header TWITTER subject =~ /you on Twitter/
describe TWITTER Twitter invite spam
score TWITTER 4
+
+# don 2008-12-18
+uri DOS_LIVE_SPACES_CID /^http:\/\/cid-.{10,20}\.spaces\.live\.com\/$/
+describe DOS_LIVE_SPACES_CID live spaces uri
+score DOS_LIVE_SPACES_CID 3
+