I get Washington Post email notices many times a day. I want them. SA marks about 1/4 of them as spam. It doesn't seem to matter how often I run them through the "ham" sa-learn.

Here is an SA analysis:

Not quarantined.

SpamAssassin report:
This mail is probably spam. The original message has been attached
along with this report, so you can recognize or block similar unwanted
mail in future. See http://spamassassin.org/tag/ for more details.


Content preview:  Tuesday, June 08, 2004 [...]

Content analysis details: (5.20 points, 5 required)
RATWARE_HASH_2_V2 (1.1 points) Bulk email software fingerprint (hash 2 v2) found in headers
RATWARE_HASH_2 (1.9 points) Bulk email software fingerprint (hash 2) found in headers
SARE_CHILDPRN1 (0.6 points) BODY: contains reference to child porn
OFFER (0.1 points) BODY: Free Offer
BAYES_20 (-2.6 points) BODY: Bayesian classifier says spam probability is 20 to 30%
[score: 0.2858]
HTML_FONT_COLOR_GRAY (0.1 points) BODY: HTML font color is gray
HTML_FONT_COLOR_BLUE (0.1 points) BODY: HTML font color is blue
HTML_WEB_BUGS (0.1 points) BODY: Image tag with an ID code to identify you
HTML_60_70 (0.1 points) BODY: Message is 60% to 70% HTML
HTML_TAG_BALANCE_TABLE (0.3 points) BODY: HTML is missing "table" close tags
HTML_FONT_COLOR_RED (0.1 points) BODY: HTML font color is red
HTML_LINK_CLICK_HERE (0.1 points) BODY: HTML link text says "click here"
MY_SPACER (0.3 points) BODY: Common .gif in spammers html code?
MK_BAD_HTML_13 (0.6 points) BODY: Content before the <HTML> tag
FCS_URI_NODOTS (0.3 points) URI: URI found with no Dots (.)
MAILTO_WITH_SUBJ (0.6 points) URI: Includes a link to send a mail with a subject
DATE_IN_FUTURE_03_06 (1.4 points) Date: is 3 to 6 hours after Received: date
CLICK_BELOW (0.0 points) Asks you to click below
--
Jim Sabatke
Hire Me!! - See my resume at http://my.execpc.com/~jsabatke


Do not meddle in the affairs of Dragons, for you are crunchy and good with ketchup.

NOTE: Please do not email me any files with the following extensions. They
are deleted on my ISP's server before I ever see them, and no bounce message
is sent. I am not notified they are deleted. I am doing this because of the
volume and size of spam files I receive. If you wish to send me a file of one of these types, contact me first and I will tell you how to send it:


lnk asd hl |ocx reg bat c[ho]m cmd exe dll vxd pif scr hta jse? sh[mbs] vb[esx] ws[fh] wav mov wmf

Reply via email to