# various drugs match these rules # blarson, 2004-05-10 -> lists --pasc 04/05/11 body DRUGSPAM /(\b|_)(c.?(i|\?|\=ed|\xed).?a.?l.?[ig].?s|v.?(i|1|=ed|\xed).?[\a@].?g.?r.?a|v.?i.?c.?o.?d.?i.?n|h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e|[xz].?a.?n.?a.\?x|p.?r.?o.?z.?a.?c|rx|hgh)(\b|_)/i describe DRUGSPAM drug spam score DRUGSPAM 3 # blarson, 2004-05-10 -> lists --pasc 04/05/11 header DRUGSPAM2 subject =~ /(\b|_)(c.?(i|\?|\=ed|\xed).?a.?l.?[ig].?s|v\.?(i|1|=ed).?[a@].?g.?r.?a|v.?i.?c.?o.?d.?i.?n|h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e|\[xz].?a.?n.?a.?x|p.?r.?o.?z.?a.?c|rx|hgh)(\b|_)/i describe DRUGSPAM2 more drug spam score DRUGSPAM2 3 # More drugs! --pasc 2003-05-13 blarson 2007-09-12 body DRUGSPAM3 /\b(v.?i.?o.?x|x.?a.?n.?(a|@).?x|p.?h.?e.?n.?t.?r.?e.?m.?i.?n.?e|v.?i.?a.?g.?r.?a)/i describe DRUGSPAM3 yet more drugs score DRUGSPAM3 1.5 # blarson 2007-09-13 body MURPHY_DRUGS1 /\bv.?i.?a.?[gdk].?r.?a\b/i describe MURPHY_DRUGS1 Viagra score MURPHY_DRUGS1 1.5 body MURPHY_DRUGS2 /v.?i.?o.?x/i describe MURPHY_DRUGS2 Viox score MURPHY_DRUGS2 0.5 body MURPHY_DRUGS3 /F.?i.?o.?r.?i.?c.?e.?e.?t/i describe MURPHY_DRUGS3 Fioriceet score MURPHY_DRUGS3 0.5 body MURPHY_DRUGS4 /P.?h.?e.?n.?t.?(r.?e|e.?r).?m.?i.?n.?e/i describe MURPHY_DRUGS4 Phentremine score MURPHY_DRUGS4 0.5 body MURPHY_DRUGS5 /v.?a.?l.?i.?u.?m/i describe MURPHY_DRUGS5 Valium score MURPHY_DRUGS5 0.5 body MURPHY_DRUGS6 /x.?(a|@).?n.?a.?x/i describe MURPHY_DRUGS6 Xanax score MURPHY_DRUGS6 0.5 body MURPHY_DRUGS7 /v.?i.?c.?o.?d.?i.?n/i describe MURPHY_DRUGS7 Vicodin score MURPHY_DRUGS7 0.5 body MURPHY_DRUGS8 /h.?y.?d.?r.?o.?c.?o.?d.?o.?n.?e/i describe MURPHY_DRUGS8 Hydrocodone score MURPHY_DRUGS8 0.5 body MURPHY_DRUGS_REL1 /medication/i score MURPHY_DRUGS_REL1 0.5 body MURPHY_DRUGS_REL2 /P.?r.?e.?s.?c.?r.?i.?p.?t.?i.?o.?n/i score MURPHY_DRUGS_REL2 0.5 body MURPHY_DRUGS_REL3 /health product/i score MURPHY_DRUGS_REL3 0.5 body MURPHY_DRUGS_REL4 /drug.*expensive/i score MURPHY_DRUGS_REL4 0.5 body MURPHY_DRUGS_REL5 /p.?h.?a.?r.?m.?a.?c.?e.?u.?t.?i.?c.?a.?l/i score MURPHY_DRUGS_REL5 0.5 body MURPHY_DRUGS_REL6 /formula/i score MURPHY_DRUGS_REL6 0.2 body MURPHY_DRUGS_REL7 /dosing/i score MURPHY_DRUGS_REL7 0.2 body MURPHY_DRUGS_REL8 /patch/i score MURPHY_DRUGS_REL8 0.02 body MURPHY_DRUGS_REL9 /pill/i score MURPHY_DRUGS_REL9 0.2 body MURPHY_DRUGS_REL10 /bacteria/i score MURPHY_DRUGS_REL10 0.1 body MURPHY_DRUGS_REL11 /antidote/i score MURPHY_DRUGS_REL11 0.1 meta MURPHY_DRUGS_META1 (MURPHY_DRUGS1 + MURPHY_DRUGS2 + MURPHY_DRUGS3 + MURPHY_DRUGS4 + MURPHY_DRUGS5 + MURPHY_DRUGS6 + MURPHY_DRUGS7 + MURPHY_DRUGS8 + MURPHY_DRUGS_REL1 + MURPHY_DRUGS_REL2 + MURPHY_DRUGS_REL3 + MURPHY_DRUGS_REL4 + MURPHY_DRUGS_REL5 + MURPHY_DRUGS_REL9 + MURPHY_DRUGS_REL10 + MURPHY_DRUGS_REL11) > 1 score MURPHY_DRUGS_META1 3.0 meta MURPHY_DRUGS_META2 (MURPHY_DRUGS1 + MURPHY_DRUGS2 + MURPHY_DRUGS3 + MURPHY_DRUGS4 + MURPHY_DRUGS5 + MURPHY_DRUGS6 + MURPHY_DRUGS7 + MURPHY_DRUGS8 + MURPHY_DRUGS_REL1 + MURPHY_DRUGS_REL2 + MURPHY_DRUGS_REL3 + MURPHY_DRUGS_REL4 + MURPHY_DRUGS_REL5 + MURPHY_DRUGS_REL11 + MURPHY_DRUGS_REL10 + MURPHY_DRUGS_REL9) > 2 score MURPHY_DRUGS_META2 4.0 meta MURPHY_DRUGS_META3 (MURPHY_DRUGS_REL6 + MURPHY_DRUGS_REL7 + MURPHY_DRUGS_REL8 + MURPHY_DRUGS_REL9) > 1 score MURPHY_DRUGS_META3 2.0 meta DRUGS_STOCK_MIMEOLE (__MIMEOLE_1106 && __MAILER_OL_5510) header __MIMEOLE_1106 X-MimeOLE =~ /^Produced By Microsoft MimeOLE V6.00.2800.1106$/ header __MAILER_OL_5510 X-Mailer =~ /^Microsoft Office Outlook, Build 11.0.5510$/ describe DRUGS_STOCK_MIMEOLE Stock-spam forged headers found (5510) score DRUGS_STOCK_MIMEOLE 3 # More penis enlargement --pasc 061012 body M_BIGGER1 /gain \d inches/i score M_BIGGER1 5 # cjwatson, 2003/02/26 body AMAZINGHEALTHGROUP /www\.amazinghealthgroup\.com/ describe AMAZINGHEALTHGROUP Amazing Spam Group score AMAZINGHEALTHGROUP 4.0 # joy, 2003-09-16 body PHARMACYSPAM1 /http:\/\/www.pharmacy[^\.]+.biz/i describe PHARMACYSPAM1 pharmacy spam 1 score PHARMACYSPAM1 4 header PHARMACYSPAM2 Subject =~ /Best Discount Online Drugs/i describe PHARMACYSPAM2 pharmacy spam 2 score PHARMACYSPAM2 4 # joy, 2003-11-09 body PRESCRIPTION /prescription/i describe PRESCRIPTION pharmacy spam score PRESCRIPTION 2 body PHARMACY /pharmacy/i describe PHARMACY pharmacy spam score PHARMACY 1 body FDAAPPROVEDB /(USA?|FDA)( official)?[ -]approved/ describe FDAAPPROVEDB US FDA approved pharmacy spam score FDAAPPROVEDB 2 header FDAAPPROVEDS Subject =~ /(USA?|FDA)( official)?[ -]approved/ describe FDAAPPROVEDS US FDA approved pharmacy spam score FDAAPPROVEDS 3 # cjwatson, 2004-01-16 body MYPILLSOURCE /mypillsource\.com/ describe MYPILLSOURCE mypillsource.com spam score MYPILLSOURCE 4 # cjwatson, 2004-02-18 body HGH_PROVEN /HGH is proven to help/ describe HGH_PROVEN Yeah, sure score HGH_PROVEN 3 # cjwatson, 2004-02-22 header CIALGS Subject =~ /sug?per viagrga/ describe CIALGS Viagra derivative spam score CIALGS 4 # cjwatson, 2004-03-01, 2004-03-05 body LAY_THE_PIPE /the next (chick|girl) you (screw|bang)/ describe LAY_THE_PIPE Viagra spam score LAY_THE_PIPE 4 # blarson 2004-04-13 body SPERM /\bsperm/i describe SPERM fertility spam score SPERM 3 # blarson 2005-06-04 header MED subject =~ /\b(?:doctor|health|medic(?:al|ine))$/ describe MED medical spam score MED 2 # blarson 2006-09-25 2007-09-18 body HOODIA /\bh.?oo+dia/i describe HOODIA weight loss scam score HOODIA 3 # dla 2007-02-27 header PHARRMACY subject =~ /Can+adian\s+Fami+ly\s+Phar+macy/i describe PHARRMACY pharrmacy can't spell score PHARRMACY 3 # don 2007-05-20 body MALEENHANCE /male\s+enhan[c\(]e/i describe MALEENHANCE Enhanced males score MALEENHANCE 2 # blarson 2007-05-20 body SIZEMAT /\b(?:Does Size|size does) Matter\b/i describe SIZEMAT size matters spam score SIZEMAT 2 # blarson 2007-08-30 body SIZEMAT /\bsizematters\.cn\b/i describe SIZEMAT size matters score SIZEMAT 4 # blarson 2007-06-19 body ENLARGEPL /\benlargeplus\b/ describe ENLARGEPL more penis spam score ENLARGEPL 3 # blarson 2007-07-19 body PHYSCONS /^After this we will require a physician consultation/ describe PHYSCONS more php spam score PHYSCONS 3 # blarson 2007-08-12 body GETABIG /\bwww\.getabiggercock\.net\b/i describe GETABIG cock spam score GETABIG 4 # blarson 2007-09-11 body PHYLET /\bphysician (?:letter|questions?)\b/i describe PHYLET physician letter score PHYLET 3.5 # blarson 2007-09-11 body PEN1S /\bpen1s\b/i describe PEN1S pen1s score PEN1S 3 # blarson 2007-09-12 body PILLS /\bx\s+\d+\s+pills\b/ describe PILLS pills spam score PILLS 3.5 # blarson 2007-09-13 body PFIZER /\bP\W?f\W?i\W?z\W?e\W?r\b/i describe PFIZER Pfizer score PFIZER 3 # blarson 2007-09-19 body WONDERCUM /\bwondercum\b/i describe WONDERCUM more drug spam score WONDERCUM 4 # blarson 2007-09-21 body DRUGSTORE /\bdrug store\b/i describe DRUGSTORE drug store score DRUGSTORE 3 # zobel 2007-10-11 header LETACCOUNT subject =~ /LET\:account,password,shop/i describe LETACCOUNT Random Let:account spam score LETACCOUNT 7 # blarson 2007-10-16 body HGH /\bh(?:uman)?g(?:rowth)?h(?:ormone)?\b/i describe HGH hgh score HGH 2 # blarson 2007-10-23 body BRACKVIAG /\b\[V(?:\]\w\[)?I(?:\]\w\[)?A(?:\]\w\[)?G(?:\]\w\[)?R(?:]\w\[)?A\]\b/i describe BRACKVIAG [viagra] score BRACKVIAG 4 # blarson 2007-11-09 header PHARMORD subject =~ /\bPharmacy\b.*\border\b/i describe PHARMORD Pharmacy order score PHARMORD 4 # blarson 2007-11-12 body XTRASIZE /\bXtra\s*Size\b/i describe XTRASIZE more penis spam score XTRASIZE 2 # blarson 2007-11-14 header BIGORGAN subject =~ /\b(?:macro|sizeable|bouffant|colossal|elephantin|largish|gargantuan|vast|ample|broad|huge|size|significant|oversized|monolithic|hulky|voluminous|whopping|enormous|titanic|large|extended|bulky|humongous|outsize|puffy|prodigious|extended|sized|monstrous|wide|thumping|stupendous|gigantic|big|important|mountainous|immense|extended|plumping|tremendous|extensive|massive|sizable|conspicuous|prodigious|jumbo|monster|greatest|scale|immence|spacious|ranging|giant|biggish|outsized|whacking|fat|capacious|grand|intense|monumental|rangy|prominent|cosmic)\s+(?:body part|member|phallus|fuckstick|shlong|dick|shaft|penis|erectile|organ|cock|rod)\b/i describe BIGORGAN big body part score BIGORGAN 3