1 # Added some rules from Rule du Jour that I've been testing for a while
3 #Monotone (from airmax.cf)
4 body MONOTONE_WORDS_2_15 /^([a-z]{2,20}[\s\.]+){15}/
5 describe MONOTONE_WORDS_2_15 Lines with many (long) lowercase words (15+ words, 2+ letters)
6 body MONOTONE_WORDS_2_30 /^([a-z]{2,20}[\s\.]+){30}/
7 describe MONOTONE_WORDS_2_30 Lines with many (long) lowercase words (30+ words, 2+ letters)
8 body MONOTONE_WORDS_3_20 /^([a-z]{3,20}[\s\.]+){20}/
9 describe MONOTONE_WORDS_3_20 Lines with many (long) lowercase words (20+ words, 3+ letters)
10 body MONOTONE_WORDS_5_8 /^([a-z]{5,20}[\s\.]+){8}/
11 describe MONOTONE_WORDS_5_8 Lines with many (long) lowercase words (8+ words, 5+ letters)
12 body MONOTONE_WORDS_5_12 /^([a-z]{5,20}[\s\.]+){12}/
13 describe MONOTONE_WORDS_5_12 Lines with many (long) lowercase words (12+ words, 5+ letters)
14 body MONOTONE_WORDS_5_20 /^([a-z]{5,20}[\s\.]+){20}/
15 describe MONOTONE_WORDS_5_20 Lines with many (long) lowercase words (20+ words, 5+ letters)
17 # Lots of auto-responders seem to have this
18 body MDO_AUTORESP1 /online form/i
19 score MDO_AUTORESP1 0.1
21 body MDO_AUTORESP2 /large amount of (spam|virus)/i
22 score MDO_AUTORESP2 0.1
24 body MDO_AUTORESP3 /(electronically|automatically) (generated|created) (email|ack)/i
25 score MDO_AUTORESP3 0.1
27 body MDO_AUTORESP4 /(respond|answer) your enquiry/i
28 score MDO_AUTORESP4 0.1
30 body MDO_AUTORESP5 /(email|enquiry) has been received/i
31 score MDO_AUTORESP5 0.1
33 body MDO_AUTORESP6 /will be answered within/i
34 score MDO_AUTORESP6 0.1
36 body MDO_AUTORESP7 /the e-mail address to which you have written does not support incoming messages/i
37 score MDO_AUTORESP7 0.1
39 meta MDO_AUTORESP_META1 (MDO_AUTORESP1 + MDO_AUTORESP2 + MDO_AUTORESP3 + MDO_AUTORESP4 + MDO_AUTORESP5 + MDO_AUTORESP6 + MDO_AUTORESP7) > 1
40 score MDO_AUTORESP_META1 2.0
42 body MURPHY_DIPLOMA /Diploma/
43 describe MURPHY_DIPLOMA No Diploma
44 score MURPHY_DIPLOMA 1
46 body MURPHY_CALORIES /calories/
47 describe MURPHY_CALORIES No Calories
48 score MURPHY_CALORIES 1
50 header MURPHY_CONTENT_GIF Content-Type =~ /image\/gif/
51 describe MURPHY_CONTENT_GIF Content contains image/gif
52 score MURPHY_CONTENT_GIF 1
54 # cable tv spam -- pasc 04/05/11-12
55 body MDO_CABLE_TV1 /pay.?per.?view/i
56 score MDO_CABLE_TV1 0.5
58 body MDO_CABLE_TV2 /mature.?channel/i
59 score MDO_CABLE_TV2 0.5
61 body MDO_CABLE_TV3 /c(\@|a)ble/i
62 score MDO_CABLE_TV3 0.5
64 body MDO_CABLE_TV4 /rem(o|0)te.?control/i
65 score MDO_CABLE_TV4 0.5
67 meta MDO_CABLE_META1 (MDO_CABLE_TV1 || MDO_CABLE_TV2 || MDO_CABLE_TV4) && (MDO_CABLE_TV3)
68 describe MDO_CABLE_META1 Too much cable stuff
69 score MDO_CABLE_META1 3
71 header MDO_TAGSPAM1 Subject =~ /Unknown Tag *free* Please Fix/
74 body MDO_BAD_WORD1 /PORTFOLIO/i
75 score MDO_BAD_WORD1 2.8
77 # blarson, 2004-04-30 -> lists --pasc 04/05/11
78 body AFFILIATEID /affiliate.?id/i
79 describe AFFILIATEID affiliate id
83 header REFWD subject =~ /\b(?:RE|FWD?|AW)(?:\[\d+\])?\:\s*$/i
84 describe REFWD re or fwd nothing
88 header ONEWORD subject =~ /^(?:Fw:|re:)?\s*\S+\s*$/i
89 describe ONEWORD one word subject
92 # robot101, 2003-09-22
93 header CROSSWALK X-UnityUser =~ /^Crosswalk.com, Inc/
94 describe CROSSWALK Crosswalk bible mailing list
97 header CROSSWALK_SPAM From =~ /Crosswalk/
98 describe CROSSWALK_SPAM Crosswalk Spam
99 score CROSSWALK_SPAM 1
102 header BOMDIA Subject =~ /Bom dia /
103 describe BOMDIA Bom dia, usually some Romanic language spam
106 header RCVD_FROM_UNCONF_HOST Received =~ /^from localhost.localdomain/
107 describe RCVD_FROM_UNCONF_HOST Mail comes from a host with unconfigured mailer daemon
108 score RCVD_FROM_UNCONF_HOST 2
111 body ECOSPAM /Corridas de Toros para los turistas Ingleses en Barcelona/
112 describe ECOSPAM Eco-spam all right
115 # cjwatson, 2003/02/24
116 body SPANISH_FORM_CGI /Este formulario fue enviado por/
117 describe SPANISH_FORM_CGI "Below is the result of your feedback form", eh?
118 score SPANISH_FORM_CGI 4.0
121 body TRAFFICMAGNET /Become a TrafficMagnet Reseller/
122 describe TRAFFICMAGNET SpamMagnet
123 score TRAFFICMAGNET 4
126 header BKR Subject =~ /^bkr/
127 describe BKR bkr spam
131 header RISEANDSHINE Subject =~ /^Rise and Shine in 15 minutes/
132 describe RISEANDSHINE Rise and Shine in 15 minutes spam
136 header UNIVDIP Subject =~ /U N I V E R S I T Y . D I P L O M A S/i
137 describe UNIVDIP university diplomas spam
141 header YOUTHERE Subject =~ /^(Re: )?You/i
142 describe YOUTHERE Who, me? Likely spam
145 # cjwatson, 2003-11-20
146 header HOUSECLEANING Subject =~ /^Affordable Housecleaning Service/
147 describe HOUSECLEANING let's clean out the spam instead
148 score HOUSECLEANING 3
150 # cjwatson, 2003-12-11
151 header OTC_FIRST Subject =~ /OTC FIRST ALERT/
152 describe OTC_FIRST OTC spam
156 body AVAILABLENOW /available now/i
157 describe AVAILABLENOW must be selling some shit
160 # cjwatson, 2004-01-16
161 body TEDIOUS_WITTER /If not i included it below so let me know if you like it/
162 describe TEDIOUS_WITTER annoying wittering spam, mypillsource.com I think
163 score TEDIOUS_WITTER 2
165 # cjwatson, 2004-03-12
167 header UNI_DIPLOMA Subject =~ /\b(university|college)\s+(diploma|cert|degree)/i
168 describe UNI_DIPLOMA Got one, thanks
172 body UNI2 /university\s+(diploma|cert|degree)/i
173 describe UNI2 Got one, thanks
177 body UNI3 /(?:(?:masters|batchelor|m\s*b\s*a\s*|ph\.?\s*d)\s*[,.]?\s*){2,}/i
178 describe UNI3 multiple types of degrees
181 # cjwatson, 2004-03-12
182 header JOB_CONFIRM Subject =~ /Job confirmation/
183 describe JOB_CONFIRM Got one of these too, thanks
187 header MESSAGESUB subject =~ /^\s*\(?message\s*(subject)?\)?$/i
188 describe MESSAGESUB really descriptive subject
192 header SENTMESSAGE subject =~ /(sent you a( personal|) message|would like to chat)/i
193 describe SENTMESSAGE Sent you a message (like duh?)
196 # blarson 2006-03-16 2007-09-18 not working, replaced 2007-12-08
197 # body DEARDIGIT /^(?:well\s+)?(?:Dear|Hey|H[ea]y?ll?.?o|To|Attention|Hi+|Hey+a?|Bonjorno|(?:Yo\s*)+|(?:g[o0]+d\s*)?(?:d?ay|morning|evening?|afternoon|night)|what.?i?s\s+up|wa(?:s|z)+up|greetings?|Salutations|(Mail|News)\s+to|how(?:.?s|\s+is)?\s*(?:(?:it)?(?:\s+is)??\s*going|have\s+you\s+been|are you).?\s*(?:there|to\s+you)?|compliments|Regards|Adieu)\,?\s+(?:Account\s+\#?|\=?3d|)(?:bro|there|sir|Mr\.?)\s*?\d{3,}/i
198 body DEARDIGIT /^\s*(?:Good\s*)?(?:evenin|night|day|hi|hello|greetin|Compliment|Wa[sz]+up|dear|Regard|Mornin|(?:yo\s*)+)[sg]?\s+(?:there\s+)?\d{3,}/i
199 describe DEARDIGIT Dear number
203 header SIZEMATTERS subject =~ /^S.ze matters$/i
204 describe SIZEMATTERS Size matters spammer
207 # cjwatson 2005-01-02
208 header RNDMX subject =~ /^<rndmx/
209 describe RNDMX weird empty spam
213 header VERIFYCAT subject =~ /verifycation mail/
214 describe VERIFYCAT verifycation spam
218 header D0WNLOAD subject =~ /\bd[o0]wn[l1][o0]ad.*(?:m[o0]v[i1]e|mp3|tune|music)/i
219 describe D0WNLOAD download spam
223 header REDUCESPAM subject =~ /Reduce Spam\b/i
224 describe REDUCESPAM reduce spam spam
228 body DIRT /\.(?:the|\d|)dirty?\d+\.info\//
229 describe DIRT dirty spammer
233 body RNDWORD /^RND_WORD\s*$/
234 describe RNDWORD RND_WORD
238 header D3GREE subject =~ /\bd(?:3gres?|esgre|eerge|eeerg|reege|egres)e?s?\b/i
239 describe D3GREE Want a used paper from someone who can't spell
243 body FINALNOTE /\bfinal\s+notif/i
244 describe FINALNOTE yet another final notification
248 header HIITS subject =~ /\bHi\! It\'s\b/i
249 describe HIITS hi its
253 header GOTONE subject =~ /\bgot one$/i
254 describe GOTONE got this spam already
258 body IMMEDIATEREV /^ATTENTION- For your immediate review:/
259 describe IMMEDIATEREV immediate discard
263 body CLIENTALERT /^(?:CLIENT ALERT|ATTENTION CLIENT)/i
264 describe CLIENTALERT client alert
267 # cjwatson 2005-10-20
268 header DEBIANTUX23 From =~ /DebianTux23|wieseltux23/i
269 describe DEBIANTUX23 Linux spammer, sigh
273 body SHITBRO /^\s*sh[i1]+t\s+bro/i
274 describe SHITBRO shitty spam
278 header POPPROG subject =~ /popular programs for everyday use/i
279 describe POPPROG unpopular spam
283 body GREET /^\%(?:GREET|EXIT)/
284 describe GREET broken spamware
288 header WROTE subject =~ /\bwrote\:\s*$/i
289 describe WROTE stock scam
292 body DEGREE_SPAM /earn.+degree.+transcripts/i
293 describe DEGREE_SPAM earn a degree with transcripts spam
294 score DEGREE_SPAM 2.5
297 body BLUEPILL /blue pill/i
298 describe BLUEPILL Blue pill spam
302 header PHOTOQUEST subject =~ /question about your photo/i
303 describe PHOTOQUEST questioning photo
307 body KBDP /Knowledge Based Degree Program/i
308 describe KBDP degree spam
312 body CRITERIAHAS /\bOur criteria has changed\b/i
313 describe CRITERIAHAS Diploma salesman with bad english
317 body TORA08 /\b\d{6} \d{7} \d{6} \d \d{7} \d{7}/
318 describe TORA08 TORA.08 spam
322 body SERIOUSBRO /^Seriously bro\b/i
323 describe SERIOUSBRO Seriously bro
327 body INSETET /\bwilson\@insitetcnologia\.com\.br\b/
328 describe INSETET please send spammer
332 body USUARIO /\bEl usuario destinatario no es un usuario valido/
333 describe USUARIO No such user -- sent in infinite loop
337 body NOMAILRECBI /no recibi tu mail/i
338 describe NOMAILRECBI No recbi of mail -- was closing way to many bugs
342 header URHELP subject =~ /\bi need ur help\b/
343 describe URHELP blank spam
347 header ACRO8PR0 subject =~ /\bAcr[0o]bat\s*[78]\s+(?:PR[0O]\b|\$?\d+\$?)/i
348 describe ACRO8PR0 sales spam
352 body WBRS /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N|C\W?A\W?O\W?N|Cwtd|N\W?C\W?S\W?H|F\W?R\W?L\W?E|M\W?A\W?K\W?U|d\W?m\W?h\W?n|T\W?R\W?T\W?M|[Ee]\W?[Tt]\W?[Gg]\W?[Uu]|P\W?E\W?R\W?T|EWIN|SXB\.F)\b/
353 describe WBRS stock spam
356 body FOURLA /\b([A-Z]\s?){4}\b/
357 describe FOURLA Four letter acronym (stock spam?)
360 meta STOCKLIKE (FOURLA && (MONEY || SUBJMONEY))
361 describe STOCKLIKE Four letter acronyms with money; stock scam
365 header ACROBAT8 subject =~ /\badobe acr[o0]bat 8\b/i
366 describe ACROBAT8 more sales spam
370 header VLSTA subject =~ /VlSTA|0FFlCE|ACR0B8T/i
371 describe VLSTA misspelled microshit software
375 header ANGEKUEN subject =~ /\bTrauer angekuendigt\b/
376 describe ANGEKUEN german spam
380 body INTCAFE /\binternet caff?e\b/i
381 describe INTCAFE internet cafe spam
385 header VERIFIC subject =~ /Your email requires verification/
386 describe VERIFIC some people prefer you get their spam
390 header WHITELIST subject =~ /You have been added to .* whitelist/
391 describe WHITELIST whitelist spam
395 body CASNIO /^Please be advised that your casnio account is still inactive/
396 describe CASNIO casnio account
400 header AUTOREPLY subject =~ /\bauto(?:mated|matic|)[\s-]+re(?:spon[cs]e|ply)\b/i
401 describe AUTOREPLY Automatic reply
405 body CONFSERV /^Thanks for using our confidential service/
406 describe CONFSERV confidential service
410 body CONTENC /^Confirmation has been enclosed/
411 describe CONTENC more pdf spam
415 header PHONE subject =~ /\b(tele)?phone\b/i
416 describe PHONE phone spam
420 body ASPDF /^We send our messages as Portable Document Format/
421 describe ASPDF more pdf spam
425 body DELAFT /Please delete your private message after reading/
426 describe DELAFT more pdf spam
430 header OFF1CE subject =~ /\b[O0Q]f+[1i7l|]ce\s*\W?2[O0Qk]+7\b/i
431 describe OFF1CE off1ce spam
435 header SOFTSALE subject =~ /\bsoftware sales\b/i
436 describe SOFTSALE software spam
440 body SUPERMACHO /\bBe a supermacho/i
441 describe SUPERMACHO supermacho
445 body BIGINTER /\bBig international commercial organization\b/i
446 describe BIGINTER job spam
450 header HASSENT subject =~ /\b(?:sent you a (?:personal|confidential)?\s*(?:message|note)|would like to chat)\b/i
451 describe HASSENT sent a message
455 header ORDERNUM subject =~ /\b(?:Order|Recipet)\s*.?\d{3,}/i
456 describe ORDERNUM order number
460 header DICTIONARYSEQ subject =~ /\b(\w{3})\w*(?:\s+\1\w*){2}/i
461 describe DICTIONARYSEQ Ventricular Vents Venting Ventures
462 score DICTIONARYSEQ 3.5
465 header NOLET subject =~ /^\W{4,}$/
466 describe NOLET swearing subject
470 body SSIST /^ssistant Manager/
471 describe SSIST ssistant Manager
475 body GRADUATEUNDER /\bgraduate in under\b/i
476 describe GRADUATEUNDER graduate in under
477 score GRADUATEUNDER 3
480 header NOINVEST subject =~ /\b(?:no investment|high.paid)\b/i
481 describe NOINVEST no investment
485 header INTEXP subject =~ /\b[I|]nternet Exp[l|]orer\b/i
486 describe INTEXP |nternet Exp|orer
490 header WORKATHOME subject =~ /work\Wat\Whome/i
491 describe WORKATHOME Work at home
495 body PHONENUMBER /\b1[\-\.\s]?8[07]+[\-\.\s]?\d+/
496 describe PHONENUMBER Toll free phone number
497 score PHONENUMBER 1.5
500 body GERMANSPAM /Zerix Intern/i
501 describe GERMANSPAM Um... no clue what that is.
504 body URBANNEWS /UrbaNNews\.ro/
505 describe URBANNEWS URBANNEWS Newsletter
509 header JOBS subject =~ /\b(?:job|Employ(?:ers|ment|ee))s?\b/i
510 describe JOBS job spam
514 header FREEPASSWORD subject =~ /your\s*free\s*password/i
515 describe FREEPASSWORD We don't need free password
519 header AFRICABYBIKE subject =~ /africa\s*by\s*bike/i
520 describe AFRICABYBIKE We don't care about africa by bike or car or bus or train
524 header BRAKETDIGIT subject =~ /\[\d+\]\:\s*$/
525 describe BRAKETDIGIT braketed digit colon last in subject
529 full WHATISOEM /\bWhat\s*is\s*OEM\b/i
530 describe WHATISOEM What is OEM
534 body WORKEXP /\bwork\s+experience\s+degree\b/i
535 describe WORKEXP work experience degree
539 body NICEGIRL /\b(?:nice|young|lonley|unmarried)\s+(?:girl|woman|female)\b/i
540 describe NICEGIRL nice girl
544 header FEALCHAT subject =~ /\bFeel Like Chatting\b/i
545 describe FEALCHAT Feel Like Chatting
549 header DFF1CE subject =~ /UmU6INDSydfF1CE/i
550 describe DFF1CE korean spam
554 header FAILNOTE subject =~ /\bFailure notice\:/i
555 describe FAILNOTE bounced spam
559 full STILLSINGLE /\bstill\s+single\b/i
560 describe STILLSINGLE still single
564 header PERSONALCRED subject =~ /\bPersonal\s+Credit/i
565 describe PERSONALCRED Personal Credit
569 body XMASGIFT /\b(?:christ|x)mas gift\b/
570 describe XMASGIFT christmas gift
574 body RONPAUL /\bRon Paul\b/
575 describe RONPAUL Ron Paul
579 body YOURJOB /your Job Verification Number/
580 describe YOURJOB your Job Verification Number
584 body PASTERESUME /\bPASTE your resume\b/i
585 describe PASTERESUME PASTE your resume
588 body LETHIHELO /\{Let\:HI,Hi,Hello,hEllo,heLlo,helLo,hellO,HEllo\} how are you/
589 describe LETHIHELO Hello, how are you
593 body DIREKTOR /Direktor of Softline/i
594 describe DIREKTOR Direktor of Softline
598 body THEDEG /\bthe_degree\b/
599 describe THEDEG the_degree
603 body DYNMH /D Y N A M I C M EDIA HOLDIN/
604 describe DYNMH D Y N A M I C M EDIA HOLDIN
608 header LEGBUD subject =~ /\b(?:Legal|smoking) Bud/i
609 describe LEGBUD Legal Bud
613 full LEGBUD2 /\b(?:Legal|smoking) Bud/i
614 describe LEGBUD2 Legal Bud
618 body SMOKING /\b(?:beat|stop|quit|without)\s+(?:nicotine|smoking|cigarettes)\b/i
619 describe SMOKING stop smoking
623 header WORKHOME subject =~ /\bwork\b.*\bhome\b/i
624 describe WORKHOME work from home
628 header HOMEWORK subject =~ /\bhome\b.*\b(?:work|business|job|based)\b/i
629 describe HOMEWORK home business
633 header REPRESENT subject =~ /\bRepresent(?:ative)?\b.*\b(?:Country|needed)\b/i
634 describe REPRESENT represent your country
638 header NOFEE subject =~ /\bNo\s+fee\b/i
639 describe NOFEE No fee
643 body NEEDED /\b(?:manager|executive)\b.*\bneeded\b/i
644 describe NEEDED manager needed
648 body CRETPROF /\b(?:creative|perceptive)\b.*\bprofessionals?\b/i
649 describe CRETPROF creative and perceptive professionals
653 body REMOVEDOT /\b(?:Remove|erase) the dot\b/i
654 describe REMOVEDOT Remove the dot
658 full VENTTRANS /\bVent Transports\b/
659 describe VENTTRANS Vent Transports
663 body HOLIDAYHERE /\bHolidays are here\b/i
664 describe HOLIDAYHERE Holidays are here
668 header CAPINIT subject =~ /^(?:Re:)?\s*(?:(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket|IWC|\&|Jaeger-LeCoultre)\s+)+(?:[A-Z][a-z-]+|PaintBrush|Jet (?:plane|fighter)|Tennis racquet|Leather jacket)\s*$/
669 describe CAPINIT Capinit Every Word
673 body REMOVESPACE /\b(?:remove|w\/o|without|delete) spaces?\b/i
674 describe REMOVESPACE w/o space
678 header BEAHERO subject =~ /Be a hero/
679 describe BEAHERO Be a hero
683 header SOFTCHEAP subject =~ /Soft and cheap/i
684 describe SOFTCHEAP Soft and cheap
688 body CHEAPSOFT /\bcheap (?:OEM)?\s*soft(?:ware)?/i
689 describe CHEAPSOFT cheap OEM soft
693 header MAKEMONEY subject =~ /\b(?:Make|need|extra)\s+(?:Cash|money|income)\b/i
694 describe MAKEMONEY Make Cash
698 header PREVED subject =~ /\bPreved\b/i
699 describe PREVED Preved
703 body YOURPROFILE /\byour profile\b/i
704 describe YOURPROFILE your profile
708 body SEEKEMP /\bseeking for employees\b/
709 describe SEEKEMP seeking for employees
713 body PRICELIST /(?m:^(?:adobe|microsoft|intuit|autodesk|symantec)\W.*\b\d{2,}$){3,}/i
714 describe PRICELIST list of prices
718 full OEMSOFT /\b[O0]EM\s+s[o0][\W_]?ft_?(?:w_?a_?r_?e)?\b/i
719 describe OEMSOFT OEM software
723 body MSSOFTWARE /Microsoft (Office Enterprise|Vista Ultimate)/i
724 describe MSSOFTWARE Microsoft Office Enterprise/Vista Ultimate
728 header NIGHTGIRL subject =~ /\bnight\b.*\bgirlfriend\b/
729 describe NIGHTGIRL night ... girlfriend
732 body SITESUBJECT /\bPlease see this site in Subject\b/i
733 describe SITESUBJECT Pls check this new site
737 header PLSCHECKSITE from =~ /\bPls check this new site\b/i
738 describe PLSCHECKSITE Pls check this new site
742 header MARRYCH subject =~ /\bMarry Christmas\b/
743 describe MARRYCH Marry Christmas
747 header BUYTHEPRODUCT subject =~ /Buy the product/i
748 describe BUYTHEPRODUCT Buy the product subject
749 score BUYTHEPRODUCT 3
752 body IBERIS /\bIberis Capital Group\b/
753 describe IBERIS Iberis Capital Group
757 header HIFROM subject =~ /\b(?:hello|hi)\s+from/i
758 describe HIFROM hello from
762 body INTCORP /\bInternational\s+corporation\b/i
763 describe INTCORP International corporation
767 header ISITYOU subject =~ /\bis it you\b/i
768 describe ISITYOU is it you
772 header CUSTOMERALERT subject =~ /\bCustomer alert\b/i
773 describe CUSTOMERALERT Customer alert
774 score CUSTOMERALERT 3
777 body SLASHITY /^\s*\/\/\/.*\\\\\\\s*$/
778 describe SLASHITY /// ... \\\
782 full OPENPOS /\bopen\s*position/i
783 describe OPENPOS open positions
787 header EBAYMEMBER subject =~ /message from ebay member/i
788 describe EBAYMEMBER Message from ebay member
792 header RESPONSERES subject =~ /\bResponse to Resume\b/i
793 describe RESPONSERES Response to Resume