Hi, I get the following hits: Content analysis details: (19.1 points, 5.0 required)
pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low trust [98.139.91.205 listed in list.dnswl.org] 0.5 FREEMAIL_FROM Sender email is freemail (offise----file1[at]att.net ) 1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (offise----file1[at]att.net) 3.2 MILLION_USD BODY: Talks about millions of dollars 0.0 HTML_MESSAGE BODY: HTML included in message 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.5006] -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author 's domain 2.2 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/) -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.0 FREEMAIL_REPLYTO Reply-To is different freemail than From or body (offise----file1[at]att.net, www.western_union66[at]w.cn) 0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS 3.4 FILL_THIS_FORM_LONG Fill in a form with personal information 1.4 MONEY_ATM_CARD Lots of money on an ATM card 0.0 FILL_THIS_FORM Fill in a form with personal information 0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) 0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 0.9 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form 1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money 0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form 0.0 MONEY_FORM Lots of money if you fill out a form 0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s) On Fri, Mar 4, 2011 at 1:40 AM, Dennis German <dger...@real-world-systems.com> wrote: > Can someone comment on the low score assigned to the email located at > > http://www.cccu.us/hundredThousand.txt > > X-Spam-testscores: AWL=1.086,BAYES_00=-2.599,HTML_MESSAGE=0.001, > MILLION_USD=1.528 > > Is my bayes "broken"? Mine scores BAYES_50 ... > mvh
