[anti-abuse-wg] *TELUS Detected Spam* proberry.de
Florian Weimer fw at deneb.enyo.de
Tue Jan 29 08:34:25 CET 2013
* Wilfried Woeber: > Arnold wrote: >> reviewing the header source might give you enough information about >> who actually sent the SPAM. It's some sort of botnet with readily apparent coordination across multiple egress IP addresses. > ...and looking at the message in text mode, instead of the "fancy" html > rendering, may give you a clue about the real URL you are supposed to > visit. ;-) These messages are plain text (even ASCII), and the URL is unobfuscated. They really do not make much sense.