| 115 |
describe BESTLOANS Best loans url |
describe BESTLOANS Best loans url |
| 116 |
score BESTLOANS 2 |
score BESTLOANS 2 |
| 117 |
|
|
| 118 |
# blarson 2007-07-22 |
# blarson 2007-07-22 2007-09-12 |
| 119 |
body PENPRO /\@penmailpro\.info\b/i |
body PENPRO /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline)\.info\b/i |
| 120 |
describe PENPRO penmailpro spam |
describe PENPRO penmailpro spam |
| 121 |
score PENPRO 3.5 |
score PENPRO 3.5 |
| 122 |
|
|
| 123 |
# blarson 2007-09-05 |
# blarson 2007-09-05 2007-09-11 |
| 124 |
body WWWCN /\bwww\.\w+\.cn\b/i |
body WWWCN /\b(?:www\.|https?\:.*)\w+\.cn\b/i |
| 125 |
describe WWWCN chinese web site |
describe WWWCN chinese web site |
| 126 |
score WWWCN 3 |
score WWWCN 3 |
| 127 |
|
|
| 135 |
describe JUSTYAK JustSpam |
describe JUSTYAK JustSpam |
| 136 |
score JUSTYAK 4.0 |
score JUSTYAK 4.0 |
| 137 |
|
|
| 138 |
|
# blarson 2007-09-10 |
| 139 |
|
body SIZMATZ /\bsize-matterz\.com\b/i |
| 140 |
|
describe SIZMATZ size matterz |
| 141 |
|
score SIZMATZ 3 |
| 142 |
|
|
| 143 |
|
# blarson 2007-09-10 |
| 144 |
|
body EMAGX /\bhttp\:\/\/emagx\.net\b/i |
| 145 |
|
describe EMAGX wondercum spammer |
| 146 |
|
score EMAGX 3.5 |
| 147 |
|
|
| 148 |
|
# blarson 2007-09-13 |
| 149 |
|
body FREENFL /\bhttp\:\/\/freeNFLtracker\.com\b/i |
| 150 |
|
describe FREENFL nfl spam |
| 151 |
|
score FREENFL 3 |
| 152 |
|
|
| 153 |
|
# blarson 2007-09-13 |
| 154 |
|
body SPAMARREST /\bhttp\:\/\/www\.spamarrest\.com\b/ |
| 155 |
|
describe SPAMARREST forwards thier spam problem |
| 156 |
|
score SPAMARREST 4 |
| 157 |
|
|
| 158 |
|
# blarson 2007-09-14 |
| 159 |
|
body FROMAD /\bhttp\:\/\/(?:budhipps|fromad|conavel|cliensy|comnoe)\.com\b/i |
| 160 |
|
describe FROMAD more penis spam |
| 161 |
|
score FROMAD 4 |
| 162 |
|
|
| 163 |
|
# blarson 2007-09-14 |
| 164 |
|
uridnsbl URIBL_CNKR cn-kr.blackholes.us. A |
| 165 |
|
body URIBL_CNKR eval:check_uridnsbl('URIBL_CNKR') |
| 166 |
|
describe URIBL_CNKR china or korea hosted web site |
| 167 |
|
tflags URIBL_CNKR net |
| 168 |
|
score URIBL_CNKR 2.5 |
| 169 |
|
|
| 170 |
|
# blarson 2007-09-14 |
| 171 |
|
uridnsbl_skip_domain debian.org debian.net |
| 172 |
|
|
| 173 |
|
# blarson 2007-09-14 |
| 174 |
|
uridnsbl URIBL_SBL sbl.spamhaus.org. A |
| 175 |
|
body URIBL_SBL eval:check_uridnsbl('URIBL_SBL') |
| 176 |
|
describe URIBL_SBL Contains an URL listed in the SBL blocklist |
| 177 |
|
tflags URIBL_SBL net |
| 178 |
|
#reuse URIBL_SBL |
| 179 |
|
score URIBL_SBL 3.5 |
| 180 |
|
|
| 181 |
|
# blarson 2007-09-17 |
| 182 |
|
body MYCHEAP /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)(?:now)?\s*\.\s*com\b/i |
| 183 |
|
describe MYCHEAP software spam |
| 184 |
|
score MYCHEAP 4 |
| 185 |
|
|
| 186 |
|
# blarson 2007-09-16 |
| 187 |
|
body WWWRU /\b(?:www\.|https?\:.*)\w+\.ru\b/i |
| 188 |
|
describe WWWRU russian web site |
| 189 |
|
score WWWRU 2 |
| 190 |
|
|
| 191 |
|
# blarson 2007-09-24 |
| 192 |
|
body VIPSMS /\bvipsms\.org\b/i |
| 193 |
|
describe VIPSMS vipsms.org |
| 194 |
|
score VIPSMS 4 |
| 195 |
|
|
| 196 |
|
# don 2007-10-01 |
| 197 |
|
header MAKEUP subject =~ /makeup\.com/i |
| 198 |
|
describe MAKEUP makeup.com url |
| 199 |
|
score MAKEUP 3 |
| 200 |
|
|
| 201 |
|
# blarson 2007-10-04 |
| 202 |
|
body SUBT /\bsubtracthold\.com\b/i |
| 203 |
|
describe SUBT subtracthold.com |
| 204 |
|
score SUBT 4 |
| 205 |
|
|
| 206 |
|
body GRAPHICMAIL /\bhttp\:\/\/www\.graphicmail\.de\b/i |
| 207 |
|
describe GRAPHICMAIL graphicmail.de |
| 208 |
|
score GRAPHICMAIL 4 |
| 209 |
|
|
| 210 |
|
|
| 211 |
|
body WWWRO /\b(?:www\.|https?\:.*)\w+\.ro\b/i |
| 212 |
|
describe WWWRO romanian web site |
| 213 |
|
score WWWRO 2 |
| 214 |
|
|
| 215 |
|
# blarson 2007-10-10 |
| 216 |
|
body CLEANDOM /http\:\/\/\{_clean_domains\}/ |
| 217 |
|
describe CLEANDOM broken spamware |
| 218 |
|
score CLEANDOM 4 |