# These are oddities seen in Other People's Spam, i.e. I have no hits in my test corpora
describe __HAS_IMG_SRC Has an img tag on a non-quoted line
rawbody __HAS_IMG_SRC /^[^>].*?].*?].*?<(img src|IMG SRC)=/m
tflags __HAS_IMG_SRC_ONECASE multiple maxhits=100
describe __HAS_HREF_ONECASE Has an anchor tag with a href attribute in non-quoted line with consistent case
rawbody __HAS_HREF_ONECASE /^[^>].*?<(a href|A HREF)=/m
tflags __HAS_HREF_ONECASE multiple maxhits=100
describe __MIXED_IMG_CASE Has img tags with mixed-up cases in non-quoted lines
meta __MIXED_IMG_CASE __HAS_IMG_SRC - __HAS_IMG_SRC_ONECASE > 0
describe __MIXED_HREF_CASE Has anchor tags with mixed-up cases in non-quoted lines
meta __MIXED_HREF_CASE __HAS_HREF - __HAS_HREF_ONECASE > 0
describe T_MIXED_TAG_CASE Has multiple mixed-case tags in non-quoted lines.
meta T_MIXED_TAG_CASE __MIXED_IMG_CASE && __MIXED_HREF_CASE
describe T_SCC_THREE_WORD_MONTY Are you POTUS or a mass murderer?
header T_SCC_THREE_WORD_MONTY From =~ /(\w{2,}) (\w{2,}) (\w{2,}) <\1.\2.\3/
# Fingerprint Majordomo lists
header __SCC_MD_UNSUB List-Unsubscribe =~ /: 1
tflags SCC_MAJORDOMO nice
describe T_SCC_ODD_MUA Unlikely MUA for a modern human
header T_SCC_ODD_MUA X-Mailer =~ /^X-Mailer: Microsoft Outlook 14.0$/
describe T_SCC_SPECIAL_GUID Unique in a similar way
rawbody T_SCC_SPECIAL_GUID /^([[:xdigit:]]{8})-([[:xdigit:]]{4})-([[:xdigit:]]{3})-\3-([[:xdigit:]]{12})$/m
tflags T_SCC_SPECIAL_GUID multiple maxhits=15
#score T_SCC_SPECIAL_GUID 0.3