I have had it with spaces live random url spam. we get thousands of
them, most from zombots, and idiots at hotmail want a valid live account
to process the complaint"

"Thank you for reporting spam to the Windows Live Hotmail Support Team. This is an auto-generated response to inform you that we have received your submission. Please note that you will not receive a reply if you respond directly to this message.

Unfortunately, in order to process your request, Hotmail Support needs a valid Windows Live Hotmail hosted account."



this looks for it, assigns some reasonable scores, and if (add your
favorite shortcut) bumps it up another 5.

uri ST_SPACES /\.spaces\.live\.com/$
score ST_SPACES 5 3 4 2

meta ST_SPACES_BUMP (ST_SPACES && (RCVD_IN_BL_SPAMCOP_NET || RCVD_IN_XBL
|| RCVD_IN_BL_SPAMCOP_NET || DCC_CHECK))
tflags ST_SPACES_BUMP net
score ST_SPACES_BUMP 5

--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation


* Certified SNORT Integrator
* King of Spam Filters, SC Magazine 2008
* Information Security Award 2008, Info Security Products Guide
* CRN Magazine Top 40 Emerging Security Vendors

__________________________________________________ _______________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.spammertrap.com
__________________________________________________ _______________________