Spamassassin - der Highscorethread

[X_FISH]

Nein, ich habe sonst gerade nichts Besseres zu tun. Via Jabber wurde daher gerade die Idee geboren »Sag mal, welcher Spam hatte bei dir die höchste Punktzahl mit SA?«.

Ich biete mal 60.5 points für den Anfang.

Spam detection software, running on the system "farnsworth.futurama", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  ESPN CRICKET GLOBAL LOTTERY AWARD PROMOTION ESPN CRICKET CENTER
   ,LONDON NO.3 QUEEN CAROLINE STREET [...] 

Content analysis details:   (60.5 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.6 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
 0.3 FSL_XM_419             Old OE version in X-Mailer only seen in 419 spam
 2.0 NSL_RCVD_FROM_USER     Received from User
 1.6 RCVD_IN_BRBL_LASTEXT   RBL: RCVD_IN_BRBL_LASTEXT
                            [65.182.132.68 listed in bb.barracudacentral.org]
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [65.182.132.68 listed in psbl.surriel.com]
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 1.6 SUBJ_ALL_CAPS          Subject is all capitals
 0.5 LOTTO_AGENT            BODY: Claims Agent
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 0.0 FSL_UA                 FSL_UA
 0.6 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format
 0.0 LOTS_OF_MONEY          Huge... sums of money
 1.3 RDNS_NONE              Delivered to internal network by a host with no rDNS
 2.8 HK_LOTTO               HK_LOTTO
 3.4 MSOE_MID_WRONG_CASE    MSOE_MID_WRONG_CASE
 3.5 KAM_LOTTO1             Likely to be a e-Lotto Scam Email
 3.3 LOTTERY_PH_004470      LOTTERY_PH_004470
 0.0 FORGED_OUTLOOK_HTML    Outlook can't send HTML message only
 3.0 FROM_MISSPACED         From: missing whitespace
 0.0 MONEY_FROM_MISSP       Lots of money and misspaced From
 0.0 MONEY_LOTTERY          Lots of money from a lottery
 3.3 FM_LOTTO_YOU_WON       Talks about lotto and you won!
 1.0 ADVANCE_FEE_4_NEW      Appears to be advance fee fraud (Nigerian 419)
 1.5 ADVANCE_FEE_5_NEW      Appears to be advance fee fraud (Nigerian 419)
 2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
 1.4 ADVANCE_FEE_3_NEW      Appears to be advance fee fraud (Nigerian 419)
 0.0 FILL_THIS_FORM         Fill in a form with personal information
 1.7 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
 1.2 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
 0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
 2.4 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
 1.3 ADVANCE_FEE_5_NEW_FORM Advance Fee fraud and a form
 1.4 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
 1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
 1.4 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
 1.2 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
 2.2 FILL_THIS_FORM_LOAN    Answer loan question(s)
 0.6 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
 0.5 MONEY_FRAUD_5          Lots of money and many fraud phrases
 2.9 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
 1.0 MONEY_FRAUD_8          Lots of money and very many fraud phrases
 1.2 MONEY_FRAUD_3          Lots of money and several fraud phrases
 0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
 0.5 FORM_FRAUD_5           Fill a form and many fraud phrases
 0.5 FORM_FRAUD_3           Fill a form and several fraud phrases

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

Grüße, Martin

PS: Nicht über »farnsworth.futurama« wundern. So heißt mein lokaler Mailserver eben.