On Mon, 19 Feb 2018, Kenneth Porter wrote:

On 2/19/2018 12:20 PM, John Hardin wrote:
Are those getting hits on SPOOFED_FREEM_REPTO_CHN?


No, not seeing that one. After enough training I eventually see it land in Bayes. The RBLs are starting to flag it.

X-Spam-Status: Yes, score=5.7 required=5.0 tests=BAYES_99,BAYES_999,
    FREEMAIL_FROM,RCVD_IN_BRBL_LASTEXT autolearn=no version=3.3.1

The subject and body are offering "image editing".

I get *tons* of those.

I'm wondering whether the freemail list is a bit stale, I'm seeing from addresses in .jp domains that look like they might be freemail...

        jmail.co.jp
        ezweb.ne.jp

Are these freemail?

        o2online.de
        wanadoo.fr


--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  People think they're trading chaos for order [by ceding more and
  more power to the Government], but they're just trading normal
  human evil for the really dangerous organized kind of evil, the
  kind that simply does not give a shit. Only bureaucrats can give
  you true evil.                                     -- Larry Correia
-----------------------------------------------------------------------
 3 days until George Washington's 286th Birthday

Reply via email to