I must have received this spam 12 times or more in the last 24 hours and even though its listed on the SURBL, spamassassin fails to match it against them. When I submit the spams to spamcop it parses the url everytime. SURBL seems to work on all other spams, just wondering if they have found a way to avoid spamassassin catching the URL.
Martin
Received: from localhost by marti.mine.nuwith SpamAssassin (version
3.0.2);Fri, 04 Mar 2005 19:41:42 +0000
From: "Valium $69.95, Cialis $89.95, Viagra $69.95, Phen $69.95, Soma
$59.95" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: **SPAM** RE: Refill
Date: Fri, 04 Mar 2005 14:44:12 -0500
Message-Id: <[EMAIL PROTECTED]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on marti.mine.nu
X-Spam-Level: **************
X-Spam-Status: Yes, score=14.2 required=5.0
tests=BAYES_99,HTML_90_100,HTML_IMAGE_ONLY_12,HTML_MESSAGE,RAZOR2_CF_RANGE_5
1_100,RAZOR2_CHECK,RCVD_IN_NERDS_KR autolearn=no
MIME-Version: 1.0
Content-Type: text/plain
X-UIDL: j4n!!]Si"!ICE!!2o0"!
Spam detection software, running on the system "marti.mine.nu", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
[EMAIL PROTECTED] for details.
Content preview: ONLINE PHARMACY Next-Day Shipping! Buy from the
Leading Online Pharmacy! [...]
Content analysis details: (14.2 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.2 HTML_90_100 BODY: Message is 90% to 100% HTML
2.9 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words
0.2 HTML_MESSAGE BODY: HTML included in message
0.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
[cf: 100]
4.9 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
2.4 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
3.5 RCVD_IN_NERDS_KR RBL: Received from South Korea
[222.109.74.199 listed in zz.countries.nerd.dk]
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
--- Begin Message ---
<<BMM1.JPG>>
--- End Message ---
