X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Furl_spam;h=532b91c23c26ff5c3934f2961526b31751eaf677;hp=ee94172695e3f51373456b0f4d301fd3dcd9a99c;hb=9c75c4a53709fd4ce638b42d928815a9c81692fc;hpb=50fbb11558de33317d03d5c0b8554f02e5c9db70 diff --git a/common/url_spam b/common/url_spam index ee94172..532b91c 100644 --- a/common/url_spam +++ b/common/url_spam @@ -157,28 +157,10 @@ describe SPAMARREST forwards thier spam problem score SPAMARREST 4 # blarson 2007-09-14 -body FROMAD /\bhttp\:\/\/(?:budhipps|fromad|conavel|cliensy|comnoe)\.com\b/i +body FROMAD /\bhttp\:\/\/(?:budhipps|fromad|conavel|cliensy|comnoe|mybudshop)\.com\b/i describe FROMAD more penis spam score FROMAD 4 -# blarson 2007-09-14 -uridnsbl URIBL_CNKR cn-kr.blackholes.us. A -body URIBL_CNKR eval:check_uridnsbl('URIBL_CNKR') -describe URIBL_CNKR china or korea hosted web site -tflags URIBL_CNKR net -score URIBL_CNKR 2.5 - -# blarson 2007-09-14 -uridnsbl_skip_domain debian.org debian.net yahoo.com google.com - -# blarson 2007-09-14 -uridnsbl URIBL_SBL sbl.spamhaus.org. A -body URIBL_SBL eval:check_uridnsbl('URIBL_SBL') -describe URIBL_SBL Contains an URL listed in the SBL blocklist -tflags URIBL_SBL net -#reuse URIBL_SBL -score URIBL_SBL 3.5 - # blarson 2007-09-17 body MYCHEAP /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)+(?:now|ware)?(?:(?:4|for)?less)?\d*\s*\.\s*com\b/i describe MYCHEAP software spam @@ -318,7 +300,7 @@ describe SOFTBESTGRAND softbestgrand.com score SOFTBESTGRAND 4 # blarson 2007-12-10 -body PCSOFTCHEAP /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow|softnowpromohere|primenetsofthe|nowinstantsoftieq|isktesoft|best(?:oem|soft|software)2008|new2008(?:soft|oem|software)|fastez(?:soft|oem|software)|ezfast(?:oem|soft|software)|2008(?:micro)?softdeals|oemfactorysale|nbuysoft|softnuhere|softsale2008|softwintersale|blatnoyoem|svedsoft|gsxoempromo|getmicrosoftfast|adobeoemsale|xp4(?:cheap|less))\s?\.\s?(?:com|net)\b/ +body PCSOFTCHEAP /\b(?:pcsoftcheap|cheapezsoft|cheapsoftxp|adobe4cheap|phonowa|saleonsoftware|bestdealoem|realcheapsoft|krasniyles|cheapxp4pc|supercheapoem|lowpriceoem|realcheapoem|cheapadobedeal|softwarefoundation|2008oem|xpxmas|cheap2008soft|snowysoftware|2008adobe|adobe2008|cheapgetsoftone|x(?:higher|main|prime)(?:soft|software|easy)|softonlinepc|andsoftware|softonlinedownload|kunchakoem|erhere\w|kiroemch|phonowd|cheap(?:soft|oem|software)here|softwarenowprox|xprosoftonlinedl|siniyglaz|popandosoem|xsoftprodepot|triudava|krasniynos|fastsoftnow|cheapeasy(soft|oem|software)|ezadobenow|softnowpromohere|primenetsofthe|nowinstantsoftieq|isktesoft|best(?:oem|soft|software)2008|new2008(?:soft|oem|software)|fastez(?:soft|oem|software)|ezfast(?:oem|soft|software)|2008(?:micro)?softdeals|oemfactorysale|nbuysoft|softnuhere|softsale2008|softwintersale|blatnoyoem|svedsoft|gsxoempromo|getmicrosoftfast|adobeoemsale|xp4(?:cheap|less)|xpoemnow|buycheapxp|alloem4less)\s?\.\s?(?:com|net)\b/ describe PCSOFTCHEAP pcsoftcheap. com score PCSOFTCHEAP 4 @@ -443,7 +425,7 @@ describe URLOEM http://{urloem2} score URLOEM 3 # blarson 2008-03-12 -body WILDERGO /\b(?:WilderGoLovan|golovable)\.com\b/i +body WILDERGO /\b(?:WilderGoLovan|golovable|BestGolova|SuperGolovaWorld)\.com\b/i describe WILDERGO WilderGoLovan.com score WILDERGO 4 @@ -451,3 +433,28 @@ score WILDERGO 4 body PROGOLD /\bprogold-inc\.com\b/i describe PROGOLD progold-inc.com score PROGOLD 4 + +# blarson 2008-03-18 +body KMINU /\b(?:kminutte|rubstream)\.com\b/i +describe KMINU kminutte.com +score KMINU 4 + +# don 2008-03-19 +body SCIJOURNALS /\bsciencejournals\.info\b/i +describe SCIJOURNALS scientific journals +score SCIJOURNALS 4 + +# blarson 2008-03-19 +body JANEHOT /\bjane\d[\w\d]*\@hotmail\.com\s*$/ +describe JANEHOT jane*@hotmail.com +score JANEHOT 3 + +# blarson 2008-03-20 +rawbody BIFUTRA /\b(?:bifutra|veriapoli|xenifeao|toporaig|jieros|bifreca|werikine|incroomise|genbullenst|writeprovide)(?:\.|\=2E)com\b/ +describe BIFUTRA spammer web sites +score BIFUTRA 4 + +# don 2008-04-02 +body LONGLINEURL /^.{55,}\S\shttp:\/\/www\.\w+\.(?:com|net|org)\/\s*$/ +describe LONGLINEURL long line ending in a simple url +score LONGLINEURL 2