#LAST UPDATED BY MAILS BEST FRIEND 05/07/2026
#SKIPIFWEIGHT	25

#--------------------------------------------------------------------#
#			EXCEPTIONS		    	 	     #
#--------------------------------------------------------------------#

TESTSFAILED	END	PCRE	(GOOD-REVDNS|ISP-(YAHOO|GOOGLE)|BONDEDSENDER)

#--------------------------------------------------------------------#
#			BULK MAILERS		    	 	     #
#--------------------------------------------------------------------#

REVDNS		4	PCRE	(?i:(systememerge|wixshoutout)\.com$)

ANYWHERE	10	PCRE	(?i:mailboto11)

HEADERS		5	PCRE	(X-Mailer: (0001|Avalanche|Crescent Internet Tool|DiffondiCool|E-Mail Delivery Agent|Emailer Platinum|Entity|Extractor|Floodgate|GOTO Software Sarbacane|MailWorkz|MassE-Mail|MaxBulk.Mailer|News Breaker Pro|SmartMailer|StormPort|SuperMail-2))

REVDNS		-1	PCRE	(?i:\.lstrk\.net$)
REVDNS		-6	PCRE	(?i:\.mkt1620\.com$)
REVDNS		-6	PCRE	(?i:\.msg1svc\.net$)
REVDNS		-7	PCRE	(?i:\.lndrsmail\.com$)
REVDNS		-3	PCRE	(?i:\.directrouter\.com$)
REVDNS		4	PCRE	(?i:\.mktomail\.com$)

# ClickBack (clickback.com) - Tier 4 (Sells lists and uses many domains)
REVDNS		15	ENDSWITH	.clickback.com
REVDNS		15	ENDSWITH	.cbsend.net
REVDNS		15	ENDSWITH	.cb-send.net
REVDNS		15	ENDSWITH	.clickbackmail.com
REMOTEIP	15	CIDR		104.245.4.0/22
REMOTEIP	15	CIDR		173.242.20.64/27
REMOTEIP	15	CIDR		173.242.25.0/27
REMOTEIP	15	CIDR		208.89.161.200/29
REMOTEIP	15	CIDR		68.168.244.0/27
REMOTEIP	15	CIDR		68.168.245.0/27
REMOTEIP	15	CIDR		68.168.247.128/27
REMOTEIP	15	CIDR		68.168.249.96/27
REMOTEIP	15	CIDR		68.168.251.128/27

# Real Magnet (realmagnet.com) - Tier 4 (Sells lists and uses many domains)
REVDNS		15	ENDSWITH	.realmagnet.com
REMOTEIP	15	CIDR		209.18.93.0/24
REMOTEIP	15	CIDR		209.18.70.0/24
REMOTEIP	15	CIDR		64.27.72.0/24

# Progressive Business Publications (pbpinfo.com) - Tier 4 (Changes names frequently and uses scrounged lists to send B2B crap)
REVDNS	15	ENDSWITH		.pbpinfo.com
REMOTEIP	15	CIDR		208.89.23.0/26
REMOTEIP	15	CIDR		208.89.23.64/28
		
#--------------------------------------------------------------------#
#			HEADERS			    	 	     #
#--------------------------------------------------------------------#
#LEGITIMATE
HEADERS		-5	PCRE	(?i:X-(Campaignid|RPCampaign):)

HEADERS		-5	PCRE	(?im:List-Unsubscribe: \<mailto.+bounce)

#SPAM
HEADERS		5	PCRE	(?i:Postfix\?{10})
HEADERS		5	PCRE	(?i:X-Wum-Nature: EMAIL-NATURE)

#DOMAIN HAS SERIES OF NON-VOWEL LETTERS
MAILFROM	5	PCRE	(?i:\@\S*[bcdfghjklmnpqrstvwxz]{7})
ALLRECIPS	10	PCRE	(?i:\@\S*[bcdfghjklmnpqrstvwxz]{7})

#LOCALPART HAS SERIES OF NON-VOWEL LETTERS
MAILFROM	5	PCRE	(?i:[bcdfghjklmnpqrstvwxz]{7}\S*\@)
ALLRECIPS	5	PCRE	(?i:[bcdfghjklmnpqrstvwxz]{7}\S*\@)

#LOCALPART HAS SERIES OF NUMBERS
MAILFROM	4	PCRE	(?i:^\d{6,}\S+\@)
MAILFROM	4	PCRE	(?i:\D\d{8,}\@)

#BULK
MAILFROM	4	PCRE	(?i:\@\S*offers(?![eo]n\b))
MAILFROM	4	PCRE	(?i:\@\S*reward(?![eo]n\b))
MAILFROM	4	PCRE	(?i:\@\S*coupon(?![eo]n\b))

HEADERS		2	PCRE	(?i:Precedence: bulk)
HEADERS		4	PCRE	(?i:X-Mailer:.{1,5}[bcdfghjklmnpqrstvwxz]{6})

#--------------------------------------------------------------------#
#			MAILFROM		    	 	     #
#--------------------------------------------------------------------#
MAILFROM	2	PCRE	(?i:^(bounce|noreply|return|offer).*\@)
MAILFROM	2	PCRE	(?i:(\?|\=|@bounce\.))

#--------------------------------------------------------------------#
#			REVDNS			    	 	     #
#--------------------------------------------------------------------#
REVDNS		5	PCRE	(reward)
REVDNS		3	PCRE	(?i:\.(info|biz|ws)$)
REVDNS		10	PCRE	(?i:\.(as-you-inquiry)\.net$)

#--------------------------------------------------------------------#
#			URL			    	 	     #
#--------------------------------------------------------------------#
BODY		2	PCRE	(ad\.doubleclick\.net)
BODY		2	PCRE	(http://ads?\.)
BODY		2	PCRE	(?i:/ads/)
BODY		2	PCRE	(?i:http://[bcdfghjklmnpqrstvwxz]{7,30}.)

#--------------------------------------------------------------------#
#			ADVERTISING		    	 	     #
#--------------------------------------------------------------------#
BODY	20	PCRE	(?i:unsubscribe.{0,2}from this advertisement)
BODY	20	PCRE	(Having trouble viewing this email properly)
BODY	20	PCRE	(THIS AD ONLY)
BODY	20	PCRE	(End future ads)
BODY	20	PCRE	(?i:(message is an|preceding).advertisement)
BODY	20	PCRE	(?i:stop.(receiving|getting).(these|e-mail||our|this).advertisement)
BODY	20	PCRE	(above is an advertisement sent by)
BODY	20	PCRE	(?i:A D V E R T I S E M E N T)
BODY	20	PCRE	(?i:This is not endorsed, sponsored by or affiliated with)
BODY	20	PCRE	(?i:(no longer receive messages|mailings|remove yourself) from this advertiser)


BODY	10	PCRE	(?i:(receive emails?|marketing).{0,10}advertiser)
BODY	10	PCRE	(?i:you.(have|are).(receiv(ed|ing)).(this advertisement))
BODY	10	PCRE	(?i:(subscribed|agreed).to receive third party offers)
BODY	10	PCRE	(?i:email.(was sent by a 3rd party on behalf of|promotions from advertiser|is an advertisement|is a commercial))
BODY	10	PCRE	(?i:print a copy of the advertisement)
BODY	10	PCRE	(?i:[-(]Advertisement[-)])
BODY	10	PCRE	(?i:The following is an.{1,7}advertisement)
BODY	10	PCRE	(?i:third.party.(advertise(ment|r)|offer(s)|sources for the purpose of sending))
BODY	10	PCRE	(?i:This advertisement.(is presented|brought to you|email|has been|was sent))

BODY	8	PCRE	(?i:advertisements?).?(is|was|from|sent).{0,7}\b(advertiser|sent|behalf)
BODY	8	PCRE	(?i:This is a.{1,12}ad(vertisement|))
BODY	8	PCRE	(?i:if you can('t|not).(read|see).{0,10}this email)
BODY	8	PCRE	(?i:advertis(e?ment|er(.?s)?).?(should be directed to|Unsubscribe|address|sent from|:))

BODY	5	PCRE	(?i:e?mail message is an advertisement)
BODY	5	PCRE	(?i:receiving.{0,12}advertisemens?)
BODY	5	PCRE	(100% permission-based market)
BODY	5	PCRE	(?i:services that are advertised)

BODY	5	PCRE	(?i:contact the advertiser)
BODY	5	PCRE	(?i:sent to you by an affiliate)
BODY	5	PCRE	(?i:you(?:'ve|'re| have| are)? receiv(?:e|ed|ing) this (?:advertisement|offer|special|recurring|paid|solicitation|promotion).{0,16}\b(?:by either|because))

#--------------------------------------------------------------------#
#			DIRECT MARKETING			     #
#--------------------------------------------------------------------#
BODY	20	PCRE	(?:Consumer Incentive Promotions|Optimum Media, Inc)
BODY	20	PCRE	(?:(Web(Byte|Descent|Know|Alas)|OnlineDataDirect|Platinum.?(Success|Marketing)|Target Dealz|LIVEMERCIAL|e.?(Deals|labs3)|WebKnow|consume.{0,12}promotion|MailLogic|Internet's Best -))
BODY	20	PCRE	(?:(Superb Rewards|Universal Marketing Media|Accelerama|REQBLASTER|gapgol|MediaShaperOnline|Primeoffers))
BODY	20	PCRE	(?i:reward.{0,2}(dept|network|depot|gateway|venue))
BODY	20	PCRE	(?i:OfferConfirmation)

BODY	20	PCRE	(?:imarketingautomation\.services)

BODY	10	PCRE	(?i:direct(consumer services|scoop))
BODY	10	PCRE	(?i:mail(compliment|marketing|reward))
BODY	10	PCRE	(?i:rewards?(group|cent(er|ral)|program))
BODY	10	PCRE	(?i:giveaway\*)

BODY	5	PCRE	(?i:\be.promo)

BODY	3	PCRE	(?i:Click Here to Register)
BODY	3	PCRE	(?i:Register now)

#--------------------------------------------------------------------#
#			FONT					     #
#--------------------------------------------------------------------#
BODY	1	PCRE	(?i:font.(size|style).-?[01]\s)

#--------------------------------------------------------------------#
#			BODY					     #
#--------------------------------------------------------------------#

BODY	7	PCRE	(?i:\.topica\.com)

#--------------------------------------------------------------------#
#			UNSUBSCRIBE				     #
#--------------------------------------------------------------------#
BODY	5	PCRE	(?i:Remove me from list)
BODY	5	PCRE	(?i:To stop receiving emails)

#--------------------------------------------------------------------#
#			HEADER					     #
#--------------------------------------------------------------------#

BODY	1	PCRE	(?i:View email online)

#--------------------------------------------------------------------#
#			FOOTER					     #
#--------------------------------------------------------------------#

BODY	-1	PCRE	(?i:Update Your Profile.+Privacy Policy.+Forward to a Friend)
BODY	-1	PCRE	(?i:Manage Subscriptions.+Update Profile.+Unsubscribe)
BODY	-1	PCRE	(?i:Unsubscribe.+Privacy Policy.+Terms and Conditions)
BODY	-1	PCRE	(?i:To opt out of future emails.+click here)