On Fri, 5 Oct 2018 16:34:51 +0000
Zinski, Steve wrote:
> Here's how I'm blocking bitcoin emails with Unicode characters
> embedded:
>
> body __BTC1 /\b[13][a-km-zA-HJ-NP-Z1-9]{25,34}\b/
> body __BTC2 /\b\W*b\W*i\W*t\W*c\W*o\W*i\W*n\W*\b/i
> body __BTC3 /\b\W*b\W*t\W*c\W*\b/i
> body
> __BTC4 /\bb[i\x{0456}]t[c\x{0441}][o\x{043E}][i\x{0456}]n\b/i
> meta LOCAL_BITCOIN ( __BTC1 && ( __BTC2 || __BTC3 || __BTC4 ) )
> score LOCAL_BITCOIN 10.0
>
> Works like a charm in my environment.
The trouble with this is that you would be adding 10 point to anything
with a bitcoin address whether anything's obfuscated or not. If you want
to avoid this take a look at the FUZZY_* rules.
