>The ---system information--- part is always present too, I've had a rule for
>that one for about 2 weeks. Last week this phrase was appearing in the
>Adipren720 spams.
Er, no. I've got about 50 of these things over the last month and was looking
at them, and only about 30% have the --- system information --- line.
Worse, it is obvious that spammers read the SA newgroup. Last night I got a
spam with a subject of "message subject" that, guess what, informaed me that I
was prequalified for a mortgage. It was also missing "Hello," as the first
line, but the second line was intact. Also, the 'remove' information that
usually declares a random Group name and a random PO box in Springfield, OH, is
now using a different city and zip code. Although the format is the same.
Most common features of these things (at least up until last night):
A remove block specifying "Xxx Group", Box NNN, SpringField OH. About 50% of
the time.
"Hello,\n etc..." 100% of the time.
Plain text: 60% of the time
Subject "$nnnn": 100% of the time until last night.
Second line after 'prequalified' line often quotes "$300,000", but I've seen
other values.
About 4 common web sites for these. Don't recall them at the moment and I'm
not where I can check.
Loren
