http://bugzilla.spamassassin.org/show_bug.cgi?id=3892

           Summary: Double Subject
           Product: Spamassassin
           Version: 2.63
          Platform: All
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P5
         Component: spamc/spamd
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: [EMAIL PROTECTED]


hi,
twice (double) Subject :-(
Why?
-----------------------------vvvvv-----------------
Disclose-Recipients: No 
Language: English 
X-No-Archive: Yes 
Reply-To: "Marcel Reynolds" <[EMAIL PROTECTED]> 
From: "Marcel Reynolds" <[EMAIL PROTECTED]> 
To: [EMAIL PROTECTED], [EMAIL PROTECTED] 
Subject: [>>>>_SPAM_<<<<] 
Subject: 
Date: Sun, 10 Oct 2004 04:55:09 -0400 
X-Spam-Flag: YES 
X-Spam-Status: Yes, hits=9.7 required=5.0 version=2.63-02 
X-Spam-Level: ********* 
X-Spam-Checker-Version: SpamAssassin 2.63-02 (2004-01-11) on archix.ordix.de 


Spam detection software, running on the system "archix.ordix.de", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email.  If you have any questions, see
[EMAIL PROTECTED] for details.


Content preview:  Hi again, Here is Marcel Reynolds. I wite you because
  we are accepting your mortgage application. Our office confirms you can
  get a $220.000 loÀn for a $352.00 per month payment. Approval process
  will take 1 minute, so please fill out the form on our website: [...] 


Content analysis details:   (9.7 points, 5.0 required)


 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.8 MORTGAGE_PITCH         BODY: Looks like mortgage pitch
 5.4 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 1.0000]
 0.9 FORGED_YAHOO_RCVD      'From' yahoo.com does not match 'Received' headers
 0.1 RCVD_IN_NJABL          RBL: Received via a relay in dnsbl.njabl.org
                            [80.128.158.174 listed in dnsbl.njabl.org]
 0.1 RCVD_IN_SORBS          RBL: SORBS: sender is listed in SORBS
                            [80.128.158.174 listed in dnsbl.sorbs.net]
 2.4 OPT_HEADER             Headers include an "opt"ed phrase


The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


X-Envelope-From: <[EMAIL PROTECTED]>
X-Envelope-To: <[EMAIL PROTECTED]>
Received: from gw.ordix.de (gw.ordix.de [192.168.10.2]) by archix.ordix.de; 
Received: from mx-ha02.regio.net (mx-ha02.regionetworks.de [212.218.64.57])
        by gw.ordix.de (8.12.8/8.12.8) with ESMTP id i9A8ok2D003047;
        Sun, 10 Oct 2004 10:50:46 +0200
Received: from p50809eae.dip.t-dialin.net (p50809EAE.dip.t-dialin.net 
[80.128.158.174])
        by mx-ha02.regio.net (8.12.11/8.12.10/SuSE Linux 0.7) with SMTP id 
i9A8opt4015388;
        Sun, 10 Oct 2004 10:50:52 +0200
Message-Id: <[EMAIL PROTECTED]>
Disclose-Recipients: No
Language: English
X-No-Archive: Yes
Reply-To: "Marcel Reynolds" <[EMAIL PROTECTED]>
From: "Marcel Reynolds" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: 
Date: Sun, 10 Oct 2004 04:55:09 -0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="--53697898549562098"


Hi again,


Here is Marcel Reynolds. I wite you because we are accepting your mortgage 
application.
Our office confirms you can get a $220.000 loÀn for a $352.00 per month payment.
Approval process will take 1 minute, so please fill out the form on our website:


http://burglary.moneyintelligent.info/s6/jj.php?weo=101




Thank you.


Best Regards Marcel Reynolds
First Account Manager



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to