+
+# don 2008-06-13
+body STUPIDURL /\w+\[\w+\](?:com|net|org)/
+describe STUPIDURL No one will guess that fooo[DOT]com is an URL!
+score STUPIDURL 2.5
+
+# blarson 2008-06-16
+body SUGARCOM /\b(?:indicatesugar|industryexpect|eset)\.com\b/
+describe SUGARCOM indicatesugar.com
+score SUGARCOM 4
+
+# blarson 2008-07-22
+body VIEWMOVIE /\/(?:(?:viewmovie|stream|watchit|topnews|hotnews|fresh|checkit|default|gowatch|showvideo|livestreaming|top|whatsup|tophot|lol|first|index1|1)\.html\b|(?:video|news2\/)\s*$)/
+describe VIEWMOVIE tabiloid style spam
+score VIEWMOVIE 3
+
+# blarson 2008-07-22
+uri OPERAMAIL /\bwww\.opera\.com\/mail\//
+describe OPERAMAIL opera.com mail
+score OPERAMAIL 1
+
+# blarson 2008-08-09
+body NOSITE /http:\/\/\//
+describe NOSITE http URL with no site
+score NOSITE 2
+
+# don 2008-09-04
+uri TIECORRECT /tiecorrect\.com/
+describe TIECORRECT Contains a tiecorrect.com uri
+score TIECORRECT 4
+
+# don 2009-02-04
+body FOURMINUTI /4minuti/
+describe FOURMINUTI Spam from 4 minuti
+score FOURMINUTI 3
+
+# don 2009-02-09
+uri CREDITREPORTURI /creditreport/
+describe CREDITREPORTURI Credit report in the url isn't good
+score CREDITREPORTURI 2
+
+uri YAARIURI /yaari.com/i
+describe YAARIURI Contains a yaari.com uri
+score YAARIURI 3
+
+uri MALADIRET /maladiretaemails/
+describe MALADIRET Contains a maladiret uri
+score MALADIRET 5
+
+uri DEBRICOLAJE /debricolaje/i
+describe DEBRICOLAJE Contains a debricolaje url
+score DEBRICOLAJE 6
+
+# blarson 2009-05-02
+uri ISUISSE /\bisuisse\.com/
+describe ISUISSE isuisse.com
+score ISUISSE 4
+
+# formorer 2010-01-23
+header LEXCHANGE subject =~ /(?:for|4)\s+L[i1]nks?\s+E?xcha?nge/i
+describe LEXCHANGE ask for link exchange
+score LEXCHANGE 4
+
+# don 2010-03-16
+uri EMAILSPARKLE /emailsparkle.com/
+describe EMAILSPARKLE emailsparkle.com uri
+score EMAILSPARKLE 4
+
+# don 2011-10-3
+uri MULTIPLYCOM /multiply.com/
+describge MULTIPLYCOM multiply.com uri
+score MULTIPLYCOM 3