Spam Score GB_OBFU_PHONE

I do something like this:
Code:
# grep -r -e 'describe.*GB_OBFU_PHONE' /usr/share/spamassassin* /var/lib/spamassassin

/var/lib/spamassassin/4.000001/kam_sa-channels_mcgrail_com/KAM.cf:  describe        GB_OBFU_PHONE        Obfuscated phone number
 
These are the two patterns that trigger this rule: (A brief summary for a quicker overview)

Code:
replace_tag     NUM1    (?:\xf0\x9d\x9f\x8f|\xf0\x9d\x9f\xad)
replace_tag     NUM8    (?:\xf0\x9d\x9f\x96)

replace_rules   __GB_OBFU_PHONE
body            __GB_OBFU_PHONE      /(?:\b|\s)(?:\+<NUM1>(?:\s|\-)?\(|\+?(?:<NUM1>)?(?:\(|\-)?(?:<NUM8>)|[.(]\d<O2>\d{1,2}[.)]\s)|contact(?:ing)? us at \d<O2>\d |\+\.1\.\s?\.\(\.\d\.\d\.\d\.\)/
Code:
body          __MXG_PHONE_OBFU  /(?!(1\W*)?\d{3}\W+\d{3}\W+\d{4})\b([1I][^a-zA-Z0-9]*)?[\dOIl]{3}[^a-zA-Z0-9]+[\dOIl]{3}[^a-zA-Z0-9]+[\dOIl]{4}\b/
describe      __MXG_PHONE_OBFU  Has an obfuscated phone number
Code:
meta            GB_OBFU_PHONE        ( __GB_OBFU_PHONE || __MXG_PHONE_OBFU )
describe        GB_OBFU_PHONE        Obfuscated phone number
score           GB_OBFU_PHONE        4.0
 
Last edited:
  • Like
Reactions: keeka