forked from sublime-security/static-files
-
Notifications
You must be signed in to change notification settings - Fork 0
/
suspicious_subjects_regex.txt
122 lines (122 loc) · 2.41 KB
/
suspicious_subjects_regex.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
termination.*notice
38417
:completed
[il1]{2}mit.*ma[il1]{2} ?bo?x
[il][il][il]egai[ -]
[li][li][li]ega[li] attempt
[ng]-?[io]n .*block
[ng]-?[io]n .*cancel
[ng]-?[io]n .*deactiv
[ng]-?[io]n .*disabl
.wav
action.*required
abandon.*package
about.your.account
acc(ou)?n?t (is )?on ho[li]d
acc(ou)?n?t.*terminat
acc(oun)?t.*[il1]{2}mitation
access.*limitation
account (will be )?block
account.*de-?activat
account.*locked
account.*re-verification
account.*security
account.*suspension
account.has.been
account.has.expired
account.will.be.blocked
account v[il]o[li]at
activity.*acc(oun)?t
almost.full
app[li]e.[il]d
authenticate.*account
been.*suspend
clos.*of.*account.*processed
confirm.your.account
courier.*able
deactivation.*in.*progress
delivery.*attempt.*failed
document.received
documented.*shared.*with.*you
dropbox.*document
e-?ma[il1]+ .{010}suspen
e-?ma[il1]{1} user
e-?ma[il1]{2} acc
e-?ma[il1]{2}.*up.?grade
e.?ma[il1]{2}.*server
e.?ma[il1]{2}.*suspend
email.update
faxed you
fraud(ulent)?.*charge
from.helpdesk
fu[il1]{2}.*ma[il1]+[ -]?box
has.been.*suspended
has.been.limited
have.locked
he[li]p ?desk upgrade
heipdesk
i[il]iega[il]
ii[il]ega[il]
incoming e?mail
incoming.*fax
lock.*security
ma[il1]{1}[ -]?box.*quo
ma[il1]{2}[ -]?box.*fu[il1]
ma[il1]{2}box.*[il1]{2}mit
ma[il1]{2}box stor
mail on.?hold
mail.*box.*migration
mail.*de-?activat
mail.update.required
mails.*pending
messages.*pending
missed.*shipping.*notification
missed.shipment.notification
must.update.your.account
new [sl][io]g?[nig][ -]?in from
new voice ?-?mail
notifications.*pending
office.*3.*6.*5.*suspend
office365
on google docs with you
online doc
password.*compromised
periodic maintenance
potential(ly)? unauthorized
refund not approved
revised.*policy
scam
scanned.?invoice
secured?.update
security breach
securlty
signed.*delivery
status of your .{314}? ?delivery
susp[il1]+c[il1]+ous.*act[il1]+v[il1]+ty
suspicious.*sign.*[io]n
suspicious.activit
temporar(il)?y deactivate
temporar[il1]{2}y disab[li]ed
temporarily.*lock
un-?usua[li].activity
unable.*deliver
unauthorized.*activit
unauthorized.device
undelivered message
unread.*doc
unusual.activity
upgrade.*account
upgrade.notice
urgent message
urgent.verification
v[il1]o[li1]at[il1]on security
va[il1]{1}date.*ma[il1]{2}[ -]?box
verification ?-?require
verification( )?-?need
verify.your?.account
web ?-?ma[il1]{2}
web[ -]?ma[il1]{2}
will.be.suspended
your (customer )?account .as
your.office.365
your.online.access