You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Doug Block <li...@efastfunding.com> on 2004/09/16 23:43:47 UTC
FW: ****SPAM****(10.8) CONGRATULATIONS, US$500,000.00 FOR YOU
-----Original Message-----
From: MEGA MILLION [mailto:megamillionlotto@netscape.net]
Sent: Wednesday, September 15, 2004 1:44 PM
To: lists@efastfunding.com
Subject: ****SPAM****(10.8) CONGRATULATIONS, US$500,000.00 FOR YOU
Spam detection software, running on the system
"antispam.efastunding.com", has identified this incoming email as
possible spam. The original message has been attached to this so you
can view it (if it isn't spam) or label similar future email. If you
have any questions, see @@CONTACT_ADDRESS@@ for details.
Content analysis details: (10.8 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
2.4 MIME_BOUND_MANY_HEX Spam tool pattern in MIME boundary
0.0 FORGED_RCVD_HELO Received: contains a forged HELO
0.2 SUBJ_ALL_CAPS Subject is all capitals
1.0 MILLION_USD BODY: Talks about millions of dollars
1.6 UNCLAIMED_MONEY BODY: People just leave money laying around
0.0 US_DOLLARS_2 BODY: Mentions $$$ ($NNN.N m/USDNNN.N
m/US$NN.N m)
0.0 LINES_OF_YELLING BODY: A WHOLE LINE OF YELLING DETECTED
1.6 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence between 51 and
100
[cf: 100]
0.2 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.9 NIGERIAN_BODY1 Message body looks like a Nigerian spam
message 1+
0.8 AWL AWL: From: address is in the auto white-list
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus, or
confirm that your address can receive spam. If you wish to view it, it
may be safer to save it to a file and open it with an editor.
You have to love it when the spammers scan the SA-list on the web and
then spam my SpamAssassin list account.