/[pkg-listmaster]/trunk/spamassassin_config/common/phrase_spam
ViewVC logotype

Diff of /trunk/spamassassin_config/common/phrase_spam

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 24 by don, Wed Sep 26 09:39:47 2007 UTC revision 157 by don, Sat Feb 23 23:37:59 2008 UTC
# Line 79  body AFFILIATEID        /affiliate.?id/i Line 79  body AFFILIATEID        /affiliate.?id/i
79  describe AFFILIATEID    affiliate id  describe AFFILIATEID    affiliate id
80  score AFFILIATEID       3  score AFFILIATEID       3
81    
 # joy, 2003-08-30, 2003-09-21  
 header FW               Subject =~ /^Fw: /  
 describe FW             Sounds like a Fw: spam  
 score FW                3  
   
82  # blarson 2007-07-13  # blarson 2007-07-13
83  header REFWD            subject =~ /\b(?:RE|FWD)\:\s*$/i  header REFWD            subject =~ /\b(?:RE|FWD?|AW)(?:\[\d+\])?\:\s*$/i
84  describe REFWD          re or fwd nothing  describe REFWD          re or fwd nothing
85  score REFWD             3  score REFWD             3.5
86    
87  # blarson 2005-11-11  # blarson 2005-11-11
88  header ONEWORD          subject =~ /^(?:Fw:|re:)?\s*\w+\s*$/i  header ONEWORD          subject =~ /^(?:Fw:|re:)?\s*\S+\s*$/i
89  describe ONEWORD        one word subject  describe ONEWORD        one word subject
90  score ONEWORD           1  score ONEWORD           2
91    
92  # robot101, 2003-09-22  # robot101, 2003-09-22
93  header CROSSWALK        X-UnityUser =~ /^Crosswalk.com, Inc/  header CROSSWALK        X-UnityUser =~ /^Crosswalk.com, Inc/
# Line 178  body UNI2      /university\s+(diploma|cert|de Line 173  body UNI2      /university\s+(diploma|cert|de
173  describe UNI2   Got one, thanks  describe UNI2   Got one, thanks
174  score UNI2      4  score UNI2      4
175    
176    # don 2007-11-03
177    body UNI3               /(?:(?:masters|batchelor|m\s*b\s*a\s*|ph\.?\s*d)\s*[,.]?\s*){2,}/i
178    describe UNI3           multiple types of degrees
179    score UNI3              2
180    
181  # cjwatson, 2004-03-12  # cjwatson, 2004-03-12
182  header JOB_CONFIRM      Subject =~ /Job confirmation/  header JOB_CONFIRM      Subject =~ /Job confirmation/
183  describe JOB_CONFIRM    Got one of these too, thanks  describe JOB_CONFIRM    Got one of these too, thanks
# Line 193  header SENTMESSAGE     subject =~ /(sent you Line 193  header SENTMESSAGE     subject =~ /(sent you
193  describe SENTMESSAGE    Sent you a message (like duh?)  describe SENTMESSAGE    Sent you a message (like duh?)
194  score SENTMESSAGE       2  score SENTMESSAGE       2
195    
196  # blarson 2006-03-16 2007-09-18  # blarson 2006-03-16 2007-09-18 not working, replaced 2007-12-08
197  body DEARDIGIT          /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|(?:Yo\s*)+|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?|compliments|Regards|Adieu)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro|there|sir|Mr\.?)\s*?\d{3,}/i  # body DEARDIGIT                /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|(?:Yo\s*)+|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?|compliments|Regards|Adieu)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro|there|sir|Mr\.?)\s*?\d{3,}/i
198    body DEARDIGIT          /^\s*(?:Good\s*)?(?:evenin|night|day|hi|hello|greetin|Compliment|Wa[sz]+up|dear|Regard|Mornin|(?:yo\s*)+)[sg]?\s+(?:there\s+)?\d{3,}/i
199  describe DEARDIGIT      Dear number  describe DEARDIGIT      Dear number
200  score DEARDIGIT         3.9  score DEARDIGIT         3.9
201    
# Line 347  header ACRO8PR0                subject =~ /\bAcr[0o]ba Line 348  header ACRO8PR0                subject =~ /\bAcr[0o]ba
348  describe ACRO8PR0       sales spam  describe ACRO8PR0       sales spam
349  score ACRO8PR0          4  score ACRO8PR0          4
350    
351  # blarson 2007-09-15  # blarson 2007-10-05
352  body WBRS               /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C)\b/  body WBRS               /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F)\b/
353  describe WBRS           stock spam  describe WBRS           stock spam
354  score WBRS              4  score WBRS              4
355    
356  body FOURLA             /\b([A-Z]\s?){4}\b/  body FOURLA             /\b([A-Z]\s?){4}\b/
357  describe FOURLA         Four letter acronym (stock spam?)  describe FOURLA         Four letter acronym (stock spam?)
358  score FOURLA            1  score FOURLA            0.1
359    
360    meta STOCKLIKE          (FOURLA && (MONEY || SUBJMONEY))
361    describe STOCKLIKE      Four letter acronyms with money; stock scam
362    score STOCKLIKE         1
363    
364  # blarson 2007-01-26  # blarson 2007-01-26
365  header ACROBAT8         subject =~ /\badobe acr[o0]bat 8\b/i  header ACROBAT8         subject =~ /\badobe acr[o0]bat 8\b/i
# Line 422  describe DELAFT                more pdf spam Line 427  describe DELAFT                more pdf spam
427  score DELAFT            3  score DELAFT            3
428    
429  # blarson 2007-09-13  # blarson 2007-09-13
430  header OFF1CE           subject =~ /\b[O0]ff[1i]ce\s*\W?2[O0][O0]7\b/i  header OFF1CE           subject =~ /\b[O0Q]f+[1i7l|]ce\s*\W?2[O0Qk]+7\b/i
431  describe OFF1CE         off1ce spam  describe OFF1CE         off1ce spam
432  score OFF1CE            4  score OFF1CE            4
433    
# Line 480  score NOINVEST         4 Line 485  score NOINVEST         4
485  header INTEXP           subject =~ /\b[I|]nternet Exp[l|]orer\b/i  header INTEXP           subject =~ /\b[I|]nternet Exp[l|]orer\b/i
486  describe INTEXP         |nternet Exp|orer  describe INTEXP         |nternet Exp|orer
487  score INTEXP            2  score INTEXP            2
488    
489    # don 2007-09-29
490    header WORKATHOME       subject =~ /work\Wat\Whome/i
491    describe WORKATHOME     Work at home
492    score WORKATHOME        4
493    
494    # don 2007-10-01
495    body PHONENUMBER        /\b1[\-\.\s]?8[07]+[\-\.\s]?\d+/
496    describe PHONENUMBER    Toll free phone number
497    score PHONENUMBER       1.5
498    
499    # don 2007-10-02
500    body GERMANSPAM         /Zerix Intern/i
501    describe GERMANSPAM     Um... no clue what that is.
502    score GERMANSPAM        3
503    
504    body URBANNEWS          /UrbaNNews\.ro/
505    describe URBANNEWS      URBANNEWS Newsletter
506    score URBANNEWS         3
507    
508    # blarson 2007-10-05
509    header JOBS             subject =~ /\b(?:job|Employ(?:ers|ment|ee))s?\b/i
510    describe JOBS           job spam
511    score JOBS              1
512    
513    # don 2007-10-09
514    header FREEPASSWORD     subject =~ /your\s*free\s*password/i
515    describe FREEPASSWORD   We don't need free password
516    score FREEPASSWORD      3
517    
518    # don 2007-10-11
519    header AFRICABYBIKE     subject =~ /africa\s*by\s*bike/i
520    describe AFRICABYBIKE   We don't care about africa by bike or car or bus or train
521    score AFRICABYBIKE      4
522    
523    # blarson 2007-10-14
524    header BRAKETDIGIT      subject =~ /\[\d+\]\:\s*$/
525    describe BRAKETDIGIT    braketed digit colon last in subject
526    score BRAKETDIGIT       2
527    
528    # blarson 2007-10-14
529    full WHATISOEM          /\bWhat\s*is\s*OEM\b/i
530    describe WHATISOEM      What is OEM
531    score WHATISOEM         4
532    
533    # blarson 2007-10-15
534    body WORKEXP            /\bwork\s+experience\s+degree\b/i
535    describe WORKEXP        work experience degree
536    score WORKEXP           3
537    
538    # blarson 2007-10-24
539    body NICEGIRL           /\b(?:nice|young|lonley|unmarried)\s+(?:girl|woman|female)\b/i
540    describe NICEGIRL       nice girl
541    score NICEGIRL          2
542    
543    # blarson 2007-10-16
544    header FEALCHAT         subject =~ /\bFeel Like Chatting\b/i
545    describe FEALCHAT       Feel Like Chatting
546    score FEALCHAT          3
547    
548    # blarson 2007-10-18
549    header DFF1CE           subject =~ /UmU6INDSydfF1CE/i
550    describe DFF1CE         korean spam
551    score DFF1CE            4
552    
553    # blarson 2007-10-23
554    header FAILNOTE         subject =~ /\bFailure notice\:/i
555    describe FAILNOTE       bounced spam
556    score FAILNOTE          4
557    
558    # blarson 2007-10-25
559    full STILLSINGLE        /\bstill\s+single\b/i
560    describe STILLSINGLE    still single
561    score STILLSINGLE       2
562    
563    # blarson 2007-10-26
564    header PERSONALCRED     subject =~ /\bPersonal\s+Credit/i
565    describe PERSONALCRED   Personal Credit
566    score PERSONALCRED      2
567    
568    # blarson 2007-10-26
569    body XMASGIFT           /\b(?:christ|x)mas gift\b/
570    describe XMASGIFT       christmas gift
571    score XMASGIFT          2
572    
573    # blarson 2007-10-26
574    body RONPAUL            /\bRon Paul\b/
575    describe RONPAUL        Ron Paul
576    score RONPAUL           3
577    
578    # blarson 2007-10-27
579    body YOURJOB            /your Job Verification Number/
580    describe YOURJOB        your Job Verification Number
581    score YOURJOB           3
582    
583    # blason 2007-10-28
584    body PASTERESUME        /\bPASTE your resume\b/i
585    describe PASTERESUME    PASTE your resume
586    score PASTERESUME       3
587    
588    body LETHIHELO          /\{Let\:HI,Hi,Hello,hEllo,heLlo,helLo,hellO,HEllo\} how are you/
589    describe LETHIHELO      Hello, how are you
590    score LETHIHELO         4
591    
592    # blarson 2007-10-29
593    body DIREKTOR           /Direktor of Softline/i
594    describe DIREKTOR       Direktor of Softline
595    score DIREKTOR          3
596    
597    # blarson 2007-10-29
598    body THEDEG             /\bthe_degree\b/
599    describe THEDEG         the_degree
600    score THEDEG            3
601    
602    # blason 2007-10-29
603    body DYNMH              /D Y N A M I C  M EDIA HOLDIN/
604    describe DYNMH          D Y N A M I C  M EDIA HOLDIN
605    score DYNMH             4
606    
607    # blarson 2007-10-30
608    header LEGBUD           subject =~ /\b(?:Legal|smoking) Bud/i
609    describe LEGBUD         Legal Bud
610    score LEGBUD            4
611    
612    # blarson 2007-10-30
613    full LEGBUD2            /\b(?:Legal|smoking) Bud/i
614    describe LEGBUD2        Legal Bud
615    score LEGBUD2           4
616    
617    # blarson 2007-10-31
618    body SMOKING            /\b(?:beat|stop|quit|without)\s+(?:nicotine|smoking|cigarettes)\b/i
619    describe SMOKING        stop smoking
620    score SMOKING           3
621    
622    # blarson 2007-11-04
623    header WORKHOME         subject =~ /\bwork\b.*\bhome\b/i
624    describe WORKHOME       work from home
625    score WORKHOME          2
626    
627    # blarson 2007-11-04
628    header HOMEWORK         subject =~ /\bhome\b.*\b(?:work|business|job|based)\b/i
629    describe HOMEWORK       home business
630    score HOMEWORK          3
631    
632    # blarson 2007-11-04
633    header REPRESENT        subject =~ /\bRepresent(?:ative)?\b.*\b(?:Country|needed)\b/i
634    describe REPRESENT      represent your country
635    score REPRESENT         2
636    
637    # blarson 2007-11-06
638    header NOFEE            subject =~ /\bNo\s+fee\b/i
639    describe NOFEE          No fee
640    score NOFEE             2
641    
642    # blarson 2007-11-07
643    body NEEDED             /\b(?:manager|executive)\b.*\bneeded\b/i
644    describe NEEDED         manager needed
645    score NEEDED            2
646    
647    # blarson 2007-11-10
648    body CRETPROF           /\b(?:creative|perceptive)\b.*\bprofessionals?\b/i
649    describe CRETPROF       creative and perceptive professionals
650    score CRETPROF          2
651    
652    # blarson 2007-11-15
653    body REMOVEDOT          /\b(?:Remove|erase) the dot\b/i
654    describe REMOVEDOT      Remove the dot
655    score REMOVEDOT         3
656    
657    # blarson 2007-11-19
658    full VENTTRANS          /\bVent Transports\b/
659    describe VENTTRANS      Vent Transports
660    score VENTTRANS         4
661    
662    # blarson 2007-11-19
663    body HOLIDAYHERE        /\bHolidays are here\b/i
664    describe HOLIDAYHERE    Holidays are here
665    score HOLIDAYHERE       3
666    
667    # blarson 2007-11-22
668    header CAPINIT          subject =~ /^(?:Re:)?\s*(?:(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket|IWC|\&|Jaeger-LeCoultre)\s+)+(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket)\s*$/
669    describe CAPINIT        Capinit Every Word
670    score CAPINIT           3
671    
672    # blarson 2007-11-23
673    body REMOVESPACE        /\b(?:remove|w\/o|without|delete) spaces?\b/i
674    describe REMOVESPACE    w/o space
675    score REMOVESPACE       2
676    
677    # blason 2007-11-27
678    header BEAHERO          subject =~ /Be a hero/
679    describe BEAHERO        Be a hero
680    score BEAHERO           4
681    
682    # blarson 2007-11-28
683    header SOFTCHEAP        subject =~ /Soft and cheap/i
684    describe SOFTCHEAP      Soft and cheap
685    score SOFTCHEAP         3
686    
687    # blarson 2007-11-30
688    body CHEAPSOFT          /\bcheap (?:OEM)?\s*soft(?:ware)?/i
689    describe CHEAPSOFT      cheap OEM soft
690    score CHEAPSOFT         2
691    
692    # blarson 2007-11-30
693    header MAKEMONEY        subject =~ /\b(?:Make|need|extra)\s+(?:Cash|money|income)\b/i
694    describe MAKEMONEY      Make Cash
695    score MAKEMONEY         3
696    
697    # blarson 2007-12-07
698    header PREVED           subject =~ /\bPreved\b/i
699    describe PREVED         Preved
700    score PREVED            3
701    
702    # blarson 2007-12-08
703    body YOURPROFILE        /\byour profile\b/i
704    describe YOURPROFILE    your profile
705    score YOURPROFILE       2
706    
707    # blarson 2007-12-09
708    body SEEKEMP            /\bseeking for employees\b/
709    describe SEEKEMP        seeking for employees
710    score SEEKEMP           3
711    
712    # blarson 2007-12-27
713    body PRICELIST          /(?m:^(?:adobe|microsoft|intuit|autodesk|symantec)\W.*\b\d{2,}$){3,}/i
714    describe PRICELIST      list of prices
715    score PRICELIST         1
716    
717    # blarson 2007-12-30
718    full OEMSOFT            /\b[O0]EM\s+s[o0][\W_]?ft_?(?:w_?a_?r_?e)?\b/i
719    describe OEMSOFT        OEM software
720    score OEMSOFT           2
721    
722    # don 2008-02-23
723    body OFFICEENTERPRISE           /Microsoft Office Enterprise/
724    describe OFFICEENTERPRISE       Microsoft Office Enterprise
725    score OFFICEENTERPRISE          3
726    
727    # blarson 2008-01-01
728    header NIGHTGIRL        subject =~ /\bnight\b.*\bgirlfriend\b/
729    describe NIGHTGIRL      night ... girlfriend
730    score NIGHTGIRL         3
731    
732    body SITESUBJECT        /\bPlease see this site in Subject\b/i
733    describe SITESUBJECT    Pls check this new site
734    score SITESUBJECT       3
735    
736    # tomv 2008-01-01
737    header PLSCHECKSITE     from =~ /\bPls check this new site\b/i
738    describe PLSCHECKSITE   Pls check this new site
739    score PLSCHECKSITE      4
740    
741    # blarson 2008-01-03
742    header MARRYCH          subject =~ /\bMarry Christmas\b/
743    describe MARRYCH        Marry Christmas
744    score MARRYCH           3
745    
746    # don 2008-01-7
747    header BUYTHEPRODUCT    subject =~ /Buy the product/i
748    describe BUYTHEPRODUCT  Buy the product subject
749    score BUYTHEPRODUCT     3
750    
751    # blarson 2008-01-11
752    body IBERIS             /\bIberis Capital Group\b/
753    describe IBERIS         Iberis Capital Group
754    score IBERIS            4
755    
756    # blarson 2008-01-18
757    header HIFROM           subject =~ /\b(?:hello|hi)\s+from/i
758    describe HIFROM         hello from
759    score HIFROM            2
760    
761    # blarson 2008-01-22
762    body INTCORP            /\bInternational\s+corporation\b/i
763    describe INTCORP        International corporation
764    score INTCORP           2
765    
766    # blarson 2008-01-23
767    header ISITYOU          subject =~ /\bis it you\b/i
768    describe ISITYOU        is it you
769    score ISITYOU           2
770    
771    # blarson 2008-01-27
772    header CUSTOMERALERT    subject =~ /\bCustomer alert\b/i
773    describe CUSTOMERALERT  Customer alert
774    score CUSTOMERALERT     3
775    
776    # blarson 2008-02-16
777    body SLASHITY           /^\s*\/\/\/.*\\\\\\\s*$/
778    describe SLASHITY       /// ... \\\
779    score SLASHITY          2
780    
781    # blarson 2008-02-20
782    full OPENPOS            /\bopen\s*position/i
783    describe OPENPOS        open positions
784    score OPENPOS           3
785    
786    # don 2008-02-23
787    header EBAYMEMBER       subject =~ /message from ebay member/i
788    describe EBAYMEMBER     Message from ebay member
789    score EBAYMEMBER        4
Legend:
Removed from v.24  
changed lines
  Added in v.157
  ViewVC Help
Powered by ViewVC 1.1.5