# I hereby give permission for any other committer to change rules in this file
# see pds/20_btc.cf for other BTC rules

body     __COPY_PASTE_DE      /Kopieren Sie es und f(?:\xfc|\xc3\xbc)gen Sie es ein|Kopieren \& Einf(?:\xfc|\xc3\xbc)gen/i
meta     __GB_BITCOIN_CP_DE   ( __BITCOIN_ID && !__URL_BTC_ID && __COPY_PASTE_DE )
describe __GB_BITCOIN_CP_DE   German Bitcoin scam

body     __COPY_PASTE_ES      /copiarlo y pegarlo/i
meta     __GB_BITCOIN_CP_ES   ( __BITCOIN_ID && !__URL_BTC_ID && __COPY_PASTE_ES )
describe __GB_BITCOIN_CP_ES   Spanish Bitcoin scam

body     __COPY_PASTE_FR      /le copier (?:et le|\+) coller/i
meta     __GB_BITCOIN_CP_FR   ( __BITCOIN_ID && !__URL_BTC_ID && __COPY_PASTE_FR )
describe __GB_BITCOIN_CP_FR   French Bitcoin scam

ifplugin Mail::SpamAssassin::Plugin::ReplaceTags
  body     __COPY_PASTE_EN    /<C><O><P><Y> (?:<A><N><D>|\+|\&) <P><A><S><T><E>/i
  replace_rules __COPY_PASTE_EN
else
  body     __COPY_PASTE_EN    /Copy (?:and|\+|\&) paste/i
endif
meta     __GB_BITCOIN_CP_EN   ( __BITCOIN_ID && !__URL_BTC_ID && __COPY_PASTE_EN )
describe __GB_BITCOIN_CP_EN   English Bitcoin scam

body     __COPY_PASTE_IT      /copiar?lo (?:e|\&) incollar?lo/i
meta     __GB_BITCOIN_CP_IT   ( __BITCOIN_ID && !__URL_BTC_ID && __COPY_PASTE_IT )
describe __GB_BITCOIN_CP_IT   Italian Bitcoin scam

body     __COPY_PASTE_NL      /kopieer en plak het/i
meta     __GB_BITCOIN_CP_NL   ( __BITCOIN_ID && !__URL_BTC_ID && __COPY_PASTE_NL )
describe __GB_BITCOIN_CP_NL   Dutch Bitcoin scam

body     __COPY_PASTE_SE      /kopiera den och klistra in/i
meta     __GB_BITCOIN_CP_SE   ( __BITCOIN_ID && !__URL_BTC_ID && __COPY_PASTE_SE )
describe __GB_BITCOIN_CP_SE   Swedish Bitcoin scam

meta     GB_BITCOIN_CP        ( __GB_BITCOIN_CP_DE || __GB_BITCOIN_CP_ES || __GB_BITCOIN_CP_EN || __GB_BITCOIN_CP_FR || __GB_BITCOIN_CP_IT || __GB_BITCOIN_CP_NL || __GB_BITCOIN_CP_SE )
describe GB_BITCOIN_CP        Localized Bitcoin scam
score    GB_BITCOIN_CP        3.0 # limit

body     __NEVER_HEAR_EN      /(?:never hear me again|destroy all your secrets|not bother you again|leave you alone)/i
body     __NEVER_HEAR_IT      /eliminare tutti i tuoi segreti|Ti garantisco che non ti disturbe/i
meta     GB_BITCOIN_NH        ( __BITCOIN_ID && !__URL_BTC_ID && ( __NEVER_HEAR_EN || __NEVER_HEAR_IT ) )
describe GB_BITCOIN_NH        Localized Bitcoin scam
score    GB_BITCOIN_NH        3.0 # limit

if (version >= 3.004003)
  ifplugin Mail::SpamAssassin::Plugin::HashBL
    body          GB_HASHBL_BTC eval:check_hashbl_bodyre('bl.btcblack.it', 'raw/max=10/shuffle', '\b(?<!=)([13][a-km-zA-HJ-NP-Z1-9]{25,34}|bc1[acdefghjklmnpqrstuvwxyz234567890]{30,62})\b')
    priority      GB_HASHBL_BTC -100
    tflags        GB_HASHBL_BTC net publish
    reuse         GB_HASHBL_BTC
    describe      GB_HASHBL_BTC Message contains BTC address found on BTCBL
    score         GB_HASHBL_BTC 5.0 # limit
  endif
endif