add more matches for shipping spam

[spamassassin_config.git] / common / phrase_spam

diff --git a/common/phrase_spam b/common/phrase_spam
index 45d3dab1eee974ddcdb830a7d9212f155a5ed907..f9349e8cd741554e325f2d26cbf5e7a0686678b8 100644 (file)
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -1102,8 +1102,28 @@ rawbody USERSLIST_BODY3 /A Quick Follow up to you that if you are interested in/
 describe USERSLIST_BODY3 third potential Spam reconnaissance: text phrases
 rawbody USERSLIST_BODY4 /we also have other technology users like: aws, tripod seat, Jira,/i
 describe USERSLIST_BODY4 fourth potential Spam reconnaissance: text phrases
-rawbody USERSLIST_BODY5 /Please let me know your thoughts so that I can send you cost of the list./i
+rawbody USERSLIST_BODY5 /Please let me know your thoughts (so that I can send you cost of the list.|we will provide you the more information)/i
 describe USERSLIST_BODY5 fifth potential Spam reconnaissance: text phrases
 meta META_USERSLIST (( USERSLIST_HEADER1 + USERSLIST_BODY1 + USERSLIST_BODY2 ) || ( USERSLIST_HEADER1 + USERSLIST_BODY3 + USERSLIST_BODY4 ) || ( USERSLIST_HEADER1 + USERSLIST_BODY5 )  > 1 )
 describe META_USERSLIST Question for a Users List
 score META_USERSLIST 0.5
+
+# rince 2017-04-11
+header OWNERSLIST_HEADER1 Subject =~ /\bOwners\bList/i
+describe OWNERSLIST_HEADER1 Check wether Subject contains 'Owners List'
+rawbody OWNERSLIST_BODY1 /The list of contacts are \*opt\-in verified\*/
+describe OWNERSLIST_BODY1 First potential Spam reconnaissance: verified opt-in lists
+meta META_OWNERSLIST ( (OWNERSLIST_HEADER1 + OWNERSLIST_BODY1 ) >1 )
+describe META_OWNERSLIST Questions for an Owners List
+score META_OWNERSLIST 0.5
+
+# rince 2017-04-14
+header PRATT subject =~ /Pratt Is Now Earth Works Jacksonville/i
+score PRATT 4
+describe PRATT Pratt spam
+
+# rince 2017-04-15
+header PRATTFROM   From =~ /Pratt Brothers/
+describe PRATTFROM Pratt Brothers Spam
+score PRATTFROM  1
+