X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Fphrase_spam;h=853842665be50ad772ec7d31683226d271103c08;hp=a41ddc8e28ba38619bccd4f78a6ad5138b93b322;hb=2414ab40f59bb0805ec0ba6b27f0d2626ec362cf;hpb=bfc723630de2173b3c9f7cd434972b40dc4d89fd

diff --git a/common/phrase_spam b/common/phrase_spam
index a41ddc8..8538426 100644
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -1091,3 +1091,28 @@ body SEOCOM /SEO Company/i
 score SEOCOM 2.5
 describe SEOCOM SEO Company
 
+# rince 2017-03-30
+header USERSLIST_HEADER1 Subject =~ /\bUsers\bList/i
+describe USERSLIST_HEADER1 Check wether Subject contains 'Users List'
+rawbody USERSLIST_BODY1 /\<div dir=3D\"ltr\"\>\<p class=3D\"MsoNormal\" style=3D\"background-image:/
+describe USERSLIST_BODY1 First potential Spam reconnaissance: style of HTML
+rawbody USERSLIST_BODY2 /\<\/span\>\<span style=3D\"color\:rgb\(219,219,219\)\"\>If you don=E2=80=99t want/
+describe USERSLIST_BODY2 second potential Spam reconnaissance: style of HTML
+rawbody USERSLIST_BODY3 /A Quick Follow up to you that if you are interested in/i
+describe USERSLIST_BODY3 third potential Spam reconnaissance: text phrases
+rawbody USERSLIST_BODY4 /we also have other technology users like: aws, tripod seat, Jira,/i
+describe USERSLIST_BODY4 fourth potential Spam reconnaissance: text phrases
+rawbody USERSLIST_BODY5 /Please let me know your thoughts so that I can send you cost of the list./i
+describe USERSLIST_BODY5 fifth potential Spam reconnaissance: text phrases
+meta META_USERSLIST (( USERSLIST_HEADER1 + USERSLIST_BODY1 + USERSLIST_BODY2 ) || ( USERSLIST_HEADER1 + USERSLIST_BODY3 + USERSLIST_BODY4 ) || ( USERSLIST_HEADER1 + USERSLIST_BODY5 )  > 1 )
+describe META_USERSLIST Question for a Users List
+score META_USERSLIST 0.5
+
+# rince 2017-04-11
+header OWNERSLIST_HEADER1 Subject =~ /\bOwners\bList/i
+describe OWNERSLIST_HEADER1 Check wether Subject contains 'Owners List'
+rawbody OWNERSLIST_BODY1 /The list of contacts are \*opt\-in verified\*/
+describe OWNERSLIST_BODY1 First potential Spam reconnaissance: verified opt-in lists
+meta META_OWNERSLIST ( (OWNERSLIST_HEADER1 + OWNERSLIST_BODY1 ) >1 )
+describe META_OWNERSLIST Questions for an Owners List
+score META_OWNERSLIST 0.5