X-Git-Url: https://git.donarmstrong.com/?p=spamassassin_config.git;a=blobdiff_plain;f=common%2Furl_spam;h=f9d3ab38f8a309232c9dfc4616ecdbdc58341662;hp=57c233b2747c32bc9f65d2a45995e638160eefd8;hb=c16762bdde5e2511c6a44cffe65b4195d4f1d6a4;hpb=652703901508da38854d07b3b53b6d231eff175f diff --git a/common/url_spam b/common/url_spam index 57c233b..f9d3ab3 100644 --- a/common/url_spam +++ b/common/url_spam @@ -115,13 +115,13 @@ body BESTLOANS /www.bestmortloans.com/i describe BESTLOANS Best loans url score BESTLOANS 2 -# blarson 2007-07-22 -body PENPRO /\@penmailpro\.info\b/i +# blarson 2007-07-22 2007-09-12 +body PENPRO /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell)\.info\b/i describe PENPRO penmailpro spam score PENPRO 3.5 -# blarson 2007-09-05 -body WWWCN /\bwww\.\w+\.cn\b/i +# blarson 2007-09-05 2007-09-11 +body WWWCN /\b(?:www\.|https?\:.*)\w+\.cn\b/i describe WWWCN chinese web site score WWWCN 3 @@ -135,3 +135,119 @@ body JUSTYAK /www\.JustYak\.com/ describe JUSTYAK JustSpam score JUSTYAK 4.0 +# blarson 2007-09-10 +body SIZMATZ /\bsize-matterz\.com\b/i +describe SIZMATZ size matterz +score SIZMATZ 3 + +# blarson 2007-09-10 +body EMAGX /\bhttp\:\/\/emagx\.net\b/i +describe EMAGX wondercum spammer +score EMAGX 3.5 + +# blarson 2007-09-13 +body FREENFL /\bhttp\:\/\/freeNFLtracker\.com\b/i +describe FREENFL nfl spam +score FREENFL 3 + +# blarson 2007-09-13 +body SPAMARREST /\bhttp\:\/\/www\.spamarrest\.com\b/ +describe SPAMARREST forwards thier spam problem +score SPAMARREST 4 + +# blarson 2007-09-14 +body FROMAD /\bhttp\:\/\/(?:budhipps|fromad|conavel|cliensy|comnoe)\.com\b/i +describe FROMAD more penis spam +score FROMAD 4 + +# blarson 2007-09-14 +uridnsbl URIBL_CNKR cn-kr.blackholes.us. A +body URIBL_CNKR eval:check_uridnsbl('URIBL_CNKR') +describe URIBL_CNKR china or korea hosted web site +tflags URIBL_CNKR net +score URIBL_CNKR 2.5 + +# blarson 2007-09-14 +uridnsbl_skip_domain debian.org debian.net + +# blarson 2007-09-14 +uridnsbl URIBL_SBL sbl.spamhaus.org. A +body URIBL_SBL eval:check_uridnsbl('URIBL_SBL') +describe URIBL_SBL Contains an URL listed in the SBL blocklist +tflags URIBL_SBL net +#reuse URIBL_SBL +score URIBL_SBL 3.5 + +# blarson 2007-09-17 +body MYCHEAP /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)(?:now|ware)?\s*\.\s*com\b/i +describe MYCHEAP software spam +score MYCHEAP 4 + +# blarson 2007-09-16 +body WWWRU /\b(?:www\.|https?\:.*)\w+\.ru\b/i +describe WWWRU russian web site +score WWWRU 2 + +# blarson 2007-09-24 +body VIPSMS /\bvipsms\.org\b/i +describe VIPSMS vipsms.org +score VIPSMS 4 + +# don 2007-10-01 +header MAKEUP subject =~ /makeup\.com/i +describe MAKEUP makeup.com url +score MAKEUP 3 + +# blarson 2007-10-04 +body SUBT /\bsubtracthold\.com\b/i +describe SUBT subtracthold.com +score SUBT 4 + +body GRAPHICMAIL /\bhttp\:\/\/www\.graphicmail\.de\b/i +describe GRAPHICMAIL graphicmail.de +score GRAPHICMAIL 4 + + +body WWWRO /\b(?:www\.|https?\:.*)\w+\.ro\b/i +describe WWWRO romanian web site +score WWWRO 2 + +# blarson 2007-10-10 +body CLEANDOM /http\:\/\/\{_clean_domains\}/ +describe CLEANDOM broken spamware +score CLEANDOM 4 + +# blarson 2007-10-11 +body SOFTNLSE /\bsoftnlse\s*\.\s*com\b/i +describe SOFTNLSE softnlse.com +score SOFTNLSE 4 + +# blarson 2007-10-13 +body MUSVID /\b(?:MusicAndVideoWorld|usa-bestsellers)\.com/i +describe MUSVID MusicAndVideoWorld.com +score MUSVID 4 + +# blarson 2007-10-16 +body PLATSOFT /\btheplatinumsoft\.com\b/i +describe PLATSOFT theplatinumsoft.com +score PLATSOFT 4 + +# blarson 2007-10-22 +body BLOGSPOT /\bblogspot\.com\b/i +describe BLOGSPOT spammers are hosting on blogspot +score BLOGSPOT 2 + +# blarson 2007-10-25 +body PILLUS /PILL-US\.COM\b/i +describe PILLUS PILL-US spam +score PILLUS 4 + +# blarson 2007-10-25 +body BETWEENTO /\bhttp\:\/\/betweento\.com\b/i +describe BETWEENTO betweento.com +score BETWEENTO 4 + +# don 2007-10-25 +body MASZON /maszon\.com/ +describe MASZON pron spam +score MASZON 4