# CMAILER and other swedish spam signs.
# $Revision: 1.27 $
body FRUKT_ENONU_ADDR /\bwww\.e-no\.nu\b/i
score FRUKT_ENONU_ADDR 1.2
describe FRUKT_ENONU_ADDR www.e-no.nu
body FRUKT_MAIL_TO /Detta\s+m(?:ai|ej)l\s+\S+r\s+skickat\s+till/i
score FRUKT_MAIL_TO 0.25
describe FRUKT_MAIL_TO Mail sent to ...
uri FRUKT_CMAILER_OPTOUT /\.(?:cmailer|carmamail|compostmail)\.com\/(?:mail\/)?optout\//i
score FRUKT_CMAILER_OPTOUT 1.5
describe FRUKT_CMAILER_OPTOUT Cmailer optout link
header FRUKT_CMAILER_RCVD Received =~ /\b\S+\.(?:cmailer|carmamail|compostmail)\.com\b/i
score FRUKT_CMAILER_RCVD 1.2
describe FRUKT_CMAILER_RCVD Received from cmailer
header FRUKT_CMAILER_XMAIL X-Mailer =~ /Compost Carma/i
score FRUKT_CMAILER_XMAIL 1.3
describe FRUKT_CMAILER_XMAIL Created by cmailer
header FRUKT_CMAILER_FROM From:addr =~ /(?:\.|\@)(?:cmailer|carmamail|compostmail)\.com$/i
score FRUKT_CMAILER_FROM 1.1
describe FRUKT_CMAILER_FROM Cmailer from address
header FRUKT_CMAILER_MSGID Message-ID:addr =~ /JavaMail\.compost/i
score FRUKT_CMAILER_MSGID 1.0
describe FRUKT_CMAILER_MSGID Cmailer JavaMail Message ID
uri FRUKT_CMAILER_URI /(?:cmailer|carmamail|compostmail)\.com\//i
score FRUKT_CMAILER_URI 1.2
describe FRUKT_CMAILER_URI Cmailer link
header FRUKT_CMAILER_ID X-Carma-MessageID =~ /\S+/
score FRUKT_CMAILER_ID 1.1
describe FRUKT_CMAILER_ID Cmailer id tag
meta __FRUKT_CMAILER FRUKT_CMAILER_OPTOUT || FRUKT_CMAILER_RCVD || FRUKT_CMAILER_XMAIL || FRUKT_CMAILER_FROM || FRUKT_CMAILER_MSGID || FRUKT_CMAILER_URI || FRUKT_CMAILER_ID
body FRUKT_KONSTIGT /Ser\s+m(?:ej|ai)let\s+konstigt\s+ut[,\?]\s+klicka\s+(?:h\S+r|p\S+\s)/si
score FRUKT_KONSTIGT 0.5
describe FRUKT_KONSTIGT Common swedish spam phrase
body __FRUKT_OPTOUT_SV_1 /Vill\s+du\s+inte\s+ha\s+fler\s+utskick/si
body __FRUKT_OPTOUT_SV_2 /Vill\s+du\s+inte\s+ha\s+fler\s+utskick\s+fr\S+n\s+oss\s+var\s+v\S+nlig\s+klicka\s+p\S+\s/si
body __FRUKT_OPTOUT_SV_3 /du\s+inte\s+f\S+\s+fler\s+[^\.]+\s+fr\S+n\s+\S+\s+s\S+\s+klicka\s+p\S+\s/si
body __FRUKT_OPTOUT_SV_4 /Nej\s+tack\s+till\s+fortsatt\s+information\s+via\s+e-?post\W?\s+klicka\s+h\S+r/si
body __FRUKT_OPTOUT_SV_5 /Vill\s+du\s+inte\s+l\S+ngre\s+ha\s+v\S+rt\s+nyhetsbrev/si
body __FRUKT_OPTOUT_SV_6 /Vill\s+du\s+inte\s+ha\s+fler\s+e-?m(?:ai|ej)ls?\s+(?:\S+\s+)?(?:\S+\s+)?fr\S+n\s+\S+(?:\s+\S+)?,\s+klicka\s+h\S+r/si
body __FRUKT_OPTOUT_SV_7 /Om du inte \S+nskar f\S+ reklam fr\S+n oss/si
body __FRUKT_OPTOUT_SV_8 /Avregistrera dig h\S+r/si
body __FRUKT_OPTOUT_SV_9 /Vill\s+du\s+inte\s+ha\s+fler\s+e-?m(?:ai|ej)ls?\s+s\S+\s+skicka ett/si
body __FRUKT_OPTOUT_SV_10 /Skicka\s+inte\s+fler\s+m(?:ai|ej)l\s+till\s+denna\s+adress/si
body __FRUKT_OPTOUT_SV_11 /avregistrering\s+ordnas\s+enkelt\s+p\S+/si
body __FRUKT_OPTOUT_SV_12 /Om\s+du\s+inte\s+vill\s+ha\s+fler\s+e-?post\s+fr\S+n\s/si
body __FRUKT_OPTOUT_SV_13 /vill\s+inte\s+l\S+ngre\s+prenumerera\s+p\S+\s+detta\s+/si
body __FRUKT_OPTOUT_SV_14 /Vill\s+du\s+inte\s+f\S+\s+fler\s+erbjudanden\s+till\s+denna\s+e-?postadress.*\s+klicka\s+h\S+r/si
body __FRUKT_OPTOUT_SV_15 /Om\s+du\s+inte\s+vill\s+ha\s+(?:denna\s+typ\s+av\s+utskick\s+)?(?:fr\S+n\s+oss\s+)?(?:via\s+)?e-?post,?\s+klicka\s+h\S+r/si
body __FRUKT_OPTOUT_SV_16 /klicka\s+h\S+r\s+f\S+r\s+att\s+avregistrera\s+dig/si
body __FRUKT_OPTOUT_SV_17 /Om\s+du\s+inte\s+vill\s+ha\s+fler\s+kampanjer\s+fr\S+n\s+oss\s+klickar\s+du/si
body __FRUKT_OPTOUT_SV_18 /Vill\s+du\s+inte\s+f\S+\s+fler\s+nummer\s+av\s+detta\s+nyhetsbrev\s+klicka/si
body __FRUKT_OPTOUT_SV_19 /Avregistrera mig fr\S+n detta utskick/si
body __FRUKT_OPTOUT_SV_20 /(?:\badd?ress\b.*?\bskickas?\b|\bskickas?\b.*?\badd?ress\b).*?unsubscribe.*?\bautomat.*?\bm(?:ai|ej)l.?list/i
body __FRUKT_OPTOUT_SV_21 /Avanm\Sl\s+dig\s+h\S+r/i
body __FRUKT_OPTOUT_SV_22 /Vill\s+du\s+inte\s+(?:ha|f\S+)(\s+\S+){1,10},?\s+(?:returnera|svara\s+p\S+)\s+detta\s+m(?:ai|ej)l,?\s+(?:och|med)\s/i
body __FRUKT_OPTOUT_SV_23 /Vill\s+du\s+inte\s+ha\s+fler\s+\S+\.\s+Klicka\s+p\S+\s+l\S+nken\s+/i
body __FRUKT_OPTOUT_SV_24 /Vill\s+du\s+avregistrera\s+(?:dig|din\s+\S+)\s+(?:\S+\s+)?inte\s+f\S+\s+fler\s+\S+\s+fr\S+n\s+\S/si
body __FRUKT_OPTOUT_SV_25 /\bif\s+you\s+do\s+not\s+wish\s+to\s+.{1,90}?\s+unsubscribe\s+here\b/
meta FRUKT_OPTOUT_SV __FRUKT_OPTOUT_SV_1 || __FRUKT_OPTOUT_SV_2 || __FRUKT_OPTOUT_SV_3 || __FRUKT_OPTOUT_SV_4 || __FRUKT_OPTOUT_SV_5 || __FRUKT_OPTOUT_SV_6 || __FRUKT_OPTOUT_SV_7 || __FRUKT_OPTOUT_SV_8 || __FRUKT_OPTOUT_SV_9 || __FRUKT_OPTOUT_SV_10 || __FRUKT_OPTOUT_SV_11 || __FRUKT_OPTOUT_SV_12 || __FRUKT_OPTOUT_SV_13 || __FRUKT_OPTOUT_SV_14 || __FRUKT_OPTOUT_SV_15 || __FRUKT_OPTOUT_SV_16 || __FRUKT_OPTOUT_SV_17 || __FRUKT_OPTOUT_SV_18 || __FRUKT_OPTOUT_SV_19 || __FRUKT_OPTOUT_SV_20 || __FRUKT_OPTOUT_SV_21 || __FRUKT_OPTOUT_SV_22 || __FRUKT_OPTOUT_SV_23 || __FRUKT_OPTOUT_SV_24 || __FRUKT_OPTOUT_SV_25
score FRUKT_OPTOUT_SV 1.0
describe FRUKT_OPTOUT_SV Swedish spam opt out
uri __FRUKT_OPTOUT_URI_1 /[\/\?].*unsubscribe/i
uri __FRUKT_OPTOUT_URI_2 /[\/\?].*optout/i
meta FRUKT_OPTOUT_URI __FRUKT_OPTOUT_URI_1 || __FRUKT_OPTOUT_URI_2
score FRUKT_OPTOUT_URI 0.5
describe FRUKT_OPTOUT_URI Optout URI
body __FRUKT_PAR_AB_1 /(?:\s|Adress-?)k\S+lla:?\s+PAR\s+AB/si
body __FRUKT_PAR_AB_2 /anm\S+lt\s+intresse\s+genom\s+PAR\W/si
body __FRUKT_PAR_AB_3 /(?:\s|Adress-?)k\S+lla:?\s+PAR/si
body __FRUKT_PAR_AB_4 /Postens\s+adressreg/si
meta __FRUKT_PAR_AB __FRUKT_PAR_AB_1 || __FRUKT_PAR_AB_2 || __FRUKT_PAR_AB_3
meta FRUKT_PAR_AB_1 __FRUKT_PAR_AB_1 || __FRUKT_PAR_AB_2
meta FRUKT_PAR_AB_2 __FRUKT_PAR_AB_3 && !FRUKT_PAR_AB_1
meta FRUKT_PAR_AB_3 __FRUKT_PAR_AB_4 && !(FRUKT_PAR_AB_1 || FRUKT_PAR_AB_2)
score FRUKT_PAR_AB_1 1.5
score FRUKT_PAR_AB_2 1.0
score FRUKT_PAR_AB_3 0.5
describe FRUKT_PAR_AB_1 Address from PAR AB
describe FRUKT_PAR_AB_2 Address from PAR
describe FRUKT_PAR_AB_3 Mentions PAR
body FRUKT_DATADIA /(?:\s|Adress-?)k\S+lla:?\s+Data[-\s]?Dia/si
score FRUKT_DATADIA 1.0
describe FRUKT_DATADIA Address from DataDia
uri FRUKT_SYSMAXNEWS /systemaxnews\.com(?:\/|$)/i
score FRUKT_SYSMAXNEWS 0.5
describe FRUKT_SYSMAXNEWS URI to systemaxnews.com
header FRUKT_NXTSTHLM Reply-To:addr =~ /^info\@nxtsthlm\.com$/i
score FRUKT_NXTSTHLM 1.5
describe FRUKT_NXTSTHLM Reply to info@nxtsthlm.com
uri FRUKT_113_URI /www\.113\.se\//i
score FRUKT_113_URI 1.1
describe FRUKT_113_URI URI to 1.1.3
uri FRUKT_DMTRACK_URI /www\.deliverymail\.com\/track\//i
score FRUKT_DMTRACK_URI 1.1
describe FRUKT_DMTRACK_URI URI to deliverymail web-bug
header FRUKT_LITHO_RCVD Received =~ / lithomots\d+[ \.]/i
score FRUKT_LITHO_RCVD 0.5
describe FRUKT_LITHO_RCVD Received from lithomots
header FRUKT_MKONTOR X-MimeOLE =~ /Marknadskontoret/
score FRUKT_MKONTOR 1.0
describe FRUKT_MKONTOR From Marknadskontoret
header FRUKT_BULKMAIL_RCVD Received =~ /bulk_?mail/i
score FRUKT_BULKMAIL_RCVD 1.0
describe FRUKT_BULKMAIL_RCVD Received from bulkmailer
header FRUKT_RELBRAND_RCVD Received =~ /relationbrand\.com/i
score FRUKT_RELBRAND_RCVD 1.0
describe FRUKT_RELBRAND_RCVD Received from relationbrand
header FRUKT_RELBRAND_MSGID Message-ID:addr =~ /\@\S+\.relationbrand\.com$/i
score FRUKT_RELBRAND_MSGID 1.0
describe FRUKT_RELBRAND_MSGID Message-ID from relationbrand
header FRUKT_RELBRAND_BOUND Content-Type =~ /moc\.dnarbnoitaler\.www/i
score FRUKT_RELBRAND_BOUND 1.0
describe FRUKT_RELBRAND_BOUND MIME boundary from relationbrand
meta __FRUKT_RELBRAND FRUKT_RELBRAND_RCVD || FRUKT_RELBRAND_MSGID || FRUKT_RELBRAND_BOUND
header FRUKT_PERMARK_RCVD Received =~ /permissionmarketing\.se/i
score FRUKT_PERMARK_RCVD 2.0
describe FRUKT_PERMARK_RCVD Received from permissionmarketing
header FRUKT_PERMARK_MSGID Message-ID:addr =~ /\.permissionmarketing\.se$/i
score FRUKT_PERMARK_MSGID 0.5
describe FRUKT_PERMARK_MSGID Message-ID from permissionmarketing
meta __FRUKT_PERMARK FRUKT_PERMARK_RCVD || FRUKT_PERMARK_MSGID
uri FRUKT_BIZWIZ_URI /www\.bizwizard\.se\/bw\//i
score FRUKT_BIZWIZ_URI 1.0
describe FRUKT_BIZWIZ_URI Send with BizWizard
header FRUKT_BIZWIZ_FROM From:addr =~ /\@bizwizard\.se$/i
score FRUKT_BIZWIZ_FROM 0.5
describe FRUKT_BIZWIZ_FROM From BizWizard
meta __FRUKT_BIZWIZ FRUKT_BIZWIZ_URI || FRUKT_BIZWIZ_FROM
uri FRUKT_TDOUBLE_URI /\.tradedoubler.com\/click\?/i
score FRUKT_TDOUBLE_URI 0.5
describe FRUKT_TDOUBLE_URI URI to tradedoubler
header FRUKT_DCP_RCVD Received =~ /\.dcp\.se\b/i
score FRUKT_DCP_RCVD 0.5
describe FRUKT_DCP_RCVD Received from DCP
uri FRUKT_DCP_URI /www\d*\.dcp\.se\//i
score FRUKT_DCP_URI 0.5
describe FRUKT_DCP_URI URI to DCP
uri FRUKT_DCP_URI_BUG /www\d*\.dcp\.se\/dcp\/track\//i
score FRUKT_DCP_URI_BUG 1.0
describe FRUKT_DCP_URI_BUG DCP web-bug
uri FRUKT_DCP_URI_UNSUB /www\d*\.dcp\.se\/dcp\/unsubscribe/i
score FRUKT_DCP_URI_UNSUB 1.0
describe FRUKT_DCP_URI_UNSUB DCP unsubscribe
meta __FRUKT_DCP FRUKT_DCP_RCVD || FRUKT_DCP_URI || FRUKT_DCP_URI_BUG || FRUKT_DCP_URI_UNSUB
uri FRUKT_CLICKRED_URI1 /\.clickredirect\.com\/r\.asp\?/i
score FRUKT_CLICKRED_URI1 0.5
describe FRUKT_CLICKRED_URI1 Link through clickredirect
uri FRUKT_CLICKRED_URI2 /www\.clickredirect\.com\/maili[mn]g\//i
score FRUKT_CLICKRED_URI2 1.0
describe FRUKT_CLICKRED_URI2 Link through clickredirect
header FRUKT_CLICKRED_FROM EnvelopeFrom:addr =~ /bounce[^@]*\@clickredirect\.com$/i
score FRUKT_CLICKRED_FROM 1.0
describe FRUKT_CLICKRED_FROM From clickredirect
meta __FRUKT_CLICKRED FRUKT_CLICKRED_URI1 || FRUKT_CLICKRED_URI2 || FRUKT_CLICKRED_FROM
header FRUKT_EPSERV_RCVD Received =~ /\b\S+\.(?:epostservice)\.se\b/i
score FRUKT_EPSERV_RCVD 1.0
describe FRUKT_EPSERV_RCVD Received from epostservice
header FRUKT_EPSERV_XMAIL X-Mailer =~ /Epostservice/i
score FRUKT_EPSERV_XMAIL 1.0
describe FRUKT_EPSERV_XMAIL Created by epostservice
uri FRUKT_EPSERV_OPTOUT /\.epostservice\.(?:com|se)\/unsub\.asp/i
score FRUKT_EPSERV_OPTOUT 1.0
describe FRUKT_EPSERV_OPTOUT Epostservice optout link
uri FRUKT_EPSERV_URI /\.epostservice\.(?:com|se)\//i
score FRUKT_EPSERV_URI 1.0
describe FRUKT_EPSERV_URI Epostservice link
header FRUKT_EPSERV_FROM EnvelopeFrom:addr =~ /\@bounce\.epostservice\.(?:com|se)$/i
score FRUKT_EPSERV_FROM 1.0
describe FRUKT_EPSERV_FROM From Epostservice
body FRUKT_EPSERV_MADE /\bProducerat\s+med\s+ePostservice(?:\.se|\.com)?\b/i
score FRUKT_EPSERV_MADE 0.5
describe FRUKT_EPSERV_MADE Made with Epostservice
meta __FRUKT_EPSERV FRUKT_EPSERV_RCVD || FRUKT_EPSERV_XMAIL || FRUKT_EPSERV_OPTOUT || FRUKT_EPSERV_URI || FRUKT_EPSERV_FROM || FRUKT_EPSERV_MADE
header FRUKT_ONEMORE_FROM From:addr =~ /(?:\.|\@)(?:onemore\.se|onemedia\.se|svenskavinster\.se)$/i
score FRUKT_ONEMORE_FROM 0.75
describe FRUKT_ONEMORE_FROM From One-More
uri FRUKT_ONEMORE_URI1 /\.onemore\.se\//i
score FRUKT_ONEMORE_URI1 0.75
describe FRUKT_ONEMORE_URI1 Link to OneMore
uri FRUKT_ONEMORE_URI2 /\.onemedia\.se\//i
score FRUKT_ONEMORE_URI2 0.75
describe FRUKT_ONEMORE_URI2 Link to OneMedia
uri FRUKT_ONEMORE_URI3 /\.svenskavinster\.se\//i
score FRUKT_ONEMORE_URI3 0.75
describe FRUKT_ONEMORE_URI3 Link to SvenskaVinster
body FRUKT_ONEMORE_URL /\bwww\.(?:onemore|onemedia|svenskavinster)\.se\b/i
score FRUKT_ONEMORE_URL 0.75
describe FRUKT_ONEMORE_URL Link to OneMore site
meta __FRUKT_ONEMORE FRUKT_ONEMORE_FROM || FRUKT_ONEMORE_URI1 || FRUKT_ONEMORE_URI1 || FRUKT_ONEMORE_URI2 || FRUKT_ONEMORE_URI3 || FRUKT_ONEMORE_URL
header FRUKT_IMSI_RCVD Received =~ /\.imsi\.ru\b/i
score FRUKT_IMSI_RCVD 0.5
describe FRUKT_IMSI_RCVD Received from imsi
uri FRUKT_IMSI_URI1 /\.imsi\.ru\//i
score FRUKT_IMSI_URI1 0.5
describe FRUKT_IMSI_URI1 Link to imsi
uri FRUKT_IMSI_URI2 /mailstats?\.imsi\.ru\//i
score FRUKT_IMSI_URI2 0.75
describe FRUKT_IMSI_URI2 Link to imsi mail stuff
meta __FRUKT_IMSI FRUKT_IMSI_RCVD || FRUKT_IMSI_URI1 || FRUKT_IMSI_URI2
header FRUKT_TOTL_RCVD Received =~ /\.totl\.ru\b/i
score FRUKT_TOTL_RCVD 0.5
describe FRUKT_TOTL_RCVD Received from totl
header FRUKT_PRIZE_AUTH X-Authenticated-Sender =~ /(?:\.|\@)(?:mail\.)?prize\.ru\b/i
score FRUKT_PRIZE_AUTH 0.5
describe FRUKT_PRIZE_AUTH Auth from prize
header FRUKT_FOLLOW_RCVD Received =~ /mail\.follow-up\.(?:net|se)\b/i
score FRUKT_FOLLOW_RCVD 1.0
describe FRUKT_FOLLOW_RCVD Received from follow-up
uri FRUKT_FOLLOW_URI1 /www\.follow-up\.net\//i
score FRUKT_FOLLOW_URI1 0.5
describe FRUKT_FOLLOW_URI1 Link to follow-up
uri FRUKT_FOLLOW_URI2 /www\.follow-up\.net\/nicelink\/redir\//i
score FRUKT_FOLLOW_URI2 1.0
describe FRUKT_FOLLOW_URI2 Link through follow-up
uri FRUKT_FOLLOW_UNSUB /www\.follow-up\.net\/nicelink\/unregister\//i
score FRUKT_FOLLOW_UNSUB 1.0
describe FRUKT_FOLLOW_UNSUB Unsubscribe from follow-up
meta __FRUKT_FOLLOW FRUKT_FOLLOW_RCVD || FRUKT_FOLLOW_URI1 || FRUKT_FOLLOW_URI2 || FRUKT_FOLLOW_UNSUB
header FRUKT_DMAIL_FROM From:addr =~ /(?:\.|\@)maildirect\.se$/i
score FRUKT_DMAIL_FROM 1.5
describe FRUKT_DMAIL_FROM MailDirect from address
header FRUKT_DMAIL_RCVD Received =~ /\b(?:[a-z0-9]+\.)?qbranch.se\b/i
score FRUKT_DMAIL_RCVD 1.0
describe FRUKT_DMAIL_RCVD Received from QBranch
uri FRUKT_DMAIL_UNSUB /events.maildirect.se\/\d+\/unsubscribe\.aspx?\?/i
score FRUKT_DMAIL_UNSUB 1.5
describe FRUKT_DMAIL_UNSUB Unsubscribe from MailDirect
uri FRUKT_DMAIL_URI0 /[a-z0-9]\.maildirect\.se/i
score FRUKT_DMAIL_URI0 1.0
describe FRUKT_DMAIL_URI0 MailDirect URI
uri FRUKT_DMAIL_URI1 /events?\.maildirect\.se/i
score FRUKT_DMAIL_URI1 1.0
describe FRUKT_DMAIL_URI1 MailDirect event URI
meta __FRUKT_DMAIL FRUKT_DMAIL_FROM || FRUKT_DMAIL_RCVD || FRUKT_DMAIL_UNSUB || FRUKT_DMAIL_URI0 || FRUKT_DMAIL_URI1
uri FRUKT_GTDAY_URI1 /www\.gifttoday\.se/i
score FRUKT_GTDAY_URI1 1.0
describe FRUKT_GTDAY_URI1 GiftToday URI
uri FRUKT_GTDAY_URI2 /www\.chokladogram\.se/i
score FRUKT_GTDAY_URI2 1.0
describe FRUKT_GTDAY_URI2 GiftToday Chokladogram URI
header FRUKT_GTDAY_RCVD Received =~ /\b(?:[a-z0-9]+\.)?gifttoday\.se\b/i
score FRUKT_GTDAY_RCVD 1.0
describe FRUKT_GTDAY_RCVD Received from GiftToday
header FRUKT_GTDAY_FROM1 From:addr =~ /\@gifttoday\.se$/i
score FRUKT_GTDAY_FROM1 1.0
describe FRUKT_GTDAY_FROM1 From GiftToday
header FRUKT_GTDAY_FROM2 From:addr =~ /\@chokladogram\.se$/i
score FRUKT_GTDAY_FROM2 1.0
describe FRUKT_GTDAY_FROM2 From GiftToday Chokladogram
meta __FRUKT_GTDAY FRUKT_GTDAY_URI1 || FRUKT_GTDAY_URI2 || FRUKT_GTDAY_RCVD || FRUKT_GTDAY_FROM1 || FRUKT_GTDAY_FROM2
header FRUKT_EPOINT_MSGID Message-ID:addr =~ /\@(?:[a-z0-9]+\.)?eastpoint\.se$/i
score FRUKT_EPOINT_MSGID 0.5
describe FRUKT_EPOINT_MSGID Message-ID from eastpoint.se
header FRUKT_DMD_RCVD Received =~ /\b\S+\.dmdelivery\.(?:com|nl)\b/i
score FRUKT_DMD_RCVD 1.2
describe FRUKT_DMD_RCVD Received from dmdelivery
header FRUKT_DMD_MSGID Message-ID:addr =~ /\@\S+\.dmdelivery\.(?:com|nl)$/i
score FRUKT_DMD_MSGID 1.0
describe FRUKT_DMD_MSGID DMdelivery Message ID
header FRUKT_DMD_FROM From:addr =~ /\@\S+\.dmdelivery\.(?:com|nl)$/i
score FRUKT_DMD_FROM 1.0
describe FRUKT_DMD_FROM From dmdelivery
header __FRUKT_DMD_LIST1 List-Help =~ /http:\/\/\S+\.dmdelivery\.(?:com|nl)/i
header __FRUKT_DMD_LIST2 List-Owner:addr =~ /\@\S+\.dmdelivery\.(?:com|nl)$/i
header __FRUKT_DMD_LIST3 List-Unsubscribe =~ /http:\/\/\S+\.dmdelivery\.(?:com|nl)/i
meta FRUKT_DMD_LIST __FRUKT_DMD_LIST1 || __FRUKT_DMD_LIST2 || __FRUKT_DMD_LIST3
score FRUKT_DMD_LIST 1.0
describe FRUKT_DMD_LIST From dmdelivery list
uri FRUKT_DMD_URI /\S+\.dmdelivery\.(?:com|nl)\//i
score FRUKT_DMD_URI 1.0
describe FRUKT_DMD_URI DMdelivery URI
meta __FRUKT_DMD FRUKT_DMD_RCVD || FRUKT_DMD_MSGID || FRUKT_DMD_FROM || FRUKT_DMD_LIST || FRUKT_DMD_URI
header FRUKT_ANP_FROM EnvelopeFrom:addr =~ /bounce\@mail\.anp\.se$/i
score FRUKT_ANP_FROM 1.0
describe FRUKT_ANP_FROM From ANP
header FRUKT_ANP_RCVD Received =~ /\bmail\d+\.anp\.se\b/i
score FRUKT_ANP_RCVD 1.0
describe FRUKT_ANP_RCVD Received from ANP
header __FRUKT_ANP_MID1 X-VirtualServer =~ /\bmail\d+\.anp\.se\b/i
header __FRUKT_ANP_MID2 X-MailingID =~ /\S+/
meta FRUKT_ANP_MID __FRUKT_ANP_MID1 && __FRUKT_ANP_MID2
score FRUKT_ANP_MID 1.0
describe FRUKT_ANP_MID Mailing from ANP
uri FRUKT_ANP_TRACK /tr\.anp\.se\/track\?/i
score FRUKT_ANP_TRACK 1.0
describe FRUKT_ANP_TRACK ANP tracking URI
uri FRUKT_ANP_URI /www\.anp\.se\//i
score FRUKT_ANP_URI 0.5
describe FRUKT_ANP_URI ANP URI
meta __FRUKT_ANP FRUKT_ANP_FROM || FRUKT_ANP_RCVD || FRUKT_ANP_MID || FRUKT_ANP_TRACK || FRUKT_ANP_URI
header FRUKT_OCCIDENT_RCVD Received =~ /\boccident\.se\s/i
score FRUKT_OCCIDENT_RCVD 1.0
describe FRUKT_OCCIDENT_RCVD Received from Occident
header FRUKT_OCCIDENT_MID Message-ID =~ /\@\S+\.occident\.se>/i
score FRUKT_OCCIDENT_MID 1.0
describe FRUKT_OCCIDENT_MID Ociddent Message ID
uri FRUKT_OCCIDENT_URI /https?:\/\/reaktion.occident.se\//
score FRUKT_OCCIDENT_URI 1.0
describe FRUKT_OCCIDENT_URI Occident bulk uri
uri FRUKT_ATTR_URI /\S+\.attraction\.se\/e-Dialog\//i
score FRUKT_ATTR_URI 0.5
describe FRUKT_ATTR_URI Attraction URI
header __FRUKT_ANAME_RCVD Received =~ /\bwww\d+\.aname\.net\b/i
header __FRUKT_ANAME_MID Message-ID:addr =~ /\@www\d+\.aname\.net$/i
meta FRUKT_ANAME_ORIG __FRUKT_ANAME_RCVD && __FRUKT_ANAME_MID
score FRUKT_ANAME_ORIG 0.5
describe FRUKT_ANAME_ORIG Originated at aname.net
header FRUKT_EFFSTUDIO_MAIL X-Mailer =~ /\bwww\.effectivestudios\.com\b/i
score FRUKT_EFFSTUDIO_MAIL 0.5
describe FRUKT_EFFSTUDIO_MAIL From Newsletter Studio
header FRUKT_LINDIT_FROM From:addr =~ /\@lindit\.se$/i
score FRUKT_LINDIT_FROM 0.5
describe FRUKT_LINDIT_FROM From Lind IT
header FRUKT_HOMETV_FROM EnvelopeFrom:addr =~ /hometv\.se\@bounce\.maildirect\.se/i
score FRUKT_HOMETV_FROM 1.0
describe FRUKT_HOMETV_FROM From HomeTV
uri FRUKT_HOMETV_URI /www\.HomeTV\.se/i
score FRUKT_HOMETV_URI 0.5
describe FRUKT_HOMETV_URI HomeTV URI
header FRUKT_SEMDES_FROM From:addr =~ /info\@seminardesign\.se$/i
score FRUKT_SEMDES_FROM 1.0
describe FRUKT_SEMDES_FROM From Seminar Design
uri FRUKT_SEMDES_URI /www\.seminardesign\.se/i
score FRUKT_SEMDES_URI 1.0
describe FRUKT_SEMDES_URI Seminar Design URI
header FRUKT_SAMLOGIC_MAIL X-Mailer =~ /SamLogic\s+Mailing\s+System/i
score FRUKT_SAMLOGIC_MAIL 0.5
describe FRUKT_SAMLOGIC_MAIL Sent with SamLogic Mailing System
full __FRUKT_SAMLOGIC_IMG /
(2008-02-29)