[Assp-user] Regex help - or am I misunderstanding function?

[Michelle D. <md...@oc...>]

I'm still getting emails containing links to sites in russia.  I have this regex in my BombRe file:
http\:\/\/[A-Za-z\.]+?\.(?:ru|ly|nl|ec|cc|vc|ua|in|am)[\s\/\n\r\\]

Which according to my (web based) regex testers SHOULD catch the email message below.  So, I put it into the mail tester in ASSP and got the analysis below.  (I have test mode turned on by the way)

Even though the ASSP tester shows 1.000 probability that it's spam, it is NOT getting flagged as spam in the subject line (test mode).  As well, should the bobre regex show up as a cause somewhere?

I'm confused....


---MESSAGE------------------------------------------------------------
Quench your thirst for thrills - Play at King Spin

http://www.net-multi-cazino.ru

---MESSAGE HEADERS-------------------------------------------------------
x-assp-envelope-from: ya...@al...
x-assp-received-spf: none ip=64.182.102.193 mailfrom=ya...@al...
        helo=smtp1.netdorm.com
x-assp-version: 2.0.1(2.0.19) on spamfilter.mydomain.comm

---ASSP ANALYSIS------------------------------------------------------------------------
Bayesian Analysis: • Bayesian Check is disabled

Bad Words       Bad Prob        Good Words      Good Prob
spin href       0.9998
at king         0.9996
play at         0.9987
href multi      0.9931
king spin       0.9810
href ru         0.9775
href cazino     0.9626
                href www        0.2390

Totals: 0.9998 0.9996 0.9987 0.9931 0.9810 0.9775 0.9626 0.2390