Hello Mr,

Wednesday, February 22, 2006, 5:56:42 PM, you wrote:


> I made it available here for anyone who wants the full deal.

> http://thebatchfile.com:8080/junk/spamemail/

> This one is labled with ***spam*** cause I use ASSP and this email was
> in the catch all account, but you can clearly see its contruction.

Yeah, it's a general spammer trick...
They use hidden HTML tags to break up the word, so that "straight"
word filters do not pick it up...
If you actually look at the source it shows:

<DIV><FONT face=Arial size=2>C<span
style="
float: 
right"
>a</span>I<span 
style="
float: 
right"
>j</span>A<span 
style="
float: 
right"
>b</span>L<span 
style="
float: 
right"
>s</span>I<span 
style="
float: 
right"
>z</span>S<span 
style="
float: 
right"
>r</span>&nbsp;<span

which reads CIALIS if you read between the lines... Obviously your
email client copies the characters between the <span></span> as normal
characters, hence the junk... I can see the characters between the
span tags on the right of the screen on that page, so I presume that
the span and style float right makes it to "float" to the right,
leaving the rest behind... Neat trick...

Try and "bounce" the message directly to my address, (Copy and paste,
as reply will send to list...) and check what
happens. I want to see what spamassassin says. If it gets seen as
full spam, it will be rejected outright, otherwise it will pass it on
to me and I can see what "rating" it gets.

Do note that you will have to pass the grey-listing process first...

Obviously the bouncing waters down spamassassin, as it would look at
many more things, so it's not a true reflection...

-- 
Best regards,
 Jorn                            mailto:[EMAIL PROTECTED]

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to