Gary V wrote:
body GV_MAKE_K / how to (generate|make) 1\.5 - 3\.5k /
score GV_MAKE_K 3.5
uri GEOCITIES /^http:\/\/(..|www)\.geocities\.com\/+.+/i
describe GEOCITIES Geocities URL
score GEOCITIES 3.5
FWIW, if you process large quantities of mail, scoring on just the
Geocities URI itself *will* cause a significant number of false
positives even at scores as low as 2.0.
Not to tout my own horn, but I know of people scanning 2-3 million
messages a day using my WebRedirect plugin to catch Geocities and
similar spam with much success. If you can afford the HTTP queries
against the free web host URIs you might want to consider using it instead.
Daryl
