[Spambayes] Why I added src=cid: etc

Tim Peters tim.one@comcast.net
Sun Nov 3 03:20:28 2002


This is typical of the kind of email I'm getting a lot of lately.  Without
mining the HTML, there's almost nothing to look at, not even a word in the
Subject line.  (Of course, if we weren't throwing the HTML tags away, the
classifier would have learned this stuff on its own.)

Spam Score: 0.999492


'*H*'                          0.000694711
'*S*'                          0.999679
'header:Received:4'            0.151395
'header:Return-Path:1'         0.621969
'header:Message-ID:1'          0.787093
'virus:width=0'                0.842427
'message-id:@fwd04.sul.t-online.com' 0.844828
'virus:height=0'               0.855208
'from:email addr:t-online.de'  0.908163
'from:email name:520018173831-0001' 0.908163
'virus:src=cid:'               0.978469
'virus:</iframe'               0.988432
'virus:<iframe'                0.98951
Message Stream:


Received: from cpimssmtpa49.msn.com ([10.48.181.223]) by
	cpimsstra13.email.msn.com with Microsoft SMTPSVC(5.0.2195.4905);
	Sat, 2 Nov 2002 18:35:05 -0800
Received: from mailout02.sul.t-online.com ([194.25.134.17]) by
	cpimssmtpa49.msn.com with Microsoft SMTPSVC(5.0.2195.4905);
	Sat, 2 Nov 2002 18:21:57 -0800
Received: from fwd04.sul.t-online.de
	by mailout02.sul.t-online.com with smtp
	id 188AQ4-0003mh-04; Sun, 03 Nov 2002 03:23:20 +0100
Received: from Vdjmego (520018173831-0001@[217.4.99.73]) by
	fwd04.sul.t-online.com
	with smtp id 188APQ-11Ip3QC; Sun, 3 Nov 2002 03:22:40 +0100
From: 520018173831-0001@t-online.de (soa)
To: tim_one@msn.com
Subject:
MIME-Version: 1.0
Date: Sun, 3 Nov 2002 03:22:40 +0100
Message-ID: <188APQ-11Ip3QC@fwd04.sul.t-online.com>
X-Sender: 520018173831-0001@t-dialin.net
Return-Path: 520018173831-0001@t-online.de
X-OriginalArrivalTime: 03 Nov 2002 02:21:58.0083 (UTC)
	FILETIME=[C8F85130:01C282DF]


<HTML><HEAD></HEAD><BODY>
<iframe src=cid:O5YGK7EwZ95X79h15JF height=0 width=0>
</iframe>
<FONT></FONT></BODY></HTML>