Re: Anyone have a rule to detect "Dear xxx" in the body of the message where the "To:" address is xxx@domain?
| Newsgroups | gmane.mail.spam.spamassassin.general |
|---|---|
| Message-ID | <[email protected]> |
On 7/18/24 5:10 AM, Grant Taylor via users wrote:
> On 7/17/24 18:04, Matija Nalis wrote:
>> I.e. would you consider it to be significantly less likely to be spam if it contained "Dear Elizabeth," while being addressed to "mark@domain" instead of to "elizabeth@domain" ?
>
> I've seen quite a bit of spam that opens message bodies with:
>
> <salutation> <local part>
>
> Where <salutation> is "Dear" or some other greeting, often language specific and <local part> is the local part of the email address.
>
> Something like the following is probably a good indication that it's spam:
>
> --8<--
> Dear ux37932,
>
> I've missed talking to you, what is your opinion of <URL>? Please check it out and let me know what you think.
> -->8--
>
> If there was any doubt about the paragraph, the "ux37932" makes it quite evident to a human that the name in the salutation is not real. This is ESPECIALLY true when the name in the salutation is identical, byte for byte, including case, as the local part of the email address.
>
do you intend to have a rule like this one ?
header __TO_NAME To:name =~ /(?<TO_NAME>.*)/
body DEAR_NAME /Dear %{TO_NAME}/
Giovanni
OpenPGP_signature.asc
(application/pgp-signature, 840 B)
-----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEEqg3TnG6R3qYMxl94+r7qCYlyWOUFAmaaQTUFAwAAAAAACgkQ+r7qCYlyWOV0 uA/8C7nPnyWV0X3oQkqoJDAZki8DvA829T/fCnNjWnIdc17U7Dl+9Q62QmFg46hnt1o3mXug7yEp av9B2Jqf6RMdpHpSPWdAmdkjAlDbtCQJh4OFY+BVYo3uTMK9XV8A0H8i9aoy6svjq4tTipZbp9uj +hbZBLh5NjnHPrKGNw5+sroT4ig86AdyvQ3pyC3SRFAUDD7J5fp8C0XQZyHzVxzXo/s9Y3dBNv93 bHx11JCR9cBpcJMiI7rsty+vkgoyOj3eWJRroA29jWJ9a1w7uKhrxhv7q7L1ZOnzT6IdOgr2uOmY xY6YSBaGmADmFA4ovZpW+QlaPdCLCoo2eN16S5xq4ycDGPPGtA7GThPiDtEmFnS+oTJSreCXbapc BHXZ0my8GiXl11XpvCs9+KxiJ/lvFr3/iP3z3MJXanGFbb4tzLdRsWwuhDBcnBFo8fifzO3A8q8n RpxCmQz6yA3+H3L/56RBOsiLy+llVF8kU6ywtllqTl/cNTH0KjnqHKG0a9Kom6e33fs+5+Ht/mTi n0YBc1DJEX1bXvv7lk64qKSDHVQtUCipdLqnIylhJ4BsPhCdAuK53A1HcCv205ZGnVmMN9jyVagE LIXo5YaqCa0kCJgOMGkFBtGlILlVjLbviVXQ8PX9Z+gQFbHfC+WPeNXrgUBwQok0i3sChXSf3nQs J+Y= =Ymwu -----END PGP SIGNATURE-----