Welcome to the JaguarPC Community
JaguarPC
Sales: (888) 338-5261
Support: (888)-551-3050
Results 1 to 2 of 2

This is a discussion on Highest SpamAssassin Score in the Open Discussion & Chit-chat forum
Just wondering if anybody has seen a higher score than this one. Content analysis details: (35.2 points, 5.0 required) pts rule name description ---- ---------------------- ...

  1. #1
    Loyal Client
    Join Date
    Aug 2002
    Posts
    269

    Highest SpamAssassin Score

    Just wondering if anybody has seen a higher score than this one.

    Content analysis details: (35.2 points, 5.0 required)


    pts rule name description
    ---- ---------------------- --------------------------------------------------
    0.3 NO_REAL_NAME From: does not include a real name
    0.7 ADDR_NUMS_AT_BIGSITE Uses an address with lots of numbers, at a big ISP
    0.9 FROM_ENDS_IN_NUMS From: ends in numbers
    1.6 FROM_STARTS_WITH_NUMS From: starts with nums
    0.3 RCVD_NUMERIC_HELO Received: contains a numeric HELO
    2.1 FROM_WEBMAIL_END_NUMS6 From webmail service and address ends in numbers
    2.8 SUBJ_VIAGRA Subject includes "viagra"
    1.1 FROM_NUM_AT_WEBMAIL From address is webmail, but starts with a number
    4.2 IMPOTENCE BODY: Impotence cure
    1.9 INCREASE_SEX BODY: Talks about a bigger drive for sex
    4.3 GENERIC_VIAGRA BODY: Mentions Generic Viagra
    1.1 VIAGRA_ONLINE BODY: Fast Viagra Delivery
    0.1 HTML_FONTCOLOR_RED BODY: HTML font color is red
    0.4 HTML_FONT_INVISIBLE BODY: HTML font color is same as background
    0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
    0.0 HTML_MESSAGE BODY: HTML included in message
    0.1 HTML_FONT_BIG BODY: HTML has a big font
    0.1 HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6 palette
    0.5 HTML_40_50 BODY: Message is 40% to 50% HTML
    0.5 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
    1.9 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
    3.3 MSGID_FROM_MTA_SHORT Message-Id was added by a relay
    1.1 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server
    [24.15.10.64 listed in dnsbl.sorbs.net]
    0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
    [24.15.10.64 listed in dnsbl.njabl.org]
    0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
    [24.15.10.64 listed in dnsbl.sorbs.net]
    1.1 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
    [<http://dsbl.org/listing?ip=24.15.10.64>]
    1.1 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
    [24.15.10.64 listed in dnsbl.njabl.org]
    2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
    [Blocked - see <http://www.spamcop.net/bl.shtml?24.15.10.64>]
    1.2 FROM_ALL_NUMS From an address that is all numbers (non-phone)

  2. #2
    Ron
    Guest
    Just today:
    Content analysis details: (40.3 points, 5.0 required)

    pts rule name description
    ---- ---------------------- --------------------------------------------------
    2.7 REPLY_TO_ULINE_NUMS Reply-To: has an underline and numbers/letters
    1.0 FROM_ENDS_IN_NUMS From: ends in numbers
    1.3 IMPOTENCE BODY: Impotence cure
    1.0 BANG_GUARANTEE BODY: Something is emphatically guaranteed
    2.7 PENIS_ENLARGE BODY: Information on getting larger penis/breasts
    1.7 NO_COST BODY: No such thing as a free lunch (3)
    0.5 PENIS_ENLARGE2 BODY: Information on getting larger penis/breasts
    2.3 GUARANTEED_STUFF BODY: Guaranteed Stuff
    2.1 MONEY_BACK BODY: Money back guarantee
    0.5 CLICK_BELOW_CAPS BODY: Asks you to click below (in capital letters)
    2.9 BANG_EXERCISE BODY: Talks about exercise with an exclamation!
    0.1 HTML_FONTCOLOR_RED BODY: HTML font color is red
    5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
    [score: 1.0000]
    0.1 HTML_60_70 BODY: Message is 60% to 70% HTML
    0.1 HTML_FONTCOLOR_BLUE BODY: HTML font color is blue
    0.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
    0.1 HTML_MESSAGE BODY: HTML included in message
    0.5 HTML_LINK_CLICK_CAPS BODY: HTML link text says "CLICK"
    0.3 HTML_FONT_BIG BODY: HTML has a big font
    0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here"
    0.6 MIME_HTML_NO_CHARSET RAW: Message text in HTML without charset
    0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
    [209.30.71.156 listed in dnsbl.sorbs.net]
    0.7 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
    [<http://dsbl.org/listing?ip=209.30.71.156>]
    0.3 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-ignorant.org
    1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
    [Blocked - see <http://www.spamcop.net/bl.shtml?209.30.71.156>]
    2.6 RCVD_IN_DYNABLOCK RBL: Sent directly from dynamic IP address
    [209.30.71.156 listed in dnsbl.sorbs.net]
    1.6 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
    1.0 FORGED_MUA_AOL_FROM Forged mail pretending to be from AOL (by From)
    3.3 FORGED_AOL_HTML AOL can't send HTML message only
    1.2 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
    0.5 FORGED_AOL_TAGS AOL mailers can't send HTML in this format
    1.1 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
    0.1 MISSING_OUTLOOK_NAME Message looks like Outlook, but isn't

    Here's one from 2/18:
    Content analysis details: (54.5 points, 5.0 required)

    pts rule name description
    ---- ---------------------- --------------------------------------------------
    0.2 NO_REAL_NAME From: does not include a real name
    2.7 ADDR_NUMS_AT_BIGSITE Uses an address with lots of numbers, at a big ISP
    1.0 FROM_ENDS_IN_NUMS From: ends in numbers
    0.6 FROM_STARTS_WITH_NUMS From: starts with nums
    1.8 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)
    1.5 RCVD_NUMERIC_HELO Received: contains a numeric HELO
    2.7 FROM_WEBMAIL_END_NUMS6 From webmail service and address ends in numbers
    4.1 SUBJ_VIAGRA Subject includes "viagra"
    4.1 FROM_NUM_AT_WEBMAIL From address is webmail, but starts with a number
    1.3 IMPOTENCE BODY: Impotence cure
    1.7 INCREASE_SEX BODY: Talks about a bigger drive for sex
    4.1 GENERIC_VIAGRA BODY: Mentions Generic Viagra
    4.1 VIAGRA_ONLINE BODY: Fast Viagra Delivery
    0.1 HTML_FONTCOLOR_RED BODY: HTML font color is red
    5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
    [score: 1.0000]
    0.6 HTML_FONT_INVISIBLE BODY: HTML font color is same as background
    0.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
    0.1 HTML_MESSAGE BODY: HTML included in message
    0.3 HTML_FONT_BIG BODY: HTML has a big font
    0.1 HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6 palette
    0.1 BIZ_TLD URI: Contains a URL in the BIZ top-level domain
    0.7 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
    2.5 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:'
    3.0 MSGID_FROM_MTA_SHORT Message-Id was added by a relay
    1.1 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server
    [63.194.83.92 listed in dnsbl.sorbs.net]
    0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
    [63.194.83.92 listed in dnsbl.sorbs.net]
    0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
    [63.194.83.92 listed in dnsbl.njabl.org]
    0.7 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
    [<http://dsbl.org/listing?ip=63.194.83.92>]
    0.5 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
    [63.194.83.92 listed in dnsbl.njabl.org] 1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
    [Blocked - see <http://www.spamcop.net/bl.shtml?63.194.83.92>]
    1.2 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy server
    [63.194.83.92 listed in dnsbl.sorbs.net]
    1.5 FORGED_MUA_IMS Forged mail pretending to be from IMS
    4.1 FORGED_IMS_HTML IMS can't send HTML message only
    0.7 FROM_ALL_NUMS From an address that is all numbers (non-phone)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •