AUTH_WARN_1 0.5
header CSL_X_AUTH_WARN_2 X-Authentication-Warning =~
/\b[A-Z]{2,5}[a-z]{5,7}[0-9]{2}\b/
describe CSL_X_AUTH_WARN_2 X-Authentication-Warning: Contains Spam
Signature.
score CSL_X_AUTH_WARN_2 4.5
- Michael Hogsett
