text_combined: matt kettler sgngcnuc_vgverizonnet philip prindeville wrote karsten bräckelmann wrote please paste gigantic blob multipart mime messages put somewhere raw simply provide link sat 20080216 1844 0800 philip prindeville wrote anyway idea im seeing scores url matches arent even urls message selfinflicted ones square brackets leading 550 code seem keep sending back forth mentioning domain name without sort valid url ftp http anything sort going match url thats highly bogus domain name alone url make tell windowsbased clients automatically make clickalble urls things like wwwgooglecom text sections oh dns_from_openwhois probably httpopenwhoisorg gives hint actually hit pretty much mentions yeah read dont get either domain anonymous whatever reason maybe youre small company operating radar make email likely spam decidedly people strongest reason hide contact information spammers shady businesses thats say theyre arent legitimate folks use kind anonymization however domains proxy model questionable practice violates spirit whois requirements also many violate letter requirements phone issue noted openwhois main page ie anyone registered using securewhois correctly reigstered per icann requirements whois tvd_stock1 theres mention stock anywhere message sure migth want try running debugging debug message code would dbgeval stock info hit 1 tell exact substring matched stock info code quick glimpse code appears identify common words used stock stock exchange pumpndump penny stocks spam search word stock pretty much rule sa ever searches single words didnt see anything legitimately causing rule fire certainly high score unreliable rule seeing bogus matches tell sent us dont appear bogus depends whether equate bare domains urls suppose muas equate urls spammers use spamassassin use looked wiki couldnt find descriptions block domain dont want deal misconfiguration issues apparently already exchanged messages try sending offensive mail question put somewhere reference need hmm sounds familiar guenther sent back offending email initially marked spam bloody brilliant course spam otherwise wouldnt bothering report else expect come abuse mailbox anyway sent back sa scores back thats part pasted previously report spam site thats going block spam reports well spam well stupid probably rfc violation perform filtering abuse box im saying domain question isnt behaving foolishly might want point suggest whitelist abuse address least ask alternate reporting address isnt filtered wed 06 aug 2008 084615 0500 clearly bogus false positives abuse contact point less