You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2008/11/26 19:51:02 UTC
svn commit: r720941 - /spamassassin/rules/trunk/sandbox/jm/20_sought.cf
Author: jm
Date: Wed Nov 26 10:51:02 2008
New Revision: 720941
URL: http://svn.apache.org/viewvc?rev=720941&view=rev
Log:
auto-generated test rules
Modified:
spamassassin/rules/trunk/sandbox/jm/20_sought.cf
Modified: spamassassin/rules/trunk/sandbox/jm/20_sought.cf
URL: http://svn.apache.org/viewvc/spamassassin/rules/trunk/sandbox/jm/20_sought.cf?rev=720941&r1=720940&r2=720941&view=diff
==============================================================================
--- spamassassin/rules/trunk/sandbox/jm/20_sought.cf (original)
+++ spamassassin/rules/trunk/sandbox/jm/20_sought.cf Wed Nov 26 10:51:02 2008
@@ -1,12 +1,12 @@
body __SEEK_HYBLP6 /discreetly packaged giving no /
body __SEEK_2NHNJL / by healthcare professionals, doctors,/
body __SEEK_ORGQVD /nd the top 3 Men\'s Magazines; /
-body __SEEK_OITJMI /een waiting for\. Amazing, incredible/
+body __SEEK_LMLABA / waiting for\. Amazing, incredible/
body __SEEK_5Q0LOR /zing, incredible shooting volume\./
body __SEEK_8DN7G3 /contents\.<br> <br> <strong><a href=/
body __SEEK_18BYVI /href=3D\"http:\/\/silverdistant\.com\">http:\/\/silverdistant\.com<\/a>= <\/strong> <\//
body __SEEK_RGNLHT /indication = of its contents\./
-body __SEEK_VG0L_U / <strong>\$114\.03<\/strong> - Your save: /
+body __SEEK_B_MJ19 /<strong>\$114\.03<\/strong> - Your save: /
body __SEEK_0GNRGK /<strong>\$84\.84<\/strong> - Your save: \$/
body __SEEK_JJ_XO7 / - <strong>\$43\.81<\/strong><br>/
body __SEEK_SBPDZY /<br> <strong>Ci\.<\/strong> .0p x 20 mg - <strong>\$/
@@ -19,8 +19,8 @@
body __SEEK_7NH2QU /As advertised on TV and FHM\. /
body __SEEK_QWICCM /ale verve and virility, with the/
body __SEEK_LZPIBQ /Recommended by leading Mens Magazines/
-body __SEEK_CVPTVR /- <strong>\$69\.96<\/strong><br>/
body __SEEK_3K8_ZG /------=_NextPart_000_0007_01C94B34\.D6BF1780--/
+body __SEEK_CVPTVR /- <strong>\$69\.96<\/strong><br>/
body __SEEK_1X6NCA / content=3D\"Microsoft Word 10\">/
body __SEEK_PDYN45 /name=3DGenerator content=3D\"Microsoft Word 1/
body __SEEK_IB235G /CONTENT=3D\"text\/html; charset=3Diso-885=/
@@ -40,17 +40,17 @@
body __SEEK_CVG_NI / Microsoft MimeOLE V5\.50\.4133\.2400/
body __SEEK_BPTRB3 /------=_NextPart_000_0007_01C94B34\.D6BF1780 Content-Type: text\/plain; charset=\"iso-8859-.\" Content-Transfer-Encoding: quoted-printable/
body __SEEK_MYJDXE / - <strong>\$69\.45<\/strong><br>/
-body __SEEK_M98_GZ /Content-transfer-encoding: 7bit X-Priority: 3 \(Normal\)/
-body __SEEK_UJ0RLE /Received: from \[92\.21\.252\.28\] by /
body __SEEK_U1YQMR /\. 10p x 100 mg \+ Ci\. 10p x 20 mg - \$69\.27/
+body __SEEK_UJ0RLE /Received: from \[92\.21\.252\.28\] by /
+body __SEEK_M98_GZ /Content-transfer-encoding: 7bit X-Priority: 3 \(Normal\)/
body __SEEK_D7C8_I /\+0000 From: \"Helena Green\" /
# passed hit-rate threshold: 1.0
-meta JM_SOUGHT_1 (__SEEK_HYBLP6 || __SEEK_2NHNJL || __SEEK_ORGQVD || __SEEK_OITJMI || __SEEK_5Q0LOR || __SEEK_8DN7G3 || __SEEK_18BYVI || __SEEK_RGNLHT || __SEEK_VG0L_U || __SEEK_0GNRGK || __SEEK_JJ_XO7 || __SEEK_SBPDZY || __SEEK_XK3X6X || __SEEK_BR8CYY || __SEEK_VKNNSP || __SEEK_GTS_8Y || __SEEK_RFXYDM || __SEEK_RU2Y_Z || __SEEK_7NH2QU || __SEEK_QWICCM || __SEEK_LZPIBQ || __SEEK_CVPTVR || __SEEK_3K8_ZG || __SEEK_1X6NCA || __SEEK_PDYN45 || __SEEK_IB235G || __SEEK_ND6MNS || __SEEK_YZDKLL || __SEEK_ZHEKP7 || __SEEK_PAXHEN || __SEEK_BP01R2 || __SEEK_QYLWQK || __SEEK_IOXL7T || __SEEK_FFKNQO || __SEEK_ALQNAA || __SEEK_LXMKUN || __SEEK_3J2UD4 || __SEEK_0QSMT4 || __SEEK_WH7TQG || __SEEK_CVG_NI || __SEEK_BPTRB3 || __SEEK_MYJDXE || __SEEK_M98_GZ || __SEEK_UJ0RLE || __SEEK_U1YQMR || __SEEK_D7C8_I)
+meta JM_SOUGHT_1 (__SEEK_HYBLP6 || __SEEK_2NHNJL || __SEEK_ORGQVD || __SEEK_LMLABA || __SEEK_5Q0LOR || __SEEK_8DN7G3 || __SEEK_18BYVI || __SEEK_RGNLHT || __SEEK_B_MJ19 || __SEEK_0GNRGK || __SEEK_JJ_XO7 || __SEEK_SBPDZY || __SEEK_XK3X6X || __SEEK_BR8CYY || __SEEK_VKNNSP || __SEEK_GTS_8Y || __SEEK_RFXYDM || __SEEK_RU2Y_Z || __SEEK_7NH2QU || __SEEK_QWICCM || __SEEK_LZPIBQ || __SEEK_3K8_ZG || __SEEK_CVPTVR || __SEEK_1X6NCA || __SEEK_PDYN45 || __SEEK_IB235G || __SEEK_ND6MNS || __SEEK_YZDKLL || __SEEK_ZHEKP7 || __SEEK_PAXHEN || __SEEK_BP01R2 || __SEEK_QYLWQK || __SEEK_IOXL7T || __SEEK_FFKNQO || __SEEK_ALQNAA || __SEEK_LXMKUN || __SEEK_3J2UD4 || __SEEK_0QSMT4 || __SEEK_WH7TQG || __SEEK_CVG_NI || __SEEK_BPTRB3 || __SEEK_MYJDXE || __SEEK_U1YQMR || __SEEK_UJ0RLE || __SEEK_M98_GZ || __SEEK_D7C8_I)
score JM_SOUGHT_1 4.0
describe JM_SOUGHT_1 Body contains frequently-spammed text patterns
-body __SEEK_G_8YGO /age in MIME format\. Internet Dr\. - original quality - 100\% Effectively/
body __SEEK_6RMH5J /0p x 100 mg \+ Ci\. 10p x 20 mg - \$69\.45/
+body __SEEK_G_8YGO /age in MIME format\. Internet Dr\. - original quality - 100\% Effectively/
body __SEEK_UBUUQ6 /MSHTML 5\.50\.4807\.1700\" name=3DGENERATOR>/
body __SEEK_IQ2YV0 / mg - \$84\.84 - Your save: \$= 3\.30 Ci\. 30p x 20 mg - \$114\.03 - Your save: = \$17\.60/
body __SEEK_VTVW06 / - Your save: = \$28\.05 Vi\. 60p x 100 mg - \$158\.07 - Your save:= \$97\.35/
@@ -58,37 +58,47 @@
body __SEEK_UNWQIU / its contents\. http:\/\/silverdistant\.com /
body __SEEK_EQUNTT /<strong>Vi\.<\/strong> .0p x 100 mg - <strong>\$/
body __SEEK_HQS_K_ /ESMTP ident=NXDOMAIN MAIL_FROM=/
-body __SEEK_SPH0_P /g \(qpsmtpd\/0\.43rc1\) with ESMTP ident=/
body __SEEK_RZA8FB /; boundary=\"----=_NextPart_000_0007_01C94B34\.D6BF1780\" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express .\..0\..80.\.1.0. X-MimeOLE: Produced By Microsoft MimeOLE V.\..0\..80.\.1.0/
+body __SEEK_SPH0_P /g \(qpsmtpd\/0\.43rc1\) with ESMTP ident=/
body __SEEK_S3YAIC / Nov 2008 19:22:59 -0200 From: /
body __SEEK_KVLJQM /NEW: Vi\. 10p x 100 mg \+ Ci\. 10p x 20 mg= - \$69\.96/
# passed hit-rate threshold: 0.5
-meta JM_SOUGHT_2 (__SEEK_G_8YGO || __SEEK_6RMH5J || __SEEK_UBUUQ6 || __SEEK_IQ2YV0 || __SEEK_VTVW06 || __SEEK_F879WA || __SEEK_UNWQIU || __SEEK_EQUNTT || __SEEK_HQS_K_ || __SEEK_SPH0_P || __SEEK_RZA8FB || __SEEK_S3YAIC || __SEEK_KVLJQM)
+meta JM_SOUGHT_2 (__SEEK_6RMH5J || __SEEK_G_8YGO || __SEEK_UBUUQ6 || __SEEK_IQ2YV0 || __SEEK_VTVW06 || __SEEK_F879WA || __SEEK_UNWQIU || __SEEK_EQUNTT || __SEEK_HQS_K_ || __SEEK_RZA8FB || __SEEK_SPH0_P || __SEEK_S3YAIC || __SEEK_KVLJQM)
score JM_SOUGHT_2 4.0
describe JM_SOUGHT_2 Body contains frequently-spammed text patterns
body __SEEK_E70LTJ /L 6\.00\.2800\.1106\" name=GENERATOR> /
-body __SEEK_8DPESL /------=_NextPart_000_0007_01C94B34\.D4F55400--/
body __SEEK_VECLP5 /META http-equiv=Content-Type content=\"text\/html; charset=iso-8859-1\"> /
body __SEEK_U5A04I / quoted-printable Internet Dr\. - original quality - 100\% Effectively/
+body __SEEK_8DPESL /------=_NextPart_000_0007_01C94B34\.D4F55400--/
body __SEEK_T_FO5B / 17:24:27 \+0000 Message-ID: <01c94b34\$d6bf1780\$1cfc155c\@/
body __SEEK_RXCRBH / <01...@sabrina> From: \"Carter Duffy\" /
-body __SEEK_JRTR4_ /or content=\"Microsoft Word 10\"> /
+body __SEEK_MM1IPP /content=\"Microsoft Word 10\"> /
+body __SEEK_SBUO2C / with SMTP ident=NXDOMAIN MAIL_FROM=<..r/
body __SEEK_XUZ3MY /e\" CONTENT=\"text\/html; charset=iso-8859-1\">/
-body __SEEK_QAMLHV /link rel=File-List href=\"cid:filelist\.xml\@0C7215A8\.D348D3B4\"> /
+body __SEEK_W4ZFJU /NEW: Vi\. 10p x 100 mg \+ Ci\. 10p x 20 mg= - \$69\.98/
+body __SEEK_MKPUHO /ink rel=File-List href=\"cid:filelist\.xml\@0C7215A8\.D348D3B4\"> /
+body __SEEK__G_WIS /\(qpsmtpd\/0\.43rc1\) with SMTP ident=/
body __SEEK_CFOHFN /ta name=ProgId content=Word\.Document> /
-body __SEEK_SBUO2C / with SMTP ident=NXDOMAIN MAIL_FROM=<..r/
body __SEEK_UALZMF /rel=Edit-Time-Data href=\"cid:editdata\.mso\@0C7215A8\.D348D3B4\"> /
body __SEEK_WPU1VI /<html xmlns:v=\"urn:schemas-microsoft-com:vml\" xmlns:o=\"urn:schemas-microsoft-com:office:office\" xmlns:w=\"urn:schemas-microsoft-com:office:word\" xmlns=\"http:\/\/www\.w3\.org\/TR\/REC-html40\">/
-body __SEEK_W4ZFJU /NEW: Vi\. 10p x 100 mg \+ Ci\. 10p x 20 mg= - \$69\.98/
-body __SEEK__G_WIS /\(qpsmtpd\/0\.43rc1\) with SMTP ident=/
body __SEEK_CV_DQL /Trap-Metadata: s=incl_fwds n=redist t/
-body __SEEK_E_LOYV / 1 00:00:00 2008 Trap-Metadata: s=inc/
+body __SEEK_NHVI26 /1 00:00:00 2008 Trap-Metadata: s=inc/
+body __SEEK_46ZJY7 / PayPal Email ID PP-19-322-187 /
+body __SEEK_VBRYUW / https:\/\/www\.paypal\.com\/us\/cgi-bin\/webscr\?cmd=_login-run/
+body __SEEK__L5RWM /If you choose not to complete the request, you give us no choice but to suspend your account temporary\./
+body __SEEK_17PEMV /If you received this notice and you are not the authorized account holder, please be aware that it is in violation of PayPal policy to represent oneself as an other PayPal user\.Such action may also be in violation of local, national, and\/or international law\. PayPal is committed to assist law enforcement with any inquires related attempts to missapropriate personal information with the intent to commit fraud or theft\. Information will be provided at the request or law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law\./
+body __SEEK_HWBAXV /If you recently accessed your account while traveling, the unusual log in attempts may have been initiated by you\. However if you are the rightful holder of the account,click on the link below to log into the account and follow the instructions\./
+body __SEEK_RH79QG /It takes at least 12 hours for the investigation in this case and we strongly recommend you to verify your account at that time\./
+body __SEEK_EXHR3L /PayPal Account Review Department\./
+body __SEEK_GWOSDO /PayPal Account Security Measures/
+body __SEEK_Q1Z9IG /Thanks for your patience as we work together to protect your account\./
+body __SEEK_XBH7DX /We recently noticed one or more attempts to log in to your PayPal account from a foreign IP address\./
body __SEEK_WIJLQP /MimeOLE V6\.00\.2800\.1106 This is a multi-part message in MIME format\. /
body __SEEK_QBGJ8Y /Viagra 50mg x 60 pills \$119\.95 price/
body __SEEK_RJE7KG /0 mg - Internet Dr\. - original quality - 100\% Effectively/
body __SEEK_MRIAFE /\" xmlns=\"http:\/\/www\.w3\.org\/TR\/REC-html40\"> Internet Dr\. - original quality - 100\% Effectively/
-meta JM_SOUGHT_3 (__SEEK_E70LTJ || __SEEK_8DPESL || __SEEK_VECLP5 || __SEEK_U5A04I || __SEEK_T_FO5B || __SEEK_RXCRBH || __SEEK_JRTR4_ || __SEEK_XUZ3MY || __SEEK_QAMLHV || __SEEK_CFOHFN || __SEEK_SBUO2C || __SEEK_UALZMF || __SEEK_WPU1VI || __SEEK_W4ZFJU || __SEEK__G_WIS || __SEEK_CV_DQL || __SEEK_E_LOYV || __SEEK_WIJLQP || __SEEK_QBGJ8Y || __SEEK_RJE7KG || __SEEK_MRIAFE)
+meta JM_SOUGHT_3 (__SEEK_E70LTJ || __SEEK_VECLP5 || __SEEK_U5A04I || __SEEK_8DPESL || __SEEK_T_FO5B || __SEEK_RXCRBH || __SEEK_MM1IPP || __SEEK_SBUO2C || __SEEK_XUZ3MY || __SEEK_W4ZFJU || __SEEK_MKPUHO || __SEEK__G_WIS || __SEEK_CFOHFN || __SEEK_UALZMF || __SEEK_WPU1VI || __SEEK_CV_DQL || __SEEK_NHVI26 || __SEEK_46ZJY7 || __SEEK_VBRYUW || __SEEK__L5RWM || __SEEK_17PEMV || __SEEK_HWBAXV || __SEEK_RH79QG || __SEEK_EXHR3L || __SEEK_GWOSDO || __SEEK_Q1Z9IG || __SEEK_XBH7DX || __SEEK_WIJLQP || __SEEK_QBGJ8Y || __SEEK_RJE7KG || __SEEK_MRIAFE)
score JM_SOUGHT_3 4.0
describe JM_SOUGHT_3 Body contains frequently-spammed text patterns