Hi, this list has served me well so far:
HELO 8 CONTAINS $domain REVDNS 8 ENDSWITH .a83c9d.net REVDNS 8 ENDSWITH .are.net REVDNS 8 ENDSWITH .azogle.com REVDNS 8 ENDSWITH .bestpost.net REVDNS 8 ENDSWITH .bigtimevalues.com REVDNS 20 IS casinoandcash.com REVDNS 8 ENDSWITH .consumerinfo.com REVDNS 8 ENDSWITH .DailyInBox.com REVDNS 8 ENDSWITH .dartmail.net REVDNS 8 ENDSWITH .dealcop.com REVDNS 8 ENDSWITH .deliverenetworks.com REVDNS 6 ENDSWITH .dsl-verizon.net REVDNS 8 ENDSWITH .easymailers.net REVDNS 8 ENDSWITH .email-specials.net REVDNS 8 ENDSWITH .emailcourrier.com REVDNS 8 CONTAINS .emailoffers REVDNS 8 ENDSWITH .emailsvc.net REVDNS 8 ENDSWITH .emipsusa.com REVDNS 8 ENDSWITH .etransmail5.com REVDNS 8 ENDSWITH .evaluemail.com REVDNS 8 ENDSWITH .greatofferstoday.com REVDNS 8 ENDSWITH .hispeedmediaoffers.com REVDNS 8 ENDSWITH .hot-info.net REVDNS 8 ENDSWITH .IConNet.net REVDNS 8 ENDSWITH .ioffersdirect.com REVDNS 8 ENDSWITH .mail-gw.net REVDNS 8 ENDSWITH .mailmalls.net REVDNS 8 IS mediaprint.lt REVDNS 8 ENDSWITH .my-specials.com REVDNS 8 ENDSWITH .obdirectmail.com REVDNS 8 ENDSWITH .offer-exchange.com REVDNS 8 ENDSWITH .offersonthenet.com REVDNS 8 ENDSWITH .oneoffer.net REVDNS 8 ENDSWITH .owe-less.com REVDNS 8 ENDSWITH .primetimedirect.net REVDNS 8 ENDSWITH .ramosglobalmarketing.com REVDNS 8 ENDSWITH .real-net.net REVDNS 8 ENDSWITH .roving.com REVDNS 8 ENDSWITH .specialoffers4you.com REVDNS 8 ENDSWITH .steamyxxxads.com REVDNS 8 ENDSWITH .superstorespecials.com REVDNS 8 ENDSWITH .temd.net REVDNS 8 ENDSWITH .tepmail.com REVDNS 8 ENDSWITH .tiburondeltigre.com REVDNS 8 ENDSWITH .truemail.net REVDNS 8 ENDSWITH .virtual-domain.com REVDNS 8 ENDSWITH .webmailer.de REVDNS 8 ENDSWITH .xpwebnet.com HEADERS 3 CONTAINS charset="euc-kr" HEADERS 3 CONTAINS charset="big5" COUNTRIES 3 CONTAINS cn COUNTRIES 3 CONTAINS kr COUNTRIES 2 CONTAINS br COUNTRIES 2 CONTAINS hk COUNTRIES 2 CONTAINS ru COUNTRIES 2 CONTAINS tw COUNTRIES 2 CONTAINS uy
<<attachment: winmail.dat>>
