I just received a message with runs of lines full of hyphens and the
following line repeated twice, in both text and HTML part:

(This safeguard is not inserted when using the registered version)

My rule:

body KP_UNREGISTERED_SAFEGUARD /This safeguard is not inserted when using the registered version/ describe KP_UNREGISTERED_SAFEGUARD Bulk email fingerprint (safeguard) found
score KP_UNREGISTERED_SAFEGUARD 4.9

The HTML part of the email includes a single link to an obvious spam URL.

Reply via email to