spamassassin-users October 2010 archive
Main Archive Page > Month Archives  > spamassassin-users archives
spamassassin-users: Re: Spam US$350,000 not tripped

Re: Spam US$350,000 not tripped

From: Ned Slider <ned_at_nospam>
Date: Tue Oct 19 2010 - 21:41:38 GMT
To: users@spamassassin.apache.org

On 19/10/10 22:34, Dennis German wrote:
> I am surprised this plain text spam did not trip for US$350,000
> sa 3.2.4
>
> http://www.Real-World-Systems.com/mail/spam.un
>

It hits a stack of rules here (some are my own scoring) - looks like
it's time to upgrade to SA 3.3.1.

X-Spam-Report:
         * 6.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
         * [score: 0.9999]
         * 25 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
         * [148.208.170.3 listed in bb.barracudacentral.org]
         * 3.0 RCVD_IN_JMF_BL RBL: Relay listed in JunkEmailFilter
BLACK (bad)
         * [148.208.170.3 listed in hostkarma.junkemailfilter.com]
         * 1.8 DKIM_ADSP_DISCARD No valid author signature, domain
signs all mail
         * and suggests discarding the rest
         * 1.0 MISSING_HEADERS Missing To: header
         * 0.0 T_LOTS_OF_MONEY Huge... sums of money
         * 1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
         * 3.0 JM_SOUGHT_FRAUD_3 Body contains frequently-spammed text
patterns
         * 3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
         * 0.0 T_FILL_THIS_FORM Fill in a form with personal information
         * 1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud
(Nigerian 419)
         * 3.3 ADVANCE_FEE_5_NEW Appears to be advance fee fraud
(Nigerian 419)
         * 0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud
(Nigerian 419)
         * 0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
         * 0.9 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
         * 1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
         * 0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
         * 0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
         * 0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases
         * 0.5 MONEY_FRAUD_3 Lots of money and several fraud phrases
         * 0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
         * 0.5 FORM_FRAUD_3 Fill a form and several fraud phrases