# This section is undergoing improvements and I'm trying to track down a
# FP case that seems to mostly affect technical emails.
# However, all of the test cases so far fail to match when retested.
# note: The regex /v.i.a.g.r.a/ was intentionaly not used
# due to potential false positive cases with PGP signatures
# and other base-64ish stuff.
# instead other patterns are used catch non alphanumeric gapping patterns
# note: \W = "non word charachter"
# Note: many of the drugs named in here are brand-names and are trademarked.
# All trademarks are property of the respective owners.
#plain Viagra and Cialis (used in obfu detection)
body __DR00GS_MALEDYSFUNCTION_V /\bViagra\b/i
body __DR00GS_MALEDYSFUNCTION_C /\bCialis\b/i
# obfu/plain and mis-spelled Viagra variants
body __DR00GS_MALEDYSFUNCTION1 /(?:\b|\s)[_\W]{0,3}(?:\\\/|V)[_\W]{0,3}[i1|l][_\W]{0,3}[a4@][_\W]{0,3}g[_\W]{0,3}r[_\W]{0,3}[a4@][_\W]{0,3}x?[_\W]{0,3}(?:\b|\s)/i
body __DR00GS_MALEDYSFUNCTION2 /\bV(?:agira|igara|iaggra|iaegra)\b/i
# cialis variants (spelling correct now)
body __DR00GS_MALEDYSFUNCTION3 /(?:\b|\s)[_\W]{0,3}C[_\W]{0,3}[i1|l][_\W]{0,3}[a4@][_\W]{0,3}[|l][_\W]{0,3}[i1|l][_\W]{0,3}s[_\W]{0,3}(?:\b|\s)/i
body __DR00GS_MALEDYSFUNCTION4 /\bC(?:alis|ilias|ilais)\b/i
# generic names
body __DR00GS_MALEDYSFUNCTION5 /\bsildenafil citrate\b/i
#Levitra
body __DR00GS_MALEDYSFUNCTION6 /\bL\W?[e3]\W?(?:\\\/|V)\W?[i1|l]\W?t\W?r\W?[a4@]\W?(?:\b|\s)/i
#tadalfil
body __DR00GS_MALEDYSFUNCTION8 /\bT\W?[a4@]\W?d\W?[a4@]\W?l\W?[a4@]\W?f\W?[i1|l]\W?l\b/i
# gapped/obfu viagra variants using funky html-style charachter codes
