# blarson 2007-09-24
score INVALID_MSGID 3
+
+# blarson 2007-10-15
+score HABEAS_ACCREDITED_COI 1
score DRUGSPAM3 1.5
# blarson 2007-09-13
-body MURPHY_DRUGS1 /\bv.?i.?a.?g.?r.?a\b/i
+body MURPHY_DRUGS1 /\bv.?i.?a.?[gdk].?r.?a\b/i
describe MURPHY_DRUGS1 Viagra
score MURPHY_DRUGS1 1.5
header LETACCOUNT subject =~ /LET\:account,password,shop/i
describe LETACCOUNT Random Let:account spam
score LETACCOUNT 7
+
+# blarson 2007-10-16
+body HGH /\bh(?:uman)?g(?:rowth)?h(?:ormone)?\b/i
+describe HGH hgh
+score HGH 2
describe ANALLE stock spam in german
score ANALLE 3
-# blarson 2007-06-17 2007-09-21
-body REPWATCH2 /\breplica (?:watch|timepiece)/i
+# blarson 2007-06-17 2007-09-21 2007-10-20
+body REPWATCH2 /\breplic+a\s*(?:watch|timepiece)/i
describe REPWATCH2 still pushing fake watches
score REPWATCH2 3.5
body STOCKFRLE /\bFRLE\b/i
describe STOCKFRLE FRLE Stock Spam
score STOCKFRLE 3.4
+
+# blarson 2007-10-16
+body OPORTUNI /\bOportunidade de Emprego\b/i
+describe OPORTUNI Oportunidade de Emprego
+score OPORTUNI 3.5
-#
- Added some rules from Rule du Jour that I've been testing for a while
+# Added some rules from Rule du Jour that I've been testing for a while
#Monotone (from airmax.cf)
body MONOTONE_WORDS_2_15 /^([a-z]{2,20}[\s\.]+){15}/
score ACRO8PR0 4
# blarson 2007-10-05
-body WBRS /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U)\b/
+body WBRS /\b(WBRS|FPMC|ADYN|AFML|MISJ|HXPN|WHKA|CBFE|HSBC|PCAI|MPRG|HPRS|AUNI|TGVI|MHII|TAMG|GDKI|ACEN|CDYV|G7Q\.F|mbwc|CHFR|CDPN|DSDI|UTEV|P-S-U-D|GPSI|SGXI|CAON|SREA|ERMX|VPSN|SZSN|PAYI\.OB|LTDI|C\W\W?Y\W\W?T\W\W?V|E\WX\WM\WT|CYTV|VGPM|V\s?G\s?P\s?M(\.PK)?|wwng|WWNG|F\WD\WE\WG|FDEG|UTYW|M\s*I\s*H\s*I|O\W?N\W?C\W?O|P\W?P\W?Y\W?H|S\W?R\W?E\W?A|A\W?C\W?G\W?U|S\W?C\W?Y\W?F|C\W?H\W?V\W?C|D\W?M\W?X\W?C|F\W?R\W?L\W?E|M\W?A\W?K\W?U|C\W?W\W?T\W?E|F\W?R\W?L\W?E|M\W?X\W?X\W?R|P\W?R\W?T\W?H|A\W?L\W?L\W?U|C\W?W\W?T\W?D|T\W?A\W?D\W?F|D\W?M\W?H\W?N)\b/
describe WBRS stock spam
score WBRS 4
describe AFRICABYBIKE We don't care about africa by bike or car or bus or train
score AFRICABYBIKE 4
+# blarson 2007-10-14
+header BRAKETDIGIT subject =~ /\[\d+\]\:\s*$/
+describe BRAKETDIGIT braketed digit colon last in subject
+score BRAKETDIGIT 2
+
+# blarson 2007-10-14
+full WHATISOEM /\bWhat\s*is\s*OEM\b/i
+describe WHATISOEM What is OEM
+score WHATISOEM 4
+
+# blarson 2007-10-15
+body WORKEXP /\bwork\s+experience\s+degree\b/i
+describe WORKEXP work experience degree
+score WORKEXP 3
+
+# blarson 2007-10-15
+body NICEGIRL /\bnice\s+girl\b/i
+describe NICEGIRL nice girl
+score NICEGIRL 2
+
+# blarson 2007-10-16
+header FEALCHAT subject =~ /\bFeel Like Chatting\b/i
+describe FEALCHAT Feel Like Chatting
+score FEALCHAT 3
+
+# blarson 2007-10-18
+header DFF1CE subject =~ /UmU6INDSydfF1CE/i
+describe DFF1CE korean spam
+score DFF1CE 4
describe PRETTYGIRL pretty girls trying to seduce bugs
score PRETTYGIRL 2
+# blarson 2007-10-16
+body HAVESEX /\bhave\s+sex\b/i
+describe HAVESEX have sex
+score HAVESEX 3
+
# zobel 2007-10-14
body XXXBODY /xxx/i
describe XXXBODY Body containing xxx
score BESTLOANS 2
# blarson 2007-07-22 2007-09-12
-body PENPRO /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline)\.info\b/i
+body PENPRO /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell)\.info\b/i
describe PENPRO penmailpro spam
score PENPRO 3.5
body SOFTNLSE /\bsoftnlse\s*\.\s*com\b/i
describe SOFTNLSE softnlse.com
score SOFTNLSE 4
+
+# blarson 2007-10-13
+body MUSVID /\b(?:MusicAndVideoWorld|usa-bestsellers)\.com/i
+describe MUSVID MusicAndVideoWorld.com
+score MUSVID 4
+
+# blarson 2007-10-16
+body PLATSOFT /\btheplatinumsoft\.com\b/i
+describe PLATSOFT theplatinumsoft.com
+score PLATSOFT 4
+
+# blarson 2007-10-22
+body BLOGSPOT /\bblogspot\.com\b/i
+describe BLOGSPOT spammers are hosting on blogspot
+score BLOGSPOT 2