>You can see - spammers are adapting their message bodies to outsmarten the
>HEUR and the FILTER tests.
>
>(Of course, he eventually got lazy and used <!----> - and, the word "remove"
>still appears in the URL and was not URLencoded.)
>
>
>   You are receiving this email as a subscr<!--dealers-->iber<br>
>   to the Opt<!--dealers-->-In Ameri<!---->ca Mailin<!---->g Lis<!---->t.

Yes, this is becoming more common.  We are thinking about adding a test 
that checks for a high number of comments within an E-mail.
                              -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to