If only they would ALL use yadayada somewhere in their links....
 
:-)
 
-d
----- Original Message -----
From: Darin Cox
Sent: Sunday, October 31, 2004 2:25 PM
Subject: Re: [Declude.JunkMail] IP link detection?

Seem like a quick filter to write...just check for "yadayada".  "ipaddress" might be used too often in legit mail, but less should use "yadayada".  You might even try the combo..."ipaddress/yadada"...very little legit mail should use that combo...
 
<grin>...a little sleepy Sunday afternoon humor...

Darin.
 
 
----- Original Message -----
Sent: Sunday, October 31, 2004 2:00 PM
Subject: [Declude.JunkMail] IP link detection?

Hi,
 
Does anyone have a filter that detects links that are of the form http://ipaddress/yadayada?
 
Virtually all the phishing emails that I've seen recently use this form. Since it seems unlikely that a significant number of senders would use a link to an IP address legitimately.
 
-Dave Doherty
 Dataworld, Inc.
 Skywaves, Inc.
 301-652-8822 x209

Reply via email to