[antispam-f] Re: What have they got against Deborah anyway?
- From: Steven Pampling <steve.pampling@xxxxxxxxxxxxx>
- To: antispam@xxxxxxxxxxxxx
- Date: Wed, 22 Nov 2006 08:00:28 +0000 (GMT)
On 21 Nov, Harriet Bazley <lists@xxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
> On 21 Nov 2006 as I do recall, Steven Pampling wrote:
[Snip]
> > A question or two though - how many of the messages that shared that
> > tag were legitimate and what was the software in use?
> On a quick census, 100 (out of 231) found in the spamtrap and 3+17+18+11
> found in the inboxes of various users: the software in all cases being
> one of "Microsoft Outlook Express", "Microsoft Office Outlook", or
> "Microsoft Outlook CWS".
This is typical Outlook Message-ID content:
<9283BA18BE476E4092047448D2FB96FF0938C09C@xxxxxxxxxxxxxxxxxxxxxxxxx> an it
occurs often enough in various spam messages, but the group I'm talking
about have the distinctive $ $ markers
More importantly I've seen mails identical in content to what I recall of
the deboras but without the previous marker string. They do however have
the 1c70xxx$ where xxx is three hex digits that may (or may not) change.
Daves suggestion that these represent the date or time doesn't appear to
fit any known PC time encoding.
I will check my known OE users for similar markers but a random sample
didn't come up with anything similar.
--
Steve Pampling
Other related posts:
