score HANOIFASH 4
# blarson 2007-11-06
-body ONLINEMED /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix)\s*\.\s*com\b/i
+body ONLINEMED /\b(?:onlinemedicalkey|pharm\w*|webvinz|wendebay|webdcd|vowelstep|wclth|duringgear|broadbasic|instantsuffix|magnetdouble|drugsdirecteat)\s*\.\s*com\b/i
describe ONLINEMED onlinemedicalkey.com
score ONLINEMED 4
# blarson (pusling's idea) 2007-11-16
body SPACECOM /^[\w\d]+\s\.\scom\b/
describe SPACECOM whatever . com
-score SPACECOM 2
+score SPACECOM 3
+
+# blarson 2007-11-20
+uridnsbl URIBL_FLO flogoaway.com. A
+body URIBL_FLO eval:check_uridnsbl('URIBL_FLO')
+describe URIBL_FLO web sit in flogoaway.com
+tflags URIBL_FLO net
+score URIBL_FLO 1
+
+# blarson 2007-11-20
+body SOFTROU /\bwww\.softrou\.com\b/i
+describe SOFTROU www.softrou.com
+score SOFTROU 3
+
+# blarson 2007-11-20
+body GOOGLEPAGES /\bgooglepages\.com\b/i
+describe GOOGLEPAGES spammers use googlepages
+score GOOGLEPAGES 2