At 09:45 AM 8/1/2006, you wrote:
This message was stopped , and I'm not really sure what triggered the Diploma
Mill rule
The sender is legitimate (UNFPA.org) and I read the message it seems* ok
sorry to read about your tooth. i lost two upper fronts
due to bicycle accident some 27 years ago. I fell, hit a rock right
above my lip and both teeth fell out from their root, hence the cap
in
my mouth. it is a terrible thing to lose teeth. let's be happy we are
in
overall good health. [...]
Content analysis details: (5.8 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.1 HTML_TAG_EXIST_TBODY BODY: HTML has "tbody" tag
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME
parts
2.2 RCVD_IN_WHOIS_INVALID RBL: CompleteWhois: sender on invalid IP
block
[149.120.224.3 listed in combined-HIB.dnsiplists.completewhois.com]
3.5 KAM_UNIV Diploma Mill Rule
A google search for KAM_UNIV gives two results.. Both show:
#UNIVERSITY RULE
body __KAM_UNIV1 /(University
Administration|University Enrollment|Education Assessment|Faculty
Assessment|University Degree|Administration Office|Education
office|Schools office|Enrollment Office)/is
body __KAM_UNIV2 /\d (week|month).{0,30}degree/is
body __KAM_UNIV3 /(past work|professional|based on
your|earned from|life|life and work|present work) experience/is
body __KAM_UNIV4 /not official degree/is
body __KAM_UNIV5 /novelty (degree|use)/is
body __KAM_UNIV6 /verifiable University Degree/is
body __KAM_UNIV7 /(life|work) experience
(diploma|degree|transcript)/is
body __KAM_UNIV8 /Career Path Experts/is
body __KAM_UNIV9 /non-accredited.{1,10}universit/is
body __KAM_UNIV10 /(graduating|diploma) (within|in) (as
little as)? (one|two|three|\d) (week|month)/is
body __KAM_UNIV11 /(degree|transcript) in any field/is
body __KAM_UNIV12 /diploma that you want/is
body __KAM_UNIV13 /(degree|field) of your (choice|expertise)/is
body __KAM_UNIV14 /(earn a|full) transcript/is
body __KAM_UNIV15 /(No Study Required|No
examinations|no classes|no textbooks|no required tests)/is
body __KAM_UNIV16 /\d weeks.{0,30}graduated/is
header __KAM_UNIV17 Subject =~
/(dip(i|l)oma|degree|transcript|award)/i
body __KAM_UNIV1B /\d weeks/i
body __KAM_UNIV2B /d[_\. ]?e[_\. ]?g[_\. ]?r[_\. ]?e[_\. ]?e/i
body __KAM_UNIV3B /dead end job/is
body __KAM_UNIV4B /1.?0.?0.?% (legit|verifiable)/is
body __KAM_UNIV5B /F A S T[ ]{0,4}T R A C K/is
body __KAM_UNIV6B /DIP\sLOMA/
meta KAM_UNIV ((__KAM_UNIV1 + __KAM_UNIV2 +
__KAM_UNIV3 + __KAM_UNIV4 + __KAM_UNIV5 + __KAM_UNIV6 + __KAM_UNIV7 +
__KAM_UNIV8 + __KAM_UNIV9 + __KAM_UNIV10 + __KAM_UNIV11 +
__KAM_UNIV12 + __KAM_UNIV13 + __KAM_UNIV14 + __KAM_UNIV15 +
__KAM_UNIV16 + __KAM_UNIV16 + __KAM_UNIV17) >= 2 || (__KAM_UNIV1B +
__KAM_UNIV2B + __KAM_UNIV3B + __KAM_UNIV4B + __KAM_UNIV5B + __KAM_UNIV6B) >= 2)
describe KAM_UNIV Diploma Mill Rule
score KAM_UNIV 4.5
Look for one of those strings in the e-mail.
