Hi List!
I'm getting hit by a bunch of annoying stock scams which aren't found by
any of my sare lists, they keep on scoring low.
So I decided to write a custom rule, which seem to work pretty well for
my case:
body __HILO_STOCKS1 /(High|Low|Curr[e3]nt|Cur(r|\r.|r[e3]nt|\.)\
Price|Price)[\:\ \t]+\$[\d\ ]+?(.*)(Last|Low|Growth|High|Sale|Price)/i
body __HILO_STOCKS2
/(hotlist|r[e3]cord|publicity|n[e3]ws|invest|incr[e3]as[e3]|[e3]xplosion|pric[e3]|high|pr[e3]mium|mark[e3]t|al[e3]rt|sym[b8]ol)/i
meta HILO_STOCKS ( __HILO_STOCKS1 && __HILO_STOCKS2 )
describe HILO_STOCKS Looks like stocks scam
score HILO_STOCKS 3.5
It's my first meta rule, which only gives a score if both conditions are
true, and I was wondering if there's a possibility to make the score more
"intelligent" :
- if __HILO_STOCKS1 fires up, i would like to give the score maybe 0.5
- if __HILO_STOCKS2 matches as well together with __HILO_STOCKS2, make it
3.5
Any other comments on this rule?
Thanks!
