* SPAM * Xnote.com considers this message as SPAM *** RE: Message that conitinually gets bypassed

[Alan Fullmer]

Spam detection software, running on the system "vibe.xnote.com", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  Here you go, attached are two. Keep in mind, if I were 
  to forward this mail to myself, it would get flagged. It just seems to 
  be getting by when they send it. 

Content analysis details:   (9.9 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 1.7 MSGID_FROM_MTA_ID      Message-Id for external message added locally
 0.4 SARE_HOMELOAN          BODY: Home mortgage stuff
 1.0 MIME_HTML_MOSTLY       BODY: Multipart message mostly text/html MIME
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.0 BAYES_50               BODY: Bayesian spam probability is 40 to 60%
                            [score: 0.5000]
 0.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
                            [cf: 100]
 0.0 HTML_90_100            BODY: Message is 90% to 100% HTML
 1.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 3.1 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [67.108.238.3 listed in sbl-xbl.spamhaus.org]
 0.4 URIBL_AB_SURBL         Contains an URL listed in the AB SURBL blocklist
                            [URIs: mrratenow.com droppedr8z.com]
 1.5 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
                            [URIs: mrratenow.com droppedr8z.com]
 3.2 URIBL_OB_SURBL         Contains an URL listed in the OB SURBL blocklist
                            [URIs: mrratenow.com droppedr8z.com]
 4.3 URIBL_SC_SURBL         Contains an URL listed in the SC SURBL blocklist
                            [URIs: droppedr8z.com]
-7.3 AWL                    AWL: From: address is in the auto white-list

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

--- Begin Message ---

Here you go, attached are two.

Keep in mind, if I were to forward this mail to myself, it would get
flagged.   It just seems to be getting by when they send it.

-----Original Message-----
From: Robert Menschel [mailto:[EMAIL PROTECTED] 
Sent: Thursday, May 26, 2005 6:53 PM
To: Alan Fullmer
Cc: users@spamassassin.apache.org
Subject: Re: Message that conitinually gets bypassed

Hello Alan,

Thursday, May 26, 2005, 9:20:51 AM, you wrote:

AF> I have this message that continually gets by Spam Assassin.  The headers
AF> have no indication that SA has even touched it.   I will post the
headers
AF> below, as well as the message.

Unfortunately, you posted the text, and you posted the headers, but
you didn't post the message. Your text says,
> visit our Website
and there's no link anywhere for the sucker to use. We are missing
some very important information, and can't debug your problem properly
without it.

If you had sent the message as a message, attached (forward as
attachment), I'd be able to save your message to my system, run SA
against them, and do an analysis.  I can't do that the way you cut and
pasted the message.

See the just updated
http://wiki.apache.org/spamassassin/DoYouWantMySpam for some other
ideas.

Bob Menschel

--- Begin Message ---

Dear Homeowner,   You have been pre-approved for a $402,000 Home Loan at a 3.45% Fixed Rate. This offer is being extended to you unconditionally and your credit is in no way a factor.   To take Advantage of this Limited Time opportunity all we ask is that you visit our Website and complete the 1 minute post Approval Form.   Enter Here   Sincerely,   Esteban Tanner Regional CEO                                         Tuuuuurn oooooff notiiificatiiiiions heeeeeeere.

--- End Message ---

--- Begin Message ---

Dear Homeowner,   You have been pre-approved for a $402,000 Home Loan at a 3.45% Fixed Rate. This offer is being extended to you unconditionally and your credit is in no way a factor.   To take Advantage of this Limited Time opportunity all we ask is that you visit our Website and complete the 1 minute post Approval Form.   Enter Here   Sincerely,   Esteban Tanner Regional CEO                                         Tuuuuurn oooooff notiiificatiiiiions heeeeeeere.

--- End Message ---

--- End Message ---