Also I think bayes it´s useless... the same email is considered spam and a second later is considered ham.
Bayes is only as good as it's training.. if you've got wild flip-flops like that, perhaps you need to look at what's going on in your autolearning and adjust the thresholds.
I for one find the default ham learning threshold of SA dangerous.
I've got my bayes well trained, and well controlled. I don't have much problem with it flip-flopping.
Admittedly your message got a bayes score of 0.4862 (BAYES_44) on my system. But that's a matter of training, not flip-flopping..
Content analysis details: (5.7 points, 5.0 required)
pts rule name description ---- ---------------------- -------------------------------------------------- 0.2 NO_REAL_NAME From: does not include a real name 2.3 DEAR_SOMETHING BODY: Contains 'Dear (something)' -0.0 BAYES_44 BODY: Bayesian spam probability is 44 to 50% [score: 0.4862] 0.1 HTML_MESSAGE BODY: HTML included in message 0.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 HTML_FONTCOLOR_RED BODY: HTML font color is red 1.5 LOCAL_POPCORN2 BODY: 1-5 letters - hidden end tag - 1-7 letters 1.2 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
The "LOCAL_POPCORN2" is a rule based on popcorn.cf, just collapsed down.
describe LOCAL_POPCORN2 1-5 letters - hidden end tag - 1-7 letters rawbody LOCAL_POPCORN2 /[>\s]\w{1,5}<\/\w{2,10}>\w{1,7}\b/i score LOCAL_POPCORN2 1.5
Although technically the part of the email it fired off on is Excite UK's self advertising added to the end of the message.