🐷

SpamAssassin Score

Run an email body and header block through the Apache SpamAssassin engine to calculate its spam probability.

ENGINE: Apache SpamAssassin
THRESHOLD: Score >= +5.0
RULES: Heuristic, Regex, Bayesian

What is SpamAssassin Score?

SpamAssassin is the literal industry-standard, open-source spam filter used by millions of servers. It evaluates emails against hundreds of rules and assigns a cumulative mathematical score.

How it Works

The tool parses the supplied RAW email string. SpamAssassin checks for missing headers, ALL CAPS subjects, base64 encoding tricks, HTML-to-text ratios, and known spam phrases, tallying the overall score.

Key Use Cases

Pre-flight testing of marketing newsletters before pushing them to 100,000 subscribers.

Discovering why a legitimate transactional email template keeps landing in junk folders.

Tuning outbound sending infrastructure by eliminating "URIBL_BLOCKED" rules.

Advanced Details

A negative score (e.g., -1.5) means the message is highly trusted. Passing DKIM/SPF natively subtracts points, giving authenticated emails a massive deliverability advantage.

Cybersecurity Pros & Cons

Security Advantages
  • Pre-flight SpamAssassin scoring catches deliverability issues before they affect real recipients at scale.
  • Rule-by-rule scoring output identifies the exact triggers — enabling targeted fixes rather than guesswork.
  • Detects evasion techniques like base64 encoding, excessive HTML, and obfuscated spam keywords before sending.
  • Passing SPF/DKIM reduces the score, incentivising proper email authentication deployment.
Security Limitations
  • SpamAssassin scores are an estimate — different receiving servers use different rule weights and custom rules.
  • A low spam score does not guarantee inbox delivery — ML-based filters (Gmail) use engagement and reputation signals not captured here.
  • Spammers actively test against SpamAssassin to fine-tune their content, making rules a perpetual cat-and-mouse game.
  • High-volume legitimate senders (newsletters) consistently trip content-based rules despite full authentication.
Ready to Test?

Use our professional-grade tool to perform a real-time check for this module.

Run Module Now
Related Docs