Skip to content
Docs Platform POC

KAM Rules

Source: docs.titanhq.com Product: SpamTitan Imported content type: docs_page Product stream: legacy

KAM Rules
Section titled “KAM Rules”

  • KAM_MM_FOREX = Polish-language spam from the Forex botnet

  • KAM_PHISH1 = Test for PHISH that changes the cursor

  • KAM_PHISH4 = Another phishing attempt

  • KAM_REAL = Real Estate or Re-Finance Spam

  • KAM_REFI = Real Estate / Re-Finance Spam

  • KAM_REFI2 = Real Estate / Re-Finance Spam

  • KAM_DEBT = Debt eradication spams

  • KAM_DEBT2 = Likely Debt eradication spams

  • KAM_SILD = Simple rule to block one more enhancement message

  • KAM_NUMBER = Silly Number Emails

  • KAM_OVERPAY = Common Medicinal Ad Trick

  • KAM_VIAGRA1 = Common Viagra and Medicinal Table Trick

  • KAM_VIAGRA2 = Common Viagra and Medicinal Table Trick

  • KAM_VIAGRA4 = Common Viagra and Medicinal Table Trick

  • KAM_VIAGRA5 = Viagra Obfuscation Technique SPAM

  • KAM_VIAGRA6 = Viagra Obfuscation Technique SPAM

  • KAM_VIAGRA7 = Viagra Obfuscation Technique SPAM

  • KAM_VIAGRA8 = Viagra Obfuscation Technique SPAM

  • KAM_VIAGRA9 = Viagra Obfuscation Technique SPAM

  • KAM_VIAGRA10 = Male enhancement spam with no content

  • KAM_NITROXIN1 = Another variant of Viagra spam

  • KAM_RE_PLUS = Bad Subject and Image Only rule hit == SPAM!

  • KAM_HOODIA = Hoodia / Weight Loss Product Promotion Spam

  • KAM_STOCKTIP = Email Contains Pump & Dump Stock Tip

  • KAM_STOCKGEN = Email Contains Generic Pump & Dump Stock Tip

  • KAM_STOCK2 = Another Round of Pump & Dump Stock Scams

  • KAM_JUDGE = Email Contains Judicial Judgment Solicitation

  • KAM_MED = Economizing your meds spam

  • KAM_MED2 = More Medical SPAM

  • KAM_TIME = Pssst. Hey Buddy, wanna buy a watch?

  • KAM_TIMEGEO = Email references Geocities & wristwatch sales

  • KAM_HOME = Mortage & Refinance Spam Rule

  • KAM_UNIV = Diploma Mill Rule

  • KAM_URUNIT = Recent penile and body enhancement spams

  • KAM_URZEST = Recent penile and body enhancement spams

  • KAM_JOB = People let go, work at home, earn billions!

  • KAM_PERPARK = Obfuscated address appearing in SPAM Feb 06

  • KAM_HOLLY = Obfuscated address appearing in SPAM Jun 06

  • KAM_STOCKG = Graphical Pump and Dump Scams

  • KAM_CEP = CEP Diploma Mill Rule

  • KAM_BLANK01 = Blank emails

  • KAM_BLANK02 = Blank emails with MTA Headers

  • KAM_GEO_STRING2 = Use of GeoCities/Yahoo very likely spam as of Dec 2005

  • KAM_GOOGLE_STRING = Use of Google redir appearing in spam July 2006

  • KAM_MSNBR_REDIR = Use of MSN Brasil Redirector for Spam seen in 2011

  • KAM_MSN_STRING = spaces.msn.com likely spam (Mar 2006) + spaces.live.com (Mar 2010)

  • KAM_LIVE = blogspot.com & livejournal.com likely spam (Apr 2010)

  • KAM_PAGE = Page.TL likely spam (Nov 2011)

  • KAM_URIPARSE = Attempted use of URI bug-high probability of fraud

  • KAM_COMBO_BADAOL = Invalid AOL Email Address-High probability of spam

  • KAM_ADV_EMAIL = Marks adv@$lt; domain.com$gt; Addresses as likely SPAM

  • KAM_SEX_EXPLICIT = Subject or body indicates Sexually Explicit material

  • KAM_SEX_AFFAIR = Subject or body soliciting an affair

  • KAM_TELEWORK = Stupid telework and training scams

  • T_KAM_HTML_FONT_INVALID = Test for Invalidly Named or Formatted Colors in HTML

  • KAM_LOCAL_TEST1 = This is a unique phrase to trigger a + score

  • KAM_RPTR_FAILED = Failed Mail Relay Reverse DNS Test

  • KAM_RPTR_SUSPECT = Suspected Dynamic IP/Bad TLD/Spammy TLD from Mail Relay Reverse DNS Test

  • KAM_RPTR_PASSED = Passed Mail Relay Reverse DNS Test

  • KAM_RPTR_MISSING = Mail Relay Reverse DNS Entry Missing!

  • KAM_RPTR_BADHOST = Very Spammy Hosting Company Identified

  • KAM_INVALID_FROM = From header missing host portion

  • KAM_RAPTOR = PCCC Raptor altered the email

  • KAM_RPTR_MISSING = Mail Relay Reverse DNS Entry Missing!

  • KAM_RPTR_MISSING = Mail Relay Reverse DNS Entry Missing!

  • KAM_RPTR_MISSING = Mail Relay Reverse DNS Entry Missing!

  • KAM_BADATTACH = Mail contains a bad attachment

  • KAM_6C822ECF = $6c822ecf@ VERY prevalent message-ID header in SPAMs

  • KAM_MUSTREAD = Subject indicative of a SPAM message

  • KAM_DRILL = Oil Drilling SPAM

  • KAM_IFRAME = Email contained Iframe, Object, or Script tags

  • KAM_IFRAME2 = Email contains phrase instructing javascript use

  • KAM_IFRAME3 = Likely email exploit - Email shouldn’t require javascript in an email attachment

  • KAM_XEROX = Likely Fake Xerox Attachment

  • KAM_STAR = Stupid Obfuscated Link SPAMs

  • KAM_SPAMKING = SPAM using throw-away domains and addresses. SpamKing’s Heir!

  • KAM_COMBOJDR = Spam Test for Rules Combined with KAM_SPAMJDR

  • KAM_LOTTO1 = Likely to be an e-Lotto Scam Email

  • KAM_LOTTO2 = Highly Likely to be an e-Lotto Scam Email

  • KAM_LOTTO3 = Almost certain to be an e-Lotto Scam Email

  • KAM_ABOUT = Email Scam Hawking Anti-Spyware

  • KAM_ADVERT = Mailing List Scammers Hawking Their Lists / Services

  • KAM_ADVERT3 = Traffic / Expiring Domain List Spam

  • KAM_ADVERT2 = This is probably an unwanted commercial email…

  • KAM_1LINE = One liner SPAMs

  • KAM_CANSPAM = SPAM = Lack of Consent (not a Legal Definition)

  • KAM_GIFT = Gift Card Scams

  • KAM_GIFT2 = Gift Card Scams

  • KAM_SHOP = Mystery Shopper Scams

  • KAM_FAST = Get Rich Quick, Make Money Fast Schemes

  • KAM_BIZ = Free Business Card Emails

  • KAM_FDA = Carries a not evaluated by the FDA warning or recall warning

  • KAM_ANA = Likely Weight-loss / Medical Spam

  • KAM_ANA2 = Higher probability of Weight-loss / Medical Spam

  • KAM_REPLACE = Spams that use obfuscated URLs with instructions

  • KAM_NIGERIAN = Nigerian Scam and Variants

  • KAM_LIKE = I like your website link exchange spam

  • KAM_PUBLIC = Obtained from Public List != to Consent == SPAM!

  • KAM_SEX = Sexually Explicit SPAM / Penis Enlargement Scam

  • KAM_PIC = Share Pictures and Chat SPAM

  • KAM_LIST = Mailing List Database SPAM

  • KAM_DRUG = More Viagra, Medicine, et al Scams

  • KAM_BADIPHTTP = Due to the Storm Bot Network, IPs in emails is bad

  • KAM_HIDDEN_URI = URI obfuscation techniques

  • KAM_INFOUSMEBIZ = Prevalent use of .info|.us|.me|.me.uk|.biz domains in spam/malware

  • KAM_OTHER_BAD_TLD = Other untrustworthy TLDs

  • KAM_CARD = Trojan or Virus Payload from fake ecard notice

  • KAM_INSURE = Life, Health, Auto, etc. Insurance SPAMs

  • KAM_INSURE2 = Higher Probability of Life, Health, Auto, etc. Insurance SPAMs

  • KAM_HEALTH = Health/Life Insurance Spam Emails

  • KAM_HEALTH2 = Health Insurance Spam Emails

  • KAM_HEALTH3 = Term Life Insurance Spam

  • KAM_REAL2 = Real-estate investment scams

  • KAM_BADPDF = Prevalent Junk PDF SPAMs - BAD SUBJECT

  • KAM_BADPDF1 = Prevalent Junk PDF SPAMs - EMPTY BODY & ENCRYPTED

  • KAM_BADPDF2 = Prevalent Junk PDF SPAMs - 3 STRIKES

  • KAM_FAKEPDF = Fake PDF Reader / Writer

  • KAM_PHISH2 = Prevalent Phishing Scam emails

  • KAM_HEX = Crazy Empty Hex Messages

  • KAM_THEBAT = Abused X-Mailer Header for The Bat! MUA

  • KAM_MAILER = Automated Mailer Tag Left in Email

  • KAM_CHECK = Another Nigerian Bank Draft Scam

  • KAM_BODY = Odd Erectile Dysfunction Messages with Poor Formatting

  • KAM_TV = Free TV/Cable/etc. Scams

  • KAM_TV2 = Higher probability of Free TV/Cable/etc. Spams

  • KAM_CAREER = Spam for Career/Diploma Mills

  • KAM_NURSE = Spam for Career/Diploma Mills

  • KAM_PILLS = Spam for scam pharmacy

  • KAM_PILLS2 = Male enhancement spams

  • KAM_ALT = Requests use of an alternate email which may indicate spam

  • KAM_POLITICS = Unsolicited Political E-Mails

  • KAM_COMPANY1 = Egregious spammers that should also be on RBLs (and might be)

  • KAM_COMPANY2 = Egregious spammers that should also be on RBLs (and might be)

  • KAM_VERY_BLACK_DBL = Email that hits both URIBL Black and Spamhaus DBL

  • KAM_MX2 = Spammers and MX Rule

  • KAM_MX3 = Odd prevalence of MX records for non-identified Spammers

  • KAM_MX4 = MX Record and dot info domains associated with FAKERBL Spammers

  • KAM_ADDRESS = Addresses and Companies prevalent in spams

  • KAM_GRASS = Spammers hawking lawn products

  • KAM_SKIN = Spammers hawking skin/medical/foot products

  • KAM_SKIN2 = Spammers hawking skin/medical/foot products

  • KAM_CAR = Spammers hawking new car, insurance or warranties

  • KAM_AUTO = Spam for new cars

  • KAM_WARRANTY = Spammers hawking home warranties

  • KAM_WARRANTY2 = Spammers pushing home warranties

  • KAM_WARRANTY3 = Spammers hawking home warranties

  • KAM_AUGER = Spammers hawking Awesome Augers?!?

  • KAM_MOVIE = Spammers hawking Movie Extra positions

  • KAM_COLLECT = Spammers hawking debt collection

  • KAM_SEARCH = Spammers hawking SEO

  • KAM_SEO = Spammers hawking SEO

  • KAM_LINGERIE = Sexually Explicit Lingerie Spam

  • KAM_WEB = Web design spams

  • KAM_DOMAIN = Domain Selling Spams

  • KAM_MEDTOUR = Medical Tourism Spam

  • KAM_ACNE = Spammers hawking Acne products

  • KAM_SOFTWARE = Spammers hawking Software products

  • KAM_NIGERIAN2 = Yet more Nigerian scams. Some even explaining the scam.

  • KAM_MEDICAL = Misc medical spam

  • KAM_TINNI = Another Medical Scam

  • KAM_GIVE = Free stuff “giveaway” scam

  • KAM_GOVT = Your tax dollars at work scam…

  • KAM_RBL = Higher scores for hitting multiple trusted RBLs

  • KAM_CNN = CNN Daily Top 10 Link Obfuscation spams

  • KAM_SHAM = More product scams…

  • KAM_SANTA = Ho Ho Holy smokes Batman another Santa Letter spam…

  • KAM_GOOGLE = Google Pyramid Scams

  • KAM_ALARM = Security and Alarm Company Spams

  • KAM_ALARM2 = High Probability of Security and Alarm Company Spams

  • KAM_SELL = Selling Cards Marketing Scams

  • KAM_WHITEN = Teeth Whitening Scams

  • KAM_URONLINE = Chat Scams

  • KAM_TIMESHARE = Timeshare Scams

  • KAM_AQUA = Spams of yet another product du jour

  • KAM_GEVALIA = Spams of yet another product du jour

  • KAM_INK = Spams of yet another product du jour

  • KAM_INK2 = Spams for Ink refills

  • KAM_PEEL = Spams of yet another product du jour

  • KAM_RAT1 = Variable Replacements Indicative of RatWare/Mass Mailing

  • KAM_RAT2 = Another ratware mistake, uninterpolated text

  • KAM_EGG = Spams of yet another product du jour

  • KAM_USB = USB Promotion Spammer

  • KAM_GRANT = Government Grant Scams

  • KAM_SEX04 = Sexually Explicit SPAM

  • KAM_SEX04_2 = Likely Sexually Explicit SPAM

  • KAM_SEX05 = Sexually Explicit SPAM

  • KAM_FOOTBALL = Spammy Football Club

  • KAM_DISH = Dish Network Spams

  • KAM_DISH2 = Dish Network Spams

  • KAM_IDENTNET = Identity Network Spams

  • KAM_DUCHESS = Spammer sending emails using a variety of domains and linked images

  • KAM_UPS = UPS doesn’t send invoices with delivery problem notes

  • KAM_SKYPE = Skype/VoIP scams likely to spread malware

  • KAM_OWAPHISH1 = Rash of OWA setting change emails for phishing

  • KAM_DRUG2 = More online Drug Scams

  • KAM_DRUG2_2 = Higher Certainty of Drug Scam

  • KAM_SEXSUBJECT = Sexually Explicit Subject

  • KAM_WIFE = Mail order bride scams

  • KAM_PRODUCT = Product scams often used with MSN/Live URIs

  • KAM_LIVEURI2 = More online Scams + Known URI

  • KAM_WEBS = webs.com links used in Spams

  • KAM_BADSWF = SWF embedded links in Email Scams

  • KAM_EXEURI = EXE embedded link

  • KAM_SETTING = Phishing scams w/Setting Files or Webmail

  • KAM_SETTING2 = Phishing scams w/Setting Files or Webmail + Bad File link

  • KAM_FARM = Farming related Spams

  • KAM_MXURI = URI begins with a mail exchange prefix, for example, MX.[…]

  • KAM_FLASH = Fake Flash Player Phishing Scam

  • KAM_ADWORD = Fake Adword Campaign notices

  • KAM_DON = Work at Home Scams

  • KAM_DON2 = Egregious Work at Home Scams

  • KAM_GINA = Employment Poster Marketing Spams

  • KAM_TAX = Tax Filing Scams

  • KAM_TAX2 = Higher Probability of Tax Filing Scams

  • KAM_SEX06 = Sexual Stimulant Spam

  • KAM_BARK = Dog Product Scam

  • KAM_CASINO = Online Casino Spam

  • KAM_TWIT = Twitter bogus phishing emails

  • KAM_FACE = Facebook bogus phishing emails

  • KAM_PHISH3 = Phishing emails for account notification

  • KAM_DIRECT = DirectBuy Spam

  • KAM_SWIPE = SwipeBid Spam / Penny Auction Spams

  • KAM_SWIPE2 = SwipeBid Spam / Penny Auction Spams

  • KAM_WTA = Ridiculous campaign by unapologetic spammers purposefully using throwaway domains

  • KAM_SMOKE = Smokeless cigarette and quitting spam

  • KAM_SMOKE2 = Higher probability of spam

  • KAM_OBFURL = Obfuscated URL

  • KAM_SHARP = Ceramic Blade Spam

  • KAM_HIP = Hip Replacement Recall Spam

  • KAM_WORKHOME = Work at Home Spam

  • KAM_WORKHOME2 = Work at Home Spam

  • KAM_HSR = High-Speed Rail Spam

  • KAM_SELLPHONE = Used Equipment Spam

  • KAM_MAILBOX = Mailbox Quota Phishing Scams

  • KAM_POWER = Motorized Chair Spams

  • KAM_GUN = Gun Alert Spams

  • KAM_RICH = Get Rich Quick Schemes

  • KAM_INVFROM = Invalid From Header containing mismatched $lt;$gt;‘s

  • KAM_UAH_YAHOOGROUP_SENDER = Sender appears to be a legit Yahoo! Group Mail

  • KAM_GALLERY = Exploited Gallery with Porn

  • KAM_GALLERY2 = Higher Likelihood of Exploited Gallery with Porn

  • KAM_CHANGELOG = Phishing Email

  • KAM_BUS = Yet another Nigerian Scam/Phishing Variant

  • KAM_PRIV = Private Messages using Exploits in attached HTML files

  • KAM_DIV = Use of divs to hide Medical Spams

  • KAM_CREDIT = Credit Score Spams

  • KAM_CREDIT2 = Credit Score Spams

  • KAM_OBFURI = Obfuscated URI trick

  • KAM_ADVANCE = Advance Spams

  • KAM_PAYPAL1 = rampant paypal phishing scams

  • KAM_PAYPAL2 = Malware disguised as a PayPal email

  • KAM_PAYPAL3 = Phish disguised as a PayPal email

  • KAM_COMPROMISED = Compromised Accounts Sending Spam

  • KAM_LIST2 = Known Bad Groups

  • KAM_QUOTA = Limited Access / Quota Phishing Scam

  • KAM_BACK = Background Check SPAM

  • KAM_ARREST = Arrest Record Scams

  • KAM_DIET2 = Diet Scams

  • KAM_CIGAR = Cigar Scam Emails

  • KAM_TK = Abuse of .tk domain registrar which offers free domains

  • KAM_LASIK = Lasik Treatment Spams

  • KAM_NOTIFY = Fake Notifications

  • KAM_NOTIFY2 = Higher likelihood of fake notification

  • KAM_LANG = Language Method Spams

  • KAM_TRACK = Fake Tracking Emails

  • KAM_SCHOOL = School Spams

  • KAM_MEMBER = Dating Scams

  • KAM_MEDICARE = Medicare Scams

  • KAM_BILLS = Bill Pay Spams

  • KAM_HOSE = Garden Hose Spams

  • KAM_AV = Anti-Virus Spams

  • KAM_MASCARA = Make-up Spams

  • KAM_COLLEGE = Online Degree/Aid Spams

  • KAM_SURVEY = Online Survey Spams

  • KAM_SNORE = Snoring Aid Spams

  • KAM_VACATION = Vacation Spams

  • KAM_BLOOD = Blood Pressure Spams

  • KAM_SCOOTER = Blood Pressure Spams

  • KAM_ANATA = Drug Spam

  • KAM_BBB = Better Business Bureau Phishing

  • KAM_MARK = Email arrived marked as Spam

  • KAM_H1QNUM = H1 Qnum indicator

  • KAM_H1QNUM2 = H1 Qnum higher spamminess indicators

  • KAM_AP = American Publishing Spam

  • KAM_COUK = Scoring .co.uk emails higher due to poor registry security.

  • KAM_FACEBOOKMAIL = Fake or Abused Facebook Mail

  • KAM_FAKE_DELIVER = Fake delivery notifications

  • KAM_REALLY_FAKE_DELIVER = Definitely fake delivery notifications

  • KAM_SOLAR = Solar Power Spams

  • KAM_SOLAR2 = Definite Solar Power Spams

  • KAM_ASIAN = Asian Bride Spams

  • KAM_STUDENT = Student Loan Forgiveness Spams

  • KAM_TIP = Beauty Tip Spams

  • KAM_WHATS = WhatsApp Spams

  • KAM_QTJARS = QTJars Spams

  • KAM_GOOGLEPHISH = Google Login Phishing Scam

  • KAM_POLY = Political Spams

  • KAM_MAID = Maid Service Spams

  • KAM_TUB = Tub Spams

  • KAM_OBF = Obfuscated Porn Spams

  • KAM_OBF = Obfuscated Porn Spams

  • KAM_HAIR = Hair Loss / Removal Spams

  • KAM_UNSUB = Completely ridiculous unsubscribe text found

  • KAM_EMAILPHISH = Email Phishing Scams

  • KAM_MASSERROR = Error in usage of a mass mailing software

  • KAM_CARDEAL = Car Deal Spams

  • KAM_HOMESALE = Home Sale Spams

  • KAM_LOAN = Payday and other loan spams

  • KAM_HANGOVER = Hangover Patch Spams

  • KAM_RXPLAN = Rx Plan Spams

  • KAM_SOCKET = Product Spam du Jour

  • KAM_TESTOSTERONE = Product Spam du Jour

  • KAM_FLEXHOSE = Product Spam du Jour

  • KAM_PET = Insurance and other pet-related spam

  • KAM_PET2 = Even more likely insurance and other pet-related spam

  • KAM_COBRA = Cobra Insurance Spam

  • KAM_DISCAIR = Discount Airfare Spam

  • KAM_PEST = Spam for Pest Control

  • KAM_PROPHET = Spam for Prophecy

  • KAM_HEART = Spam for Heart Attack prevention

  • KAM_JOINT = Joint relief Spam

  • KAM_REHAB = Rehab Spam

  • KAM_HAIRTRANS = Spam for Hair Restoration

  • KAM_HAIRTRANS2 = Higher probability of spam for Hair Restoration

  • KAM_GIFTCERT = Gift Certificate Spams

  • KAM_TIRES = Spam for Tires

  • KAM_SLICEOMATIC = Spam for Kitchen Tools

  • KAM_WINDOWS = Spam for House Windows

  • KAM_EMMAPP_WEB_COM = Spam from emmapp.web.com

  • KAM_NEW_CREDITCARD = Spam for new credit cards

  • KAM_GERMAN_BUSINESS_CONTACTS = Weird German business contact info spam

  • KAM_SENIOR_DATING = Senior dating spam

  • KAM_NEWS = Forged Emails with NEWS!

  • KAM_CHOSEN = Spam claiming the recipient has been chosen for something

  • KAM_JURY = Spam claiming the recipient must serve jury duty

  • KAM_BITCOIN = Spam related to investing in Bitcoin and other cryptocurrencies

  • KAM_RELIGION = Generic religious spam

  • KAM_BUSINESSPHONE = Advertising for business phone systems

  • KAM_NUMEROLOGY = Pseudo-scientific spam

  • KAM_VOICEMAIL = Common malware that tricks the user into opening a fake VOIP voicemail

  • KAM_SPAMFORSPAM = Spam advertising spam services

  • KAM_NEUROLOGICAL = Variant of medical spam targeting neurological ailments

  • KAM_LOTSOFHASH = Emails with lots of hash-like gibberish

  • KAM_GRABBAG1 = A combination of tricks that when combined indicate spam

  • KAM_TVDOCTOR = Spam for TV doctor stuff

  • KAM_DENTIST = Spam for 1-800-DENTIST

  • KAM_JEWELRY = Spam for Gold and Diamond Jewelry

  • KAM_MARIJUANA = Spam pertaining to marijuana

  • KAM_MARIJUANA2 = Definitely spam for marijuana

  • KAM_EVICTION = Malware disguised as an eviction notice

  • KAM_WALKINTUB = Ads for walk-in tubs

  • KAM_EMAILQUESTION = Subjects beginning with an email address and followed by a spammy subject

  • KAM_SUPERHUMAN = Male enhancement of the day

  • KAM_VALENTINE = Spam for valentine gifts and other holiday stuff

  • KAM_MOTHER = Spam for mother’s day

  • KAM_WHOSWHO = Ads for a network of important people

  • KAM_WHOSWHO2 = Definitely ads for a network of important people

  • KAM_GARAGE = Garage floor coating product of the day

  • KAM_GARAGE2 = More likely garage floor coating spam

  • KAM_PAINT = Paint Spams

  • KAM_MOP = Hurricane mop product of the day

  • KAM_DATINGTIPS = Tips for dating

  • KAM_CANDY = Ads for candy

  • KAM_WEIRDTRICK1 = Huge family of spam that uses the word weird to grab attention

  • KAM_WEIRDTRICK2 = Huge family of spam that uses the word weird to grab attention

  • KAM_WEIRDTRICK3 = Weird/Strange Trick

  • KAM_MATCH = Match Maker Spams

  • KAM_CARINSURE = Car Insurance Spams

  • KAM_MMS = Fake MMS Spam

  • KAM_LEARN = Learn More Spam

  • KAM_UNSUB1 = Unsubscription Spams

  • KAM_UNSUB2 = Improperly configured spam engines that leave placeholder domains in the body

  • KAM_DUTCHGLOW = Woodworking spam

  • KAM_FUNERAL = Likely Fake funeral notices

  • KAM_FUNERAL2 = Fake funeral notices

  • KAM_WEB_OBFUSCATION = Obfuscated web view links

  • KAM_TUPPERWARE = Ads for tupperware

  • KAM_PATRIOT = conspiracy spam

  • KAM_PATRIOT2 = Likely conspiracy spam

  • KAM_PAYMENT_LOWERED = Spam that says your insurance payment has already been lowered

  • KAM_PAYMENT_LOWERED = Higher probability of lowered payment spam

  • KAM_NEWNOTICE = New Notice Spam

  • KAM_NEWNOTICE2 = Higher Probability of New Notice Spam

  • KAM_REFINEW = New Refi/Credit Notice spam

  • KAM_REFINEW2 = Higher Probability Refi Spam

  • KAM_AUTONEW = New Auto insurance spam

  • KAM_AUTONEW2 = Higher Probability Insurance Spam

  • KAM_STATLER = Mike Statler Spams

  • KAM_WRITING = Spam for writing lessons

  • KAM_EU = Prevalent use of .eu in spam/malware

  • KAM_GRABBAG2 = Grabbag of Spams hitting EU domains and other indicators

  • KAM_DIABETES = End Diabetes Spam

  • KAM_SPY = Spy cameras and similar products

  • KAM_HARP = HARP Refinance Spams

  • KAM_LUNAR = Sleeping aid spam

  • KAM_LUNAR2 = Definitely sleeping aid spam

  • KAM_OCEANSBOUNTY = More medical spam

  • KAM_ANDROGEL = More medical spam

  • KAM_CELL = Ads for cell phones

  • KAM_FOUNTAINOFYOUTH = Anti-aging ad

  • KAM_HERPES = Ads for herpes medication

  • KAM_FAKEVOUCHER = Fake voucher/reward email

  • KAM_ATTORNEY = Ads for legal services

  • KAM_RECALL = Spam for product recall notices

  • KAM_HUGEIMGSRC = Message contains many image tags with huge HTTP URLs

  • KAM_REALLYHUGEIMGSRC = Spam with image tags with ridiculously huge HTTP URLs

  • KAM_TRACKIMAGE = Message has a remote image explicitly meant for tracking

  • KAM_GRABBAG3 = Grab bag of spam that employs multiple tricks that indicate tracking of recipients

  • KAM_EMPTYLINK = Many empty a tags with href all in a row

  • KAM_INVESTCOUNTRY = Spam for investing in your country

  • KAM_FLAG = Spam that sells flags

  • KAM_GRABBAG4 = Another spam engine that displays unique quirks

  • KAM_KORS = Spam for Michael Kors

  • KAM_HOLIDAY = Generic holiday deals

  • KAM_MANYTO = Email has more than one To Header

  • KAM_GRABBAG5 = Forged Yahoo emails that are sent to lots of recipients

  • KAM_MILLIONAIRE = Internet millionaire guarantees money

  • KAM_OILCHANGE = Spam for oil changes

  • KAM_ADHD = Spam for ADD and ADHD treatment

  • KAM_REPAIR1 = Spam for auto repair services

  • KAM_REPAIR2 = Spam for home repair services

  • KAM_CLOUD = Spam for cloud services

  • KAM_PAPERLESS = Paperless spam for the paperless office

  • KAM_PASSWORD = Message tries to phish for password

  • KAM_WEBINAR = Spam for webinars

  • KAM_WEBINAR2 = Spam for webinars

  • KAM_CONTACTME = Spam that wants you to reply

  • KAM_MESH = Spam for surgical mesh

  • KAM_ALERT = Spam for medical alerts

  • KAM_SECURITY = Spam related to online security

  • KAM_JESUS = Christian spam

  • KAM_CLAIMS = Spam for claims processing

  • KAM_VISION = Spam for vision improvement

  • KAM_TRUTHINESS = Spam that wants you to learn “The TRUTH”

  • KAM_KITCHEN = Spam for kitchen improvement

  • KAM_GENERICHEALTH = Matches generic health-related advert/blurbs

  • KAM_SALE = Spam for things on sale

  • KAM_SALEA = A very persistent iPad spam campaign

  • KAM_ASCII_DIVIDERS = Spam that uses ASCII formatting tricks

  • KAM_HTMLNOISE = Spam containing useless HTML padding

  • KAM_CHICKEN = Spam for chicken coops

  • KAM_LINEPADDING = Spam that tries to get past blank line filters

  • KAM_DRAPES = Spam for drapes

  • KAM_NUWAVE = Spam for cooking tools

  • KAM_MANYCOMMENTS = Spam engine that uses large HTML noise comments

  • KAM_HIRE = Spam for hiring services

  • KAM_DEALS = Generic advertising for deals

  • KAM_CONTRACT = Spam that will buy your service contract

  • KAM_TOLL = Spam for road tolls

  • KAM_AMAZON = Fake Amazon email with malware

  • KAM_LANDSCAPING = Spam for landscaping

  • KAM_SINGING = Spam for singing lessons

  • KAM_ADVERTISE = Spam that wants you to advertise for them

  • KAM_LAZY_DOMAIN_SECURITY = Sending domain does not have any anti-forgery methods

  • KAM_FORGED_ATTACHED = Forged email with a malware attachment

  • KAM_MANYDOTS = Spam with lots of periods in subject

  • KAM_SUBJECTNOTICE = Spam notices

  • KAM_BACKUP = Spam for backup services

  • KAM_FROMNUM = Spam with large numbers in the from header

  • KAM_LINKBAIT = Short messages containing little more than a link, from a domain with no security in place

  • KAM_LINKBAIT2 = Linkbait that points to WordPress - usually means a compromised site

  • KAM_LINKBAIT3 = Freemail linkbait with a url shortener

  • KAM_PHISHY_DOLLARS = Emails with malware and large dollar amounts

  • KAM_GRABBAG6 = Ratware with multiple from headers and subject beginning with whitespace

  • KAM_GENERICHELLO = Spam with generic greetings in the subject

  • KAM_GOOGLE2 = Fake Google spam

  • KAM_NIGERIAN2 = Nigerian scam variant

  • KAM_FINGERHUT = Spam for fingerhut

  • KAM_FRIEND = Friend request spam

  • KAM_VERY_MALWARE = A message with malware that is definitely unwanted

  • KAM_MERCHANT = Spam for merchant processing

  • KAM_ZERODAY2 = Another obvious zero-day malware

  • KAM_ZERODAY3 = Another obvious zero-day malware

  • KAM_ANCESTOR = Spam for family trees

  • KAM_REMEMBERWHEN = Reminder of something that never happened

  • KAM_NOISE1 = Pattern of noise words at the end of an email

  • KAM_PIZZA = Spam for free pizza

  • KAM_ENGINEER = Spam for engineering contact information

  • KAM_SUNGLASSES = Spam for sunglasses

  • KAM_INVOICE = Spam for invoices

  • KAM_GRIPPY = Spam for sticky grip products

  • KAM_ACCOUNTPHISH = Spam that tries to get account information

  • KAM_PROPERTY = Spam for buying property

  • KAM_FAKEAMEX = A rash of spam that is phishing for American Express information

  • KAM_HUGESUBJECT = Email with a subject longer than any mail client would let you enter

  • KAM_HOOKUP = Spam for Local Hookup Service

  • KAM_PSYCHIC = Current Psychic Product Spam du Jour

  • KAM_BADUNSUB = Bad Unsubscribe Messages

  • KAM_GRABBAG7 = Spam pattern with bad HTML message

  • KAM_TINYURL = Spammy URLs that hide behind a link shortener

  • KAM_DROPBOX = Fake Dropbox emails

  • KAM_YAHOO_MISTAKE = Reversing score for some idiotic Yahoo received headers

  • KAM_GRABBAG9 = Garbage email from a garbage freemail account

  • KAM_AQUARUG = Spam for aqua rug product

  • KAM_ITC = Fake email from International Trade Council

  • KAM_SEENTHIS = Have you seen this spam?

  • KAM_DETOX = Spam for trendy detox stuff

  • KAM_DEATHINSURE = Spam for death insurance

  • KAM_REACHBASE = Marketing email pretending to be business info

  • KAM_DIGITALWALLET = Spam for digital wallet services

  • KAM_BADPHP = Questionable PHP mailer headers

  • KAM_TINNITUS = Tinnitus spam

  • KAM_KIWIBANK = Account phish for Kiwibank

  • KAM_HAPPYTALK = Weirdly happy spam

  • KAM_SETTLEMENT = Spam offering lawsuit settlement

  • KAM_CAD = Spam for CAD services

  • KAM_VBMACRO = Message contains an attachment with VB macro

  • KAM_DYNIP = Message contains Dynamic IP Address Indicator

  • KAM_REVIEW = Spam for review sites

  • KAM_TOURS = Spam for tours and events

  • KAM_NOMORE = Another predictable spam engine

  • KAM_NOCONFIDENCE = Confidential information sent with no security

  • KAM_ASSASSIN = Assassination spam

  • KAM_DRIVE = Spam for ordering office equipment

  • KAM_BAD_DNSWL = Removing HostKarma and DNSWL HI Scoring for Emails in various RBL

  • KAM_BAD_REVIEW = Online reputation spammers

  • KAM_GOOGLE_AWARD = Fake Google Awards

  • KAM_OBFU_LOANS = Obfuscated Loan Verbiage

  • KAM_WORKFROMHOME = Work from Home Spams

  • KAM_STUDENTLOAN = Student Loan Scam

  • KAM_LED = Solar LED Lighting Spams

  • KAM_ORDER = Fraudulent Order Emails

  • KAM_SHOCK = Spams with energy drinks

  • KAM_BEAUTY = Youth and Beauty Product Scams

  • KAM_WEED = Legal Weed and related investment scams

  • KAM_LOGO = Logo Spam

  • KAM_TRUMPCOIN = Trump Coin Spam

  • KAM_WATER = Water Poison Scam

  • KAM_RUIN = Bank Phishing Scam

  • KAM_WEIGHT2 = Weight loss process du jour

  • KAM_LENS = Amazing Lens Scam

  • KAM_HONOR = Professional Network Scam

  • KAM_BAD_UTF8 = Bad Content-Type and Transfer-Encoding that attempts to evade SpamTitan scanning

  • KAM_DEATH = Supplement Scam

  • KAM_REWARD = Coupon Scam

  • KAM_PACKAGE = Sexual Enhancement Scam

  • KAM_NUMSUBJECT = Subject ends in numbers

  • KAM_MGCS = Boundary Content Indicative of ratware

  • KAM_NW = Spam Indicator