[SURBL-Discuss] Most often "hit" SURBL domains

[Steven Champeon]

on Wed, Sep 29, 2004 at 06:27:37PM -0700, Jeff Chan wrote:
> Most of the professional spams I've seen lately seem to have only
> the spammer's own domain in them.

Really? Most of those I've seen lately have the spammers (obfuscated)
domain and three bogus domains constructed out of the victim's localpart,
e.g. http://schampeo.org, http://schampeo.net, http://schampeo.com -
it's become so reliable a filter that I am toying around with skipping
all SURBL checks on any such message.

-- 
join us!   http://hesketh.com/about/careers/web_designer.html       join us! 
hesketh.com/inc. v: +1(919)834-2552 f: +1(919)834-2554 w: http://hesketh.com
join us!   http://hesketh.com/about/careers/account_manager.html    join us!