I've been watching my spam to see what's the highest rating spam assassin ever gave it.. this is the highest I found so far.
Who says spam can't be fun :)
Content analysis details: (41.90 points, 5 required)
MLM (0.9 points) BODY: Multi Level Marketing mentioned
EARN_MONEY (0.7 points) BODY: Message talks about earning money
JODY (2.9 points) BODY: Contains "My wife, Jody" testimonial
BANG_MONEY (2.2 points) BODY: Talks about money with an exclamation!
BULK_EMAIL (2.4 points) BODY: Talks about bulk email
ORDER_REPORT (2.9 points) BODY: Order a report from someone
FINANCIAL (4.3 points) BODY: Financial Freedom
SECTION_301 (1.1 points) BODY: Claims compliance with spam regulations
UNDER_BILL_1618 (4.3 points) BODY: Claims compliance with Senate Bill 1618
EXCUSE_3 (0.1 points) BODY: Claims you can be removed from the list
INVALUABLE_MARKETING (2.9 points) BODY: Invaluable marketing information
RISK_FREE (0.7 points) BODY: Risk free. Suuurreeee....
CANNOT_BE_SPAM (1.5 points) BODY: Claims "cannot be considered spam"
COPY_ACCURATELY (2.9 points) BODY: Common pyramid scheme phrase (1)
INITIAL_INVEST (2.8 points) BODY: Requires Initial Investment
BAYES_70 (2.2 points) BODY: Bayesian classifier says spam probability is 70 to 80%
[score: 0.7811]
REMOVE_PAGE (0.3 points) URI: URL of page called "remove"
NORMAL_HTTP_TO_IP (0.9 points) URI: Uses a dotted-decimal IP address in URL
SUBJ_ALL_CAPS (0.7 points) Subject is all capitals
RCVD_FAKE_HELO_DOTCOM_2 (2.8 points) Received contains a faked HELO hostname (2)
FORGED_HOTMAIL_RCVD (1.1 points) Forged hotmail.com 'Received:' header found
CASHCASHCASH (0.0 points) Contains at least 3 dollar signs in a row
FROM_HAS_UNDERLINE_NUMS (0.7 points) From: contains an underline and numbers/letters
PRIORITY_NO_NAME (0.6 points) Message has priority setting, but no X-Mailer
TrackBack URL for this entry: http://www.unix-girl.com/mt/mt-tb.cgi/648
Don't mind me, testing something
#I admit, this is an from an older version (2.41) of spamassassin.
This piece of SPAM was recently ran through the the current release (2.50) and received a lesser score. I still keep the message as it's has by far, the largest score I've received. Cheesy yes, but I'm kinda proud of it.
Can anyone top it?
Here it is:
SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam. The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM:
SPAM: Content analysis details: (57.50 hits, 5 required)
SPAM: USER_AGENT_OE (-0.3 points) X-Mailer header indicates a non-spam MUA (Outlook
Express)
SPAM: X_PRECEDENCE_REF (4.6 points) Found a X-Precedence-Ref header
SPAM: GAPPY_SUBJECT (2.9 points) 'Subject' contains G.a.p.p.y-T.e.x.t
SPAM: FROM_ENDS_IN_NUMS (1.6 points) From: ends in numbers
SPAM: LOW_PRICE (-1.2 points) BODY: Lowest Price
SPAM: EXCUSE_14 (-0.2 points) BODY: Tells you how to stop further SPAM
SPAM: EXCUSE_13 (4.2 points) BODY: Gives an excuse for why message was sent
SPAM: VIAGRA (4.2 points) BODY: Plugs Viagra
SPAM: VIAGRA_COMBO (3.8 points) BODY: Viagra and other drugs
SPAM: BILL_1618 (3.8 points) BODY: Claims compliance with Senate Bill 1618
SPAM: ONLINE_PHARMACY (3.2 points) BODY: Online Pharmacy
SPAM: HR_3113 (3.1 points) BODY: Mentions Spam law "H.R. 3113"
SPAM: NO_COST (2.7 points) BODY: No such thing as a free lunch (3)
SPAM: CLICK_BELOW_CAPS (2.4 points) BODY: Asks you to click below (in caps)
SPAM: DIET (2.3 points) BODY: Lose Weight Spam
SPAM: UCE_MAIL_ACT (2.2 points) BODY: Mentions Spam Law "UCE-Mail Act"
SPAM: OPT_IN (1.6 points) BODY: Talks about opting in
SPAM: EXCUSE_10 (1.3 points) BODY: "if you do not wish to receive any more"
SPAM: CLICK_BELOW (0.3 points) BODY: Asks you to click below
SPAM: GAPPY_TEXT (0.1 points) BODY: Contains 'G.a.p.p.y-T.e.x.t'
SPAM: DISCLAIMER (0.1 points) BODY: Message contains disclaimer
SPAM: HTML_FONT_COLOR_RED (-1.2 points) BODY: HTML font color is red
SPAM: LINES_OF_YELLING_2 (-0.7 points) BODY: 2 WHOLE LINES OF YELLING DETECTED
SPAM: BIG_FONT (-0.4 points) BODY: FONT Size +2 and up or 3 and up
SPAM: SPAM_PHRASE_34_55 (2.6 points) BODY: Spam phrases score is 34 to 55 (high)
SPAM: [score: 41]
SPAM: TABLE_THICK_BORDER (1.8 points) BODY: HTML table has thick border
SPAM: HTML_WITH_BGCOLOR (0.8 points) BODY: HTML mail with non-white background
SPAM: HTML_FONT_COLOR_BLUE (0.8 points) BODY: HTML font color is blue
SPAM: LINES_OF_YELLING (0.3 points) BODY: A WHOLE LINE OF YELLING DETECTED
SPAM: CLICK_HERE_CAPS_LINK (1.7 points) BODY: Tells you to click on a URL (in caps)
SPAM: CLICK_HERE_LINK (1.6 points) BODY: Tells you to click on a URL
SPAM: REMOVE_PAGE (3.4 points) URI: URL of page called "remove"
SPAM: MAILTO_TO_SPAM_ADDR (1.0 points) URI: Includes a link to a likely spammer email address
SPAM: FORGED_HOTMAIL_RCVD (0.5 points) Forged hotmail.com 'Received:' header found
SPAM: MSG_ID_ADDED_BY_MTA_3 (0.2 points) 'Message-Id' was added by a relay (3)
SPAM: MANY_EXCLAMATIONS (1.7 points) Subject has many exclamations
SPAM: CTYPE_JUST_HTML (0.7 points) HTML-only mail, with no text version
SPAM:
SPAM: -------------------- End of SpamAssassin results ---------------------
This was running postfix (no idea, but probably a 2.0.x), and am currently running postfix 2.0.7.
#I've had ones scoring 44.80, 57.90, and 66.20. There should be a very high score for messages containing "You may have seen this business before and ignored it", because that one seems particularly pervasive.
#I run spamassassin for about 70 users here at work; this month, the spammiest spam scored 62.4.
It tagged exactly 2,500 spams for the most heavily spammed user. How she managed before the filter was installed I have no idea...
Phyle.
#In the future, there will be so much open source software available, programmers will be judged by how much they know about it and how well they can glue it together to build solutions.
(read more)
March 30, 2003 11:59 PM