score POPTHIS 3
# blarson 2008-02-24
-full BLUEPILL /\bblue.?pill/i
+full BLUEPILL /\bblue.?(?:pill|med)/i
describe BLUEPILL blue pill
score BLUEPILL 3
full LEGALWEED /\bLegal WEED\b/
describe LEGALWEED Legal WEED
score LEGALWEED 4
+
+# blarson 2008-03-21
+header PUSSY subject =~ /\b(?:pussy|cum|naked|g(?:-|\s*)?spot|nipple|manhood|one(?:-|\s+)eyed\s+monster|orgasm|breast|vibrator|penis|porno|Tittie)s?\b/i
+describe PUSSY pussy
+score PUSSY 2
score ADEGREE 3
# blarson 2008-03-12
-rawbody PZIP /\bfilename\=\"\w\.zip\"/
+rawbody PZIP /\bfilename\=\"\w\w?\.zip\"/
describe PZIP p.zip
score PZIP 3
full MYMSNNAMEIS /(?:add\s+me\s+on|my)\s+(?:msn|(?:live|msn|)\s*mess?enger|aim|aol|screen)\s+(?:name\s+)?(?:is)?\s+\S+\@\S+/i
describe MYMSNNAMEIS My screen name is foo@bar.com
score MYMSNNAMEIS 2.5
+
+# blarson 2008-03-20
+body LONGWURL /^[\w\-]{11,}\s+http\:\/\/[\w\.\-]{4,}\s*$/
+describe LONGWURL longWord URL
+score LONGWURL 2
+
+# blarson 2008-03-20
+header ITCSTORE subject =~ /ITC Store/
+describe ITCSTORE ITC Store
+score ITCSTORE 4
describe SCIJOURNALS scientific journals
score SCIJOURNALS 4
+# blarson 2008-03-19
+body JANEHOT /\bjane\d[\w\d]*\@hotmail\.com\s*$/
+describe JANEHOT jane*@hotmail.com
+score JANEHOT 3
+
+# blarson 2008-03-20
+rawbody BIFUTRA /\b(?:bifutra|veriapoli|xenifeao|toporaig|jieros|bifreca|werikine|incroomise|genbullenst|writeprovide)(?:\.|\=2E)com\b/
+describe BIFUTRA spammer web sites
+score BIFUTRA 4