score SUGARCOM 4
# blarson 2008-07-22
-body VIEWMOVIE /\b(?:viewmovie|stream|watchit|topnews|hotnews|fresh|checkit|default)\.html\b/
+body VIEWMOVIE /\/(?:(?:viewmovie|stream|watchit|topnews|hotnews|fresh|checkit|default|gowatch|showvideo|livestreaming|top|whatsup|tophot|lol|first|index1|1)\.html\b|(?:video|news2\/)\s*$)/
describe VIEWMOVIE tabiloid style spam
score VIEWMOVIE 3
uri OPERAMAIL /\bwww\.opera\.com\/mail\//
describe OPERAMAIL opera.com mail
score OPERAMAIL 1
+
+# blarson 2008-08-09
+body NOSITE /http:\/\/\//
+describe NOSITE http URL with no site
+score NOSITE 2
+
+# don 2008-09-04
+uri TIECORRECT /tiecorrect\.com/
+describe TIECORRECT Contains a tiecorrect.com uri
+score TIECORRECT 4