You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Doug Block <li...@efastfunding.com> on 2004/09/16 23:43:47 UTC

FW: ****SPAM****(10.8) CONGRATULATIONS, US$500,000.00 FOR YOU

-----Original Message-----
From: MEGA MILLION [mailto:megamillionlotto@netscape.net] 
Sent: Wednesday, September 15, 2004 1:44 PM
To: lists@efastfunding.com
Subject: ****SPAM****(10.8) CONGRATULATIONS, US$500,000.00 FOR YOU


Spam detection software, running on the system
"antispam.efastunding.com", has identified this incoming email as
possible spam.  The original message has been attached to this so you
can view it (if it isn't spam) or label similar future email.  If you
have any questions, see @@CONTACT_ADDRESS@@ for details.


Content analysis details:   (10.8 points, 5.0 required)

 pts rule name              description
---- ----------------------
--------------------------------------------------
 2.4 MIME_BOUND_MANY_HEX    Spam tool pattern in MIME boundary
 0.0 FORGED_RCVD_HELO       Received: contains a forged HELO
 0.2 SUBJ_ALL_CAPS          Subject is all capitals
 1.0 MILLION_USD            BODY: Talks about millions of dollars
 1.6 UNCLAIMED_MONEY        BODY: People just leave money laying around
 0.0 US_DOLLARS_2           BODY: Mentions $$$ ($NNN.N m/USDNNN.N
m/US$NN.N m)
 0.0 LINES_OF_YELLING       BODY: A WHOLE LINE OF YELLING DETECTED
 1.6 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence between 51 and
100
                            [cf: 100]
 0.2 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 2.9 NIGERIAN_BODY1         Message body looks like a Nigerian spam
message 1+
 0.8 AWL                    AWL: From: address is in the auto white-list

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus, or
confirm that your address can receive spam.  If you wish to view it, it
may be safer to save it to a file and open it with an editor.




You have to love it when the spammers scan the SA-list on the web and
then spam my SpamAssassin list account.