new spam getting through

[Jeff Mills]

> 
> I'm finding this rule is working out well on a number of FSL sites:
> 
> uri FSL_URI_REFER_CCBIL  /refer\.ccbill\.com/ describe
> FSL_URI_REFER_CCBIL  Links to refer.ccbill.com score FSL_URI_REFER_CCBIL
> 4.0
> 

Steve,
My logs are mostly either showing ccbill as above, or
/cnbc14snewsnow\.com/

There are a few others, but those two are by far the majority.

Jeff