0 c:\regexflt\accepted\{yyyy}-{mm}\{smtp:rcpt_to_domain}\{smtp:rcpt_to_mailbox}\{source:filename}{smtp:recipient_id}.txt c:\regexflt\accepted\{yyyy}-{mm}\log.txt c:\Program Files\Merak\mail\2150.com\rejectedmail\RegEx Accepted\{source:filename}{smtp:recipient_id}.imap http://localhost/2150/regexflt_test.asp 1 501 5.7.1 Content filter bulk mailer rejection c:\regexflt\rejected\{yyyy}-{mm}\{smtp:rcpt_to_domain}\{smtp:rcpt_to_mailbox}\{source:filename}{smtp:recipient_id}.txt c:\regexflt\rejected\{yyyy}-{mm}\log.txt c:\Program Files\Merak\mail\2150.com\rejectedmail\RegEx Rejected\{source:filename}{smtp:recipient_id}.imap http://localhost/2150/regexflt_test.asp 0 c:\regexflt\modified\{yyyy}-{mm}\{smtp:rcpt_to_domain}\{smtp:rcpt_to_mailbox}\{source:filename}{smtp:recipient_id}.txt c:\regexflt\modifed\{yyyy}-{mm}\log.txt c:\Program Files\Merak\mail\2150.com\rejectedmail\RegEx Modified\{source:filename}{smtp:recipient_id}.imap http://localhost/2150/regexflt_test.asp

1000 50000 yes Attempted obfuscation of content using HTML comments bounded by alphanumeric characters all Attempted obfuscation of content using HTML comments formatted incorrectly all Attempted obfuscation of content using HTML comments; this may block some legitimate HTML mailing lists that heavily use comments in the body. No great loss in my opinion, but be aware. all Excessive unnecessary quoting of alphanumeric characters These domains have been found to be used extensively in SPAM and if found in an email will reject the email. This is generally a last-resort method necessary when email content is otherwise minimal so there's not much else to detect by.

all

all The UID attribute in these expressions is for a feature under development; it is completely ignored in current released versions of the filter and does not need to be included. 0te\.(com\|net) 1010fast\.com 101communications\.com 10cheaper\.com 10du\.net 10xstandard\.com 123-e\.com 1234hollus\.com 123residualincome\.com 128quest\.com 13542\.net 141\.85\.12\.45 163\.19\.239\.3 17sky\.com 1800rx\.biz 198\.247\.174\.72 1accesshost\.com 1cellnet\.com 1homelenders\.net 1qhealth\.com 1smartworld\.com 1st-snbm\.com 1ste-concepts\.com 200\.164\.134\.125 200\.206\.185\.153 200\.206\.237\.20 200\.246\.11\.135 200\.99\.17\.44 2001newmillenium\.com 2004hosting\.(net\|org) 205\.235\.78\.3 209\.196\.49\.110 20minutesamerica\.com 210\.169\.91\.178 210\.187\.122\.110 210\.78\.22\.113 211\.150\.98\.43 211\.170\.97\.202 211\.217\.224\.102 211\.219\.178\.15 211\.38\.47\.142 213\.172\.31\.0xd 213\.4\.130\.210 216\.30\.204\.50 216\.31\.173\.134 218\.15\.192\.242 21ware\.net 23k\.net 247downloads\.com 24hourinformationtechnology\.com 2bdjuv\.com 3002hosting\.com [[:digit:]]{4,4}hosting\.(com\|info\|net\|org) 302media\.com 30xstandard\.com 32\.97\.166\.75 321sm\.com 3milleniumnet\.com 3minutemiracle\.org 3uji\.com 4-offers\.com 4bestdealz\.biz 4drn\.com 4improvement\.biz 4shrimp\.com 4t\.com 530000x\.(com\|net) 540000x\.(com\|net) 550000x\.(com\|net) 566solve\.com 61\.173\.42\.154 62\.113\.32\.36 63\.209\.15\.60 64\.124\.147\.221 64\.124\.150\.5 65\.108\.62\.160 66\.92\.162\.196 66\.197\.20\.82 66\.197\.106\.47 666begone4good99\.com 666d\.com 68\.150\.23\.241 68\.168\.67\.197 69\.6\.19\.39 6fvvnj\.com 6oo6le\.com 80\.96\.3\.18 888best\.com 95network\.com 98\.to 9li\.net a-better-you\.net a[[:digit:]]zing29\.com a(11\|12)zing29\.com a1deals\.biz a2zlinkmeds\.com a9\.pl abc-deals1\.net aboutmortgage\.net aboutthemarkets\.com abstractintact\.com abusiness4all\.com accentwebware\.com acidsun\.com advancedmailservers\.com advdatamgmt\.com advertisinginternational\.net advize[[:alnum:]]*\.com affiliatemachine\.com afhq\.com ahwhatnowdude\.com akss\.org alaphentramalcor\.com alertquotes\.com all-ink\.com allaboutrx\.biz allforit-now\.com alloutdeals\.com allsoft4(all\|u)\.com allthefun\.com almostgolfball\.com altern\.org alwaysfeelgreat1\.com amazingebuyz\.net amazingeoffers\.com amazingsavings\.biz antivirusinc\.com aonedealz\.com aonehotwebdeals\.com apacheads\.com apecapev\.us approveddeals\.com aptimusvaluenetwork\.com aqmp\.net arbango\.com arcamax\.com ashmanov\.com asrequestedfl\.com assembletechs\.com astonmartincars\.com atdmt\.com authhost\.com automarketing\.org awesomebargainz\.com azxq\.org b2cemail\.net b2gmarket\.com b2nmghjt\.cn b3\.nu backgroundcheckusa\.com badmunkiepress\.com bahamameds1\.com bamboobiz\.net bannedcd\.org barchart\.com bargain-discovery\.com bargain-sales\.biz bargininkjet\.com battlefieldnam\.com bbpromos\.biz behindthedesknews\.com believemed\.com belize-hosting\.com bellagiodeals\.com best-buy-2003\.com best-deals2u\.biz best-loan-search\.biz best-valu\.com best1agent\.com bestbuy2003\.biz bestcasinosource\.com bestdealss\.net bestdigifilters\.com bestfastserver\.com bestherb\.net bestherbs\.biz bestpost\.net bestsupplementsonline\.com betterbetter\.(biz\|info\|net\|org) betterhealth\.bz bfi0\.com bidz\.com biggestdealsontheweb\.com biggestex\.com biggoldpost\.com bigtimebargains\.net bikersraw\.com billing-process\.com bingbangdeals\.com biogen4u\.biz biosweep\.com bizcentrehere\.com bizdream1\.com blackboxhosting\.(com\|net) black-photos\.com blueishwaters\.com blur5555\.com bmbn\.org bo2u\.com bodyweightloss\.com booneo\.com brandinthehand\.co\.uk brandnewsomething\.com brave-mail\.com bridgewater\.com\.br brightbobbys\.us brinkster\.com broadcastadvertise\.com broadcastemailadvertise\.(com\|net) broadcastemailing\.(com\|net) buddychoice\.com buhbyedebt\.com bulkplanet\.fatal\.ru burnblvd\.com businessefirm\.com businessurvey\.com buydealz2003\.biz buyerblowout\.com buymorenovv\.net buyrf3\.com buzzforall\.com bvisource\.com bxntech\.com c3bmngyr\.com cable-filter\.com cableppvnow\.com cabletvfilter\.net cal-l\.biz calcinebunnd\.com callawalla\.net callthemcheap\.com calvarypress\.com cameosystems\.com canada-dental\.com cangetcoolstuff\.(biz\|com) capital-business-services\.com capitalconcepts\.us carderplanet\.cc carderportal\.org cardingworld\.com cardsandgreetings\.com cardtraffic\.com carlz\.us cash123\.com cashclaim\.net cashflowcenter\.com cccvde\.com cdrom2go\.com cds4all\.biz cdshosting\.com cellusa\.net centralmailer\.com centrum\.cz centurydeals\.com ceobusinessclub\.com ceramnet\.(com\|net) cfventure\.com chair-costa\.com championtrap\.net chargemyphone\.com charitablegiftsonline\.com charlottewebhosting\.com chavezthefilm\.com cheap-health-care\.com cheaplogos\.com cheaperoffer\.com cheaperthanever\.com cheapngreatdealz\.com cheapo\.co\.uk cheaponnet\.com cheappharm[12345]\.com cheappill(s\|z)\.biz cheapsoft\.(info\|org) checkoutthisproduct\.com chill\.to choicemania\.com chtah\.com cineffetcs\.com citibank-validate\.com clanquest\.com claspon2success\.com classiccloseouts\.com cleansweeper\.net cleax\.us cleaxs\.us click-link\.com click-on-this\.net clickedge\.com clickforsuccess\.org clickhere\.com clickincome\.com clicktrac\.com clinical-hgh\.com cnbroadcast\.com cnnb\.net comicsevolution\.net commerce-chat\.com commercebond\.com communicationavigation\.com communiqueweb\.com compare-lenders\.net complementarygoods\.com compugallery\.com computercup\.com conearama\.com congratulations6\.com connectiondirection\.(com\|net) connectionsdirection\.(com\|net) constantterminals\.com contest-engine\.com convenient7x24\.com cooldirectmarketing\.com coolmedcenter\.com coolstuntcars\.biz cooltechoffers4u\.com coolwinning\.com corporateresults\.biz correlatepairing\.com cosm33assd\.com cost-stock\.com countrywidehcp\.com cramsession\.com createdigitalbooks\.com creativepro\.com credit[-A-Za-z0-9.' ]*\.biz creditcard2003\.com creditservicesnetwork\.com custodysupervision\.com customercreator\.com customeroriented\.net customoffers2you\.com cutdeal\.com cwhcp\.com cyberinfoservices\.info \.da\.ru dacehadr\.us dafesf\.com dagil2004\.biz dailydealdepot\.com dailydirt\.com dataoffers\.com dcahosting\.com dealkid\.com deals-hunter\.com deals2youdirect\.com dealsaday\.com dealsforrecruiters\.net dealslap\.com dealsnfreebies\.com dealsnow\.com dealtwoyou\.com dealventura\.com dealzz\.net debt1free\.com debtaids\.net debtbeegone\.com deepinthetube\.com deliciouslife\.net depositsdirect\.com desertedeals\.com dessert43\.com dflmnc\.biz dietreminder\.net digdough\.com digital-professional\.net digitaldescramblerstore\.com direct-cost\.net direct-medsonline\.com direct-mtg\.com direct-net\.net direct-toyou\.org direct-traffic865\.com directepromotions\.com directspecials\.biz directwatchprice\.com discountalert\.com discountbuyers\.biz discountrxstore\.net discretescripts\.com discountmails\.com djini\.net dlccorporation\.com dm-direct\.com dns-shop\.com dnscastle\.com dobryhumor\.pl dock1\.com dodid\.com domainsfor[[:alnum:]]*\.com donttellanyoneyet\.com dotcomrx\.net download-central\.com downwithnobody\.com dq[[:digit:]][[:digit:]]\.net dqmedia\.(com\|net) dribbleglass\.com drmstrategies\.com drugstorepharmaceutical\.biz dvdexpert\.biz dynamicgraphics\.com dyplom\.edu\.pl e-entrata\.com e-financereport\.com e-hostzz\.(com\|net) e-marketing\.pl e-mediatemail\.com e-opt-in\.com e-rocketship\.com e-vitality\.com\.hk eadplus\.com eastearthtrade\.com easy-home-equity-loan\.com easyvling\.com eb-helper\.com ebestquotes\.biz eblfl\.com ebookgeek\.com ebuddywise\.com ebuyrightnow\.com ec2j4\.com ecablenetwork\.com ecardica\.(com\|net) ecnames\.com ecreditquest\.com ediets\.com educate4future\.com eefreeww\.com efamilyplan\.com egoldd\.com eholidaygiveaway\.com ehostz\.biz ehostzz\.(net\|org) ehostzzz\.(com\|net) ehscc\.com ejbogo\.com electricoffers\.com electronicliquidations\.com eloanquote\.net email\.si email-publisher\.com emailbargains\.cc emailremovalregistry\.com emailremove\.org emails-cash\.com emailserver15\.com emailstimulator\.com emsiweb\.com enhancementworld\.us enetdomain\.com enmarketing\.com eoei\.com eproducts2u\.com equbix\.com esi-mail\.com esystor\.com etypejaguar\.com eummrx\.com eversave\.com everycarneedsthis\.com exacttarget\.com exclusiveoffersdirect\.com excuria\.(com\|net) executive-level\.com expeditemortgage\.com experienceworthmore\.com expertdish\.com expresscashonline\.com extrapromote\.com extremeproductmail\.com extremewatches\.biz extreme-value\.com ez8s\.(com\|net) ezbuy3a\.com ezcallmaker\.com ezoutlook\.com ezpromohost\.com ezsavingszone\.com fabiamail\.com fabulousmichaels\.us faceofanation\.com fakeidman\.org familyrx\.biz famousjerrys\.us fansoftheweb\.(com\|net) faqchat\.com faqgroup\.com farcity\.net fast-lenderz-search\.biz fast-loan-request\.biz fast-loan-search\.biz fastcashsystem\.net fastfreequotes\.com fastreward\.com fastserverbest\.com favorsforme\.com ferdberful\.com fina\.ru finalbuy\.com financedance\.com financeengies\.com find-it-on-the\.net findhr5d\.com findpilzhere\.com findyourdeal\.com\.br finechoices\.com finelivingnewsletters\.com firegeorge\.com firemail\.de firstclassemails\.org firstdream\.com fitandhealthy22\.com flamengo\.com flipside\.com flipz\.tv flowgo\.com flybynighthosting\.com flyhosting4free\.com foldingtime\.net fonegaming\.com foreignmatters\.net formulainks22\.com forthebst\.biz forward2toplevel\.com found-on-the\.net foundsavings\.com franklinfirstfinancial\.com frbnks\.com free-irewards\.com freeadcar\.com freebieclicker\.com freebiesrus\.com freecashisgood\.net freecellphonesncash\.com freedigitalppv\.com freedom-reigns\.com freedomformailservers\.com freedomreigns\.com freedomrings1\.com freedomsurfer\.(com\|net) freedomwaverider\.com freehost\.tv freehostingoffshore\.com freeorginfo\.com freeparisvideo\.biz freetaboohost\.com freetimemaster\.com freevideodvd\.com freewarrantyyou\.com freewwwsites\.com frien(d\|dly)greetings\.com fullcourt-mail\.com funblvd\.com funclk3\.com funnyfortune\.com funnytaf\.com funtimefall\.com gapless\.net get-alot\.biz get-deals\.com get-me\.to getdealsforless\.(com\|net) getfitforhealth\.com getinfohere\.(com\|net) getitttright\.com getmedsnow\.biz getspacenow\.com getyourmedsnow\.com ghkp\.us gibox\.com gigi-domain\.com gigigaga\.com\.tw gigamort\.com giveawaysnet\.com global-goldcard\.com global-great-deals\.(com\|net) globalcasinofactory\.com globalhealthtechnology\.com globalofferz\.biz globalremoval\.com glowtoy\.biz glowtoyz\.biz gobblerfeast\.net goldenbetcasino\.net goldenescapes\.net gonguri\.com good-offers\.biz goodguidelines\.com goodleads\.net goovle\.us gossipflash\.com gostraight\.com gothhall\.com gottogetadealnow\.com governatortshirts\.com govtguaranteed\.com gozingsurveys\.com greatads\.cc greatbargins\.biz greatcheaptrips\.com greatgoods4u\.com greatmed1\.com greatoffers[[:alnum:]]*\.(com\|us) greatwarranty\.com greatwesternoffers\.com green654\.com guaranteedpills\.com guide-mail\.com h-i1\.com happybride\.info happymortgageservices\.com havenewthings\.com healingamerica\.com health-products2003\.com healthfulllife\.biz healthlyadvantage\.com healthyadvantage\.com helloenterprise\.com help-the-poor\.info helpu-[[:alpha:]]+\.com herb-beauty\.com here\.ws hgpenterprises\.com hiddentreasuresfound\.com highspirit\.ws hinet\.net hitbot\.com hizotbuys\.com hnlulu\.com holms\.ru homenurse\.biz hookah1up\.com hoop-[[:alpha:]]+\.com hortu\.us hosting4you\.us hostquick2004\.com hostthisordie\.com hot\.ee hotpharmacyproducts\.com hotpop\.com hotrx\.net hypermart\.net i-netcash\.com idigdeals\.com ihaveit\.com\.br ihealth\.bz ifyoueex\.com ihdhd\.com iluvmypet\.com imagedataserver\.com imarketsystems\.com imoi\.net in-boxes-offer\.(biz\|org) inboxesoffer\.org inboxoffers\.(biz\|org) inboxspecials\.(com\|net) incomebuilder\.us incomepotential\.net incredi-offers\.com indiaarie\.biz indianvillage\.com indisposableheros\.com inet-traffic\.com infinitecircle\.biz infobig\.biz infoinquiries\.com inforush\.biz inkworlds\.com innercirclebrands\.com innovationofthecentury\.com insanedigitalproducts\.com instantcarloan\.com instantposition\.com instantposts\.net instapost\.net insweb\.com intermarketing\.ru internetproductsolutions\.com internetwasher\.com iproglobal\.com iregistrations\.(com\|net) itsoptin\.biz itsyourmeds\.com ivcweb-host\.com iwanthomework\.com iwon\.com jackpot101\.com jackpotentry\.com jaxmaxmat\.com jenfen\.com jennymail\.com jewelry\.com jinx2004\.com jokesndeals\.com jrmworld\.com juliehomepage\.biz junkeraser\.biz just-sales\.net just10facts\.com justmega\.com k456\.com keyboardoffers\.com keycayman\.com keytahiti\.com killerspecialz\.com kimo\.com\.tw kingofp\.com kingofrxsales\.info kinumok\.com koolrewards\.com kounter\.com landing01\.com large45\.com lasvegasadvisor\.com leadersofbusiness\.org leading-part\.com leadsonline\.ws leadstaronline\.com leadzinbox\.com learningera\.com leedscreative\.com legallycrazydeals\.com leisure4all\.com leisurepost\.com lender-search\.biz lending-search\.com level3ugoup\.com lfsdrct\.com libraryinsidebooks\.com lightersid2u\.com lightningdemand\.com likeingrprogress\.com liliil\.com linkmails\.(com\|net) linksrv\.com liquidfinance\.com list-city\.com listking\.com listoptmarket\.com listservers\.us liveforlearning\.com llumina\.com loanhunters\.(biz\|org) loanlinks\.com locatebulleseye\.com logacont\.com loginheaven[[:alnum:]]*\.(com\|net) login-heaven\.(com\|net) logintoheaven\.(com\|net) logoffnow\.com look2me\.com loose4ever2\.com lopzzz\.com lowco(s\|st)canadarx\.(biz\|com) lowestratesaround\.net lowpriceweb\.net lowratemortgag(e\|es)\.info lrc\.com\.pl lucindawilliams\.info lygo\.com macrozine\.net magicsim\.com mailcreativo\.com mailennium\.com mailestate\.com maili1\.com mainscale4u\.com mainstreetvegas\.com make-me-thin\.com makeminenow\.biz makmail\.net mantrav\.(co\.uk\|com) marine-animal\.com marketingmarketing\.net marketplacecorp\.biz marsleads\.com massmedium66\.com masterwealthsystem\.com matchplay-challenge\.com matopes\.com maximumedge\.com mechtek\.biz med678\.com medgreat\.com meditay\.com meds[[:alnum:]]*\.(biz\|us\|info) med(s\|ss)247\.(biz\|info) meds369\.(com\|net) medscheap\.biz medsdepot\.biz medsguide\.biz medsonlinefast\.biz medsnow\.biz medsovernight\.biz medstobago\.com medstogo\.biz medzservice\.biz megamortgage\.net megawatchsale\.com membershipme\.com mentonrx14\.com messagecluster\.com messagesbottle\.com metro-things\.com mghammer\.net micro-detective\.com mightyfine\.biz millenium78\.com milleniumdeals\.com milleniumsavings\.com miltyblinks\.net miracle-mortgage\.org mitchmaster\.biz mling\.com mm459\.com mnjmtech\.us mnky123\.com mobilecommerceworld\.com moderndrugstore\.biz moksmarkosa\.com mondomeds\.com moneysaivings0(4\|5)\.(biz\|com) monidefr\.com montecarlocasinoandsportsbook\.com moreofitnow\.biz mort2\.biz mort3s\.com morteea1\.com mortgage4321\.com mortgagegrabber\.com moveaheads233\.com mp3saving([[:digit:]]*\|s[[:digit:]]*)\.com mrketsphere\.com mtg888\.com mthmarketing\.com mtlmarketing\.com mwvr\.org mx-box\.net mxdq06\.net mxshops\.net my-love-meds\.com mydealsonline\.com mydealz\.biz mydns\.jp mydollarsign\.com myfastnews\.biz myhq\.net mylarti\.pro\.br myluckonline\.com mypillsbrand\.com mypillsource\.com myrxdrugs\.net mytvshopper\.com n0hastlem0rtgage\.com n26\.com n37\.net name-[[:alnum:]]*\.com nanobytedesign\.com nasaconspiracy\.net nationalunderwriter\.com natureze\.com nauhgtyscots\.com nbyt6\.com nervex\.com net-trip\.com netbargainclub\.com netbullet\.com netcardsplus\.com netcbr\.com netfirms\.com nethint\.com netholdem\.com netleads\.ws netvh\.com networksystemsforyou\.biz neverbadhealth\.net new2location\.com newcouponnetwork\.com newsignups\.biz newsletterconfirmation\.com newsletterhoster\.com newyorkcredit\.net nfsa3\.org ngalaxyg\.com ngsenterprises-processing\.com nhbgsuytjland\.biz notoriusbuys.com notseenbefore.com noveltynet2003\.biz nowthatsright\.info nsdteam\.com nsuse\.com ntmllc\.com number56\.com nutrisystem\.com oem-cdroms-order\.com ofcourseitwill\.com offerdelivery\.com offermania\.net offersforu\.com offerssavings\.com offertoday\.net officeteam\.com ok2ok\.com oledirect2\.com one-2\.net oneclickcash\.com oneclickpromotion\.com online--net\.net online-success-4u\.com onlineavailabletimes\.com onlinedns\.org onlinemedsnow\.com onlineresearch\.cc only-yellow-pages\.com onprice\.net onxee\.com open-wholesale\.com openandsave2\.com optindatacorp\.(com\|net) optinemailserver\.com optinlead\.biz optinlistdirect\.com optinllc\.com optinsites\.com optmailsystem\.com otcbb\.com ottorpm\.com ourmagicbox\.com outofthisworldoffers\.com overstocksunglasses\.com owdmkting\.com papered\.com pass4free\.net pat\.go\.2myip\.com pbconferences\.com pcprotector\.info pe-qp\.com peel\.com perfect-pricings\.com perfectpricedwatch\.com perfectrxstore\.com persiansilksnakes\.com pharm[[:alnum:]]*\.biz pharmacy[[:alnum:]]*\.biz pharmgreats\.com pharmtown\.biz pharmusarx\.com phoenixmethod\.com photoidcard\.us photoidcards\.com pickrate\.com pigeonsouth\.com pilgrimmarch\.net pills4lezz\.com pillsavings[[:digit:]]*\.com pincity\.com ping-time\.us pinkplate\.com pirgen\.biz pix2u\.net place4pills\.com planetmeds\.biz pm-1\.com pmm8\.com pmody\.com pop-sales\.com poparrer\.net poparrer\.com popperjohn\.com porevo\.net postalmailhosting\.com posterprintshop\.com potentialsmag\.com pplprocess\.com ppvfilter\.com ppvnow\.com practicalprowess\.com prandsav\.com preciseprovider\.com preferredcashloans\.com premier-emails\.com prescriptionfree\.biz pretzmail\.net priceadvantage\.info privatelabelresources\.com prizeflow\.comt prizeinthebag\.net prizess?avings[[:alnum:]]*\.com prmodaily\.com pro-software\.biz pro2ware\.biz proactionmedia\.com proallen\.com proconner\.com produceyourownresults\.net productplacementnetwork\.com profitdetails\.com proinkjets\.com prologan\.com promosoftus\.org propmobile\.com provenopportunity\.com psihov\.net pulmanconsulting\.com qq77\.com qualitytimepiece\.com questforinnovation\.com quick-links-shopping\.com quick-mortgage\.biz quickhost\.bz quicklink\.bz quotesforcash\.com racerxhosting\.net ragingbull\.com rainfundays\.com rare-wares\.(com\|net) reachforittoday\.com realdeal[[:alnum:]]*\.(com\|net) realrewards\.bz rector-duncan\.com redirectme\.net redribbonfirst\.com refi-group\.net refigroup\.net refresting\.com regfastrouter\.com reggiesgroup\.us registeredbuyer\.com registeredwinners\.com rejuvtoday\.com reliable-bp\.com removethisemail\.com removeyou\.com remtrax\.net representative\.com resumedeliver\.com reviles\.com [./]rin\.ru rip3catch\.com rocketfibre\.com rockstargames\.com rockstarwealth\.com rogerdeans\.com rollingover\.com rotatedof\.com rsc02\.net rumbamail\.com \brx[^>. ]*\.biz rx359\.net rx3(57\|69)\.com rxanytime\.biz rxdiscountmeds\.com rxdiscountusa\.biz rxmedical\.bag\.gs rxmedsusa\.com rxmoreusa\.com rxpalace\.biz rxsaletoday\.com rxsuperstore\.biz sahkvi\.com sample-man\.com satisfiedcase\.com savemoneyplease\.biz savenow-shops\.com saveustoday\.com savings-book\.com savingsmailbox\.net savingsnow\.(biz\|com) savingsstar\.com saynotoporn\.com sbeprss\.com scanhelp\.com scbexprs\.com schnaggledon\.com scripps\.com services3\.org searchit\.com sec1001\.biz secure-home-loan-search-quotes\.com secure-home-loan-quotes\.com secure-software\.biz securediscounts\.com securespecials\.com sell-loanz\.net sellloanz\.com senesen\.com sendanote\.net sendresponse\.com servhost\.org sgmediaweb\.com sharpersites\.net shipping888\.com shoople\.com \bshop[[:alnum:]]*\.biz shopcorner\.biz shopmeds\.biz shopmedsnow\.biz shoppermatrix\.com shoprxanytime\.com shorttransmission\.com shrillpiano\.com siamotutte\.biz signalsllc\.com sil00001\.com sil[[:digit:]]{5,5}\.com silverspringsresearch\.com sim-max\.com simplediscounts\.com sina\.com sinfulmale\.com sizzlingtrade\.com slotland\.com sm66\.com smallcapinvestor\.com smart-surfer\.(com\|net) smartcontrol\.biz smartgo\.com\.tw smileycentral\.com sms\.ac snazzydeals\.com sneakshows\.net softmortgage\.com software-sales\.us solutions-software-support-center\.biz soma4you\.com somewhereonweb\.com sonicbucks\.com sp-enterprises\.com spamlaws\.com sparkleshy\.com spasi\.ru specialproducts4u\.com specialsiteoffers\.com specialtoyou\.net specialtypetproducts\.com spherex\.net spin-meister\.com spinpalace\.com spinpalacepoker\.com spipod\.com splitinfinity\.com sportseffects\.com spywarenukerdownloads\.com srubxprss\.com stanfordtek\.com starwebgroup\.com steephigh\.com stickergalaxy\.com stockta\.com strffcc\.com sumiro\.com sunnettravel\.net sunnyco\.com super-software\.net superdrugwarehouse\.com superemailbargains[[:digit:]]*\.com supereoffers\.com superfastinfo\.com superior-mail-support\.com superneatsites\.com supernetmall\.(biz\|us) surit\.com surveytheworld\.com svision\.com swarmz\.us sweeperswipe\.com sweepshq\.com swidnica\.pl swissqualitywatch\.com synergyclix\.com systemoptmail\.com systemspluscorp\.com taconet\.com\.tw takemeoffthislist\.com takemeoutofdebttoday\.com takingcompletecontrol\.com takingittoutoday\.com talk21\.com tapestry\.net tauriver\.net tax-liensales\.com taxsaleconsultant\.(biz\|com) taxsalesforyou\.com tbdweekly\.com tdayt\.com technikalsys\.com techpowerupyourdotcom\.com templatecentral\.com templatetutor\.com temptingparcel\.com terra\.es terra-host\.com tgimondays\.com the--shop\.com the-loan-arranger-quote\.com the-prescription-group\.com the-yellow-pages\.org thebestforpc\.com thebestinkshop\.com thebestresultstoday\.com thebettermail\.(com\|net) thebombdeals\.com thebroadcastemailpackage\.net thechallengescasino\.com thegreatamericanonlinedrugstore\.net thegreet\.com theinternetdeals\.com thekewlest\.com theloster\.com thepalacegroup\.com thepharmstore\.biz thepointaudio\.com theproductstore\.com thesaaav1ngsdepot\.com thesuperstuff\.com thetickertapereport\.com thevegasbet\.com thewebmasterweekly\.com thissiteiscool\.com threeotwomedia\.com tiethepen\.com timelive\.net tingforit\.com tm0\.com todayican-surveys\.com top--sites\.net top-site\.net topdrugs\.net tophostingisp\.com topshelfoffers\.com totalcleaner\.com touch4d\.com toughguy\.net traceloop\.com tranformer84\.net travellerscheque\.com trebuchetlaunch\.net trinketreach\.net truedebtrelief\.com trump70\.com trustfulsavings\.com try4free\.net tshirthell\.com twelvehorses\.com twinksonline\.com txsaleconsultant\.tripod\.com txsales\.biz u98jk9\.com ultimatefreedownline\.com ultimatemailings\.com ultimateoffers?\.(com\|net) ultimatepromosite\.com ultimatevitality\.com umbrellacover\.net unbsvr\.com undoubtingtrust\.com uniquemailoffers\.com upashi\.com upforgrabs2u\.com url4life\.com usacasino\.com usainsurancesource\.com usamailnews\.com usedjeep\.com usedmotorcars\.com useourgoodideas\.com useyourcents\.com usgma\.com uspronation\.com ustenth\.com util-software\.net utoometoo\.biz utradesmart\.com vacationstoday\.us valodata\.com valordigitaldesign\.com valueinsights45\.com vendor-direct\.net verticalresponse\.com vidilink\.net viewvis(at\|ta)2112\.net virtualflowers\.com visionsavings\.com vistitorsmarket\.com voila\.fr vprxonline\.biz vsofttabs\.com warehousetimes\.com warrantydeals\.net washville\.com watchpurchases\.com wcomsece\.com weavespan\.com web-deal\.biz webbounce\.(com\|net) webdiscount1g\.ca webfreehost\.net webhost\.be webmailbiz\.com webnovations1\.com webpark\.pl webposition\.com wellfx\.com whatisworking\.net whatuseek\.com whitequicksand\.com wholebuyrr33s\.com wholesale-products-4-less\.com wholesalecomputerz\.net whynotmom\.com widehealthcommunity\.com wildonow\.biz wilfelysa\.com windowslonghorn\.us winners3s\.com winningteammarketing\.com wlnmkting\.com wnbdr\.org wonaprize\.com wonder-net-offers\.com wonderousthings\.net workfromhome\.com world-wideent\.com worldfreesites\.com worldhosts\.net worldrecipes\.info worldwide-bizop\.com wppv\.org wrinkledwrap\.net wtv21\.com wus0\.com www-swiftpay\.com www32\.com wxer\.com x10d\.biz xangosystem\.com xangosystems\.com xeemo\.com xfreehost\.com xingpingcity\.(com\|net) xmas4cheap\.(com\|net) xpscb\.com xtremevolutions\.com xuma100mixmailcom yo13\.us youraccounts\.us youradviceisrequired\.com yourbestrx\.com yourdreamservice\.com yourfastcash\.com yourfreethings\.com yourmailsource\.com yourmedicinechest\.biz yourmedsnow\.biz yoursavingsweb\.com yoursuccessasap\.com yrlowrates\.com z2c\.net zbestoutthere\.biz zelgo\.com ziplip\.com zizikey\.com zonecreation\.biz zwallet\.com zzn\.com Words, phrases, and bulk mailer domains, any one occurrence

all

^received:.*from: \[ u.n.i.v.e.r.s ^subject: adv\b ^subject: \[adv\] ^subject: .*best.*meds Intentional use of incorrect characters to obfuscate common spam terms.

all

all The UID attribute in these expressions is for a feature under development; it is completely ignored in current released versions of the filter and does not need to be included. advert1se amb1[e3]n ambi3n amb|en app0[i1]ntment appr0val assh0le bvyonline c1al[i1|]s cartr1dge casin0 cheer1eader c1al[ai]s claiis cl1ck comp1iance dol1ar d0main dip1oma d1scount disc0unt disscount em@il extensi0n forsa1e fr3e fr0m g00d gener1c g1rl 1ncrease 1nkjet 1nsurance intlmacy l0west m0ney m0re m0rtg(a\|4)ge medic@tion micr0s0ft mort\*gage \bn@me n0charge n0moredeal 0bligation obllgat 0pt0ut p0unds perscr[iI1l]pt[iI1l][oO0]n ph@rmacy ple@se post\.cz\?subject= prescripti0n prescr1pt[i1]on pr1c[iI1]ng pr[iI1]c1ng pr1nt pr0zac ra$te ratesarel0w reflnanc rem0ve s1te sat1sf sav1ng scanda[i|]ous s0ftware st0ck \bt@ke subrnitti th0usands thouzands t0day unl1m1ted va1ium va|ium v@l[1iIl|!]um \/a[li]ium vaiium vaiagra v[1iIl|!][aA@]gr[aA@4] v[1iIl|!][aA@]gr[aA@4] v[1iIl|!][aA@]gr@ v.[1iIl|!].[aA@].g.r.[aA@4] v1agr0 vic0din viri[il1]itypatch v1s[1iIl]t v[1iIl]s1t vicod1n viocdin vitam1n wa1t we1ght wh1le whl1e wind0ws x3nical Miscellaneous items that are common in bulk mail spammers that will cause us to reject an email.

all

all The UID attribute in these expressions is for a feature under development; it is completely ignored in current released versions of the filter and does not need to be included. ==\.(gif\|htm\|jpg) https://www\.virtuallythere\.com (<p[^<>]*>)(<a[^<>]*>)(</a[^<>]*>)(</p[^<>]*>)(<a[^<>]*>)(<img[^<>]*>)(</a[^<>]*>)(<p[^<>]*>)(</p[^<>]*>) (<body[^<>]*>)(<a[^<>]*>)(<img[^<>]*>)(</a[^<>]*>)(</body[^<>]*>) g=:*[[:alpha:]]+[[:digit:]]+:[[:alpha:]]+[[:digit:]]+:[[:alpha:]]+[[:digit:]]+:[[:alpha:]]+[[:digit:]]+ (<html[^<>]*>)(<body[^<>]*>)(<table[^<>]*>)(<tr[^<>]*>)(<td[^<>]*>)(<a[^<>]*>)(<img[^<>]*>)(</a[^<>]*>)(</td[^<>]*>)(</tr[^<>]*>)(</table[^<>]*>)(</div[^<>]*>)(</body[^<>]*>)(</html[^<>]*>) (<html[^<>]*>)(<body[^<>]*>)(<p[^<>]*>)(<a[^<>]*>)(<img[^<>]*>)(</a[^<>]*>)(</p[^<>]*>)(<a[^<>]*>)(</a[^<>]*>)(</body[^<>]*>)(</html[^<>]*>) (<html[^<>]*>)(<body[^<>]*>)(<img[^<>]*>)(</body[^<>]*>)(</html[^<>]*>) (<html[^<>]*>)[^<>]*(<body[^<>]*>)[^<>]*(<p[^<>]*>)[^<>]*(<a[^<>]*>)[^<>]*(<img[^<>]*>)[^<>]*(</a[^<>]*>)[^<>]*(</p[^<>]*>)[^<>]*(</body[^<>]*>)[^<>]*(</html[^<>]*>) (<html[^<>]*>)[^<>]*((<br[^<>]*>)[^<>]*)*(<a[^<>]*>)[^<>]*(</a[^<>]*>)[^<>]*(<br[^<>]*>[^<>]*)*(</html[^<>]*>) (<html[^<>]*>)[^<>]*(<br[^<>]*>[^<>]*)*(<a[^<>]*>)[^<>]*(</a[^<>]*>)[^<>]*(<br[^<>]*>[^<>]*)*(<a[^<>]*>)[^<>]*(</a[^<>]*>)[^<>]*(<br[^<>]*>[^<>]*)*(</html[^<>]*>) (<html[^<>]*>)(<body[^<>]*>)(<div[^<>]*>)(<p[^<>]*>)(<a[^<>]*>)(<img[^<>]*>)(</a[^<>]*>)(</p[^<>]*>)(<br[^<>]*>)*(<p[^<>]*>)(<a[^<>]*>)(<img[^<>]*>)(</a[^<>]*>)(</p[^<>]*>)(<p[^<>]*>)(<br[^<>]*>)*(</p[^<>]*>)(</div[^<>]*>)(</body[^<>]*>)(</html[^<>]*>) (<html[^<>]*>)(<body[^<>]*>)(<p[^<>]*></p[^<>]*>)*(<p[^<>]*>)(<a[^<>]*>)(</a[^<>]*>)(</p[^<>]*>)(<p[^<>]*></p[^<>]*>)*(<p[^<>]*>)(<a[^<>]*>)(</a[^<>]*>)(</p[^<>]*>)(<p[^<>]*></p[^<>]*>)*(</body[^<>]*>)(</html[^<>]*>) (<html[^<>]*>)(<body[^<>]*>)(<center[^<>]*>)(<a[^<>]*>)(<img[^<>]*>)(</a[^<>]*>)(</center[^<>]*>)(</*body[^<>]*>)(</html[^<>]*>) (<html[^<>]*>)(<body[^<>]*>)(<a[^<>]*>)(</a[^<>]*>)(<br[^<>]*>)*(<a[^<>]*>)(</a[^<>]*>)(</body[^<>]*>)(</html[^<>]*>) (<html[^<>]*>)(<body[^<>]*>)(<p[^<>]*>)(<a[^<>]*>)(<img[^<>]*>)(</a[^<>]*>)(<br[^<>]*>)*(<a[^<>]*>)(<img[^<>]*>)(</a[^<>]*>)(</p[^<>]*>)(</*body[^<>]*>)(</html[^<>]*>) (<html[^<>]*>)([^<>]*)(<body[^<>]*>)([^<>]*)(<div[^<>]*>)([^<>]*)((<p[^<>]*>)([^<>]*)(<a[^<>]*>)([^<>]*)(<img[^<>]*>)([^<>]*)(</a[^<>]*>)([^<>]*)(</p[^<>]*>)([^<>]*)((<br[^<>]*>)([^<>]*))*)+([^<>]*)(<p[^<>]*>)([^<>]*)(<img[^<>]*>)([^<>]*)(</p[^<>]*>) (<html[^<>]*>)(<center[^<>]*>)(<td[^<>]*>)(<a[^<>]*>)(<img[^<>]*>)(</a[^<>]*>)(</td[^<>]*>)(</center[^<>]*>)(<p[^<>]*>)*(</html[^<>]*>) (<body[^<>]*>)[^<>]*(<p[^<>]*>)[^<>]*(<a[^<>]*>)[^<>]*(<img[^<>]*>)[^<>]*(</a[^<>]*>)[^<>]*(</p[^<>]*>)[^<>]*(</body[^<>]*>) (<br[^<>]*>)(([^<>]{10,})(<br[^<>]*>){1,}){2,}.{0,10}(<a[^<>]*>)([^<>]*)(</a[^<>]*>).{0,10}(<br[^<>]*>){0,}([^<>]{50,}) (<html[^<>]*>)[^<>]*(<head[^<>]*>)[^<>]*(<meta[^<>]*>)[^<>]*(</head[^<>]*>)[^<>]*(<body[^<>]*>)[^<>]{0,20}(</body[^<>]*>)[^<>]*(</html[^<>]*>) </html>[[:blank:]]*<p><font size=2>--- outgoing mail is certified virus free. checked by avg anti-virus </HTML><PRE>_{5,} </HTML>.{1,30}shutts-law\.com (</html[^<>]*>)[[:graph:]]{6,} (<html[^<>]*>)(<body[^<>]*>)(<div[^<>]*>)(<img[^<>]*>)(<br[^<>]*>)*(<a[^<>]*>)(<img[^<>]*>)(</a[^<>]*>)(<br[^<>]*>)*(<img[^<>]*>)(</body[^<>]*>)(</html[^<>]*>) [[:alpha:]]{3,}_[[:digit:]]{3,}_[[:alpha:]]{4,}@hotmail\.com <body> *</body> <a[^<>]*alt=".{300,}" \*°°\^-\^°°\* <a +[[:alnum:]]{8,}=http[^ <>]* +href= \?ra=.{1,20}&rb=.{1,20}&rc= \?xa=.{1,20}&xb=.{1,20}&xc= \?ln=.{1,20}&ne= a +nice +lady +wants +to +correspond +with afterhourstradingbreakingnews alertstrongbuy asaministeryouwillbe as.{1,4}seen.{1,4}on.{1,4}(([NnÑ][Bbß][CcÇSs]\|[CcÇ][Bbß]s\|[AaÀÁÂÃÄÅ][Bbß][CcÇ]\|[CcÇ][NnÑ][NnÑ]\|[OoÒÓÔÕÖØ]prah).{1,10}){3,} \bBuzzMail\b bestgpad\.jpg betterinternetoptindeals bkrptcy bullseyestockfortoday bundlecash buydrugsonline buyingmedsonlinewillbebanned buyxanax cable +bills +too +high came +from +at +from checkoutministryinabox click\.php\?id= c\)ick *this continuingstockalert copy +dvd +software +for /creatives/ cut +off +future +promo dailytwist debteliminator default\.asp\?ID= /delphi/ digital +cable +filter dimensional +warp +generator doubleoptin ebayextreme emailprize em2k04@gawab.com e-?mai1 evenwithbadcredit evidence +eliminator explosivestockpick expunge +your +email financialinsidersreport flowgo followingisacommercialmessagebeingsent font-size *: *(0\|1) *px font-size *: *(0\|1); font-size *: *0.1pt font-size *: *(0\|1)\b f.r.e.e.{1,30}t.r.i.a.l free_green_card free-gift-club freecabletv freecalling freeoffers fromusorathirdparty fulfillingyourlife fungmd genericcialis genlogo\.img geocities.com/[[:alpha:]]{4,}_[[:alnum:]]{4,} geocities.com/[[:alpha:]]{4,}[[:digit:]]{4,} geocities.com/[[:alnum:]]{8,}/[[:alnum:]]/ geocities.com/[[:alpha:]]{15,}[-A-Za-z0-9.:'_=/]*/\? geocities.com/[[:alnum:]]{8,}/\?q= genericcial[ai]s getadegreeonline getfreeppv getmeoffthislist getthebestmeds getsyourmeds getyourprescriptionfilledtoday gold +stock +newsletter gsc-100 /hgh4/ /hgh/\? homebasedbusiness hottradingalert howtomakemoneyonebay howtopickupbeautifulwomen http://p2p.{1,100}info http://([:digit:]+\.)*0x http://([-A-Za-z0-9:'_=]{2,}\.){4,} http://[-A-Za-z0-9:'_=]{2,}/([[:alnum:]]*/){1,}\?id= http://[-A-Za-vx-z0-9:'_=]{2,}\.[-A-Za-z0-9:'_=]{2,}\.[-A-Za-z0-9:'_=]{2,}/[[:digit:]]{3,} http://([-A-Za-z0-9:'_=]{2,}\.)+[-A-Za-z0-9:'_=]{2,}/vp[[:digit:]]{1,} http://([-A-Za-z0-9:'_=]{2,}\.)([-A-Za-z0-9:'_=]{2,})/([-A-Za-z0-9:'_=]{1,})/default\.asp\?id= http://([-A-Za-z0-9:'_=.]*)(meds)([-A-Za-z0-9:'_=.]*)/\? <img .{1,24}http://[-A-Za-z0-9.:'_=]{2,}\.[-A-Za-z0-9:'_=]{2,}/[[:digit:]]{1,}\b <img +[[:alnum:]]{8,}=http[^ <>]* +src= immediateinvestorrecommendation i.n.k.j.e.t insidermarketwatch insurancereferralnetwork interestrateshitnear inurance investoralertnewsletter investorhotpicks investorinsightsnewsletter investorsassociatesnews investorupdate[[:digit:]]{0,10}dontmiss iwanttosayadios learntomakeafortunewith lifetime +web +hosting /logogen\.img\? look +to +bottom +of +our +site lose +weight +right +now loseweighttheeasierway mailserver\.com/\? majornewsalerthugetradingexpected makeextramoneyparttime marketwatch(newsflash\|specialalert) megamlmlaunch /mortgage/ mortgageinterestratesareattheirlowest /mp/(eliminate\|judicial)/ needaffordablebutreliablewebhosting /nemo/ netbizdirect nodepositorcreditcardrequired nomoreadvertisementsthanks no +more +emails +please no +one +is +turned +down no(prior)*prescription(needed\|required) norton +systemworks +2003 /\?oc= offers4u \boffersondemand\b \bofferstreet\b online +meds\b onlineuniversitydegrees onlineuniversitydiplomasdegrees opt-?in +subscriber +to +our +net ordersection@aussiemail\.com\.au otcbulletinboard otcfirstalert otcstockalert otcbb: otcbb +newsletter ourlicensedpharmacy ownyourownatmmachine pagewhiz /\?partid= paypal\.com\.pif penny +stock +insider penny +stock +picker penny +stocks +are +considered pennyperlead (%\|percent) +off +(all\|any) +print(er\|ing) +supplies permission.{0,5}based.{0,5}email.{0,5}market \.ph/\?[[:alpha:]] \bpoplaunch\b previous +chart +rockets +include prizeamerica productid=.{1,20}partner=affil purchasevigra put +remove +in +the +subject %RANDOM_(CHAR\|TEXT\|WORD) \[RANDOMIZE\] ##randomword## rapidads /redir\.aspx\?id= /\?ref_id= \?referrer= /remedy/(adv\|index) remove +available +at +web +site reply +with +off +and +I +won't resellerbuzz \?rid= %rnd_word %rnd_phrase rolexwatch s[^=]{0,5}1618 sec.{0,50}301 senttoyouasamember serv1ce sh1pp[i1]ng sh[i1]pp1ng /~smtds/ snagster soaringpennystock someoneclosetoyouhasnotacceptedgod sorrynotformeandtheaddressisabove spam +remedy.{0,10}pro stock +alert +has +received +\$ stockbuyersalert stockmarketotcbb stockprofileoftheweek stoppayinghighinterestratebills strongbuyalert surf +the +web +with +complete takemeoff take +me +off +your +list! take +personal +address +off targeted +opt-in +list tellmemore the +best +meds +available this +is +not +mlm thisisa(commercial\|promotional)(email\|message)beingsent thisprofileisnotwithoutbiasandisapaidrelease to +earn +more +(call\|dial\|phone) to +stop +hearing +from +us %TO_WORD ^test$ this +is +our +second +attempt +at +contacting /track/click/[[:digit:]]{4,} /tropicinks/ undervaluedmarketreport upside +international upsideprofitpotential urgentinvestoralert urgent(stock\|trading)alert valiumnowinstock verified +to +receive +online +promo vicodin /vpoil/ want +any +more +adverts\? wc\.pl\?[[:alnum:]]*= we +have +been +hired +to +contact we<[^$gt;]*>ig<[^$gt;]*>ht weeklystockpick wemayownbuyandsellanysecurities width="297" +height="188" width="405" +height="270" width="218" +height="220" width="177" +height="(67\|239)" width="213" +height="(185\|195)" width="190" +height="(185\|195)" winningstockalert withthesubjectremoveme worlddrugsnewsletter ^x-antivirus:.{0,100}polski xenical you +have +a +secret +admirer youneedatopqualitylogo younowqualifyforanewmortgage yourcomputerknowswhereyouvebeen your +computer +may +be +infected youronlinespecialsource Miscellaneous items that are common in bulk mail spammers that will cause us to reject an email. all The UID attribute in these expressions is for a feature under development; it is completely ignored in current released versions of the filter and does not need to be included. \b[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[bcdfghjklmnpqrstvwxz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}\b[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,} \b[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[bcdfghjklmnpqrstvwxz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,} \b[bcdfghjklmnpqrstvwxz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}\b[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,} \b[bcdfghjklmnpqrstvwxz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,}[abcdefghijklmnopqrstuvwxyz]{1,}[ABCDEFGHIJKLMNOPQRSTUVWXYZ]{1,} \b[bcdfghjklmnpqrstvwxz][bcdfghjklmnpqrstvwxz][bcdfghjklmnpqrstvwxz][bcdfghjklmnpqrstvwxz][bcdfghjklmnpqrstvwxz][bcdfghjklmnpqrstvwxz][bcdfghjklmnpqrstvwxz] \b[BCDFGHJKLMNPQRSTVWXZ][BCDFGHJKLMNPQRSTVWXZ][BCDFGHJKLMNPQRSTVWXZ][BCDFGHJKLMNPQRSTVWXZ][BCDFGHJKLMNPQRSTVWXZ][BCDFGHJKLMNPQRSTVWXZ][BCDFGHJKLMNPQRSTVWXZ] <[[:alpha:]]+[[:digit:]]+[[:alnum:]]{6,}> <[[:alnum:]]{11,}> SPAM senders claim to adhere to some method of pruning recipients from their lists. In reality this tends to be another way to confirm email addresses. Generally this is done with some sort of "remove" link. Other methods of confirming valid emails are the use of URLs to photos that include unique identifiers correlating to the recipient. These methods have been identified in SPAM email.

all

all The UID attribute in these expressions is for a feature under development; it is completely ignored in current released versions of the filter and does not need to be included. -ab---ba- /\?([[:alnum:]]{6,6}\.){5,5} \.html">exit +this +offer \.html">no +thanks \.html">stop +now /t\.pl\?id= @aol\.com.{0,20}remove @hotmail\.com.{0,20}remove @yahoo\.com.{0,20}remove <a></a> /\?aff_id= \?affiliate_id=.{1,10}campaign_id /(affiliates\|cgi-bin)/clickthru\.cgi\?id= /\?aid=[[:digit:]]{1,10} aol\.com\?subject= ar_view\.asp\?emid= \.asp\?folder= >a-w-a-y< \?axel= bannedcd \.biz/\? bye\.cgi\? byebye\.htm >cancel +me< /c\.php\?[dglu]= cgi-bin/view\? [[:alnum:]]+\.[[:alnum:]]+\.(com\|pro)\.br \?campaign_id=.{1,10}affiliate_id >cease +(me\|this)< \?cid=.{1,10}[leu]id click\.asp\?m= click\.php\?j= ctrack\.asp\?cmpid= custblast@cs\.com /domain-remove\.cgi exclude-me/ get +me +off +the +list global +remove +database /goaway\.htm /gone\.asp /goodbye\.asp /greatnews/rd\.cgi /host/emailremove\.asp hostemailremoveasp http://.{0,20}autoemailremoval\.com http://[^"> ]{5,70}@ http://[-A-Za-z0-9.:'_]*@ http://[^>]*\.(gif\|jpg\|jpgg\|jpegg)\? http://[[:graph:]]*\.bz/ http://[[:graph:]]*\.tc/ http://[[:graph:]]*\?axel= http://[0123456789a-fA-F]{32}\.[a-zA-Z]+\.com http://[0123456789][-A-Za-z0-9.:'_/]*\?affiliateid= http://[0123456789.]*/mortgage http://[0123456789.]*/remove http://[0123456789.]*/unsub http://[0123456789.]*/verify\.html http://[0123456789.]*/x11/ http://[0123456789.]*/(%\|&#) http://[0-9./]{1,30}[^>]{1,15}/(ind[A-Za-z0-9]+\.php\|track\.html)\? http://[-A-Za-z0-9.' ]*@[0123456789.]{5,} http://[-A-Za-z0-9.' ]*@[-A-Za-z0-9.' ]*\. http://[-A-Za-z0-9.' ]*\.clk\. http://[-A-Za-z0-9.' ]*:80[45]0 http://beam\.to http://%.{0,6}(%\|&#) http://[-A-Za-z0-9.:'_/]*(%\|&#) http://www\.geocities\.com/[^>]+/../ /i\.asp\?a=.{1,25}&c= <img [^>]*src=[^>]*\.(asp\|php)\?[^>]*@[^>]*> <img [^>]*src=[^>]*\.(asp\|php)\?[^>]> /index\.php\?(a\|p)id= /index\.php\?(affid\|aff_id)= /index\.php\?id=.{1,10}&(affid\|aff_id)= /index\.php\?afil= /index\.php\?id=[[:digit:]] /index\.php\?id=[[:alpha:]][[:digit:]] /index\.php\?s=[[:digit:]] \.info/\? \.info\?[-A-Za-z0-9.'&]*affid= /jumper\.xpf/ /m\.php\?i= /m2b\.php\?man= mail\.com\?subject=remove mort3\.php\?sid /\?myaffid= netscape\.com\?subject= n0moredeal no +more +email +please /no\.php\?u= /nomore\.php nothanks\.gif /\?oc=[[:digit:]] /open\.cgi\? /opened\.php\? /optout\.jsp\? optoutofourcontactdatabase \.php\?[-A-Za-z0-9.' ]{40,} pixel/track\.php\?ref= /please/remove promo\.php\?id= purge(my\|your)namefromthis purgeyouremail purgeyouraddress (rd\|drs\|rds)\.yahoo\.com[^<>]{1,100}[*?]-{0,1}http:.{1,35}\.yahoo\.com ((rd\|drs\|rds)\.yahoo\.com\|66\.218\.71\.223)[^<>]{1,100}[*?]-{0,1}(h\|%48\|%68)(t\|%54\|%74)(t\|%54\|%74)(p\|%50\|%70)(:\|%3a) redir\.jsp\?oin= redirect\.asp\? \?refid= remove +yourself +at +the +website RE|V|[O0]VE REM|O|VED r3m0v3 rem0ve r%65%6d /remove\?[-A-Za-z0-9.:'_/]+\.[-A-Za-z0-9.:'_/]+\.[-A-Za-z0-9.:'_/]+\.[-A-Za-z0-9.:'_/]+\. removelink removes-here \?revid= \?revshare= rmve\.php\? \.ru\?subject=remove /sites/[[:digit:]]{8,}/ /sm\.html\?remove /ss\.php\?cid style="href: t\.asp\?a= /track/[[:alpha:]]\.[[:digit:]]/ /u\.cgi\? /u1\.php\? /ugly\.php\? undirect\.php\?m= unsub\.cgi\?[-A-Za-z0-9.:'_/=&%]*m= unsub\.(jsp\|php) unsubscribe +here /unsubscribe\.ddd unsubscribe +send +blank +email usa\.com\?subject= usb/\?usb= usub\.php\?domain= /v\.php\?l= /view\.cgi/\? /viewsonic.php\? virtumundo\.com/unsub/reward visionrapida\.com/unsub/reward /\?vsrs_id= www\.% www\.google\.com/url\?[^<>]{1,100}q=(h\|%48\|%68)(t\|%54\|%74)(t\|%54\|%74)(p\|%50\|%70)(:\|%3a) yahoo\.com\?subject= These are unique cases where a combination of factors must be indentified. all The UID attribute in these expressions is for a feature under development; it is completely ignored in current released versions of the filter and does not need to be included. <img[^<>]*src="cid: ([åÅàÀáÁâÂäÄãÃæÆçÇèÈéÉêÊëËìÌíÍîÎïÏñÑòÒóÓôÔöÖõÕðøØùÙúÚûÛüÜýÝÿ÷]{2,}[ ,.-;]*)+ http://[-A-Za-z0-9.:'_=/]{1,100}\.biz/ These addresses have been found to be used in SPAM and if found in an email will reject the email. all The UID attribute in these expressions is for a feature under development; it is completely ignored in current released versions of the filter and does not need to be included. 100esanmarcosblvdsanmarcos 101whitneyavenuenewhaven 1030eelcaminoreal.{0,8}sunnyvale 1112westonroad142weston 1200b{0,1}oran[gj]estadaruba 123w1ststcasper 14092belmonttrailrosemount 14210hillsdalecircleomaha 1427nmidtownstmeridian 14781memorialdrsuite966houston 14wallstreet20thfloornewyork 150kingstreetbox384 15910venturablvdencino 1730southfederalhighwaysuite115delraybeach 200hughsabilene 2525broadway1103everett 3400dundeer(oad\|d)northbrook 3539bradshawrd 41150nterminalavenanaimo 4608rivermillctglenallen 55fredrickstnassau 55lisgarstreettoronto 5777wcenturyblvdlosangeles 610nathanroadmongkok 625w5300southsuitea500saltlakecity 6278nfederalhwysuite187 665mollylnste130woodstockga 6700northandrewsavenue2ndfloor(fort\|ft)lauderdale 9tanbarkcircuitwerringtondowns apartado1733006 avenuericardoalfarapanamacity box5225harrisburg oran[gj]estadarubapo(box\|b){0,1}1200 oran[gj]estad aruba 1200b pobox108woburn po(1200b\|1200)orjestadaruba po(box\|b){0,1}1200b{0,1}oran[gj]estadaruba pobox270029louisville pobox412bricknj pobox4152sedona pobox4545plazadellago pobox4721provout pobox5812santamonica pobox674134atlanta pobox86germantown pobox92millersburg These phone numbers have been found to be used in SPAM and if found in an email will reject the email. This method is necessary when use of a web site is avoided.

all

all The UID attribute in these expressions is for a feature under development; it is completely ignored in current released versions of the filter and does not need to be included. [i1][o0]55[i1]86 05198670323 0951245948 0951398316 0952072621 095238(8227\|8305\|8430) 0952412694 0952479656 0952481151 0952657059 0953426864 095505(4488\|4931) 0955069080 0955075678 0955428659 0957297474 095741(3325\|3771\|6369) 0957711096 0957720359 0957823774 0957852364 0957887328 0957898192 0957921287 0957954782 095917(5784\|5902) 0959557571 0959658996 0959748779 1079076 2032862187 2032862403 2062020460 2062231270 2063097258 2063370968 2068884218 206984(0358\|2062) 2072621 2093963741 2097295800 2122024179 2122084551 2123308202 212461(2761\|2982) 2125040820 2126291971 2126589912 2129908000 2402094558 2403527337 2516501616 2536456965 2708130808 27588918 3026894384 3054337426 3054603330 3054686390 3094397685 3109433251 3128734630 31620885334 3527329729 4075409369 4077589298 4122672105 4164676585 4809461462 504(3196\|3783\|6149) 5087998 5124041206 5137411481 5593220756 5614310437 6023928288 603457(0202\|0203) 6039628501 6048612188 6179014129 618355(1150\|1834\|1851) 6462181200 6502398656 6513228192 7024548360 7073717768 7275883360 74[0O]39[1I]6 7417141 7477188 77523389265985 7802857 7804740072 789(8190\|8192) 7954782 7981951 8002420363 8002705944 8002799272 8002889708 8002990234 8003181388 8005096060 8006260705 8007908001 8007948082 8008093304 8008245963 8008598713 8008645354 800884(2587\|9510) 8009595191 8014542828 8014699957 8016847791 8018384022 8026091010 8183491000 8314175080 8458183721 850681(3159\|9775) 8613008328236 8623676350(08\|35\|36) 862367737938 8662650374 8662731624 8664948202 8666623388 8666669785 8668165867 8668726022 8675528716075 8675528720140 8715200125 8772040240 8772693892 8775765037 8775801281 8776782536 8777070785 8777291712 8796603668 8882037737 8882177133 8882610825 8882807715 8883561468 8886803064 8888040626 8888630934 8889402251 89032263723 89262276980 9019825307 9057510(199\|919) 9159756783 917591(5075\|5100) 921(2601\|5797\|8645) 9258483413 926218[24] 9287521899 961(3476\|4242\|4343) 9736245422 9737059276 9739544019 995824[1iI] Headers inserted by bulk mailers.

all

The UID attribute in these expressions is for a feature under development; it is completely ignored in current released versions of the filter and does not need to be included. ^x-rmd-text: