From: "Jari Fredriksson" <[EMAIL PROTECTED]>
Sent: Sunday, 2008, July 27 09:03


What have people been using to curtail some of the new
disaster spam that's quite common now?


I usually don't use BAYES



Things like


Man killed by flying cocktail glass


A-rod dropped from team


Obama withdraws support for Israel

Content preview: McCain suffers sudden heart attack during flight to oil rig
  http://parapendiolestreghe.it/topnews.html [...]

Content analysis details:   (21.7 points, 5.0 required)

pts rule name              description
---- ---------------------- --------------------------------------------------
2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?147.236.238.35>]
1.9 URIBL_AB_SURBL         Contains an URL listed in the AB SURBL blocklist
                           [URIs: parapendiolestreghe.it]
0.5 URIBL_SC_SURBL         Contains an URL listed in the SC SURBL blocklist
                           [URIs: parapendiolestreghe.it]
5.0 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                           [score: 1.0000]
4.0 BOTNET                 Relay might be a spambot or virusbot
[botnet0.8,ip=147.236.238.35,rdns=autom-238-035.ladpc.co.il,maildomain=12go.nl,client,ipinhostname]
1.3 HTML_TAG_BALANCE_BODY  BODY: HTML has unbalanced "body" tags
0.0 HTML_MESSAGE           BODY: HTML included in message
1.5 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                           above 50%
                           [cf: 100]
0.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                           [cf: 100]
2.2 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
1.0 DIGEST_MULTIPLE        Message hits more than one network digest check

<< jdow
Subject: Chris Matthews dies of too many thrills running up his leg

You may have won a life time supply to a libido enhancement pill
or any of 41,632 other valuable prizes. To qualify all you need
do is send $51.99 cash to our processing house and install <link>
this software so that you can participate in our botnet to make
better use of the <gasp> UNUSED CPU cycles on your machine thus
making it more efficient.

....

I bet they'd find a few hundred thousand people idiot enough to send
in their money and install the botnet.

{O,o} <- too many silly pills today.

Reply via email to