-----Original Message----- From: Jeff Chan [mailto:jeffc@surbl.org] Sent: Thursday, April 21, 2005 7:46 PM To: SURBL Discuss; SpamAssassin Users Subject: Research wanted: age of spam gang URI domains
Does anyone have research or references for the age profiles of domains appearing in the URIs of spam gang (i.e. Ralsky, Lindsay, Richter, etc.) spams? In other words, how old are the domains of sites being spamvertised *by spam gangs*? (By age I mean how long ago they were (most recently) created.)
Jeff C.
Off the top of my nogging, I've seen the major guys be about 1-3 days from registering.
However......
I also saw a pattern a few spammers using ones registered 3 months prior. This is when I began to theorise that there was possibly a spam domain service. Someone simply registering domain names full time, then selling them out to other spammers. I started researching the idea, then got busy on other stuff.
When things settle I'll try to pick back up on the research. Sorry I don't have any hard data for you.
--Chris