SA Bugzilla – Bug 1575
Rule suggestion: X_HEADER_PITCHID
Last modified: 2003-05-11 07:27:16 UTC
header X_HEADER_PITCHID exists:X-Header-Pitchid describe X_HEADER_PITCHID Has X-Header-Pitchid header There are probably other things in the attached message that could be taken as spamsigns, but something labeled a "pitch" sort of leaped out at me.
Created attachment 701 [details] "Buy a list" spam from infousa.com via easymailers.net
added for testing
Overall results not especially good. Removing test rule. OVERALL% SPAM% HAM% S/O RANK SCORE NAME 0.011 0.0103 0.0117 0.469 0.10 0.01 T_X_HEADER_PITCHID 0.000 0.0000 0.0000 0.500 0.12 0.01 T_X_HEADER_PITCHID:daf 0.002 0.0000 0.0020 0.000 0.00 0.01 T_X_HEADER_PITCHID:jm 0.000 0.0000 0.0000 0.500 0.12 0.01 T_X_HEADER_PITCHID:lan 0.020 0.0499 0.0000 1.000 0.93 0.01 T_X_HEADER_PITCHID:quinlan 0.083 0.0000 0.1315 0.000 0.00 0.01 T_X_HEADER_PITCHID:rODbegbie 0.002 0.0033 0.0000 1.000 0.91 0.01 T_X_HEADER_PITCHID:theo