The ".date" TLD just started bombarding my inbox...
header FROM_RARE_TLD From:addr =~ /\.(?:wor(?:k|ld)|space|club|science|pub|red|blue|green|link|ninja|lol|xyz|faith|review|download|top|global|(?:web)?site|tech|party|pro|bid|trade|win|moda|news|online|biz|host|loan|study|click|stream|xxx|date)$/i describe FROM_RARE_TLD From address in rarely-nonspam TLD score FROM_RARE_TLD 3.000 header REPTO_RARE_TLD Reply-To =~ /\.(?:wor(?:k|ld)|space|club|science|pub|red|blue|green|link|ninja|lol|xyz|faith|review|download|top|global|(?:web)?site|tech|party|pro|bid|trade|win|moda|news|online|biz|host|loan|study|click|stream|xxx|date)>?$/i describe REPTO_RARE_TLD Reply-To address in rarely-nonspam TLD score REPTO_RARE_TLD 3.000 uri URI_RARE_TLD m;://[^/]+\.(?:wor(?:k|ld)|space|club|science|pub|red|blue|green|link|ninja|lol|xyz|faith|review|download|top|global|(?:web)?site|tech|party|pro|bid|trade|win|moda|news|online|biz|host|loan|study|click|stream|xxx|date)(?:/|$);i describe URI_RARE_TLD URI refers to rarely-nonspam TLD score URI_RARE_TLD 3.000 -- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- 242 days since the first commercial re-flight of an orbital booster (SpaceX)
