70_sare_stocks.cf 61 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917
  1. # SARE Stocks Ruleset for SpamAssassin
  2. # Version: 01.01.02
  3. # Created: 2005-12-18
  4. # Modified: 2007-08-18
  5. # License: Artistic - http://www.rulesemporium.com/license.txt
  6. # Current Maintainer: Sare Ninja - maddoc@maddoc.net
  7. # Current Home: http://www.rulesemporium.com/rules/70_sare_stocks.cf
  8. # Changes:
  9. # 00.01.00 Created First Release
  10. # 00.01.01 Removed some rules not belonging to this set.
  11. # 00.01.02 Changed SARE_MLH_Stock2 t different regex pattern and
  12. # 00.01.03 Added masschecker results.
  13. # 00.01.04 Adjusted scores and redid some of Loren and Mikes rules.
  14. # 00.01.05 Fixed Rule score typo
  15. # 00.01.06 Adjusted Lorens rules and fixed overlaps
  16. # 00.01.07 Adjusted some of Mikes rules
  17. # 00.01.08 Redid a lot of the rules. Added Freds stock rules. Removed Docs rules. Added More Loren rules. Added Bob and Mike rules
  18. # 00.01.09 Removed dupe rules
  19. # 00.01.10 Added new Loren rules and adjusted scoring.
  20. # 01.00.00 Rescored and final masschecked.
  21. # 01.00.01 Tweaked some FP scores. Removed some overlap rules.
  22. # 01.00.02 Rescored.
  23. # 01.00.03 Added counts and some new rules.
  24. # 01.00.04 Added new rule.
  25. # 01.00.05 Added multiple rules from Loren and Chris S. Fixed one rule.
  26. # 01.00.06 Added and replaced rules from Mike.
  27. # 01.00.07 Fixed rules so they will now lint correctly with SA 3.2. Made changes to some rules to catch new stock spam.
  28. # 01.00.08 Removed some low scoring rules which were hitting hams. Removed a couple reduntant Loren rules. Updated one of Mikes rules.
  29. # 01.00.09 Updated one of Mikes rules.
  30. # 01.00.10 Updated Mikes rules.
  31. # 01.00.11 Updated Mikes obf rules.
  32. # 01.00.12 Updated Mikes obf rules. Added new gif only stock rules from Dallas.
  33. # 01.00.13 Added Freds counts from his other masschecker. Fixed Modified date.
  34. # 01.00.14 Removed Dupe rules. Updated Raymonds rules. Updated Mikes obf rules.
  35. # 01.00.15 Added more stock rules from Mike. Fixed Dallas's gif catcher to catch UPPER case. Updated Mike's obf rules.
  36. # 01.00.16 Updated Mikes obf rules.
  37. # 01.00.17 Updated Mikes obf rules. Updated Raymonds rules. Tweaked Dallas's gif catcher.
  38. # 01.00.18 Updated Mikes obf rules. More tweaks of gif catcher.
  39. # 01.00.19 Updated Mikes obf rules.
  40. # 01.00.20 Updated Mikes obf rules.
  41. # 01.00.21 Updated Mikes obf rules.
  42. # 01.00.22 Updated Mikes obf rules. Updated Raymonds rules.
  43. # 01.00.23 Updated Mikes obf rules.
  44. # 01.00.24 Updated Mikes obf rules.
  45. # 01.00.25 Updated Mikes obf rules.
  46. # 01.00.26 Updated Mikes obf rules and SARE_MLH_Stock1 rule.
  47. # 01.00.27 Updated Mikes obf rules. Updated Raymonds rules.
  48. # 01.00.28 Tweeked GIF catcher rule.
  49. # 01.00.29 Updated Mikes obf rules.
  50. # 01.00.30 Updated Mikes obf rules.
  51. # 01.00.31 Updated Mikes obf rules.
  52. # 01.00.32 Updated Mikes obf rules.
  53. # 01.00.33 Updated Mikes obf rules.
  54. # 01.00.34 Updated Mikes obf rules.
  55. # 01.00.35 Updated Mikes obf rules.
  56. # 01.00.36 Fixed Updated Mikes obf rules.
  57. # 01.00.37 Added Chris S. Rules to the mix.
  58. # 01.00.38 Updated Mikes obf rules.
  59. # 01.00.39 Updated Mikes obf rules.
  60. # 01.00.40 Fixed error
  61. # 01.00.41 Update Mikes obf rules.
  62. # 01.00.42 Added new rule from Mike.
  63. # 01.00.43 Added new rule from Mike. Update Raymonds rules.
  64. # 01.00.44 Commented out some extra rules not being used.
  65. # 01.00.45 Update Raymonds rules.
  66. # 01.01.01 Massive updates. Removed some rules and re-scoring of others.
  67. # 01.01.02 Updated PROLOSTOCK rules / Added SARE_AXBSTOCK_* rules [AXB]
  68. # Comments are:
  69. # This file is for catching pump and dump stock scam/spams
  70. # 2005-12-18
  71. # Contributed by Mike
  72. header SARE_MLH_Stock1 Subject =~ /(penny )?st[o0]cks?|cribsheet|marcket|stox|small[ -]?cap|stock report/i
  73. describe SARE_MLH_Stock1 Subject mentions stock or stock related words
  74. score SARE_MLH_Stock1 0.87
  75. ##counts SARE_MLH_Stock1 150s/6h of 5645 corpus (3421s/2224h AxB) 01/26/06
  76. ##counts SARE_MLH_Stock1 1635s/4h of 59166 corpus (45647s/13519h ML) 01/25/06
  77. ##counts SARE_MLH_Stock1 1698s/9h of 86182 corpus (46804s/39378h DOC) 01/25/06
  78. ##counts SARE_MLH_Stock1 216s/6h of 11519 corpus (6151s/5368h CT) 01/25/06
  79. ##counts SARE_MLH_Stock1 468s/11h of 17497 corpus (9723s/7774h FT) 01/25/06
  80. ##counts SARE_MLH_Stock1 597s/4h of 37304 corpus (31827s/5477h MY) 01/25/06
  81. ##counts SARE_MLH_Stock1 6169s/765h of 508570 corpus (180270s/328300h RM) 01/25/06
  82. header SARE_MLH_Stock2 Subject =~ /micr[qw]?o-?caa?pk?s?/i
  83. describe SARE_MLH_Stock2 Subject mentions microcap
  84. score SARE_MLH_Stock2 1.66
  85. ##counts SARE_MLH_Stock2 16s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  86. ##counts SARE_MLH_Stock2 181s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  87. ##counts SARE_MLH_Stock2 204s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  88. ##counts SARE_MLH_Stock2 25s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  89. ##counts SARE_MLH_Stock2 35s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  90. ##counts SARE_MLH_Stock2 74s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  91. ##counts SARE_MLH_Stock2 800s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  92. body SARE_MLB_Stock1 /(?:Opening|Current|Target|Projected)[ _-]Price[ :;-]/i
  93. score SARE_MLB_Stock1 1.48
  94. ##counts SARE_MLB_Stock1 1903s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  95. ##counts SARE_MLB_Stock1 2146s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  96. ##counts SARE_MLB_Stock1 314s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  97. ##counts SARE_MLB_Stock1 46s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  98. ##counts SARE_MLB_Stock1 550s/96h of 17497 corpus (9723s/7774h FT) 01/25/06
  99. ##counts SARE_MLB_Stock1 6900s/465h of 508570 corpus (180270s/328300h RM) 01/25/06
  100. ##counts SARE_MLB_Stock1 884s/4h of 37304 corpus (31827s/5477h MY) 01/25/06
  101. body SARE_MLB_Stock2 /Short Term Target(?::| Price:)/i
  102. score SARE_MLB_Stock2 1.66
  103. ##counts SARE_MLB_Stock2 135s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  104. ##counts SARE_MLB_Stock2 268s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  105. ##counts SARE_MLB_Stock2 29s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  106. ##counts SARE_MLB_Stock2 2s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  107. ##counts SARE_MLB_Stock2 330s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  108. ##counts SARE_MLB_Stock2 623s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  109. ##counts SARE_MLB_Stock2 86s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  110. body SARE_MLB_Stock3 /Last[ _](?:Trade|Price)[ :]/i
  111. score SARE_MLB_Stock3 1.58
  112. ##counts SARE_MLB_Stock3 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  113. ##counts SARE_MLB_Stock3 14s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  114. ##counts SARE_MLB_Stock3 172s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  115. ##counts SARE_MLB_Stock3 181s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  116. ##counts SARE_MLB_Stock3 1s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  117. ##counts SARE_MLB_Stock3 5s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  118. ##counts SARE_MLB_Stock3 95s/24h of 508570 corpus (180270s/328300h RM) 01/25/06
  119. body SARE_MLB_Stock4 /[0-9][ -]Day Target[(:?_| )Price]?: /i
  120. score SARE_MLB_Stock4 1.66
  121. ##counts SARE_MLB_Stock4 0s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  122. ##counts SARE_MLB_Stock4 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  123. ##counts SARE_MLB_Stock4 124s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  124. ##counts SARE_MLB_Stock4 127s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  125. ##counts SARE_MLB_Stock4 274s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  126. ##counts SARE_MLB_Stock4 46s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  127. ##counts SARE_MLB_Stock4 72s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  128. body SARE_MLB_Stock5 /^(?:St[o0]ck[_]Symb[o0]l|Symb[o0]l|S\s?y\s?m\s?b\s?[o0]\s?l|Ticker|OTC):/i
  129. describe SARE_MLB_Stock5 Mentions stock symbol, tickers, or OTC.
  130. score SARE_MLB_Stock5 1.66
  131. #counts SARE_MLB_Stock5 182s/0h of 11694 corpus (6133s/5561h CT) 02/15/06
  132. #counts SARE_MLB_Stock5 80s/0h of 7686 corpus (5464s/2222h AxB) 02/16/06
  133. #counts SARE_MLB_Stock5 287s/0h of 27454 corpus (21822s/5632h MY) 02/15/06
  134. #counts SARE_MLB_Stock5 1556s/0h of 95397 corpus(56017s/39380h DOC) 02/15/06
  135. #counts SARE_MLB_Stock5 261s/0h of 27175 corpus (19315s/7860h FT) 02/15/06
  136. #counts SARE_MLB_Stock5 1421s/0h of 71535 corpus(56115s/15420h ML) 02/15/06
  137. # SARE_MLB_Stock6.cf -- autogenerated rule
  138. # generated -- Thu Jan 18 04:26:53 2007
  139. # Currently contains 109 obfu stock tickers
  140. body SARE_MLB_Stock6 /\b(?:(E\.GL\.y)|(Eg \|_ y)|(e g \| y)|(egly)|.P.\s+.P.\s+.?\s+.T.\s+.L.|.P.\s+.P.\s+.T.\s+.L.|A B S Y|A D\s+Y E|A G.A-O|A M S N|A.?E.?T.?R|A.?G.?A.?O|A.?L.?V.?N|A.?S.?I.?Q|A.?U.?N.?I|A.D.Y.E|B.?C.?L.?C|B.?M.?S.?N|C T X E|C.?F.?S.?C|C.?G.?D.?C|C.?N.?H.?C|C.?T.?F.?E|C.?V.?N.?.?I|C.?W.?T.?D|C.?Y.?H.?D|D K D Y|D M S I|E G L Y|E . G . \|_ . Y|E = G = L = Y|E.?R.?U.?G|E.G.L.Y|E.X.T.I|E.q.t.d|F C P G|F.?C.?Y.?I|G APJ|G.?C.?M.?E|G.?D.?K.?I|G.?G.?T.?S|G.?L.?X.?I|G.A.R.S|GA PJ|H N S T|H.?Y.?W.?I|I G A M|I Z O N|I.?N.?F.?X|I.?V.?A.?Y|I.?V.?H.?N|I.L.K.G|I\s*?F\s*?N\s*X|K K P T|K\. m A g|L I T L|M.?B.?W.?C|N . S . \|_ . T|N.~.S.~.\|__ .~.T|N N F C|N S \|_ T|N ~ S ~ \|__ ~ T|N.?H.?L.?G|N.M.E.N|N\s.{1,3}\sS\s.{1,3}\sL\s.{1,3}\sT|P P T \|_|P S U D|P.?I.?F.?R|P.P.T.L|Q.?E.?G.?Y|R C H N|R . T . C . I|R K L C|R T C [I\|]|R _~_ T _~_ C _~_ I |R.?R.?E.?F|R.K.L.C|R.T.C.I|S B B D|S R V N|S.?B.?N.?S|T.?Q.?W.?W|U M S Y|U S T A|V N B L|V.?G.?Y.?I|V.?M.?C.?I|W T A F|W.?B.?R.?S|W.?E.?X.?E|W.N.C.P|[Cc].?[Dd].?[Pp].?[Nn]|[Hh][Ll][Vv][Cc]|[Pp] [Gg] [Cc] [Nn]|[Pp]\s*[Pp]\s*[Tt]\s*[Ll\|]|\(PPT\|_\)|\(pptl\)|\bn.s.?l.t\b|\|\\\| .~. S .~. \|_ .~. T|_N S L T_|__ \|\\\| S L T|`P...`P...`T...`L|cgdc|e g !_ y|f.?c.?y.?i|hlun|r . t . c . i|r\s{1,3}t\s{1,3}c\s{1,3}i|v n b \||vnb\|)\b/
  141. describe SARE_MLB_Stock6 ML obfuscated ticker symbols
  142. score SARE_MLB_Stock6 1.56
  143. #counts SARE_MLB_Stock6 33s/3h of 5376 corpus (1407s/3969h AxB) 09/11/06
  144. #counts SARE_MLB_Stock6 911s/0h of 20229 corpus (13902s/6327h CT) 09/10/06
  145. #counts SARE_MLB_Stock6 271s/3h of 44285 corpus (40325s/3960h AxB2) 09/11/06
  146. #counts SARE_MLB_Stock6 10378s/0h of 220512 corpus (170427s/50085h ML) 09/10/06
  147. #counts SARE_MLB_Stock6 4712s/1h of 230718 corpus (160414s/70304h DOC) 09/10/06
  148. header SARE_MLH_Stock7 Subject =~ /\b(?:maven|savvy|aggressive) (?:investors?|newsletter|microcap|pinksheet)/i
  149. describe SARE_MLH_Stock7 Various common stock subjects
  150. score SARE_MLH_Stock7 1.66
  151. #counts SARE_MLH_Stock7 12s/0h of 22943 corpus (17230s/5713h MY) 03/09/06
  152. #counts SARE_MLH_Stock7 1s/0h of 8715 corpus (6489s/2226h AxB) 03/10/06
  153. #counts SARE_MLH_Stock7 2s/0h of 12237 corpus (6565s/5672h CT) 03/09/06
  154. #counts SARE_MLH_Stock7 4s/0h of 15635 corpus (7818s/7817h FT) 03/10/06
  155. #counts SARE_MLH_Stock7 60s/0h of 106455 corpus (67078s/39377h DOC) 03/09/06
  156. #counts SARE_MLH_Stock7 80s/0h of 104557 corpus (96562s/7995h FVGT) 03/10/06
  157. #counts SARE_MLH_Stock7 84s/0h of 92299 corpus (73883s/18416h ML) 03/09/06
  158. header SARE_MLH_Stock8 Subject =~ /platinum report|platinum stock (?:report|newsletter)/i
  159. describe SARE_MLH_Stock8 Platinum !!
  160. score SARE_MLH_Stock8 1.66
  161. #counts SARE_MLH_Stock8 0s/0h of 8715 corpus (6489s/2226h AxB) 03/10/06
  162. #counts SARE_MLH_Stock8 25s/0h of 106455 corpus (67078s/39377h DOC) 03/09/06
  163. #counts SARE_MLH_Stock8 2s/0h of 15635 corpus (7818s/7817h FT) 03/10/06
  164. #counts SARE_MLH_Stock8 3s/0h of 22943 corpus (17230s/5713h MY) 03/09/06
  165. #counts SARE_MLH_Stock8 42s/0h of 92299 corpus (73883s/18416h ML) 03/09/06
  166. #counts SARE_MLH_Stock8 4s/0h of 12237 corpus (6565s/5672h CT) 03/09/06
  167. #counts SARE_MLH_Stock8 73s/0h of 104557 corpus (96562s/7995h FVGT) 03/10/06
  168. header SARE_MLH_Stock9 Subject =~ /attention (?:all|all penny|- |investors|penny|small)/i
  169. describe SARE_MLH_Stock9 Do I have your attention?
  170. score SARE_MLH_Stock9 1.66
  171. #counts SARE_MLH_Stock9 13s/0h of 12237 corpus (6565s/5672h CT) 03/09/06
  172. #counts SARE_MLH_Stock9 182s/0h of 92299 corpus (73883s/18416h ML) 03/09/06
  173. #counts SARE_MLH_Stock9 215s/0h of 106455 corpus (67078s/39377h DOC) 03/09/06
  174. #counts SARE_MLH_Stock9 232s/0h of 104557 corpus (96562s/7995h FVGT) 03/10/06
  175. #counts SARE_MLH_Stock9 3s/0h of 15635 corpus (7818s/7817h FT) 03/10/06
  176. #counts SARE_MLH_Stock9 4s/0h of 8715 corpus (6489s/2226h AxB) 03/10/06
  177. #counts SARE_MLH_Stock9 9s/0h of 22943 corpus (17230s/5713h MY) 03/09/06
  178. header SARE_MLH_Stock10 Subject =~ /bull'?s?\s?(?:market|stock|is back|eye|today|stocks?|hunter|rally)/i
  179. describe SARE_MLH_Stock10 Yup, it's bull alright.
  180. score SARE_MLH_Stock10 1.66
  181. #counts SARE_MLH_Stock10 10s/0h of 22943 corpus (17230s/5713h MY) 03/09/06
  182. #counts SARE_MLH_Stock10 1s/0h of 8715 corpus (6489s/2226h AxB) 03/10/06
  183. #counts SARE_MLH_Stock10 6s/0h of 15635 corpus (7818s/7817h FT) 03/10/06
  184. #counts SARE_MLH_Stock10 71s/0h of 106455 corpus (67078s/39377h DOC) 03/09/06
  185. #counts SARE_MLH_Stock10 7s/0h of 12237 corpus (6565s/5672h CT) 03/09/06
  186. #counts SARE_MLH_Stock10 92s/0h of 92299 corpus (73883s/18416h ML) 03/09/06
  187. #counts SARE_MLH_Stock10 99s/0h of 104557 corpus (96562s/7995h FVGT) 03/10/06
  188. body SARE_MLB_Stock11 /TRADE OUT THE TOP/
  189. describe SARE_MLB_Stock11 GOOD LUCK & TRADE OUT THE TOP
  190. score SARE_MLB_Stock11 2.22
  191. #counts SARE_MLB_Stock11 121s/0h of 15635 corpus (7818s/7817h FT) 03/10/06
  192. #counts SARE_MLB_Stock11 1s/0h of 22943 corpus (17230s/5713h MY) 03/09/06
  193. #counts SARE_MLB_Stock11 49s/0h of 12237 corpus (6565s/5672h CT) 03/09/06
  194. #counts SARE_MLB_Stock11 5s/0h of 8715 corpus (6489s/2226h AxB) 03/10/06
  195. #counts SARE_MLB_Stock11 638s/0h of 92299 corpus (73883s/18416h ML) 03/09/06
  196. #counts SARE_MLB_Stock11 730s/0h of 106455 corpus (67078s/39377h DOC) 03/09/06
  197. #counts SARE_MLB_Stock11 769s/0h of 104557 corpus (96562s/7995h FVGT) 03/10/06
  198. header SARE_STOCK_MSG_ID2 Message-Id =~ m'thebat.net'
  199. describe SARE_STOCK_MSG_ID2 Msg ID 'thebat.net'
  200. score SARE_STOCK_MSG_ID2 1.66
  201. #counts SARE_STOCK_MSG_ID2 5154s/0h of 343238 corpus (252868s/90370h DOC) 01/07/07
  202. #counts SARE_STOCK_MSG_ID2 464s/0h of 20458 corpus (13941s/6517h CT) 01/07/07
  203. #counts SARE_STOCK_MSG_ID2 18s/0h of 9851 corpus (4594s/5257h AxB) 01/07/07
  204. #counts SARE_STOCK_MSG_ID2 2340s/0h of 95973 corpus (91391s/4582h AxB2) 01/07/07
  205. #counts SARE_STOCK_MSG_ID2 10154s/0h of 341479 corpus (263508s/77971h ML) 01/07/07
  206. #-----------------------------------------------------------------------------------
  207. # 12/18/05
  208. ## Contributed by Loren
  209. # more stock spam goodies
  210. header SARE_LWMICROCAP Subject =~ /Miv?cr[o0][ _-]?(?:ca|ac)u?p/i
  211. score SARE_LWMICROCAP 1.66
  212. ##counts SARE_LWMICROCAP 16s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  213. ##counts SARE_LWMICROCAP 186s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  214. ##counts SARE_LWMICROCAP 210s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  215. ##counts SARE_LWMICROCAP 26s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  216. ##counts SARE_LWMICROCAP 38s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  217. ##counts SARE_LWMICROCAP 75s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  218. ##counts SARE_LWMICROCAP 808s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  219. body SARE_LWSYMFMT /\b[A-Z0-9]{4,5}\s?\.\s?(?i:PK|[O0]B)\b/ # no /i
  220. score SARE_LWSYMFMT 1.64
  221. ##counts SARE_LWSYMFMT 143s/1h of 5645 corpus (3421s/2224h AxB) 01/26/06
  222. ##counts SARE_LWSYMFMT 1927s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  223. ##counts SARE_LWSYMFMT 2316s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  224. ##counts SARE_LWSYMFMT 240s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  225. ##counts SARE_LWSYMFMT 567s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  226. ##counts SARE_LWSYMFMT 622s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  227. ##counts SARE_LWSYMFMT 9380s/11h of 508570 corpus (180270s/328300h RM) 01/25/06
  228. # 02/19/06
  229. # More crappy obfuscation in the stock discaimer. Use @ for a and * for e.
  230. body SARE_LW1933 /[S\$]\s?[e3\*]\s?c\s?u\s?r\s?[i1!]\s?t\s?[i1!]\s?[e3\*]\s?[s\$]\s+(?:[E3\*]\s?x\s?c\s?h\s?[a4\@]\s?n\s?g\s?[e3\*]\s+)?[A4\@]?\s?c\s?t\s+[o0]f\s+(?:[1l|]933|n\s?[i1]\s?n\s?[e3\*]\s?t\s?[e3\*]\s?[e3\*]\s?n t\s?h\s?[i1!]\s?r\s?t\s?y t\s?h\s?r\s?[e3\*]\s?[e3\*])/is
  231. score SARE_LW1933 1.41
  232. describe SARE_LW1933 Reference to Securities Act
  233. #counts SARE_LW1933 1308s/0h of 97511 corpus (58134s/39377h DOC) 02/19/06
  234. #counts SARE_LW1933 1321s/0h of 74735 corpus (58806s/15929h ML) 02/19/06
  235. #counts SARE_LW1933 153s/0h of 27462 corpus (21821s/5641h MY) 02/19/06
  236. #counts SARE_LW1933 181s/0h of 11695 corpus (6133s/5562h CT) 02/19/06
  237. #counts SARE_LW1933 911s/0h of 27185 corpus (19320s/7865h FT) 02/20/06
  238. #counts SARE_LW1933 9s/0h of 7765 corpus (5542s/2223h AxB) 02/20/06
  239. body SARE_LWWATCHIT /Watch\s+this\s+one\s+(?:on [mtwf]|trade|ALL\s+WEEK)/i
  240. score SARE_LWWATCHIT 1.66
  241. ##counts SARE_LWWATCHIT 1261s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  242. ##counts SARE_LWWATCHIT 1263s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  243. ##counts SARE_LWWATCHIT 141s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  244. ##counts SARE_LWWATCHIT 303s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  245. ##counts SARE_LWWATCHIT 382s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  246. ##counts SARE_LWWATCHIT 5426s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  247. ##counts SARE_LWWATCHIT 83s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  248. body SARE_LWTARGETP /target[ _-]price:/i
  249. score SARE_LWTARGETP 1.66
  250. ##counts SARE_LWTARGETP 2527s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  251. ##counts SARE_LWTARGETP 39s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  252. ##counts SARE_LWTARGETP 507s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  253. ##counts SARE_LWTARGETP 509s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  254. ##counts SARE_LWTARGETP 537s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  255. ##counts SARE_LWTARGETP 75s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  256. ##counts SARE_LWTARGETP 8s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  257. body SARE_LWSAFEH /Safe Harbor Statement:/i
  258. score SARE_LWSAFEH 1.66
  259. ##counts SARE_LWSAFEH 1170s/2h of 508570 corpus (180270s/328300h RM) 01/25/06
  260. ##counts SARE_LWSAFEH 14s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  261. ##counts SARE_LWSAFEH 1s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  262. ##counts SARE_LWSAFEH 1s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  263. ##counts SARE_LWSAFEH 4s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  264. ##counts SARE_LWSAFEH 4s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  265. ##counts SARE_LWSAFEH 53s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  266. # body SARE_LWREDHOT /red hot homeland/i
  267. # score SARE_LWREDHOT 1.66
  268. ##counts SARE_LWREDHOT 0s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  269. ##counts SARE_LWREDHOT 12s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  270. ##counts SARE_LWREDHOT 13s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  271. ##counts SARE_LWREDHOT 18s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  272. ##counts SARE_LWREDHOT 253s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  273. ##counts SARE_LWREDHOT 263s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  274. ##counts SARE_LWREDHOT 952s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  275. body SARE_LWPINK /\bPINK\s*SHEETS\b/i
  276. score SARE_LWPINK 1.59
  277. ##counts SARE_LWPINK 125s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  278. ##counts SARE_LWPINK 1498s/9h of 508570 corpus (180270s/328300h RM) 01/25/06
  279. ##counts SARE_LWPINK 14s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  280. ##counts SARE_LWPINK 194s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  281. ##counts SARE_LWPINK 205s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  282. ##counts SARE_LWPINK 2s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  283. ##counts SARE_LWPINK 31s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  284. body SARE_LWEMERGE /\bemerging .{0,40}company\b/i
  285. score SARE_LWEMERGE 0.92
  286. ##counts SARE_LWEMERGE 0s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  287. ##counts SARE_LWEMERGE 1463s/5h of 508570 corpus (180270s/328300h RM) 01/25/06
  288. ##counts SARE_LWEMERGE 23s/1h of 37304 corpus (31827s/5477h MY) 01/25/06
  289. ##counts SARE_LWEMERGE 2s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  290. ##counts SARE_LWEMERGE 2s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  291. ##counts SARE_LWEMERGE 86s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  292. ##counts SARE_LWEMERGE 92s/1h of 86182 corpus (46804s/39378h DOC) 01/25/06
  293. body SARE_LWOILCO /(?:oil|gas)\s+company/i
  294. score SARE_LWOILCO 1.13
  295. ##counts SARE_LWOILCO 120s/2h of 59166 corpus (45647s/13519h ML) 01/25/06
  296. ##counts SARE_LWOILCO 151s/3h of 86182 corpus (46804s/39378h DOC) 01/25/06
  297. ##counts SARE_LWOILCO 1748s/313h of 508570 corpus (180270s/328300h RM) 01/25/06
  298. ##counts SARE_LWOILCO 1s/16h of 17497 corpus (9723s/7774h FT) 01/25/06
  299. ##counts SARE_LWOILCO 2s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  300. ##counts SARE_LWOILCO 39s/2h of 37304 corpus (31827s/5477h MY) 01/25/06
  301. ##counts SARE_LWOILCO 7s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  302. body SARE_LWCURTRADE /currently trading/i
  303. score SARE_LWCURTRADE 1.61
  304. ##counts SARE_LWCURTRADE 0s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  305. ##counts SARE_LWCURTRADE 1857s/5h of 508570 corpus (180270s/328300h RM) 01/25/06
  306. ##counts SARE_LWCURTRADE 194s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  307. ##counts SARE_LWCURTRADE 200s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  308. ##counts SARE_LWCURTRADE 31s/1h of 37304 corpus (31827s/5477h MY) 01/25/06
  309. ##counts SARE_LWCURTRADE 3s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  310. ##counts SARE_LWCURTRADE 9s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  311. header SARE_LWSKY Subject =~ /skyr[o0]cket/i
  312. score SARE_LWSKY 1.66
  313. ##counts SARE_LWSKY 0s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  314. ##counts SARE_LWSKY 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  315. ##counts SARE_LWSKY 146s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  316. ##counts SARE_LWSKY 28s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  317. ##counts SARE_LWSKY 2s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  318. ##counts SARE_LWSKY 3s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  319. ##counts SARE_LWSKY 95s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  320. # body SARE_LWSHORT /(?:short|long|covering)\s+position/i
  321. # score SARE_LWSHORT 0.833
  322. ##counts SARE_LWSHORT 0s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  323. ##counts SARE_LWSHORT 0s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  324. ##counts SARE_LWSHORT 0s/1h of 5645 corpus (3421s/2224h AxB) 01/26/06
  325. ##counts SARE_LWSHORT 16s/24h of 508570 corpus (180270s/328300h RM) 01/25/06
  326. ##counts SARE_LWSHORT 1s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  327. ##counts SARE_LWSHORT 35s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  328. ##counts SARE_LWSHORT 4s/1h of 37304 corpus (31827s/5477h MY) 01/25/06
  329. body SARE_LWDRIVE /drive (?:the|these|this) stock/i
  330. score SARE_LWDRIVE 1.66
  331. ##counts SARE_LWDRIVE 0s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  332. ##counts SARE_LWDRIVE 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  333. ##counts SARE_LWDRIVE 0s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  334. ##counts SARE_LWDRIVE 17s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  335. ##counts SARE_LWDRIVE 1s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  336. ##counts SARE_LWDRIVE 1s/5h of 508570 corpus (180270s/328300h RM) 01/25/06
  337. ##counts SARE_LWDRIVE 3s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  338. body SARE_LWSHARES /(?i:shares of)\s+[A-Z0-9]{4}/ # no /i
  339. score SARE_LWSHARES 0.39
  340. ##counts SARE_LWSHARES 0s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  341. ##counts SARE_LWSHARES 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  342. ##counts SARE_LWSHARES 13s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  343. ##counts SARE_LWSHARES 1s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  344. ##counts SARE_LWSHARES 27s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  345. ##counts SARE_LWSHARES 32s/26h of 508570 corpus (180270s/328300h RM) 01/25/06
  346. ##counts SARE_LWSHARES 7s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  347. body SARE_LWSHORTT /\bshort\s*term\b/i
  348. score SARE_LWSHORTT 1.24
  349. ##counts SARE_LWSHORTT 1026s/14h of 86182 corpus (46804s/39378h DOC) 01/25/06
  350. ##counts SARE_LWSHORTT 179s/10h of 37304 corpus (31827s/5477h MY) 01/25/06
  351. ##counts SARE_LWSHORTT 20s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  352. ##counts SARE_LWSHORTT 291s/5h of 17497 corpus (9723s/7774h FT) 01/25/06
  353. ##counts SARE_LWSHORTT 58s/10h of 11519 corpus (6151s/5368h CT) 01/25/06
  354. ##counts SARE_LWSHORTT 846s/1h of 59166 corpus (45647s/13519h ML) 01/25/06
  355. ##counts SARE_LWSHORTT 849s/465h of 508570 corpus (180270s/328300h RM) 01/25/06
  356. body SARE_LWPROJECTION /projection:?\s+\$/i
  357. score SARE_LWPROJECTION 1.66
  358. ##counts SARE_LWPROJECTION 0s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  359. ##counts SARE_LWPROJECTION 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  360. ##counts SARE_LWPROJECTION 22s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  361. ##counts SARE_LWPROJECTION 49s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  362. ##counts SARE_LWPROJECTION 68s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  363. ##counts SARE_LWPROJECTION 89s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  364. ##counts SARE_LWPROJECTION 9s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  365. # body SARE_LWPOISED /poised (?:to fly|for Big (?:gains|returns))/is
  366. # score SARE_LWPOISED 1.66
  367. ##counts SARE_LWPOISED 1081s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  368. ##counts SARE_LWPOISED 128s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  369. ##counts SARE_LWPOISED 172s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  370. ##counts SARE_LWPOISED 2s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  371. ##counts SARE_LWPOISED 2s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  372. ##counts SARE_LWPOISED 303s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  373. ##counts SARE_LWPOISED 9s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  374. body SARE_LWFORWARD /(?:4r?|f[o0]r)w[a4\@]?rd[ _-]?[l|][o0][o0]k[il1]ng[ _-]?[s\$]t[a4\@]?t[e3\*]m[e3\*]nt[s\$]/is
  375. score SARE_LWFORWARD 1.11
  376. #counts SARE_LWFORWARD 183s/0h of 27462 corpus (21821s/5641h MY) 02/19/06
  377. #counts SARE_LWFORWARD 2026s/0h of 97511 corpus (58134s/39377h DOC) 02/19/06
  378. #counts SARE_LWFORWARD 2031s/0h of 74735 corpus (58806s/15929h ML) 02/19/06
  379. #counts SARE_LWFORWARD 255s/0h of 11695 corpus (6133s/5562h CT) 02/19/06
  380. #counts SARE_LWFORWARD 83s/1h of 7765 corpus (5542s/2223h AxB) 02/20/06
  381. #counts SARE_LWFORWARD 906s/0h of 27185 corpus (19320s/7865h FT) 02/20/06
  382. body SARE_LWHUGE /huge (?:buy|growth|revenues|oppo|trade|pr\s)/i
  383. score SARE_LWHUGE 1.54
  384. ##counts SARE_LWHUGE 108s/0h of 37290 corpus (31815s/5475h MY) 02/02/06
  385. ##counts SARE_LWHUGE 118s/0h of 11691 corpus (6130s/5561h CT) 02/02/06
  386. ##counts SARE_LWHUGE 35s/0h of 26935 corpus (19146s/7789h FT) 02/03/06
  387. ##counts SARE_LWHUGE 78s/0h of 3248 corpus (1027s/2221h AxB) 02/03/06
  388. ##counts SARE_LWHUGE 876s/0h of 89538 corpus (50161s/39377h DOC) 02/02/06
  389. ##counts SARE_LWHUGE 889s/0h of 59013 corpus (45512s/13501h ML) 02/03/06
  390. ##counts SARE_LWHUGE 3317s/58h of 500113 corpus (227198s/272915h RM) 01/10/06
  391. body SARE_LWACT_QUICKLY /\bact\s+quick(?:ly)?/i
  392. describe SARE_LWACT_QUICKLY Spammer thinks you should hurry.
  393. score SARE_LWACT_QUICKLY 1.17
  394. #counts SARE_LWACT_QUICKLY 26s/11h of 27479 corpus (21834s/5645h MY) 02/13/06
  395. #counts SARE_LWACT_QUICKLY 3s/0h of 7663 corpus (5437s/2226h AxB) 02/13/06
  396. #counts SARE_LWACT_QUICKLY 51s/4h of 27181 corpus (19321s/7860h FT) 02/13/06
  397. #counts SARE_LWACT_QUICKLY 637s/0h of 68401 corpus (53647s/14754h ML) 02/13/06
  398. #counts SARE_LWACT_QUICKLY 66s/0h of 11699 corpus (6139s/5560h CT) 02/13/06
  399. #counts SARE_LWACT_QUICKLY 733s/0h of 94330 corpus (54945s/39385h DOC) 02/13/06
  400. #2006-02-19
  401. ## header __RATWR19_MESSID Message-ID =~ /<[A-Z]{21,38}(?:\.[a-z_]+)?\@/
  402. ## describe __RATWR19_MESSID Message-ID: rat patrn (XXXXXXXXXXXX[.xxxxxx]@)
  403. # header __RATWARE_0_TZ_DATE Date =~ /\s\+0000$/
  404. ## header __SARE_MULT_RATW_02A ALL =~ m'\bMessage-ID: <[A-Z]{28}\.([^>]+)>\n.*\bFrom: \"[^\"]+\" <\1>\n's
  405. ## header __SARE_MULT_RATW_02B ALL =~ m'\bFrom: \"[^\"]+\" <([^>]+)>\n.*\bMessage-ID: <[A-Z]{28}\.\1>\n's
  406. ## header __RATWR20_MESSID Message-ID =~ /<[A-Z]{21,38}[^\@>]*\@/
  407. # meta LW_STOCK_SPAM4 __RATWARE_0_TZ_DATE && MIME_BASE64_TEXT
  408. # score LW_STOCK_SPAM4 1.66
  409. # describe LW_STOCK_SPAM4 Yup, its a spam!
  410. #counts LW_STOCK_SPAM4 0s/0h of 27462 corpus (21821s/5641h MY) 02/19/06
  411. #counts LW_STOCK_SPAM4 193s/0h of 11695 corpus (6133s/5562h CT) 02/19/06
  412. #counts LW_STOCK_SPAM4 2014s/0h of 74735 corpus (58806s/15929h ML) 02/19/06
  413. #counts LW_STOCK_SPAM4 2s/0h of 7765 corpus (5542s/2223h AxB) 02/20/06
  414. #counts LW_STOCK_SPAM4 353s/0h of 97511 corpus (58134s/39377h DOC) 02/19/06
  415. #counts LW_STOCK_SPAM4 509s/0h of 27185 corpus (19320s/7865h FT) 02/20/06
  416. # 2005-12-27
  417. # Contributed by Raymond
  418. # Updated by AXB 8/18/2007
  419. body SARE_PROLOSTOCK_SYM1 /\b(?:EXMT|PRTH|SZSN|WWNG|ERMX|SPHM|SGXI|TVEN|GPSI|A0LB1T|FDEG|QMMG|DPWI|BVYH|NWVM|FBVG|CDYV|EXVG|NNYR|OPLO|VYEY|UTEV|MHII|MGOA|KRXR|CBFE|QCPC|MBWC|TGVI|XNYH|HXPN|PGGG|VSUS|BLNM|NXSF|UDTT|TFZP|MXXR|NHVP|VGYI|CRSVF|CYHD|MXXR|ALVN|TMXO|HLUN|CDPN|KMAG|EQTD|QEGY|SRVN|WYPH|ILKG|HNST|DIAAF|FCYI|CTBG|LITL|HYWI|MGMX|SYNI|DGKO|AVCP|TGLE|TKTJF|CTXE|CTFE|HYBT|RKLC|KDNG|PNAMF|FPPL|FCPG|PHDTF|HWYI|ZLDV|WDCV|ILKG|AMMX|UMSY|PZFC|RWGI|IFNX|IPKL|CHMS|VNBL|PPTL|CDGT|XMON|STWG|APWL|TEDG|SPZI|TOTG|WWBP|CWTD|MWIS|CGKY|CDVM|GFCI|SLVG|WNWG|AXCP|WNWG|JCDS|HLVC|WNWG|CYI0|KKPT|GFPE|WSRA|CHNW|SPMP|DTGP|PGCN|KLGE|DKDY|RMVN|KSWJ|CTKR|NSLT|RLYC|PFNC)\b/
  420. score SARE_PROLOSTOCK_SYM1 1.63
  421. describe SARE_PROLOSTOCK_SYM1 Last week's hot stock scam
  422. body SARE_PROLOSTOCK_SYM2 /\b(?:P R T H|C H V C|N W V M|C E O A|C T C X|C N H C|A D D L|T J S S|A E T R|T X H E|C R S V F|W B R S|S S U F|H L V C|G D K I|A G A 0|C G D C|H Y W I|I N F X|A B S Y|H L U N|F C Y I|A M S N|W T A F|H Y W I|C T X E|U S T A|I Z O N|I L K G|R T C I|P P T L|S B B D|E G L Y|A X C P|D K D Y|P G C N| M W I S|I G A M|F C P G|D M S I)\b/
  423. score SARE_PROLOSTOCK_SYM2 1.01
  424. describe SARE_PROLOSTOCK_SYM2 Last week's hot stock scam
  425. body SARE_PROLOSTOCK_SYM3 /\b(?:SYGT|CYTV|LTDI|MM1|OTLK|MRMT|SREA|VPSN|SGXI|MGOA|COPI|ONCO|UTEV|DSI|UTEV|TRDX|CHVC|ASVP|CPMM|TMMG|PLMA|CCTI|PPTM|SCPT|CBRP|MRDY|SGDS|NNCP|ACEN|LOMJ|CTCX|BLRS|IWRS|CBFE|SHMM|LOMJ|CBRJ|ARSS|HPGI|USSG|NNSR|VTSS|AFML|WDSC|MISJ|ADYN|TTEN|IDSM|PHYA|AMSN|FCNK|LVCC|HEGP|CNHC|CFSC|ADDL|GAMN|CNPM|PRGJ|BMSN|RREF|GSNH|TNEN|GITH|AGGI|AUNI|MPRG|DFSE|WBRS|KGBC|HBID|TXHE|BCLC|SBNS|WLON|TERX|XTPT|AETR|EGLY|SMKG|HMGP|SSUF|AGAO|DGTL|GDKI|NCSH|COSCO|PSUD|VNGP|ISMN|DBSJ|VMCI|BWEB|VMCI|HRRP|KMAG|EPLJ|ABSY|IBTY|NPWS|NNLX|SBRX|APPM|INFX|CGDC|DPER|VMCI|HBSC|DPGP|TAOL|SIKY|RTCI|NNPC|SWNM|pptl|AAPM|MDBF|ADYE|SPSY|NMEN|WNCP|IZON|MDEX|SNVH|IVHN|NNFC|FEKY|ADYE|ADCS|PFNC|CBIO|CRHI|SBBD|UBTA|EPRT|ADNL|ANDL|IGTS|EQSE|CEOA|RYNL|CFRI|NHLG|EXTI|CIVX|GAPJ|BCSM|SGWV|PDSC|IGAM|PIFR)\b/
  426. score SARE_PROLOSTOCK_SYM3 1.63
  427. describe SARE_PROLOSTOCK_SYM3 Last week's hot stock scam
  428. body SARE_PROLOSTOCK_SYM4 /\b(?:LTDI\.PK|PAYI\.OB|GDVM\.PK|ETMO\.PK|SPHM\.PK|ADOV\.OB|PHYA\.PK|DIAAF\.OB|RRGI\.PK|MRDY\.PK|GAMT\.OB|CBRP\.PK|NNCP\.PK|AMXG\.OB|SHDG\.PK|TAMG\.OB|PBOF\.OB|TICLF\.PK|MHII\.OB|PHYH\.PK|MISJ\.PK|QCPC\.PK|BMGP\.PK|WEXE\.PK|AGWS\.PK|LOMJ\.PK|ATVR\.PK|BLTA\.OB|CBFE\.PK|HSFI\.PK|MHII\.OB|BMOD\.OB|WDSC\.PK|NNYG\.PK|SRRL\.OB|FPMC\.PK|AMSN\.PK|Axtg\.pk|FCNK\.PK|THRI\.PK|MAKU\.OB|WHKA\.PK|BLNM\.OB|TORA\.OB|CNHC\.PK|IFLT\.PK|NHVP\.PK|AVLN\.OB|SGDS\.PK|FCTOA\.OB|SGDS\.PK|TERX\.OB|BMSN\.OB|TQWW\.PK|FTRM\.PK|SORD\.OB|TXHE\.PK|IVAYY\.PK|IVAY\.PK|VGYI\.PK|PGCN\.OB|GYI\.PK|AG HG|HLUN\.PK|WBRS\.PK|GDKI\.PK|ILKG\.PK|VNGP\.PK|DPER\.PK|FCYI\.PK|KMAG\.PK|DPEK\.PK|EPLJ\.PK|KFTG\.PK|HYW I|FCYI\.PK|LITL\.PK|TGVI\.PK|VMCI\.PK|AGHG\.PK|DPGP\.PK|AVCP\.PK|FPPL\.PK|CTFE\.PK|UBTA\.PK|Mhpt.pk|BDWH\.PK|BIGN.PK|CRHI\.OB|CBIO\.PK|SWNM.PK)\.?\b/
  429. score SARE_PROLOSTOCK_SYM4 1.66
  430. describe SARE_PROLOSTOCK_SYM4 Last week's hot stock scam
  431. # Added by AXB 8/18/2007
  432. body SARE_AXBSTOCK_EXMT /\bE\s?\W?X\s?\W?M\s?\W?T\b/
  433. score SARE_AXBSTOCK_EXMT 1.66
  434. body SARE_AXBSTOCK_EXMTPK /\bE\s?\W?X\s?\W?M\s?\W?T\s?\.\s?\W?P\s?\W?K\b/
  435. score SARE_AXBSTOCK_EXMTPK 1.66
  436. # 2005-12-27
  437. # ------FREDS STOCK RULESET--------
  438. body __SYMBOL_XXXX /\b(?:[sS][yY][mM][bB][o0O][lL1]|[Tt][iI1][cC][kK][eE][rR]):(?:\s|_)?[A-Z]{4}\b/
  439. body __STOCK_NAME /St[0O]ck Name:(?:\s|_)?[A-Z]{4}\b/
  440. body __WORD_STOCK_F /\bst[o0]cks?\b/i
  441. meta STOCK_NAME_FVGT1 ((__SYMBOL_XXXX || __STOCK_NAME) && __WORD_STOCK_F)
  442. score STOCK_NAME_FVGT1 1.66
  443. ##counts STOCK_NAME_FVGT1 1637s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  444. ##counts STOCK_NAME_FVGT1 1984s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  445. ##counts STOCK_NAME_FVGT1 218s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  446. ##counts STOCK_NAME_FVGT1 21s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  447. ##counts STOCK_NAME_FVGT1 2963s/6h of 508570 corpus (180270s/328300h RM) 01/25/06
  448. ##counts STOCK_NAME_FVGT1 426s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  449. ##counts STOCK_NAME_FVGT1 483s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  450. # 2005-12-28
  451. # Contributed by Bob and Mike
  452. body SARE_RMML_Stock1 /0tc/i
  453. score SARE_RMML_Stock1 0.21
  454. ##counts SARE_RMML_Stock1 0s/1h of 11519 corpus (6151s/5368h CT) 01/25/06
  455. ##counts SARE_RMML_Stock1 14s/4h of 37304 corpus (31827s/5477h MY) 01/25/06
  456. ##counts SARE_RMML_Stock1 15s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  457. ##counts SARE_RMML_Stock1 1s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  458. ##counts SARE_RMML_Stock1 232s/96h of 508570 corpus (180270s/328300h RM) 01/25/06
  459. ##counts SARE_RMML_Stock1 26s/5h of 59166 corpus (45647s/13519h ML) 01/25/06
  460. ##counts SARE_RMML_Stock1 38s/6h of 17497 corpus (9723s/7774h FT) 01/25/06
  461. body SARE_RMML_Stock2 /0pportunity/i
  462. score SARE_RMML_Stock2 1.66
  463. ##counts SARE_RMML_Stock2 118s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  464. ##counts SARE_RMML_Stock2 1s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  465. ##counts SARE_RMML_Stock2 9s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  466. ##counts SARE_RMML_Stock2 2s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  467. ##counts SARE_RMML_Stock2 35s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  468. ##counts SARE_RMML_Stock2 41s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  469. ##counts SARE_RMML_Stock2 44s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  470. # body SARE_RMML_Stock3 /more stock/i
  471. # score SARE_RMML_Stock3 0.027
  472. ##counts SARE_RMML_Stock3 0s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  473. ##counts SARE_RMML_Stock3 0s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  474. ##counts SARE_RMML_Stock3 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  475. ##counts SARE_RMML_Stock3 0s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  476. ##counts SARE_RMML_Stock3 1s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  477. ##counts SARE_RMML_Stock3 1s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  478. ##counts SARE_RMML_Stock3 4s/28h of 508570 corpus (180270s/328300h RM) 01/25/06
  479. body SARE_RMML_Stock4 /stock (?:pick|trading)/i
  480. score SARE_RMML_Stock4 1.54
  481. ##counts SARE_RMML_Stock4 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  482. ##counts SARE_RMML_Stock4 22s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  483. ##counts SARE_RMML_Stock4 325s/86h of 508570 corpus (180270s/328300h RM) 01/25/06
  484. ##counts SARE_RMML_Stock4 40s/1h of 86182 corpus (46804s/39378h DOC) 01/25/06
  485. ##counts SARE_RMML_Stock4 42s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  486. ##counts SARE_RMML_Stock4 4s/1h of 17497 corpus (9723s/7774h FT) 01/25/06
  487. ##counts SARE_RMML_Stock4 61s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  488. body SARE_RMML_Stock5 /trading gains/i
  489. score SARE_RMML_Stock5 1.66
  490. ##counts SARE_RMML_Stock5 0s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  491. ##counts SARE_RMML_Stock5 0s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  492. ##counts SARE_RMML_Stock5 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  493. ##counts SARE_RMML_Stock5 0s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  494. ##counts SARE_RMML_Stock5 26s/1h of 508570 corpus (180270s/328300h RM) 01/25/06
  495. ##counts SARE_RMML_Stock5 2s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  496. ##counts SARE_RMML_Stock5 8s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  497. body SARE_RMML_Stock6 /1nvest/i
  498. score SARE_RMML_Stock6 1.66
  499. ##counts SARE_RMML_Stock6 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  500. ##counts SARE_RMML_Stock6 126s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  501. ##counts SARE_RMML_Stock6 15s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  502. ##counts SARE_RMML_Stock6 166s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  503. ##counts SARE_RMML_Stock6 64s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  504. ##counts SARE_RMML_Stock6 8s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  505. ##counts SARE_RMML_Stock6 9s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  506. body SARE_RMML_Stock7 /(?:investor|trading) alert/i
  507. score SARE_RMML_Stock7 1.64
  508. ##counts SARE_RMML_Stock7 1s/1h of 17497 corpus (9723s/7774h FT) 01/25/06
  509. ##counts SARE_RMML_Stock7 217s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  510. ##counts SARE_RMML_Stock7 242s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  511. ##counts SARE_RMML_Stock7 24s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  512. ##counts SARE_RMML_Stock7 372s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  513. ##counts SARE_RMML_Stock7 48s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  514. ##counts SARE_RMML_Stock7 553s/87h of 508570 corpus (180270s/328300h RM) 01/25/06
  515. body SARE_RMML_Stock8 /stocks? (?:to|2) watch/i
  516. score SARE_RMML_Stock8 1.66
  517. ##counts SARE_RMML_Stock8 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  518. ##counts SARE_RMML_Stock8 16s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  519. ##counts SARE_RMML_Stock8 1s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  520. ##counts SARE_RMML_Stock8 31s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  521. ##counts SARE_RMML_Stock8 5s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  522. ##counts SARE_RMML_Stock8 81s/4h of 508570 corpus (180270s/328300h RM) 01/25/06
  523. ##counts SARE_RMML_Stock8 8s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  524. body SARE_RMML_Stock9 /0il/i
  525. score SARE_RMML_Stock9 0.13
  526. ##counts SARE_RMML_Stock9 12s/9h of 17497 corpus (9723s/7774h FT) 01/25/06
  527. ##counts SARE_RMML_Stock9 16s/2h of 37304 corpus (31827s/5477h MY) 01/25/06
  528. ##counts SARE_RMML_Stock9 1s/1h of 5645 corpus (3421s/2224h AxB) 01/26/06
  529. ##counts SARE_RMML_Stock9 23s/1h of 86182 corpus (46804s/39378h DOC) 01/25/06
  530. ##counts SARE_RMML_Stock9 39s/3h of 59166 corpus (45647s/13519h ML) 01/25/06
  531. ##counts SARE_RMML_Stock9 4s/1h of 11519 corpus (6151s/5368h CT) 01/25/06
  532. ##counts SARE_RMML_Stock9 782s/64h of 508570 corpus (180270s/328300h RM) 01/25/06
  533. body SARE_RMML_Stock10 /buy-in/i
  534. score SARE_RMML_Stock10 0.13
  535. ##counts SARE_RMML_Stock10 0s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  536. ##counts SARE_RMML_Stock10 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  537. ##counts SARE_RMML_Stock10 0s/1h of 11519 corpus (6151s/5368h CT) 01/25/06
  538. ##counts SARE_RMML_Stock10 1s/16h of 37304 corpus (31827s/5477h MY) 01/25/06
  539. ##counts SARE_RMML_Stock10 2s/3h of 86182 corpus (46804s/39378h DOC) 01/25/06
  540. ##counts SARE_RMML_Stock10 34s/72h of 508570 corpus (180270s/328300h RM) 01/25/06
  541. ##counts SARE_RMML_Stock10 35s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  542. # body SARE_RMML_Stock15 /(?:rise|jump).{1,20}in the first/i
  543. # score SARE_RMML_Stock15 0.027
  544. ##counts SARE_RMML_Stock15 0s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  545. ##counts SARE_RMML_Stock15 0s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  546. ##counts SARE_RMML_Stock15 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  547. ##counts SARE_RMML_Stock15 1s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  548. ##counts SARE_RMML_Stock15 1s/1h of 86182 corpus (46804s/39378h DOC) 01/25/06
  549. ##counts SARE_RMML_Stock15 33s/12h of 508570 corpus (180270s/328300h RM) 01/25/06
  550. ##counts SARE_RMML_Stock15 3s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  551. # body SARE_RMML_Stock16 /make invest/i
  552. # score SARE_RMML_Stock16 0.027
  553. ##counts SARE_RMML_Stock16 0s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  554. ##counts SARE_RMML_Stock16 0s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  555. ##counts SARE_RMML_Stock16 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  556. ##counts SARE_RMML_Stock16 0s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  557. ##counts SARE_RMML_Stock16 10s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  558. ##counts SARE_RMML_Stock16 19s/28h of 508570 corpus (180270s/328300h RM) 01/25/06
  559. ##counts SARE_RMML_Stock16 1s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  560. body SARE_RMML_Stock17 /(?:poised|positioned) to (?:make|double|move|jump)/i
  561. score SARE_RMML_Stock17 0.64
  562. ##counts SARE_RMML_Stock17 0s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  563. ##counts SARE_RMML_Stock17 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  564. ##counts SARE_RMML_Stock17 102s/39h of 508570 corpus (180270s/328300h RM) 01/25/06
  565. ##counts SARE_RMML_Stock17 3s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  566. ##counts SARE_RMML_Stock17 6s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  567. ##counts SARE_RMML_Stock17 6s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  568. ##counts SARE_RMML_Stock17 6s/3h of 86182 corpus (46804s/39378h DOC) 01/25/06
  569. # body SARE_RMML_Stock18 /(?:investors|reach).{1,20}illion/i
  570. # score SARE_RMML_Stock18 0.222
  571. ##counts SARE_RMML_Stock18 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  572. ##counts SARE_RMML_Stock18 11s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  573. ##counts SARE_RMML_Stock18 24s/5h of 17497 corpus (9723s/7774h FT) 01/25/06
  574. ##counts SARE_RMML_Stock18 39s/10h of 86182 corpus (46804s/39378h DOC) 01/25/06
  575. ##counts SARE_RMML_Stock18 56s/5h of 37304 corpus (31827s/5477h MY) 01/25/06
  576. ##counts SARE_RMML_Stock18 5s/2h of 11519 corpus (6151s/5368h CT) 01/25/06
  577. ##counts SARE_RMML_Stock18 685s/922h of 508570 corpus (180270s/328300h RM) 01/25/06
  578. body SARE_RMML_Stock19 /illion.{0,500}investor/i
  579. score SARE_RMML_Stock19 0.22
  580. ##counts SARE_RMML_Stock19 14s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  581. ##counts SARE_RMML_Stock19 232s/531h of 508570 corpus (180270s/328300h RM) 01/25/06
  582. ##counts SARE_RMML_Stock19 48s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  583. ##counts SARE_RMML_Stock19 6s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  584. ##counts SARE_RMML_Stock19 73s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  585. ##counts SARE_RMML_Stock19 7s/1h of 17497 corpus (9723s/7774h FT) 01/25/06
  586. ##counts SARE_RMML_Stock19 82s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  587. body SARE_RMML_Stock20 /winning trade/i
  588. score SARE_RMML_Stock20 0.43
  589. ##counts SARE_RMML_Stock20 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  590. ##counts SARE_RMML_Stock20 1s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  591. ##counts SARE_RMML_Stock20 1s/1h of 17497 corpus (9723s/7774h FT) 01/25/06
  592. ##counts SARE_RMML_Stock20 2s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  593. ##counts SARE_RMML_Stock20 5s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  594. ##counts SARE_RMML_Stock20 7s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  595. ##counts SARE_RMML_Stock20 9s/17h of 508570 corpus (180270s/328300h RM) 01/25/06
  596. body SARE_RMML_Stock21 /will th(?:is *(?:stock|small)|ese share)/i
  597. score SARE_RMML_Stock21 1.66
  598. ##counts SARE_RMML_Stock21 0s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  599. ##counts SARE_RMML_Stock21 2s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  600. ##counts SARE_RMML_Stock21 37s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  601. ##counts SARE_RMML_Stock21 3s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  602. ##counts SARE_RMML_Stock21 4s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  603. ##counts SARE_RMML_Stock21 55s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  604. ##counts SARE_RMML_Stock21 68s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  605. body SARE_RMML_Stock22 /\b(?:m.icro|mi.cro|mic.ro|micr.o).{0,5}cap/i
  606. score SARE_RMML_Stock22 1.66
  607. ##counts SARE_RMML_Stock22 0s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  608. ##counts SARE_RMML_Stock22 0s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  609. ##counts SARE_RMML_Stock22 144s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  610. ##counts SARE_RMML_Stock22 2s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  611. ##counts SARE_RMML_Stock22 45s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  612. ##counts SARE_RMML_Stock22 78s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  613. ##counts SARE_RMML_Stock22 8s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  614. body SARE_RMML_Stock23 /market (?:watch alert|wizard)/i
  615. score SARE_RMML_Stock23 1.66
  616. ##counts SARE_RMML_Stock23 0s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  617. ##counts SARE_RMML_Stock23 0s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  618. ##counts SARE_RMML_Stock23 1s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  619. ##counts SARE_RMML_Stock23 3s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  620. ##counts SARE_RMML_Stock23 40s/9h of 508570 corpus (180270s/328300h RM) 01/25/06
  621. ##counts SARE_RMML_Stock23 6s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  622. ##counts SARE_RMML_Stock23 9s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  623. body SARE_RMML_Stock24 /\bs.?t.?0.?c.?k.?s?\b/i
  624. score SARE_RMML_Stock24 1.66
  625. ##counts SARE_RMML_Stock24 1588s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  626. ##counts SARE_RMML_Stock24 1653s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  627. ##counts SARE_RMML_Stock24 187s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  628. ##counts SARE_RMML_Stock24 235s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  629. ##counts SARE_RMML_Stock24 347s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  630. ##counts SARE_RMML_Stock24 4378s/0h of 508570 corpus (180270s/328300h RM) 01/25/06
  631. ##counts SARE_RMML_Stock24 81s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  632. body SARE_RMML_Stock25 /undervalue/i
  633. score SARE_RMML_Stock25 0.80
  634. ##counts SARE_RMML_Stock25 110s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  635. ##counts SARE_RMML_Stock25 11s/2h of 17497 corpus (9723s/7774h FT) 01/25/06
  636. ##counts SARE_RMML_Stock25 2147s/167h of 508570 corpus (180270s/328300h RM) 01/25/06
  637. ##counts SARE_RMML_Stock25 34s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  638. ##counts SARE_RMML_Stock25 650s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  639. ##counts SARE_RMML_Stock25 723s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  640. ##counts SARE_RMML_Stock25 74s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  641. body SARE_RMML_Stock26 /hot (?:pick|penny|shot stock|stock)/i
  642. score SARE_RMML_Stock26 1.49
  643. ##counts SARE_RMML_Stock26 185s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  644. ##counts SARE_RMML_Stock26 206s/1h of 86182 corpus (46804s/39378h DOC) 01/25/06
  645. ##counts SARE_RMML_Stock26 264s/3h of 59166 corpus (45647s/13519h ML) 01/25/06
  646. ##counts SARE_RMML_Stock26 33s/1h of 17497 corpus (9723s/7774h FT) 01/25/06
  647. ##counts SARE_RMML_Stock26 46s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  648. ##counts SARE_RMML_Stock26 64s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  649. ##counts SARE_RMML_Stock26 953s/37h of 508570 corpus (180270s/328300h RM) 01/25/06
  650. body SARE_RMML_Stock27 /g.?[0o].?l.?d.? c.?[o0].?m.?p.?a.?n.?y/i
  651. score SARE_RMML_Stock27 1.66
  652. ##counts SARE_RMML_Stock27 0s/0h of 11519 corpus (6151s/5368h CT) 01/25/06
  653. ##counts SARE_RMML_Stock27 10s/0h of 37304 corpus (31827s/5477h MY) 01/25/06
  654. ##counts SARE_RMML_Stock27 22s/0h of 59166 corpus (45647s/13519h ML) 01/25/06
  655. ##counts SARE_RMML_Stock27 2s/0h of 86182 corpus (46804s/39378h DOC) 01/25/06
  656. ##counts SARE_RMML_Stock27 363s/4h of 508570 corpus (180270s/328300h RM) 01/25/06
  657. ##counts SARE_RMML_Stock27 3s/0h of 17497 corpus (9723s/7774h FT) 01/25/06
  658. ##counts SARE_RMML_Stock27 3s/0h of 5645 corpus (3421s/2224h AxB) 01/26/06
  659. #-----------------------------------------------------------------------------------
  660. # 03/07/2006
  661. ## Contributed by Dallas
  662. meta __IMG_ONLY ( HTML_IMAGE_ONLY_04 || HTML_IMAGE_ONLY_08 || HTML_IMAGE_ONLY_12 || HTML_IMAGE_ONLY_16 || HTML_IMAGE_ONLY_20 || HTML_IMAGE_ONLY_24 || HTML_IMAGE_ONLY_28 )
  663. full SARE_GIF_ATTACH /name=\"?[0-9a-z._\-]{3,18}\.gif\"?/i
  664. describe SARE_GIF_ATTACH Email has a inline gif
  665. score SARE_GIF_ATTACH 1.42
  666. #counts SARE_GIF_ATTACH 107s/7h of 22956 corpus (17243s/5713h MY) 03/07/06
  667. #counts SARE_GIF_ATTACH 171s/7h of 12239 corpus (6565s/5674h CT) 03/07/06
  668. #counts SARE_GIF_ATTACH 1881s/7h of 105448 corpus (66068s/39380h DOC) 03/07/06
  669. #counts SARE_GIF_ATTACH 2743s/1h of 89274 corpus (71419s/17855h ML) 03/07/06
  670. #counts SARE_GIF_ATTACH 530s/5h of 15560 corpus (7747s/7813h FT) 03/07/06
  671. #counts SARE_GIF_ATTACH 736s/9h of 7196 corpus (4970s/2226h AxB) 03/08/06
  672. #counts SARE_GIF_ATTACH 1825s/5h of 50435 corpus (42435s/8000h FVGT) 03/08/06
  673. meta SARE_GIF_STOX ( SARE_GIF_ATTACH && __IMG_ONLY )
  674. describe SARE_GIF_STOX Inline Gif with little HTML
  675. score SARE_GIF_STOX 1.66
  676. #counts SARE_GIF_STOX 1603s/0h of 105448 corpus (66068s/39380h DOC) 03/07/06
  677. #counts SARE_GIF_STOX 166s/0h of 12239 corpus (6565s/5674h CT) 03/07/06
  678. #counts SARE_GIF_STOX 174s/0h of 7196 corpus (4970s/2226h AxB) 03/08/06
  679. #counts SARE_GIF_STOX 2326s/1h of 89274 corpus (71419s/17855h ML) 03/07/06
  680. #counts SARE_GIF_STOX 486s/2h of 15560 corpus (7747s/7813h FT) 03/07/06
  681. #counts SARE_GIF_STOX 82s/1h of 22956 corpus (17243s/5713h MY) 03/07/06
  682. #counts SARE_GIF_STOX 1634s/2h of 50435 corpus (42435s/8000h FVGT) 03/08/06
  683. # contributed by Chris S.
  684. # 02/14/06
  685. body SARE_CSBIG /(?:explosive|huge|big|increased|great|incredible).(?:gains|returns)/is
  686. describe SARE_CSBIG Only Spicy food gives me an Explosive Gain.
  687. score SARE_CSBIG 1.65
  688. #counts SARE_CSBIG 345s/0h of 27181 corpus (19321s/7860h FT) 02/13/06
  689. #counts SARE_CSBIG 654s/0h of 94330 corpus (54945s/39385h DOC) 02/13/06
  690. #counts SARE_CSBIG 68s/0h of 11699 corpus (6139s/5560h CT) 02/13/06
  691. #counts SARE_CSBIG 775s/0h of 68401 corpus (53647s/14754h ML) 02/13/06
  692. #counts SARE_CSBIG 81s/0h of 27479 corpus (21834s/5645h MY) 02/13/06
  693. #counts SARE_CSBIG 86s/0h of 7663 corpus (5437s/2226h AxB) 02/13/06
  694. header SARE_CSNUMTAG Received =~ /from \-\d{5,}/
  695. describe SARE_CSNUMTAG Spamsign in header
  696. score SARE_CSNUMTAG 1.66
  697. #counts SARE_CSNUMTAG 0s/0h of 11699 corpus (6139s/5560h CT) 02/13/06
  698. #counts SARE_CSNUMTAG 145s/0h of 27181 corpus (19321s/7860h FT) 02/13/06
  699. #counts SARE_CSNUMTAG 1s/0h of 27479 corpus (21834s/5645h MY) 02/13/06
  700. #counts SARE_CSNUMTAG 2429s/0h of 94330 corpus (54945s/39385h DOC) 02/13/06
  701. #counts SARE_CSNUMTAG 30s/0h of 7663 corpus (5437s/2226h AxB) 02/13/06
  702. #counts SARE_CSNUMTAG 9s/0h of 68401 corpus (53647s/14754h ML) 02/13/06
  703. rawbody __SARE_CSTRADE2 /trading/i
  704. rawbody __SARE_CSTRADE3 /(?:all|next|this).?(month|week)/i
  705. rawbody __SARE_CSTRADE4 /src\="cid/i
  706. meta SARE_CSTRADE5 (__SARE_CSTRADE2 && __SARE_CSTRADE3 && __SARE_CSTRADE4)
  707. describe SARE_CSTRADE5 STOCK Attachments.
  708. score SARE_CSTRADE5 0.52
  709. #counts SARE_CSTRADE5 0s/0h of 27479 corpus (21834s/5645h MY) 02/13/06
  710. #counts SARE_CSTRADE5 1s/0h of 7663 corpus (5437s/2226h AxB) 02/13/06
  711. #counts SARE_CSTRADE5 288s/0h of 27181 corpus (19321s/7860h FT) 02/13/06
  712. #counts SARE_CSTRADE5 39s/0h of 94330 corpus (54945s/39385h DOC) 02/13/06
  713. #counts SARE_CSTRADE5 3s/0h of 11699 corpus (6139s/5560h CT) 02/13/06
  714. #counts SARE_CSTRADE5 58s/0h of 68401 corpus (53647s/14754h ML) 02/13/06
  715. body SARE_CSSM /smart m.ney equ.{3}es/is
  716. describe SARE_CSSM Smart Money Equities
  717. score SARE_CSSM 1.66
  718. #counts SARE_CSSM 383s/0h of 92359 corpus (52980s/39379h DOC) 02/09/06
  719. #counts SARE_CSSM 367s/0h of 27121 corpus (19266s/7855h FT) 02/09/06
  720. #counts SARE_CSSM 198s/0h of 60808 corpus (47084s/13724h ML) 02/11/06
  721. #counts SARE_CSSM 23s/0h of 11691 corpus (6130s/5561h CT) 02/09/06
  722. #counts SARE_CSSM 7s/0h of 6901 corpus (4676s/2225h AxB) 02/09/06
  723. #counts SARE_CSSM 0s/0h of 37286 corpus (31814s/5472h MY) 02/09/06
  724. # Chris Santerre
  725. # SpamAssassin RulesEmporium (SARE)
  726. #
  727. # Salty Stock Rules
  728. # 10/18/06
  729. # Version: 2.51
  730. #
  731. # These rules have been tested.
  732. # They are meant to catch stock spams with inline gifs
  733. #
  734. # chris@uribl.com
  735. rawbody __MY_CID /src\=\"cid\:/i
  736. describe __MY_CID SARE inline attached image
  737. # avg S/O .85
  738. rawbody __MY_CLOSING /\<\/FONT\>\<\/DIV\>\<\/BODY\>\<\/HTML\>/i
  739. describe __MY_CLOSING font,div,body,html closing
  740. # avg S/O .70
  741. rawbody __MY_EMPTY_FONT /face\=Arial size\=.\>\<\/FONT\>\<\/DIV\>/i
  742. describe __MY_EMPTY_FONT SARE Empty font tag
  743. # avg S/O .78
  744. rawbody __MY_ARIAL2 /face\=Arial size\=2\>/i
  745. describe __MY_ARIAL2 SARE Arial font size 2
  746. # avg S/O .74
  747. rawbody __MY_STYLE /\<STYLE\>\<\/STYLE\>/
  748. describe __MY_STYLE SARE Empty STYLE tags
  749. # avg S/O Not tested seperetly.
  750. meta MY_CID_AND_ARIAL2 (__MY_CID && __MY_ARIAL2)
  751. describe MY_CID_AND_ARIAL2 SARE CID and Arial2
  752. score MY_CID_AND_ARIAL2 1.46
  753. #counts MY_CID_AND_ARIAL2 27444s/94h of 89314 corpus (85178s/4136h AxB2) 10/16/06
  754. #counts MY_CID_AND_ARIAL2 13423s/0h of 256437 corpus (192643s/63794h ML) 10/16/06
  755. #counts MY_CID_AND_ARIAL2 6665s/139h of 250718 corpus (180406s/70312h DOC) 10/16/06
  756. #counts MY_CID_AND_ARIAL2 276s/98h of 8722 corpus (4334s/4388h AxB) 10/16/06
  757. #counts MY_CID_AND_ARIAL2 1513s/5h of 23589 corpus (16994s/6595h CT) 10/16/06
  758. #counts MY_CID_AND_ARIAL2 3004s/43h of 43545 corpus (34574s/8971h FVGT) 10/17/06
  759. # avg S/O 0.905
  760. meta MY_CID_AND_CLOSING (__MY_CID && __MY_CLOSING)
  761. describe MY_CID_AND_CLOSING SARE cid and closing
  762. score MY_CID_AND_CLOSING 1.60
  763. #counts MY_CID_AND_CLOSING 6701s/27h of 89314 corpus (85178s/4136h AxB2) 10/16/06
  764. #counts MY_CID_AND_CLOSING 4864s/0h of 256437 corpus (192643s/63794h ML) 10/16/06
  765. #counts MY_CID_AND_CLOSING 4333s/31h of 250718 corpus (180406s/70312h DOC) 10/16/06
  766. #counts MY_CID_AND_CLOSING 117s/27h of 8722 corpus (4334s/4388h AxB) 10/16/06
  767. #counts MY_CID_AND_CLOSING 717s/1h of 23589 corpus (16994s/6595h CT) 10/16/06
  768. #counts MY_CID_AND_CLOSING 2531s/5h of 43545 corpus (34574s/8971h FVGT) 10/17/06
  769. # avg S/O 0.929
  770. meta MY_CID_AND_STYLE (__MY_CID && __MY_STYLE)
  771. describe MY_CID_AND_STYLE SARE cid and style
  772. score MY_CID_AND_STYLE 1.54
  773. #counts MY_CID_AND_STYLE 41863s/84h of 89314 corpus (85178s/4136h AxB2) 10/16/06
  774. #counts MY_CID_AND_STYLE 20759s/0h of 256437 corpus (192643s/63794h ML) 10/16/06
  775. #counts MY_CID_AND_STYLE 10930s/278h of 250718 corpus (180406s/70312h DOC) 10/16/06
  776. #counts MY_CID_AND_STYLE 296s/87h of 8722 corpus (4334s/4388h AxB) 10/16/06
  777. #counts MY_CID_AND_STYLE 1800s/2h of 23589 corpus (16994s/6595h CT) 10/16/06
  778. #counts MY_CID_AND_STYLE 4453s/59h of 43545 corpus (34574s/8971h FVGT) 10/17/06
  779. # avg S/O 0.918
  780. meta MY_CID_FONT (__MY_CID && __MY_EMPTY_FONT)
  781. describe MY_CID_FONT SARE cid and empty font
  782. score MY_CID_FONT 0.92
  783. #counts MY_CID_FONT 269s/1h of 23587 corpus (16993s/6594h CT) 10/16/06
  784. #counts MY_CID_FONT 147s/1h of 8726 corpus (4336s/4390h AxB) 10/16/06
  785. #counts MY_CID_FONT 592s/1h of 89712 corpus (85572s/4140h AxB2) 10/16/06
  786. #counts MY_CID_FONT 3273s/0h of 256375 corpus (192586s/63789h ML) 10/16/06
  787. #counts MY_CID_FONT 116s/1h of 250747 corpus (180440s/70307h DOC) 10/16/06
  788. # avg S/O 0.984
  789. meta MY_CID_ARIAL2_CLOSING (__MY_CID && __MY_ARIAL2 && __MY_CLOSING)
  790. describe MY_CID_ARIAL2_CLOSING SARE cid arial2 closing
  791. score MY_CID_ARIAL2_CLOSING 1.63
  792. #counts MY_CID_ARIAL2_CLOSING 6554s/14h of 89314 corpus (85178s/4136h AxB2) 10/16/06
  793. #counts MY_CID_ARIAL2_CLOSING 4065s/0h of 256437 corpus (192643s/63794h ML) 10/16/06
  794. #counts MY_CID_ARIAL2_CLOSING 3969s/2h of 250718 corpus (180406s/70312h DOC) 10/16/06
  795. #counts MY_CID_ARIAL2_CLOSING 116s/14h of 8722 corpus (4334s/4388h AxB) 10/16/06
  796. #counts MY_CID_ARIAL2_CLOSING 600s/1h of 23589 corpus (16994s/6595h CT) 10/16/06
  797. #counts MY_CID_ARIAL2_CLOSING 1614s/0h of 43545 corpus (34574s/8971h FVGT) 10/17/06
  798. # avg S/O 0.962
  799. meta MY_CID_ARIAL_STYLE (__MY_CID && __MY_ARIAL2 && __MY_STYLE)
  800. describe MY_CID_ARIAL_STYLE SARE cid arial2 style
  801. score MY_CID_ARIAL_STYLE 1.58
  802. #counts MY_CID_ARIAL_STYLE 27427s/39h of 89314 corpus (85178s/4136h AxB2) 10/16/06
  803. #counts MY_CID_ARIAL_STYLE 12497s/0h of 256437 corpus (192643s/63794h ML) 10/16/06
  804. #counts MY_CID_ARIAL_STYLE 6470s/97h of 250718 corpus (180406s/70312h DOC) 10/16/06
  805. #counts MY_CID_ARIAL_STYLE 276s/41h of 8722 corpus (4334s/4388h AxB) 10/16/06
  806. #counts MY_CID_ARIAL_STYLE 1489s/1h of 23589 corpus (16994s/6595h CT) 10/16/06
  807. #counts MY_CID_ARIAL_STYLE 2222s/28h of 43545 corpus (34574s/8971h FVGT) 10/17/06
  808. # avg S/O 0.951
  809. #EOF