Below, I have posted two headers from some of the email.
The interesting part in this header is, there are two SUBJECTS in the header,X-Message-Status: n:0
X-SID-PRA: LifeInsuranceSalesman <firstname.lastname@example.org>
Received: from yahoo.ca ([22.214.171.124]) by bay0-mc2-f19.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Sat, 17 Dec 2005 23:14:16 -0800
Received: (qmail 66607 invoked by uid 15503); Sat, 17 Dec 2005 22:21:17 -0800
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
Received: from [126.96.36.199] by web33452.mail.scd.yahoo.com via HTTP; Sat, 17 Dec 2005 22:21:17 -0800
Date: Sat, 17 Dec 2005 22:21:17 -0800
From: LifeInsuranceSalesman <email@example.com>
Subject: ages40-8O areSavinBIG!
Content-Type: multipart/alternative; boundary="----=_NextPart_000_023A_01C603AB.0B108200"
X-OriginalArrivalTime: 18 Dec 2005 07:14:16.0538 (UTC) FILETIME=[A808EBA0:01C603A2]
Subject: [Spam][96.1%][DNSBL] (No Subject)
but only one is shown in PopTray for the email.
This one, there is only one SUBJECT,From: "Promotions - Activ8 Ltd" <firstname.lastname@example.org>
Subject: [Spam][98.6%] The 10 Mistakes Most Men Make With Women
Date: 17 Dec 2005 00:53:20 -0000
Received: (qmail 15000 invoked by uid 0); 17 Dec 2005 01:51:25 -0000
X-Ob-Received: from unknown (192.168.9.68) by mta1-6.us4.outblaze.com; 17 Dec 2005 01:51:25 -0000
Received: from log1.us4.outblaze.com (log1.us4.outblaze.com [188.8.131.52]) by spf0.us4.outblaze.com (Postfix) with SMTP id 7A74A5AEF7 for <*********@mail.com>; Sat, 17 Dec 2005 01:51:25 +0000 (GMT)
Received: (qmail 6361 invoked by uid 1001); 17 Dec 2005 00:53:20 -0000
Content-Type: text/html; charset="iso-8859-1"
but PopTray still can't find the K9 spam marker in the HEADER or SUBJECT.
Are these a new 'trick' email header being used by spammers?
The bottom email has the [SPAM] marker in the PREVIEW SUBJECT.
Neither of the email has the [SPAM] marker in the SUBJECT in the main window,
both have it in the HEADER, but PopTray identifies neither as spam,
even though I have my RULE checking the HEADER and SUBJECT
for the spam marker.