rich...@buzzhost.co.uk wrote:
> Anyone else seeing these today? Or seen them recently?
>
> http://pastebin.com/m4e25954f
>
> score=0.1
>
> Subject was real neat:
> Subject: =?ISO-8859-1?B?WW91IFdvbiCjMQ==?=,750,000.00 GBP
>
> You Won £750,000.00 GBP {surprised this did not bite}
>
>
> End of the message is missing on the five of them that I've had
> (not a paste error).
Interesting. I'm also surprised that doesn't hit one of the many
large-sum money checks. Scored 5.2 for me (bayes_99 plus a few custom
rules of questionable utility).
Content analysis details: (5.2 points, 5.0 required)
pts rule name description
---- ------------------ -------------------------------------
3.9 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 0.9998]
0.6 KHOP_SC_TOP_CIDR8 Relay listed in SpamCop top 4 IP/8 CIDRs
-0.0 SPF_PASS SPF: sender matches SPF record
0.8 FROM_NOT_REPLY From: and Reply-To: have different domains
0.0 KHOP_NO_FULL_NAME Sender does not have both First and Last names
0.0 KHOP_NEW_TO_ME New sender in new thread
Note that FROM_NOT_REPLY and KHOP_NEW_TO_ME are non-published rules.
The former requires a plugin. KHOP_NO_FULL_NAME (now in khop-lists)
is zeroed and KHOP_SC_TOP_CIDR8 (from khop-sc-neighbors) is arguably
unfair given its broad range (though it certainly did its work here).
