score BESTLOANS 2
# blarson 2007-07-22 2007-09-12
-body PENPRO /\@(?:penmailpro|OnsetIng|openprotection|NearOut)\.info\b/i
+body PENPRO /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline)\.info\b/i
describe PENPRO penmailpro spam
score PENPRO 3.5
score URIBL_SBL 3.5
# blarson 2007-09-17
-body MYCHEAP /\b(?:my)?cheap(?:oem|soft)(?:now)?\s*\.\s*com\b/i
+body MYCHEAP /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)(?:now)?\s*\.\s*com\b/i
describe MYCHEAP software spam
score MYCHEAP 4
body VIPSMS /\bvipsms\.org\b/i
describe VIPSMS vipsms.org
score VIPSMS 4
+
+# don 2007-10-01
+header MAKEUP subject =~ /makeup\.com/i
+describe MAKEUP makeup.com url
+score MAKEUP 3
+
+# blarson 2007-10-04
+body SUBT /\bsubtracthold\.com\b/i
+describe SUBT subtracthold.com
+score SUBT 4
+
+body GRAPHICMAIL /\bhttp\:\/\/www\.graphicmail\.de\b/i
+describe GRAPHICMAIL graphicmail.de
+score GRAPHICMAIL 4
+
+
+body WWWRO /\b(?:www\.|https?\:.*)\w+\.ro\b/i
+describe WWWRO romanian web site
+score WWWRO 2
+
+# blarson 2007-10-10
+body CLEANDOM /http\:\/\/\{_clean_domains\}/
+describe CLEANDOM broken spamware
+score CLEANDOM 4