+# blarson 2008-03-19
+body JANEHOT /\bjane\d[\w\d]*\@hotmail\.com\s*$/
+describe JANEHOT jane*@hotmail.com
+score JANEHOT 3
+
+# blarson 2008-03-20
+rawbody BIFUTRA /\b(?:bifutra|veriapoli|xenifeao|toporaig|jieros|bifreca|werikine|incroomise|genbullenst|writeprovide)(?:\.|\=2E)com\b/
+describe BIFUTRA spammer web sites
+score BIFUTRA 4
+
+# don 2008-04-02
+body LONGLINEURL /^.{55,}\S\shttp:\/\/www\.\w+\.(?:com|net|org)\/\s*$/
+describe LONGLINEURL long line ending in a simple url
+score LONGLINEURL 2
+
+# don 2008-04-07
+uri MYTHANKYOUURI /www\.mythankyou\.com/i
+describe MYTHANKYOUURI www.mythankyou.com
+score MYTHANKYOUURI 5
+
+# don 2008-04-08
+uri BLOGSPOTURI /blogspot\.com/i
+describe BLOGSPOTURI something.blogspot.com
+score BLOGSPOTURI 2.5
+
+# blarson 2008-04-09
+uri SAMEAS /\bsupersameas\.com\b/
+describe SAMEAS supersameas.com
+score SAMEAS 3
+
+# blarson 2008-04-12
+body URIEXE /\bhttp:\S*\.exe\b/
+describe URIEXE .exe url
+score URIEXE 3
+
+# blarson 2008-04-24
+uri SANSATION /\b(?:sansationel|garmenys|iconaliste)\.com\b/i
+describe SANSATION sansationel.com
+score SANSATION 4
+
+# blarson 2008-05-04
+body EQMEDS /\beqmeds\b/i
+describe EQMEDS eqmeds
+score EQMEDS 4