Domain Name with Non-Displaying Characters
- jkclements
- Rattled Rabbit
Post
Domain Name with Non-Displaying Characters
I am receiving spam from variants of the .email domain which have embedded non-displaying characters so that a wildcard blacklist expression does not catch them. This is an example: zuryezxwqdjmmytasierrahiker@operature.email. Is there a way to show these non-displaying characters?
- rusticdog
- Firetrust Monkey
Post
Re: Domain Name with Non-Displaying Characters
Perhaps try creating a Filter, where the FROM field CONTAINS, PLAIN TEXT .email
- jkclements
- Rattled Rabbit
Post
Re: Domain Name with Non-Displaying Characters
Thanks for the suggestion, no luck. The bogus character is an ASCII 05, which is a control character, "ENQ". I tried this wildcard, which does not work: *@*.*e*m*a*i*l*. It must be that the * pattern matching character does not match on non-displaying ASCII characters.
- rusticdog
- Firetrust Monkey
Post
Re: Domain Name with Non-Displaying Characters
How about then if the FROM field, CONTAINS, REGEX, \x05
http://www.regexlab.com/en/deelx/syntax/bas_sesc.htm
http://www.regexlab.com/en/deelx/syntax/bas_sesc.htm