here is another email i recieved that was tagged as SPAM... I'm hoping
someone sees something that can give negative points to this guy .. this is
my realtor telling me about two houses...
I'm just wondering if anyone can see a pattern in this email to knock down
the score a bit... It was not a spam, and just _barely_ broke the barrier.
I'd rather modify/add rules than change the default threshold of 5. I've
copied the exact email as I received it into this message (with email
addresses obfuscated)
---BEGIN---
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 5750 invoked by uid 1010); 17 Oct 2002 11:20:01 -0000
Received: from unknown (HELO qmail.nntx.net) (64.115.47.18)
by goofy.nntx.net with SMTP; 17 Oct 2002 11:20:01 -0000
Received: (qmail 27277 invoked by uid 1010); 17 Oct 2002 11:20:01 -0000
Received: from unknown (HELO dataserver.trendmls.com) (198.31.4.124)
by qmail.nntx.net with SMTP; 17 Oct 2002 11:20:01 -0000
Message-ID: <[EMAIL PROTECTED]>
X-EM-Version: 6, 0, 1, 0
X-EM-Registration: #0060620010741F003840
X-Priority: normal
Reply-To: [EMAIL PROTECTED]
Return-Path: [EMAIL PROTECTED]
Return-Errors-To: [EMAIL PROTECTED]
From: "Firstname Lastname" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: *****SPAM***** MLS 4081253 & 4132168
Date: Thu, 17 Oct 2002 07:20:25 -0400
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Status: Yes, hits=5.3 required=5.0
tests=CLICK_BELOW,CLICK_HERE_LINK,EXCUSE_15,PRIORITY_NO_NAME,
SPAM_PHRASE_08_13,SUBJ_ALL_CAPS,SUBJ_HAS_UNIQ_ID,UNSUB_PAGE
version=2.43
X-Spam-Flag: YES
X-Spam-Level: *****
X-Spam-Checker-Version: SpamAssassin 2.43 (1.115.2.20-2002-10-15-exp)
X-Spam-Prev-Content-Type: multipart/alternative;
boundary="----=_NextPart_84815C5ABAF209EF376268C8"
SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam. The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM:
SPAM: Content analysis details: (5.30 hits, 5 required)
SPAM: EXCUSE_15 (0.6 points) BODY: Claims to be legitimate email
SPAM: CLICK_BELOW (0.3 points) BODY: Asks you to click below
SPAM: SPAM_PHRASE_08_13 (1.4 points) BODY: Spam phrases score is 08 to 13
(medium)
SPAM: [score: 11]
SPAM: CLICK_HERE_LINK (0.3 points) BODY: Tells you to click on a URL
SPAM: UNSUB_PAGE (0.1 points) URI: URL of page called "unsubscribe"
SPAM: SUBJ_HAS_UNIQ_ID (1.1 points) Subject contains a unique ID
SPAM: SUBJ_ALL_CAPS (0.5 points) Subject is all capitals
SPAM: PRIORITY_NO_NAME (1.0 points) Message has priority setting, but no
X-Mailer
SPAM:
SPAM: -------------------- End of SpamAssassin results ---------------------
------=_NextPart_84815C5ABAF209EF376268C8
Content-type: text/plain; charset=US-ASCII
Jeremy,<br> I will try to get answers to your questions ASAP. <br>
Jim
The web link below requires one of the following browsers:
- Internet Explorer 4.0 and above
- Netscape 6.0 and above
- Mozilla 1.0 and above
Copy the following URL into your browser's address bar:
http://MLScust.trendmls.com/Ecard/Ecard.asp?DM=CV&i=33333&e=55&k=13%2E837
**This link will remain active for 90 days
***This link may be viewed up to 10 times.
----------------------------------------------------------------------------
----------------------------------------------------------------
This is not unsolicited email.
If you wish to block further messages from this agent,
please copy the following URL into you browser's address bar:
http://MLScust.trendmls.com/Email_Unsubscribe.asp?e=foo%40domain%2Ecom&a=600
23493
------=_NextPart_84815C5ABAF209EF376268C8
Content-Type: text/html; charset=US-ASCII
<html><body>
Jeremy,<br> I will try to get answers to your questions ASAP. <br>
Jim<br><br>
The web link below requires one of the following browsers:<br>
- Internet Explorer 4.0 and above<br>
- Netscape 6.0 and above<br>
- Mozilla 1.0 and above<br><br>
<a
href=http://MLScust.trendmls.com/Ecard/Ecard.asp?DM=CV&i=222234&e=532&k=14%2
E234>Click Here to View Real Estate Listings</a><br><br>If your email client
does not show a link above, simply copy the following URL into your
browser's address bar:
<br><br>http://MLScust.trendmls.com/Ecard/Ecard.asp?DM=CV&i=233998&e=540&k=1
4%2E937
<br><br>**This link will remain active for 90 days
<br>***This link may be viewed up to 10 times.
<br></body></html><br><br><hr>This is not unsolicited email.<br>If you wish
to block further messages from this agent please click <a
href="http://MLScust.trendmls.com/Email_Unsubscribe.asp?e=foo%40domain%2Ecom
&a=60000393">here</a><br><br>If the above link does not work or is missing,
simply copy<br>the following URL into your browser's address
bar:<BR>http://MLScust.trendmls.com/Email_Unsubscribe.asp?e=foo%40domain%2Ec
om&a=60000393
------=_NextPart_84815C5ABAF209EF376268C8--
---END---
-------------------------------------------------------------------
Jeremy Kister
www.jeremykister.com
PGP: http://www.jeremykister.com/jeremy/public_key.asc
-------------------------------------------------------------------
-------------------------------------------------------
This sf.net email is sponsored by:
Access Your PC Securely with GoToMyPC. Try Free Now
https://www.gotomypc.com/s/OSND/DD
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
