/[pkg-listmaster]/trunk/spamassassin_config/common/url_spam
ViewVC logotype

Diff of /trunk/spamassassin_config/common/url_spam

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 105 by don, Sat Nov 17 02:22:25 2007 UTC revision 221 by don, Fri Jun 13 19:21:43 2008 UTC
# Line 66  describe CANDYHOS      spams from korea, host Line 66  describe CANDYHOS      spams from korea, host
66  score CANDYHOS          5  score CANDYHOS          5
67    
68  # blarson 2005-12-08  # blarson 2005-12-08
69    # don 2007-11-21 -- combine other rule; increment score
70  body GEOCITIES          /http\:\/\/.*geocities/i  body GEOCITIES          /http\:\/\/.*geocities/i
71  describe GEOCITIES      geocities url  describe GEOCITIES      geocities url
72  score GEOCITIES         1.6  score GEOCITIES         2.5
73    
74  # blarson 2005-12-24  # blarson 2005-12-24
75  body EMPTYURL           /\bhttp:\/\/(?:www\.)?$/i  body EMPTYURL           /\bhttp:\/\/(?:www\.)?$/i
# Line 116  describe BESTLOANS     Best loans url Line 117  describe BESTLOANS     Best loans url
117  score BESTLOANS         2  score BESTLOANS         2
118    
119  # blarson 2007-07-22 2007-09-12  # blarson 2007-07-22 2007-09-12
120  body PENPRO             /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell|thegloveworks|asiafriendworld)\.info\b/i  body PENPRO             /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell|thegloveworks|asiafriendworld|NaturalImprove|charmshine|healthinsweb)\.info\b/i
121  describe PENPRO         penmailpro spam  describe PENPRO         penmailpro spam
122  score PENPRO            3.5  score PENPRO            3.5
123    
# Line 156  describe SPAMARREST    forwards thier spam Line 157  describe SPAMARREST    forwards thier spam
157  score SPAMARREST        4  score SPAMARREST        4
158    
159  # blarson 2007-09-14  # blarson 2007-09-14
160  body FROMAD             /\bhttp\:\/\/(?:budhipps|fromad|conavel|cliensy|comnoe)\.com\b/i  body FROMAD             /\bhttp\:\/\/(?:budhipps|fromad|conavel|cliensy|comnoe|mybudshop)\.com\b/i
161  describe FROMAD         more penis spam  describe FROMAD         more penis spam
162  score FROMAD            4  score FROMAD            4
163    
 # blarson 2007-09-14  
 uridnsbl URIBL_CNKR     cn-kr.blackholes.us.    A  
 body    URIBL_CNKR      eval:check_uridnsbl('URIBL_CNKR')  
 describe URIBL_CNKR     china or korea hosted web site  
 tflags  URIBL_CNKR      net  
 score URIBL_CNKR        2.5  
   
 # blarson 2007-09-14  
 uridnsbl_skip_domain    debian.org debian.net  
   
 # blarson 2007-09-14  
 uridnsbl        URIBL_SBL       sbl.spamhaus.org.       A  
 body            URIBL_SBL       eval:check_uridnsbl('URIBL_SBL')  
 describe        URIBL_SBL       Contains an URL listed in the SBL blocklist  
 tflags          URIBL_SBL       net  
 #reuse          URIBL_SBL  
 score           URIBL_SBL       3.5  
   
164  # blarson 2007-09-17  # blarson 2007-09-17
165  body MYCHEAP            /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)+(?:now|ware)?(?:(?:4|for)?less)?\d*\s*\.\s*com\b/i  body MYCHEAP            /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)+(?:now|ware)?(?:(?:4|for)?less)?\d*\s*\.\s*com\b/i
166  describe MYCHEAP        software spam  describe MYCHEAP        software spam
# Line 235  score PLATSOFT         4 Line 218  score PLATSOFT         4
218  # blarson 2007-10-22  # blarson 2007-10-22
219  body BLOGSPOT           /\bblogspot\.com\b/i  body BLOGSPOT           /\bblogspot\.com\b/i
220  describe BLOGSPOT       spammers are hosting on blogspot  describe BLOGSPOT       spammers are hosting on blogspot
221  score BLOGSPOT          2  score BLOGSPOT          3
222    
223  # blarson 2007-10-25  # blarson 2007-10-25
224  body PILLUS             /PILL-US\.COM\b/i  body PILLUS             /PILL-US\.COM\b/i
# Line 252  body MASZON            /mc?a(szon|yvidol|ttk)\.(co Line 235  body MASZON            /mc?a(szon|yvidol|ttk)\.(co
235  describe MASZON         pron spam  describe MASZON         pron spam
236  score MASZON            4  score MASZON            4
237    
 # blarson 2007-10-26  
 full GEOCITIES          /\bhttp\:\/\/geocities\.com\b/i  
 describe GEOCITIES      http://geocities.com/  
 score GEOCITIES         1  
238    
239  # blarson 2007-10-27  # blarson 2007-10-27
240  body GMAIL              /\@gmail\.com\b/i  body GMAIL              /\@gmail\.com\b/i
# Line 283  describe HANOIFASH     WWW.HANOI-FASHION.COM Line 262  describe HANOIFASH     WWW.HANOI-FASHION.COM
262  score HANOIFASH         4  score HANOIFASH         4
263    
264  # blarson 2007-11-06  # blarson 2007-11-06
265  body ONLINEMED          /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix)\s*\.\s*com\b/i  body ONLINEMED          /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i
266  describe ONLINEMED      onlinemedicalkey.com  describe ONLINEMED      onlinemedicalkey.com
267  score ONLINEMED         4  score ONLINEMED         4
268    
# Line 295  score GETUP            4 Line 274  score GETUP            4
274  # blarson (pusling's idea) 2007-11-16  # blarson (pusling's idea) 2007-11-16
275  body SPACECOM           /^[\w\d]+\s\.\scom\b/  body SPACECOM           /^[\w\d]+\s\.\scom\b/
276  describe SPACECOM       whatever . com  describe SPACECOM       whatever . com
277  score SPACECOM          2  score SPACECOM          3
278    
279    # don -- flowgoaway.com doesn't appear to be a working RBL anymore (if it ever was?)
280    # blarson 2007-11-20
281    # uridnsbl URIBL_FLO    flowgoaway.com. A
282    # body  URIBL_FLO       eval:check_uridnsbl('URIBL_FLO')
283    # describe URIBL_FLO    web site in flowgoaway.com
284    # tflags        URIBL_FLO       net
285    # score URIBL_FLO               1
286    
287    # blarson 2007-11-20
288    body SOFTROU            /\bwww\.softrou\.com\b/i
289    describe SOFTROU        www.softrou.com
290    score SOFTROU           3
291    
292    # blarson 2007-11-20
293    body GOOGLEPAGES        /\bgooglepages\.com\b/i
294    describe GOOGLEPAGES    spammers use googlepages
295    score GOOGLEPAGES       2
296    
297    # blarson 2007-12-07
298    body SOFTBESTGRAND      /\bsoft(?:bestgrand|wareonlinemuch)\.com\b/
299    describe SOFTBESTGRAND  softbestgrand.com
300    score SOFTBESTGRAND     4
301    
302    # blarson 2007-12-10
303    body PCSOFTCHEAP        /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow|softnowpromohere|primenetsofthe|nowinstantsoftieq|isktesoft|best(?:oem|soft|software)2008|new2008(?:soft|oem|software)|fastez(?:soft|oem|software)|ezfast(?:oem|soft|software)|2008(?:micro)?softdeals|oemfactorysale|nbuysoft|softnuhere|softsale2008|softwintersale|blatnoyoem|svedsoft|gsxoempromo|getmicrosoftfast|adobeoemsale|xp4(?:cheap|less)|xpoemnow|buycheapxp|alloem4less|lun(?:soft|oem|software)|(?:new|fast)xp(?:soft|oem|software)|frukanoka|softcheap(?:n[eo]w|xp)|adobe(?:web|blog|new)(?:soft|spot|deal))\s?\.\s?(?:com|net)\b/
304    describe PCSOFTCHEAP    pcsoftcheap. com
305    score PCSOFTCHEAP       4
306    
307    # blarson 2007-12-11
308    body GOLDGAME           /\b(?:gamblingplacegold|goldgamesite|topgamingsite|richbestgaming|luxgoldgaming)\.(?:net|com)\b/
309    describe GOLDGAME       gambling sites
310    score GOLDGAME          4
311    
312    # blarson 2007-12-14
313    body ENLARGETW          /\b(?:enlarge|0rz)\.tw\b/
314    describe ENLARGETW      enlarge.tw
315    score ENLARGETW         4
316    
317    # blarson 2007-12-15
318    body POSTTHROUGH        /\b(?:postthrough|speedgrand|certaincoast)\.com\b/
319    describe POSTTHROUGH    postthrough.com
320    score POSTTHROUGH       4
321    
322    # blarson 2007-12-25
323    body UHAVE              /\b(?:uhavepost|happy(?:santa)?|newyear|familypost|fresh|post)cards?-?(?:2008)?\.com\b/
324    describe UHAVE          uhavepostcard.com
325    score UHAVE             4
326    
327    # blarson 2007-12-26
328    body RUSSWIFE           /\b(?:your|best|new|the|my)(?:russ[il]an?|address|russ)(?:wife|bride)\.info\b/
329    describe RUSSWIFE       yourrussianwife.info
330    score RUSSWIFE          4
331    
332    # blarson 2007-12-31
333    body HAPPY2008          /\b(?:happy2008toyou|hellosanta2008|hohoho2008|santawishes2008)\.com\b/
334    describe HAPPY2008      happy2008toyou.com
335    score HAPPY2008         4
336    
337    # blarson 2008-01-02
338    body BONGHIT            /\b(?:beaverbonghits|dobongworld)\.com\b/
339    describe BONGHIT        beaverbonghits.com
340    score BONGHIT           4
341    
342    # blarson 2008-01-02
343    body GOOGLESEARCH       /\bgoo+gle\.(com|\w\w|com?\.\w\w)\/+(?:search|pagead)/i
344    describe GOOGLESEARCH   google search URL
345    score GOOGLESEARCH      2
346    
347    # blarson 2008-01-02
348    body SIGAS              /\b(?:Sigashash|Reelhotsi|Erisgoonti|Erisgoners|Freesignsies|Rielhotties|Foredroons|Feeshoons|Erisgant|hapburge|wuimooed|jiuezdoo|goingoinghom|buloies|Poeshages|Rueshabesoo|clitoriseries|clitorina|glueplot|crumbtost|ideaputs)(?:\.|\=2E)com\b/
349    describe SIGAS          www.Sigashash.com
350    score SIGAS             4
351    
352    # blarson 2008-01-05
353    body RUSSIABRIDE        /\bruss[il]an?(bride|wife)(?:home|live|blog|)\.info\b/
354    describe RUSSIABRIDE    russiabridehome.info
355    score RUSSIABRIDE       4
356    
357    # blarson 2008-01-14
358    body REDMEHS            /\bwww\.(?:redmehs|feltas|barataslo|quasibot|tageshes|flessimo|spendhope|instrumentstart)\b/
359    describe REDMEHS        www.redmehs
360    score REDMEHS           4
361    
362    # blarson 2008-01-15
363    body MYURL              /\bmyurl\.com\.tw\b/i
364    describe MYURL          myurl.com.tw
365    score MYURL             3
366    
367    # blarson 2008-01-28
368    body W0MEN              /w0men\.info\b/i
369    describe W0MEN          hotw0men.info ukrw0men.info
370    score W0MEN             3
371    
372    # blarson 2008-01-29
373    body ACEMST             /\bacemst\.com\b/
374    describe ACEMST         acemst.com
375    score ACEMST            3
376    
377    # blarson 2008-02-01
378    body GALSINFO           /\b(?:foreigngals|californiaimprove)\.info\b/i
379    describe GALSINFO       foreigngals.info
380    score GALSINFO          3
381    
382    # blarson 2008-02-06
383    body RIDGEST            /\bridgest\.com\b/
384    describe RIDGEST        ridgest.com
385    score RIDGEST           4
386    
387    # blarson 2008-02-16
388    body SOFTROI            /\bsoft(?:roi|ove)\.com\b/
389    describe SOFTROI        softroi.com
390    score SOFTROI           4
391    
392    # don 2008-02-23
393    body FILEZONE           /(file-zone.co.uk|File-Zone)/
394    describe FILEZONE       File-Zone
395    score FILEZONE          2
396    
397    # blarson 2008-02-28
398    body X2J1F              /\b2j1f\.com\b/i
399    descrIbe X2J1F          2j1f.com
400    score X2J1F             4
401    
402    # blarson 2008-02-28
403    body ILVE               /\bilveant\.net\b/i
404    describe ILVE           www.ilveant.net
405    score ILVE              4
406    
407    # don 2008-03-04
408    body  VIDEOFILBMS       /www\.videofilbms\.cn/i
409    describe VIDEOFILBMS    video filbms url
410    score    VIDEOFILBMS    4
411    
412    # blarson 2008-03-05
413    body ABESOFT            /\bca.abesoft\.com\b/i
414    describe ABESOFT        www.cazabesoft.com etc.
415    score ABESOFT           4
416    
417    # blarson 2008-03-06
418    body STARLEYT           /\bstarleyt\.com\b/i
419    describe STARLEYT       starleyt.com
420    score STARLEYT          4
421    
422    # blarson 2008-03-07
423    body URLOEM             /\bhttp\:\/\/\{/
424    describe URLOEM         http://{urloem2}
425    score URLOEM            3
426    
427    # blarson 2008-03-12
428    body WILDERGO           /\b(?:WilderGoLovan|golovable|BestGolova|SuperGolovaWorld)\.com\b/i
429    describe WILDERGO       WilderGoLovan.com
430    score WILDERGO          4
431    
432    # don 2008-03-17
433    body PROGOLD            /\bprogold-inc\.com\b/i
434    describe PROGOLD        progold-inc.com
435    score PROGOLD           4
436    
437    # blarson 2008-03-18
438    body KMINU              /\b(?:kminutte|rubstream)\.com\b/i
439    describe KMINU          kminutte.com
440    score KMINU             4
441    
442    # don 2008-03-19
443    body SCIJOURNALS        /\bsciencejournals\.info\b/i
444    describe SCIJOURNALS    scientific journals
445    score SCIJOURNALS       4
446    
447    # blarson 2008-03-19
448    body JANEHOT            /\bjane\d[\w\d]*\@hotmail\.com\s*$/
449    describe JANEHOT        jane*@hotmail.com
450    score JANEHOT           3
451    
452    # blarson 2008-03-20
453    rawbody BIFUTRA         /\b(?:bifutra|veriapoli|xenifeao|toporaig|jieros|bifreca|werikine|incroomise|genbullenst|writeprovide)(?:\.|\=2E)com\b/
454    describe BIFUTRA        spammer web sites
455    score BIFUTRA           4
456    
457    # don 2008-04-02
458    body LONGLINEURL        /^.{55,}\S\shttp:\/\/www\.\w+\.(?:com|net|org)\/\s*$/
459    describe LONGLINEURL    long line ending in a simple url
460    score LONGLINEURL       2
461    
462    # don 2008-04-07
463    uri MYTHANKYOUURI       /www\.mythankyou\.com/i
464    describe MYTHANKYOUURI  www.mythankyou.com
465    score MYTHANKYOUURI     5
466    
467    # blarson 2008-04-09
468    uri SAMEAS              /\bsupersameas\.com\b/
469    describe SAMEAS         supersameas.com
470    score SAMEAS            3
471    
472    # blarson 2008-04-12
473    body URIEXE             /\bhttp:\S*\.exe\b/
474    describe URIEXE         .exe url
475    score URIEXE            3
476    
477    # blarson 2008-04-24
478    uri SANSATION           /\b(?:sansationel|garmenys|iconaliste)\.com\b/i
479    describe SANSATION      sansationel.com
480    score SANSATION         4
481    
482    # blarson 2008-05-04
483    body EQMEDS             /\beqmeds\b/i
484    describe EQMEDS         eqmeds
485    score EQMEDS            4
486    
487    # blarson 2008-05-06
488    uri MYLIVE                      /\bmylivegi\b/i
489    describe MYLIVE         mylivegirlx.com
490    score MYLIVE            4
491    
492    # don 2008-05-26
493    body BROKENURL          /^\s*www((\s+\.\s*)|(\s*\.\+))\S+((\s+\.\s*)|(\s*\.\+))(com|net|org)\s*$/
494    describe BROKENURL      Broken url displayed
495    score BROKENURL         4
496    
497    body STUPIDURL         /\w+\[\w+\](?:com|net|org)/;
498    describe STUPIDURL     No one will guess that fooo[DOT]com is an URL!
499    score STUPIDURL        2.5
Legend:
Removed from v.105  
changed lines
  Added in v.221
  ViewVC Help
Powered by ViewVC 1.1.5