From f6d55eaea1939d8524427886e55beb247e30f5d0 Mon Sep 17 00:00:00 2001
From: Hanno 'Rince' Wagner <github@rince.de>
Date: Tue, 4 Apr 2017 14:20:45 +0200
Subject: [PATCH] add another phrase for Users List-Spam

---
 common/phrase_spam | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/common/phrase_spam b/common/phrase_spam
index 3cb7497..45d3dab 100644
--- a/common/phrase_spam
+++ b/common/phrase_spam
@@ -1093,10 +1093,17 @@ describe SEOCOM SEO Company
 
 # rince 2017-03-30
 header USERSLIST_HEADER1 Subject =~ /\bUsers\bList/i
+describe USERSLIST_HEADER1 Check wether Subject contains 'Users List'
 rawbody USERSLIST_BODY1 /\<div dir=3D\"ltr\"\>\<p class=3D\"MsoNormal\" style=3D\"background-image:/
+describe USERSLIST_BODY1 First potential Spam reconnaissance: style of HTML
 rawbody USERSLIST_BODY2 /\<\/span\>\<span style=3D\"color\:rgb\(219,219,219\)\"\>If you don=E2=80=99t want/
+describe USERSLIST_BODY2 second potential Spam reconnaissance: style of HTML
 rawbody USERSLIST_BODY3 /A Quick Follow up to you that if you are interested in/i
+describe USERSLIST_BODY3 third potential Spam reconnaissance: text phrases
 rawbody USERSLIST_BODY4 /we also have other technology users like: aws, tripod seat, Jira,/i
-meta META_USERSLIST (( USERSLIST_HEADER1 + USERSLIST_BODY1 + USERSLIST_BODY2 ) || ( USERSLIST_HEADER1 + USERSLIST_BODY3 + USERSLIST_BODY4 ) > 1 )
+describe USERSLIST_BODY4 fourth potential Spam reconnaissance: text phrases
+rawbody USERSLIST_BODY5 /Please let me know your thoughts so that I can send you cost of the list./i
+describe USERSLIST_BODY5 fifth potential Spam reconnaissance: text phrases
+meta META_USERSLIST (( USERSLIST_HEADER1 + USERSLIST_BODY1 + USERSLIST_BODY2 ) || ( USERSLIST_HEADER1 + USERSLIST_BODY3 + USERSLIST_BODY4 ) || ( USERSLIST_HEADER1 + USERSLIST_BODY5 )  > 1 )
 describe META_USERSLIST Question for a Users List
 score META_USERSLIST 0.5
-- 
2.39.2