[Guido]

Honestly that looked like a spammer.

I approved the message, and it looked like "probably spam" to me too. But it may have just been a low-quality message, and the new moderator UI still doesn't support adding custom text to a rejection message. Under the old system, I _would_ have rejected it, but added a message explaining why. As I've said before, I give broad benefit-of-the-doubt to marginal messages, and for that reason alone some spam is certain to get approved from time to time. A vast majority of spam directed to this list does get discarded, because there's usually no plausible doubt at all. I don't believe a legitimate message has ever been rejected, and _that's_ more important to me.

Note that at the bottom they wrote

<a href="(some url)"> servicenow training</a>

A typical strategy for such spammers is to send a message to a popular mailing list with some text that looks vaguely related (to the spammer, who is usually not well versed in the subject of the list) and add some link that they want to promote (presumably a hacked or scam site).

I went to the site first, and my up-to-date Malwarebytes installation (both the full commercial product and the browser extension) found nothing to complain about except that the page linked to one ad network (common as mud). It got a cleaner report from that than _most_ sites I visit from day to day. For example, Malwarebytes also points out that www.python.org links to one "ad network or tracker" (ssl.google-analytics.com).

The list moderator ought to ban the user.

I will not, but fine by me if some other python-dev moderator does. That poster is still subject to moderation.