> ... go to WWW EVIL ORG for new meds ... > > and > > ... digging through the WWW HE SAW this link ... > Both IMO should be caught and given a positive score. I've never seen legitimate mail containing URLs written this way.
> And what about URLs that don't start with WWW, like > > http:// meds spammer org > That should be scored positive too, for the same reason. I'm giving such munged URLs a score of 1.0. In addition I use metas to give the score a boost if they appear on a technical mail list or in combination with mis-spellings that are common in spam or words like viagra. Martin
