REMOVE_SUBJ /remove.{1,15}subject/i SUBJ_REMOVE /subject.{1,15}remove/i REPLY_REMOVE_SUBJECT /reply.{1,15}remove.{1,15}subject/i REMOVE_IN_QUOTES /\"remove\"/i BUGGY_CGI /Below is the result of your feedback form/ BUGGY_CGI_DE /Neue Mail aus dem Fitzshop Briefkasten/i BUGGY_CGI_DE_2 /Diese Mail wurde ubertragen von/i BUGGY_CGI_DE_3 /Diese Daten wurden Ihnen von Ihrem OnlineFormular/i BUGGY_CGI_ES /Aqui esta el resultado de su formulario/i BUGGY_CGI_PT_2 /E-mail adicional do usuario. Enviado/i BUGGY_CGI_PT /Abaixo o resultado do preenchimento do Formulario/ SENT_IN_COMPLIANCE /message .{0,10}sen(?:d|t) in compliance (?:of|with)/i PARA_A_2_C_OF_1618 /Paragraph .a.{0,10}2.{0,10}C. of S. 1618/i BILL_1618 /Bill.{0,10}1618.{0,10}TITLE.{0,10}III/i S_1618 /S..{0,10}1618.{0,10}-.{0,10}SECTION.{0,10}301/i SECTION_301 /SECTION.{0,10}301/i EU_EMAIL_OPTOUT /EU (?:e-?mail opt.?out|e.?commerce) directive/i EU_200_32_CE /Directive 200.32.CE/i POPLAUNCH /StealthLaunch PopLaunch.\s/ CHECK_OR_MONEY_ORDER /check or money order/i PRINT_OUT_AND_FAX /print\s+out\s+and\s+fax/i AMAZING /AMAZING/ GUARANTEE /GUARANTEE/ PROFITS /PROFITS/ NO_QS_ASKED /NO QUESTIONS ASKED/i FULL_REFUND /FULL REFUND/i FOR_FREE /\bfor FREE\b/i ONE_HUNDRED_PC_FREE /\b(?:100%|completely|totally|absolutely) FREE/i NO_COST /\bno (?:cost|charge)\b/i ONE_HUNDRED_PC_GUAR /100% GUARANTEED/i MONEY_MAKING /money making/i BULK_EMAIL /bulk e-*mail/i DEAR_EMAIL /Dear [A-Za-z0-9_-]+\@/ DEAR_FRIEND /Dear (?:Friend|IT\W|Internet)/i CASHCASHCASH /\${3,}/ CALL_NOW /CALL NOW/i CALL_FREE /\b(?:call|dial|toll free|order).{1,15}8(?:00|88|77|66|55|44|33|22)[\)\s-]*[\dA-Z]+[\s-]?[\dA-Z]+/i ONLINE_BIZ_OPS /online business opportunities/i BILLION_DOLLARS /[BM]ILLION DOLLAR/ OPT_IN /\bopt-in\b/i DIRECT_EMAIL /direct e-*mail\b/i MASS_EMAIL /mass e-*mail/i EMAIL_MARKETING /e-*mail marketing/i PRODUCED_AND_SENT_OUT /This a.?d is produced and sent out by/i INCREASE_SOMETHING /\b(?:boost|increase|grow|larger|bigger|higher) (?:traffic|sales)\b/i ONE_TIME_MAILING /this\b.{0,20}\b(?:one|1).time\b.{0,20}\b(?:(?:e-?)?mail|offer)/i SOCIAL_SEC_NUMBER /social security (?:number|record)/i TRACE_BY_SSN /Trace anyone by social security number/i INTL_EXEC_GUILD /International Executive Guild/ ANOTHER_NET_AD /Another Internet Ad campaign produced/ LASER_PRINTER /LASER PRINTER SUPPLIES/ BRAND_NEW_PAGER /BRAND NEW Pager FREE/ ADDRESSES_ON_CD /addresses on cd/i SHOES_GUY /(?:\b(?:Lingui|Guilin)\b.{1,30}){2,}/i EXCUSE_1 /\b(?:You (?:were sent|have received|are receiving)|You're receiving).{0,15}(?:message|e-?mail)s? because/i EXCUSE_2 /If you did not opt.in/i EXCUSE_3 /to (?:be removed|be deleted|no longer receive th(?:is|ese) EXCUSE_5 /that your email address is removed/i EXCUSE_6 /\b(?:wish to|click to|To) remove yourself/i EXCUSE_7 /you (?:wish|want|would like|desire) to be removed/i EXCUSE_8 /requests to be taken off our mailing list/i EXCUSE_9 /If you do.{0,3}n.{0,3}t (?:want|wish|care) to receive emails (?:on this subject|in the future)/i EXCUSE_10 /if you (?:(?:want|wish|care|prefer) not to |(?:don't|do not) (?:want|wish|care) to )(?:be contacted again|receive (any)?\s*(?:more|future|further) (?:e?-?mail|messages?|offers|solicitations))/i EXCUSE_11 /you.{0,15}(?:name|mail).{0,15}(?:was|were).{0,15}list/i EXCUSE_12 /this (?:e?-?mail|message) (?:(?:has )?reached|was sent to) you in error/i EXCUSE_13 /mail was sent to you because /i EXCUSE_14 /you (?:do not|no longer) wish to receive/i EXCUSE_15 /this (?:|e?-?mail|message) (?:is|was) (?:not|never) (?:spam|(?:sent |)unsolicited)/i EXCUSE_16 /received this.{1,10}in error/i EXCUSE_17 /received.{0,15} by mistake/i EXCUSE_18 /we do not (?:spam|send unsolicited)/i GREEN_EXCUSE_1 /using email instead can significantly reduce this/i GREEN_EXCUSE_2 /the trees, save the planet, use email!/i VIAGRA /VIAGRA/i YOU_HAVE_BEEN_SELECTED /You have been selected as a (?:finalist|winner)/i FREE_PRIORITY_MAIL /FREE.{0,10} PRIORITY MAIL SHIPPING/i LIMITED_TIME_ONLY /LIMITED TIME (?:ONLY|offer)/i STRONG_BUY /strong buy/i WE_HONOR_ALL /we (?:honou?r|respect)(?: all)? remov(?:e|al) requests/i FILTERED_BY_WORLDREMOVE /filtered by WorldRemove/ COMMUNIGATE /transferred with a trial version of CommuniGate/ AUTO_EMAIL_REMOVAL /Auto Email Removal/ PORN_1 /\bbarely\b.{0,15}\blegal\b/i PORN_2 /\bwild\b.{0,15}\bhard[ -]?core\b/i PORN_6 /\b(?:\d+\+? xxx pictures|xxx photos?)/i PORN_7 /Free XXX/i PORN_8 /\b(?:video|movie|teen|ware|mp3)z/ PORN_9 /\b(?:sex|gay|slut|whore|\bcum|f.ck|adult|xxx)[ -]?fest|\bcum[ -]?shot|\bcum[ -]?dumpster/i PORN_10 /\b(?:lolita|slut|whore|porn|skank|(?:babes|tit(?:tie)?s|puss(?:y|ies)|bi(?!-)|(?:Asian|Japanese|oriental)\s+(?:girls|schoolgirls))\b)|(?:[^x]|\b)xxx(?:[^x]|\b)|gang[ -]?bang|free pics/i PORN_11 /\b(?:hard[ -]?core|web[ -]?cam|amateur\b)/i PORN_12 /\b(?:lolita|xxx|sex|slut|whore|hottest|hard-?core|horn|virgin|naught|web.?cam|le[sz]|skank|tit|puss|adult|fuck)/i and /(?:(?:\blolita|(?:[^x]|\b)xxx(?:[^x]|\b)|\bsex|\bslut|\bwhore|\bhottest\b|hard-?core|\bhorny\b|\bhorniest\b|\bvirgin|\bnaughty\b|\bnaughtiest\b|\bweb.?cam|\ble[sz]b(?:ian|o)|\bskank|\btits\b|\btitties\b|\bpussy\b|\bpussies\b|\badult\b|\bfuck).{0,7}){2,}/i PORN_13 /must be (?:at least|over) 18/i PORN_14 /\b(?:pics\b|years? old\b|my name'?s\b|my name is\b)/i SEXY_PICS /sexy pictures/i OPPORTUNITY /OPPORTUNITY/ PURE_PROFIT /PURE PROFIT/i STOCK_PICK /STOCK PICK/i STOCK_ALERT /stock alert/i MICRO_CAP_WARNING /Investing in micro-cap securities is highly speculative/i INVESTOR_SPEC_SHEET /Investor Spec Sheet/i FREE_CONSULTATION /FREE CONSULTATION/i LARGE_HEX /[0-9a-fA-F]{70,}/ WANTS_CREDIT_CARD /\bcredit.?card\s+order/i ASKS_BILLING_ADDRESS /\bbilling address\b/i CYBER_FIRE_POWER /\b(?:by|for) Cyber FirePower\!/ UPPERCASE_25_50 eval:check_for_uppercase('25', '50') UPPERCASE_50_75 eval:check_for_uppercase('50', '75') UPPERCASE_75_100 eval:check_for_uppercase('75', '100') LINES_OF_YELLING eval:check_for_yelling() LINES_OF_YELLING_2 eval:check_for_num_yelling_lines("2") LINES_OF_YELLING_3 eval:check_for_num_yelling_lines("3") CLICK_BELOW /click .{0,30}(?:here|below)/is PRINT_FORM_SIGNATURE /Sign(ature)?(?:\s*here|\s*please)?:.{0,30}___*/i MAIL_IN_ORDER_FORM /Mail-in Order Form/i FOR_INSTANT_ACCESS /INSTANT ACCESS/i NO_SELLING /absolutely NO selling/i UNIVERSITY_DIPLOMAS /\b(?:college|university)\s+diplomas/i PREST_NON_ACCREDITED /prestigi?ous\b.{0,20}\bnon-accredited\b.{0,20}\buniversities/i NEW_DOMAIN_EXTENSIONS /new\s*domain\s*extension/i DOMAIN_BODY /\s(\.|dot\s+)(info|biz|name)\s/i EMAIL_HARVEST /email harvest/ CLICK_TO_REMOVE_MAILTO /\bclick to.{0,30}remove.{0,50}mailto:/is CLICK_TO_REMOVE_2 /mailto:.{0,50}click.{0,50}remove/is TO_BE_REMOVED_REPLY /\bto\b.{0,20}\bremove.{0,20}\breply\b/is TO_UNSUB_REPLY /\bto\b.{0,20}\bunsubscribe.{0,20}\breply\b/is REMOVAL_INSTRUCTIONS /\b(?:REMOVAL|UNSUBSCRIBE) INSTRUCTIONS/i THIS_AINT_SPAM /This.{0,30}is not (?:a )?spam/is THIS_AINT_JUNK /This.{0,30}is not (?:a )?junk (?:email)?/is WE_HATE_SPAM /We .{0,30}oppose the use of SPAM/is IN_ACCORDANCE_WITH_LAWS /has been sent in accordance with/ HR_3113 /H\.\s*R\.\s*3113/is UCE_MAIL_ACT /Unsolicited Commercial Electronic Mail Act/ PENIS_ENLARGE /\b(?:add\b|enlarge|increase|grow|lengthen|larger\b|bigger\b|longer\b|thicker\b).{0,50}\b(?:penis|breast)/i PENIS_ENLARGE2 /\b(?:penis|breast).{0,50}\b(?:add\b|enlarge|increase|grow|lengthen|larger\b|bigger\b|longer\b|thicker\b)/i EJACULATION /\b(?:increase|improve).{0,10}ejaculation/i IMPOTENCE /\b(?:impotence (?:problem|cure|solution)|Premature Ejaculation|erectile dysfunction)/i WORK_AT_HOME /\b(?:WORK|(?:MAKE|EARN).{1,10}(?:MONEY|\$+|BUCKS|CASH)).{1,10}(?:AT|FROM) (?:YOUR )?HOME/i HOME_EMPLOYMENT /HOME.{0,10}(?: EMPLOYMENT|WORKER|BUSINESS)/i NO_EXPERIENCE /\bNo EXPERIENCE/i FREE_MONEY /\b(:?fast|free|easy|big)\s*(?:money|\$+|bucks|cash)/i MORTGAGE_RATES /Mortgage rates/i TAKE_ACTION_NOW /take action now!/i THE_FOLLOWING_FORM /the following form\b/i HUNZA_DIET_BREAD /HUNZA/i AOL_USERS_LINK /AOL\s+Users\s+Click/is INTERNET_TERROR_RANT /At the time of this mailing the return email address is a bonafide legitimate return email address that was signed up for with the express purpose.{0,30}internet terrorists\./si CHARSET_FARAWAY eval:check_for_faraway_charset() UNDESIRED_LANGUAGE_BODY eval:check_language() NIGERIAN_SCAM /BASED ON INFORMATION GATHERED ABOUT YOU, WE BELIEVE\s*YOU WOULD BE IN A POSITION TO HELP US IN TRANSFER/i NIGERIAN_SCAM_2 /\b(?:(?:bank|government|republic).{1,10}(?:nigeria|sierra leone|zimbabwe|botswana)|(?:nigeria|sierra leone|zimbabwe|botswana).{1,10}(?:national|government|embassy|chamber|bank|petroleum))/i NIGERIAN_SCAM_4 /\b(wife|widow|son|husband)\b.{0,60}\b(?:Abacha|Kabila|Sekou?|Stojiljkovic|Bangura)\b/i NIGERIAN_SCAM_5 /\b(?:Abacha|Kabila|Sekou?|Stojiljkovic|Bangura)\b.{0,60}\b(wife|widow|son|husband)\b/i NIGERIAN_SCAM_6 /\b(?:late|former|past|new|Nigerian|military)\b.{0,20}\bhead of state/i NIGERIAN_SCAM_7 /\b(?:late|former|past)\b.{0,40}\b(?:Abacha|Kabila|Sekou?|Stojiljkovic|Bangura)\b|\b(?:Abacha|Kabila|Sekou?|Stojiljkovic|Bangura)\b.{0,40}\b(?:late|former|past)\b/i NIGERIAN_SCAM_8 /\b(?:Tribunal|War Crimes|Hague)\b.{0,60}\b(?:Vlajko|Stojiljkovic)\b|\b(?:Vlajko|Stojiljkovic)\b.{0,60}\b(?:Tribunal|War Crimes|Hague)\b/i US_DOLLARS /Million\b.{0,40}\b(?:United States? Dollars|USD\b|U\.? ?S\.? Dollar)/i US_DOLLARS_2 /(?:\$|usd).?\d{1,3}(?:\.\d)?.?m\b/i US_DOLLARS_3 /(?:\$|usd).?\d{1,3}[,.]\d{3}[,.]\d{3}(?:[,.]\d\d)?/i BALANCE_FOR_LONG eval:check_for_very_long_text() COPYRIGHT_CLAIMED /copyright.{0,100}all rights reserved/is KIFF /temple kiff/i CBYI /CBYI/ JODY /\b(?:My wife, Jody|Mi esposa, Jody)/ GENTLE_FEROCITY /Gentle Ferocity/i VJESTIKA /Vjestika Aphrodisia/i TONER /\b(?:toner|ink(?:[-\s]*jet)?|fax|copier)[-\s]+cartridge/i CASINO /casino/i MYCASINOBUILDER /MYCASINOBUILDER.COM/i ONCE_IN_LIFETIME /once in a lifetime opportunity/i YOUR_INCOME /\byour income\b/i BE_AMAZED /\bbe amazed\b/i ITS_EFFECTIVE /\bit's effective\b/i RESISTANCE_IS_FUTILE /Replying to this email will not unsubscribe you./i MAILMAN_CONFIRM /We have received a request .*subscription of your email address.* to the .* mailing list/ EGP_HTML_BANNER /^<!-- \|\*\*\|begin egp html banner/ GREAT_OFFER /\b(?:offer expires|see full offer for details|great offer)/i SUBJ_2_CREDIT /subject to credit approval/i DEAR_SOMEBODY /Dear [A-Z][a-z]+/ GAPPY_TEXT /\b(?:[a-z][-_\.\,\:\;\'\~\s]{1,3}){5,}/i COPY_DVDS /copy.{1,20}dvd/i URGENT_BIZ /URGENT BUSINESS/i EARN_PER_WEEK /\b(?:earn|make).{1,20}\d\d\d+.{1,30}(?:per week|per month|weekly|monthly)/i PENNIES_A_DAY /for (?:just|only) pennies a day/i FOR_JUST_SOME_AMT /for (?:just|only) \$?\d+\.?\d*[^\.]*!/i MIME_NULL_BLOCK /This message is in MIME format/ SAFEGUARD_NOTICE /This safeguard is not inserted when using the registered version/ EVITE /evite.citysearch.com/ SIGNATURE_DELIM /^-- $/ READ_TO_END /read this (?:e-?mail )?to the end/i DONT_DELETE /\b(?:don'?t delete this|do not delete)/i REAL_THING /the real thing/i ALL_NATURAL /\b(?:100%|completely|totally|all) natural/i MONEY_BACK /money back guarantee/i NO_CATCH /there is no catch/i NO_OBLIGATION /no obligation/i NO_DISSAPOINTMENT /You won'?t be diss?app?ointed/i SERIOUS_ONLY /Serious [IE]nquiries Only/i RISK_FREE /\b(?:risk free|no risk)/i AS_SEEN_ON /seen on\b\s*(?:TV|ABC|NBC|CBS|CNN|Oprah|USA Today|48 Hours|New York Times|\w+\s+TV|:)/i NOT_INTENDED /not intended for residents ?(:of|in)/i COPY_ACCURATELY /copy.{1,10}name.{1,10}address.{1,10}ACCURATELY/i SEE_FOR_YOURSELF /See (?:for|it) yourself/i DOUBLE_CAPSWORD /\b([A-Z]{3,})\b.{0,50}\b\1\b/ ORDER_NOW /order (?:now|soon|fast|quickly|while)/i JAVASCRIPT /<SCRIPT/i REALLY_UNSAFE_JAVASCRIPT /<(?:body|frame) [^>]*on(?:Load|UnLoad|BeforeUnload)/is SLIGHTLY_UNSAFE_JAVASCRIPT /\bon(?:Blur|Change|Focus|Error|Key(?:Press|Down|Up)|Mouse(?:Down|Up|Over|Move|Out)|Resize|Move|Scroll|Stop|Click)\b/i HTML_WITH_BGCOLOR /<body [^>]*bgcolor[=3d\"\'\#]+[0-9a-e][0-9a-f]{5,5}/is BIG_FONT /<\s*FONT\s[^>]*size\s*=(?:3D(?:\d{2,}|\+[2-9]|[3-9])|\s*["'](?:\d{2,}|\+[2-9]|[3-9]))/is SPAM_FORM /CHANGE EMAIL ADDRESS IN ACTION OF FORM/ SPAM_FORM_RETURN /return validate_form/ SPAM_FORM_INPUT /<input name=.*submit type=.*submit value=.*" *Submit By E-Mail *">/i SUPERLONG_LINE /^[^<]{199,}$/m ASCII_FORM_ENTRY /[^<][A-Za-z][A-Za-z]+.{1,15}?[\x09\x20]*_{30,}/ TRACKER_ID /^\W{4,6} (?:[a-z]{10,}|[A-Z]{10,}) \W{4,6}\s*$/ MIME_EXCESSIVE_QP eval:check_for_mime_excessive_qp() MIME_MISSING_BOUNDARY eval:check_for_mime_missing_boundary() JUST_MAILED_PAGE /\n\n.{0,160}<!-- saved from url=/s CLICK_HERE_LINK /click here.{0,100}<\/a>/is MURKOWSKI_CRUFT /www\.senate\.gov\/~?murkowski/ MONSTERHUT /monsterhut.com/ MAILTO_LINK /=[3D=\s"']*mailto:/is FORM_W_MAILTO_ACTION /action=[3D=\s"']*mailto:/is WEB_BUGS /<\s*img\s[^>]*src[^>]+\?/i RELAYING_FRAME /<i?frame\s/i HTML_EMBEDS /<(?:object|embed)\s/i UNNEEDED_HTML_ENCODING /font=3E/i FRONTPAGE /FrontPage.Editor/ UNIFIED_PATCH /^\@\@ [-+0-9]+,[0-9]+ [-+0-9]+,[0-9]+ \@\@$/ DIFF_C_PATCH /^[*]{3} \S+ \S{3} \S{3} .\d \d{2}:\d{2}:\d{2} \d+$/ PGP_SIGNATURE /-----BEGIN PGP SIGNATURE-----/
[home | help | who | search | setup | code]