score BESTLOANS 2
# blarson 2007-07-22 2007-09-12
-body PENPRO /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell)\.info\b/i
+body PENPRO /\@(?:penmailpro|OnsetIng|openprotection|NearOut|SuperOnset|medicalgloveonline|YourOnset|GreatGloveCell|thegloveworks|asiafriendworld)\.info\b/i
describe PENPRO penmailpro spam
score PENPRO 3.5
score URIBL_SBL 3.5
# blarson 2007-09-17
-body MYCHEAP /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)(?:now|ware)?\s*\.\s*com\b/i
+body MYCHEAP /\b(?:my)?cheap(?:xp|adobe)?(?:oem|soft)(?:now|ware)?(?:(?:4|for)?less)?\d*\s*\.\s*com\b/i
describe MYCHEAP software spam
score MYCHEAP 4
describe BLOGSPOT spammers are hosting on blogspot
score BLOGSPOT 2
+# blarson 2007-10-25
+body PILLUS /PILL-US\.COM\b/i
+describe PILLUS PILL-US spam
+score PILLUS 4
+
+# blarson 2007-10-25
+body BETWEENTO /\bhttp\:\/\/betweento\.com\b/i
+describe BETWEENTO betweento.com
+score BETWEENTO 4
+
# don 2007-10-25
-body MASZON /maszon\.com/
+body MASZON /mc?a(szon|yvidol|ttk)\.(com|org|net)/i
describe MASZON pron spam
score MASZON 4
+
+# blarson 2007-10-26
+full GEOCITIES /\bhttp\:\/\/geocities\.com\b/i
+describe GEOCITIES http://geocities.com/
+score GEOCITIES 1
+
+# blarson 2007-10-27
+body GMAIL /\@gmail\.com\b/i
+describe GMAIL @gmail.com
+score GMAIL 1
+
+# blarson 2007-10-28
+body MAILRU /\@mail\.ru\b/i
+describe MAILRU @mail.ru
+score MAILRU 3
+
+# blarson 2007-10-31
+body ADOBE4LESS /\b(?:adobe4less|realnewsoft|newmicrosoftdeals|kvaka-soft)\s*[.,]\s*com\b/i
+describe ADOBE4LESS adobe4less . com
+score ADOBE4LESS 4
+
+# blarson 2007-11-01
+body RMAPPLY /http\:\/\/rmapply\.com\b/i
+describe RMAPPLY http://rmapply.com
+score RMAPPLY 4
+
+# blarson 2007-11-04
+header HANOIFASH subject =~ /WWW\.HANOI-FASHION\.COM/i
+describe HANOIFASH WWW.HANOI-FASHION.COM
+score HANOIFASH 4
+
+# blarson 2007-11-06
+body ONLINEMED /\b(?:onlinemedicalkey|pharm\w*)\.com\b/i
+describe ONLINEMED onlinemedicalkey.com
+score ONLINEMED 4