/[pkg-listmaster]/trunk/spamassassin_config/common/phrase_spam
ViewVC logotype

Diff of /trunk/spamassassin_config/common/phrase_spam

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 38 by don, Tue Oct 2 18:48:25 2007 UTC revision 240 by don, Thu Sep 4 02:47:35 2008 UTC
# Line 39  score  MDO_AUTORESP7   0.1 Line 39  score  MDO_AUTORESP7   0.1
39  meta    MDO_AUTORESP_META1      (MDO_AUTORESP1 + MDO_AUTORESP2 + MDO_AUTORESP3 + MDO_AUTORESP4 + MDO_AUTORESP5 + MDO_AUTORESP6 + MDO_AUTORESP7) > 1  meta    MDO_AUTORESP_META1      (MDO_AUTORESP1 + MDO_AUTORESP2 + MDO_AUTORESP3 + MDO_AUTORESP4 + MDO_AUTORESP5 + MDO_AUTORESP6 + MDO_AUTORESP7) > 1
40  score   MDO_AUTORESP_META1      2.0  score   MDO_AUTORESP_META1      2.0
41    
42  body MURPHY_DIPLOMA     /Diploma/  body MURPHY_DIPLOMA     /dip[l1]omas?/i
43  describe MURPHY_DIPLOMA No Diploma  describe MURPHY_DIPLOMA No Diploma
44  score MURPHY_DIPLOMA    1  score MURPHY_DIPLOMA    1
45    
# Line 79  body AFFILIATEID        /affiliate.?id/i Line 79  body AFFILIATEID        /affiliate.?id/i
79  describe AFFILIATEID    affiliate id  describe AFFILIATEID    affiliate id
80  score AFFILIATEID       3  score AFFILIATEID       3
81    
 # joy, 2003-08-30, 2003-09-21  
 header FW               Subject =~ /^Fw: /  
 describe FW             Sounds like a Fw: spam  
 score FW                3  
   
82  # blarson 2007-07-13  # blarson 2007-07-13
83  header REFWD            subject =~ /\b(?:RE|FWD)\:\s*$/i  header REFWD            subject =~ /\b(?:RE|FWD?|AW)(?:\[\d+\])?\:\s*$/i
84  describe REFWD          re or fwd nothing  describe REFWD          re or fwd nothing
85  score REFWD             3  score REFWD             3.5
86    
87  # blarson 2005-11-11  # blarson 2005-11-11
88  header ONEWORD          subject =~ /^(?:Fw:|re:)?\s*\w+\s*$/i  header ONEWORD          subject =~ /^(?:Fw:|re:)?\s*\S+\s*$/i
89  describe ONEWORD        one word subject  describe ONEWORD        one word subject
90  score ONEWORD           1  score ONEWORD           2
91    
92  # robot101, 2003-09-22  # robot101, 2003-09-22
93  header CROSSWALK        X-UnityUser =~ /^Crosswalk.com, Inc/  header CROSSWALK        X-UnityUser =~ /^Crosswalk.com, Inc/
# Line 169  score TEDIOUS_WITTER   2 Line 164  score TEDIOUS_WITTER   2
164    
165  # cjwatson, 2004-03-12  # cjwatson, 2004-03-12
166  # blarson 2004-06-09  # blarson 2004-06-09
167  header UNI_DIPLOMA      Subject =~ /\b(university|college)\s+(diploma|cert|degree)/i  header UNI_DIPLOMA      subject =~ /\b(?:university|college|doctora+te|bache+lor|maste+rs?)[\/\s]+(?:(dip[l1][o0]ma|cert|degree)|(?:university|college|doctora+te|bache+lor|maste+rs?))/i
168  describe UNI_DIPLOMA    Got one, thanks  describe UNI_DIPLOMA    Got a diploma, thanks
169  score UNI_DIPLOMA       4  score UNI_DIPLOMA       4
170    
171  # blarson 2004-04-27  # blarson 2004-04-27
# Line 178  body UNI2      /university\s+(diploma|cert|de Line 173  body UNI2      /university\s+(diploma|cert|de
173  describe UNI2   Got one, thanks  describe UNI2   Got one, thanks
174  score UNI2      4  score UNI2      4
175    
176    # don 2007-11-03
177    body UNI3               /(?:(?:maste+rs|batche+lor|m\s*b\s*a\s*|ph\.?\s*d|doctora+te)\s*[,.\/]?\s*){2,}/i
178    describe UNI3           multiple types of degrees
179    score UNI3              2
180    
181  # cjwatson, 2004-03-12  # cjwatson, 2004-03-12
182  header JOB_CONFIRM      Subject =~ /Job confirmation/  header JOB_CONFIRM      Subject =~ /Job confirmation/
183  describe JOB_CONFIRM    Got one of these too, thanks  describe JOB_CONFIRM    Got one of these too, thanks
# Line 188  header MESSAGESUB      subject =~ /^\s*\(?mes Line 188  header MESSAGESUB      subject =~ /^\s*\(?mes
188  describe MESSAGESUB     really descriptive subject  describe MESSAGESUB     really descriptive subject
189  score MESSAGESUB        3  score MESSAGESUB        3
190    
191  # don 2007-09-20  # blarson 2006-03-16 2007-09-18 not working, replaced 2007-12-08
192  header SENTMESSAGE      subject =~ /(sent you a( personal|) message|would like to chat)/i  # body DEARDIGIT                /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|(?:Yo\s*)+|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?|compliments|Regards|Adieu)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro|there|sir|Mr\.?)\s*?\d{3,}/i
193  describe SENTMESSAGE    Sent you a message (like duh?)  body DEARDIGIT          /^\s*(?:Good\s*)?(?:evenin|night|day|hi|hello|greetin|Compliment|Wa[sz]+up|dear|Regard|Mornin|(?:yo\s*)+)[sg]?\s+(?:there\s+)?\d{3,}/i
 score SENTMESSAGE       2  
   
 # blarson 2006-03-16 2007-09-18  
 body DEARDIGIT          /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|(?:Yo\s*)+|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?|compliments|Regards|Adieu)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro|there|sir|Mr\.?)\s*?\d{3,}/i  
194  describe DEARDIGIT      Dear number  describe DEARDIGIT      Dear number
195  score DEARDIGIT         3.9  score DEARDIGIT         3.9
196    
# Line 347  header ACRO8PR0                subject =~ /\bAcr[0o]ba Line 343  header ACRO8PR0                subject =~ /\bAcr[0o]ba
343  describe ACRO8PR0       sales spam  describe ACRO8PR0       sales spam
344  score ACRO8PR0          4  score ACRO8PR0          4
345    
346  # blarson 2007-09-15  # blarson 2007-10-05
347  body WBRS               /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E)\b/  body WBRS               /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F|OPLO|DCNM|mpix|MPIX|UCSO|TBCO)\b/
348  describe WBRS           stock spam  describe WBRS           stock spam
349  score WBRS              4  score WBRS              4
350    
351  body FOURLA             /\b([A-Z]\s?){4}\b/  body FOURLA             /\b([A-Z]\s?){4}\b/
352  describe FOURLA         Four letter acronym (stock spam?)  describe FOURLA         Four letter acronym (stock spam?)
353  score FOURLA            1  score FOURLA            0.1
354    
355  full WORDMONEY          /^\w+\s*:\s*(?:\$\s*[\d\.]+|[\d\.]+\s*USD)/mi  meta STOCKLIKE          (FOURLA && (MONEY || SUBJMONEY))
 describe WORDMONEY      Word Colon Money  
 score WORDMONEY         1  
   
 meta STOCKLIKE          (FOURLA && WORDMONEY)  
356  describe STOCKLIKE      Four letter acronyms with money; stock scam  describe STOCKLIKE      Four letter acronyms with money; stock scam
357  score STOCKLIKE         2  score STOCKLIKE         1
358    
359  # blarson 2007-01-26  # blarson 2007-01-26
360  header ACROBAT8         subject =~ /\badobe acr[o0]bat 8\b/i  header ACROBAT8         subject =~ /\badobe acr[o0]bat 8\b/i
# Line 430  describe DELAFT                more pdf spam Line 422  describe DELAFT                more pdf spam
422  score DELAFT            3  score DELAFT            3
423    
424  # blarson 2007-09-13  # blarson 2007-09-13
425  header OFF1CE           subject =~ /\b[O0]ff[1i7l|]ce\s*\W?2[O0Qk]+7\b/i  header OFF1CE           subject =~ /\b[O0Q]f+[1i7l|]ce\s*\W?2[O0Qk]+7\b/i
426  describe OFF1CE         off1ce spam  describe OFF1CE         off1ce spam
427  score OFF1CE            4  score OFF1CE            4
428    
# Line 450  describe BIGINTER      job spam Line 442  describe BIGINTER      job spam
442  score BIGINTER          4  score BIGINTER          4
443    
444  # blarson 2007-09-20  # blarson 2007-09-20
445  header HASSENT          subject =~ /\b(?:sent you a (?:personal|confidential)?\s*(?:message|note)|would like to chat)\b/i  header HASSENT          subject =~ /\b(?:sent you a (?:personal|confidential)?\s*(?:message|note))\b/i
446  describe HASSENT        sent a message  describe HASSENT        sent a message
447  score HASSENT           4  score HASSENT           4
448    
449    # don 2008-04-19
450    header WANTTOCHAT       subject =~ /\b(?:(?:would like|wants|feels?) (?:to chat|like chatting|to keep up with you))\b/i
451    describe WANTTOCHAT     I want to chat/keep up with spam
452    score WANTTOCHAT        5.5
453    
454  # blarson 2007-09-20  # blarson 2007-09-20
455  header ORDERNUM         subject =~ /\b(?:Order|Recipet)\s*.?\d{3,}/i  header ORDERNUM         subject =~ /\b(?:Order|Recipet)\s*.?\d{3,}/i
456  describe ORDERNUM       order number  describe ORDERNUM       order number
# Line 500  describe PHONENUMBER   Toll free phone num Line 497  describe PHONENUMBER   Toll free phone num
497  score PHONENUMBER       1.5  score PHONENUMBER       1.5
498    
499  # don 2007-10-02  # don 2007-10-02
500  header GERMANSPAM       subject =~ /Stellangebot/i  body GERMANSPAM         /Zerix Intern/i
501  describe GERMANSPAM     Um... no clue what that is.  describe GERMANSPAM     Um... no clue what that is.
502  score GERMANSPAM        3  score GERMANSPAM        3
503    
504    body URBANNEWS          /UrbaNNews\.ro/
505    describe URBANNEWS      URBANNEWS Newsletter
506    score URBANNEWS         3
507    
508    # blarson 2007-10-05
509    header JOBS             subject =~ /\b(?:job|Employ(?:ers|ment|ee))s?\b/i
510    describe JOBS           job spam
511    score JOBS              1
512    
513    # don 2007-10-09
514    header FREEPASSWORD     subject =~ /your\s*free\s*password/i
515    describe FREEPASSWORD   We don't need free password
516    score FREEPASSWORD      3
517    
518    # don 2007-10-11
519    header AFRICABYBIKE     subject =~ /africa\s*by\s*bike/i
520    describe AFRICABYBIKE   We don't care about africa by bike or car or bus or train
521    score AFRICABYBIKE      4
522    
523    # blarson 2007-10-14
524    header BRAKETDIGIT      subject =~ /\[\d+\]\:\s*$/
525    describe BRAKETDIGIT    braketed digit colon last in subject
526    score BRAKETDIGIT       2
527    
528    # blarson 2007-10-14
529    full WHATISOEM          /\bWhat\s*is\s*OEM\b/i
530    describe WHATISOEM      What is OEM
531    score WHATISOEM         4
532    
533    # blarson 2007-10-15
534    body WORKEXP            /\bwork\s+experience\s+degree\b/i
535    describe WORKEXP        work experience degree
536    score WORKEXP           3
537    
538    # blarson 2007-10-24
539    body NICEGIRL           /\b(?:nice|young|lonley|unmarried)\s+(?:girl|woman|female)\b/i
540    describe NICEGIRL       nice girl
541    score NICEGIRL          3
542    
543    # blarson 2007-10-18
544    header DFF1CE           subject =~ /UmU6INDSydfF1CE/i
545    describe DFF1CE         korean spam
546    score DFF1CE            4
547    
548    # blarson 2007-10-23
549    header FAILNOTE         subject =~ /\bFailure notice\:/i
550    describe FAILNOTE       bounced spam
551    score FAILNOTE          4
552    
553    # blarson 2007-10-25
554    full STILLSINGLE        /\bstill\s+single\b/i
555    describe STILLSINGLE    still single
556    score STILLSINGLE       2
557    
558    # blarson 2007-10-26
559    header PERSONALCRED     subject =~ /\bPersonal\s+Credit/i
560    describe PERSONALCRED   Personal Credit
561    score PERSONALCRED      2
562    
563    # blarson 2007-10-26
564    body XMASGIFT           /\b(?:christ|x)mas gift\b/
565    describe XMASGIFT       christmas gift
566    score XMASGIFT          2
567    
568    # blarson 2007-10-26
569    body RONPAUL            /\bRon Paul\b/
570    describe RONPAUL        Ron Paul
571    score RONPAUL           3
572    
573    # blarson 2007-10-27
574    body YOURJOB            /your Job Verification Number/
575    describe YOURJOB        your Job Verification Number
576    score YOURJOB           3
577    
578    # blason 2007-10-28
579    body PASTERESUME        /\bPASTE your resume\b/i
580    describe PASTERESUME    PASTE your resume
581    score PASTERESUME       3
582    
583    body LETHIHELO          /\{Let\:HI,Hi,Hello,hEllo,heLlo,helLo,hellO,HEllo\} how are you/
584    describe LETHIHELO      Hello, how are you
585    score LETHIHELO         4
586    
587    # blarson 2007-10-29
588    body DIREKTOR           /Direktor of Softline/i
589    describe DIREKTOR       Direktor of Softline
590    score DIREKTOR          3
591    
592    # blarson 2007-10-29
593    body THEDEG             /\bthe_degree\b/
594    describe THEDEG         the_degree
595    score THEDEG            3
596    
597    # blason 2007-10-29
598    body DYNMH              /D Y N A M I C  M EDIA HOLDIN/
599    describe DYNMH          D Y N A M I C  M EDIA HOLDIN
600    score DYNMH             4
601    
602    # blarson 2007-10-30
603    header LEGBUD           subject =~ /\b(?:Legal|smoking) Bud/i
604    describe LEGBUD         Legal Bud
605    score LEGBUD            4
606    
607    # blarson 2007-10-30
608    full LEGBUD2            /\b(?:Legal|smoking) Bud/i
609    describe LEGBUD2        Legal Bud
610    score LEGBUD2           4
611    
612    # blarson 2007-10-31
613    body SMOKING            /\b(?:beat|stop|quit|without)\s+(?:nicotine|smoking|cigarettes)\b/i
614    describe SMOKING        stop smoking
615    score SMOKING           3
616    
617    # blarson 2007-11-04
618    header WORKHOME         subject =~ /\bwork\b.*\bhome\b/i
619    describe WORKHOME       work from home
620    score WORKHOME          2
621    
622    # blarson 2007-11-04
623    header HOMEWORK         subject =~ /\bhome\b.*\b(?:work|business|job|based)\b/i
624    describe HOMEWORK       home business
625    score HOMEWORK          3
626    
627    # blarson 2007-11-04
628    header REPRESENT        subject =~ /\bRepresent(?:ative)?\b.*\b(?:Country|needed)\b/i
629    describe REPRESENT      represent your country
630    score REPRESENT         2
631    
632    # blarson 2007-11-06
633    header NOFEE            subject =~ /\bNo\s+fee\b/i
634    describe NOFEE          No fee
635    score NOFEE             2
636    
637    # blarson 2007-11-07
638    body NEEDED             /\b(?:manager|executive)\b.*\bneeded\b/i
639    describe NEEDED         manager needed
640    score NEEDED            2
641    
642    # blarson 2007-11-10
643    body CRETPROF           /\b(?:creative|perceptive)\b.*\bprofessionals?\b/i
644    describe CRETPROF       creative and perceptive professionals
645    score CRETPROF          2
646    
647    # blarson 2007-11-15
648    body REMOVEDOT          /\b(?:Remove|erase|take (?:away|out)) (?:the dot\b|\W )/i
649    describe REMOVEDOT      Remove the dot
650    score REMOVEDOT         3
651    
652    # blarson 2007-11-19
653    full VENTTRANS          /\bVent Transports\b/
654    describe VENTTRANS      Vent Transports
655    score VENTTRANS         4
656    
657    # blarson 2007-11-19
658    body HOLIDAYHERE        /\bHolidays are here\b/i
659    describe HOLIDAYHERE    Holidays are here
660    score HOLIDAYHERE       3
661    
662    # blarson 2007-11-22
663    header CAPINIT          subject =~ /^(?:Re:)?\s*(?:(?:[A-Z][a-z-\']+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket|IWC|\&|Jaeger-LeCoultre)\s+)+(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket)\s*$/
664    describe CAPINIT        Capinit Every Word
665    score CAPINIT           3
666    
667    # blarson 2007-11-23
668    body REMOVESPACE        /\b(?:remove|w\/o|without|delete) spaces?\b/i
669    describe REMOVESPACE    w/o space
670    score REMOVESPACE       2
671    
672    # blason 2007-11-27
673    header BEAHERO          subject =~ /Be a hero/
674    describe BEAHERO        Be a hero
675    score BEAHERO           4
676    
677    # blarson 2007-11-28
678    header SOFTCHEAP        subject =~ /Soft and cheap/i
679    describe SOFTCHEAP      Soft and cheap
680    score SOFTCHEAP         3
681    
682    # blarson 2007-11-30
683    body CHEAPSOFT          /\bcheap (?:OEM)?\s*soft(?:ware)?/i
684    describe CHEAPSOFT      cheap OEM soft
685    score CHEAPSOFT         2
686    
687    # blarson 2007-11-30
688    header MAKEMONEY        subject =~ /\b(?:Make|need|extra)\s+(?:Cash|money|income)\b/i
689    describe MAKEMONEY      Make Cash
690    score MAKEMONEY         3
691    
692    # blarson 2007-12-07
693    header PREVED           subject =~ /\bPreved\b/i
694    describe PREVED         Preved
695    score PREVED            3
696    
697    # blarson 2007-12-08
698    body YOURPROFILE        /\byour profile\b/i
699    describe YOURPROFILE    your profile
700    score YOURPROFILE       2
701    
702    # blarson 2007-12-09
703    body SEEKEMP            /\bseeking for employees\b/
704    describe SEEKEMP        seeking for employees
705    score SEEKEMP           3
706    
707    # blarson 2007-12-27
708    body PRICELIST          /(?m:^(?:adobe|microsoft|intuit|autodesk|symantec)\W.*\b\d{2,}$){3,}/i
709    describe PRICELIST      list of prices
710    score PRICELIST         1
711    
712    # blarson 2007-12-30
713    full OEMSOFT            /\b[O0]EM\s+s[o0][\W_]?ft_?(?:w_?a_?r_?e)?\b/i
714    describe OEMSOFT        OEM software
715    score OEMSOFT           2
716    
717    # tviehmann 2008-07-20
718    full XORGBUGREPORTS     /\/usr\/lib\/xorg\/modules/
719    describe XORGBUGREPORTS ameliorate score of xorg bug reports matching OEMSOFT
720    score XORGBUGREPORTS    -5
721    
722    # don 2008-02-23
723    body MSSOFTWARE         /(?:Microsoft|Windows) (?:Office Enterprise|Vista Ultimate)/i
724    describe MSSOFTWARE     Microsoft Office Enterprise/Vista Ultimate
725    score MSSOFTWARE        3
726    
727    # blarson 2008-01-01
728    header NIGHTGIRL        subject =~ /\bnight\b.*\bgirlfriend\b/
729    describe NIGHTGIRL      night ... girlfriend
730    score NIGHTGIRL         3
731    
732    body SITESUBJECT        /\bPlease see this site in Subject\b/i
733    describe SITESUBJECT    Pls check this new site
734    score SITESUBJECT       3
735    
736    # tomv 2008-01-01
737    header PLSCHECKSITE     from =~ /\bPls check this new site\b/i
738    describe PLSCHECKSITE   Pls check this new site
739    score PLSCHECKSITE      4
740    
741    # blarson 2008-01-03
742    header MARRYCH          subject =~ /\bMarry Christmas\b/
743    describe MARRYCH        Marry Christmas
744    score MARRYCH           3
745    
746    # don 2008-01-7
747    header BUYTHEPRODUCT    subject =~ /Buy the product/i
748    describe BUYTHEPRODUCT  Buy the product subject
749    score BUYTHEPRODUCT     3
750    
751    # blarson 2008-01-11
752    body IBERIS             /\bIberis Capital Group\b/
753    describe IBERIS         Iberis Capital Group
754    score IBERIS            4
755    
756    # blarson 2008-01-18
757    header HIFROM           subject =~ /\b(?:hello|hi)\s+from/i
758    describe HIFROM         hello from
759    score HIFROM            3
760    
761    # blarson 2008-01-22
762    body INTCORP            /\bInternational\s+corporation\b/i
763    describe INTCORP        International corporation
764    score INTCORP           2
765    
766    # blarson 2008-01-23
767    header ISITYOU          subject =~ /\bis it you\b/i
768    describe ISITYOU        is it you
769    score ISITYOU           2
770    
771    # blarson 2008-01-27
772    header CUSTOMERALERT    subject =~ /\bCustomer alert\b/i
773    describe CUSTOMERALERT  Customer alert
774    score CUSTOMERALERT     3
775    
776    # blarson 2008-02-16
777    body SLASHITY           /^\s*\/\/\/.*\\\\\\\s*$/
778    describe SLASHITY       /// ... \\\
779    score SLASHITY          2
780    
781    # blarson 2008-02-20
782    full OPENPOS            /\bopen\s*position/i
783    describe OPENPOS        open positions
784    score OPENPOS           3
785    
786    # don 2008-02-23
787    header EBAYMEMBER       subject =~ /message from ebay member/i
788    describe EBAYMEMBER     Message from ebay member
789    score EBAYMEMBER        4
790    
791    # blarson 2008-02-25
792    header RESPONSERES      subject =~ /\bResponse to Resume\b/i
793    describe RESPONSERES    Response to Resume
794    score RESPONSERES       3
795    
796    # blarson 2008-02-29
797    body INTCOMP            /^International company/
798    describe INTCOMP        International company
799    score INTCOMP           3
800    
801    # blarson 2008-03-04
802    header VIAGPHRA         subject =~ /\b(?:She want|in bed|love heaven|My hormones|the person|damn goood|more sexy|all night|seven heaven|pounds off|away pounds|She wants|beautiful women)\b/i
803    describe VIAGPHRA       misc spam phrases
804    score VIAGPHRA          4
805    
806    # blarson 2008-03-05
807    body SEXHEALTH          /\bSexual Health/i
808    describe SEXHEALTH      Sexual Health
809    score SEXHEALTH         4
810    
811    # blarson 2008-03-12
812    header ADEGREE          subject =~ /\b(a|some|quick)\s+degree\b/i
813    describe ADEGREE        a degree
814    score ADEGREE           3
815    
816    # blarson 2008-03-12
817    rawbody PZIP            /\bfilename\=\"\w\w?\.zip\"/
818    describe PZIP           p.zip
819    score PZIP              3
820    
821    # blarson 2008-03-13
822    header RETWO            subject =~ /RE\:(?: [ab][a-z\']+){2,3}\s*$/
823    describe RETWO          RE: bogus arbitrary
824    score RETWO             2
825    
826    # don 2008-03-17
827    full SUBBODYREP         /Subject: (?:RE\:\s*)?([a-z]+)\s+([a-z]+)(?:\s+[a-z]+)\n.+\1\2/i
828    describe SUBBODYREP     Repeated word in subject and body without spaces
829    score SUBBODYREP        3
830    
831    # don 2008-03-19
832    full MYMSNNAMEIS        /(?:add\s+me\s+on|my)\s+(?:msn|(?:live|msn|)\s*mess?enger|aim|aol|screen)\s+(?:name\s+)?(?:is)?\s+\S+\@\S+/i
833    describe MYMSNNAMEIS    My screen name is foo@bar.com
834    score MYMSNNAMEIS       2.5
835    
836    # blarson 2008-03-20
837    body LONGWURL           /^[\w\-]{11,}\s+http\:\/\/[\w\.\-]{4,}\s*$/
838    describe LONGWURL       longWord URL
839    score LONGWURL          2
840    
841    # blarson 2008-03-20
842    header ITCSTORE         subject =~ /ITC Store/
843    describe ITCSTORE       ITC Store
844    score ITCSTORE          4
845    
846    # blarson 2008-03-26
847    header GENDER           subject =~ /\b(?:she|her|wom[ae]n|m[ae]n|girls?|males?|females?|herself|wife|ladies|lady|wives|(?:girl|boy)friends?)\b/i
848    describe GENDER         gender pronoun in subject
849    score GENDER            1
850    
851    # blarson 2008-03-28
852    body REBODY             /^re\:\s/
853    describe REBODY         re: in body
854    score REBODY            2
855    
856    # blarson 2008-04-01
857    header REREHI           subject =~ /^Re: Re: H(i|ello)\s*$/i
858    describe REREHI         Re: Re: Hi
859    score REREHI            3
860    
861    # blarson 2008-04-10
862    header PEROFF           subject =~ /\d+\%\s+off\b/i
863    describe PEROFF         xx% off
864    score PEROFF            3
865    
866    # blarson 2008-04-10
867    header SUMHERE          subject =~ /\b(?:summer|winter|fall|spring) is here\b/i
868    describe SUMHERE        summer is here
869    score SUMHERE           3
870    
871    # don 2008-04-24
872    header INVITATIONFROM   subject =~ /^\s*Invitation\s*from\s*\w+\s*$/i
873    describe INVITATIONFROM Invitation from Spammer
874    score INVITATIONFROM    5
875    
876    # blarson 2008-04-28
877    header RERE             subject =~ /^Re\:\s+Re\:\s+/i
878    describe RERE           Re: Re:
879    score RERE                      1
880    
881    # don 2008-04-30
882    header CLAIMTICKETS     subject =~ /claim.+ticket/i
883    describe CLAIMTICKETS   Blah blah claim ticket
884    score CLAIMTICKETS      4
885    
886    # don 2008-05-05
887    header WAITINGREPLY     subject =~ /waiting for your? (reply|to repsond|response)/i
888    describe WAITINGREPLY   Waiting for your reply
889    score WAITINGREPLY      4
890    
891    # don 2008-05-15
892    body CONTACTUS          /contact us by email:/
893    score CONTACTUS         3
894    describe CONTACTUS      Don't contact us, we'll spam you
895    
896    # don 2008-06-18
897    header FASHION          subject =~ /(?:(?:armani|gucci|chanel|boss|versache|ugg|dsquared)(?:\,\s*|$)){2,}/i
898    describe FASHION        Fashion designers in subject
899    score FASHION           2
900    
901    # don 2008-07-30
902    header SCOUR            subject =~ /Scour(?:.com)? invite from/
903    describe SCOUR          Scour invite from some spammer
904    score SCOUR             3
905    
906    # don 2008-09-04
907    body  YOURNAME          /\d+\)\s*y+o+u+r+\s*n+a+m+e+/
908    describe YOURNAME       1) your name is spam
909    score YOURNAME          3
Legend:
Removed from v.38  
changed lines
  Added in v.240
  ViewVC Help
Powered by ViewVC 1.1.5