99_carnet.cf

   1 header      __CN_PHISH1_SUB     Subject =~ /^Confirm your email identity/i
   2 body        __CN_PHISH1_BODY    /Confirm your email identity below/i
   3 body        __CN_PHISH1_CODE    /Warning Code:[a-zA-Z0-9]+/
   4 body        __CN_PHISH1_CODE2   /network system with error code [a-zA-Z0-9]+/
   5 meta        CN_PHISH1           __CN_PHISH1_SUB && __CN_PHISH1_BODY && __CN_PHISH1_CODE && __CN_PHISH1_CODE2
   6 score       CN_PHISH1           10.0
   7 describe    CN_PHISH1           CARNet-Debian phish signature 1
   8
   9 header      __CN_PHISH2_SUB     Subject =~ /^Message from/i
  10 body        __CN_PHISH2_BODY    /account update our account/i
  11 body        __CN_PHISH2_BODY2   /authomatically spam free/i
  12 body        __CN_PHISH2_CODE    /error code [a-zA-Z0-9]+/i
  13 meta        CN_PHISH2           __CN_PHISH2_SUB && __CN_PHISH2_BODY && __CN_PHISH2_BODY2 && __CN_PHISH2_CODE
  14 score       CN_PHISH2           10.0
  15 describe    CN_PHISH2           CARNet-Debian phish signature 2
  16
  17 header      __CN_PHISH3_SUB     Subject =~ /^Dear.*Account.*User/i
  18 body        __CN_PHISH3_BODY    /Internet Webmail message center/i
  19 body        __CN_PHISH3_BODY2   /You are advice to verify/i
  20 body        __CN_PHISH3_BODY3   /lose his or her account permanently/i
  21 meta        CN_PHISH3           __CN_PHISH3_SUB && __CN_PHISH3_BODY && __CN_PHISH3_BODY2 && __CN_PHISH3_BODY3
  22 score       CN_PHISH3           10.0
  23 describe    CN_PHISH3           CARNet-Debian phish signature 3
  24
  25 header      __CN_SPAM4_SUB    Received =~ /CommuniGate Pro SMTP/i
  26 body        __CN_SPAM4_CODE   /westeur-consult\.com/
  27 meta        CN_SPAM4          __CN_SPAM4_SUB && __CN_SPAM4_CODE
  28 score       CN_SPAM4          10.0
  29 describe    CN_SPAM4          CARNet-Debian spam signature 4