on Thu, Aug 12, 2004 at 12:58:55AM -0700, Jeff Chan wrote:
...that these were FPs. I suspect otherwise for the following, at least:
Oh, right; this isn't a spammer:
conception766pi11.us
And I suppose neither are these: ait4453pill.us alarming5834pill.us alarming6350pills.us antler8223pills.us armoured6658pill.us astf2571pills.us auger1103pills.us boiler6872pill.us bumble3749pill.us chafe3017pills.us cipher7630pill.us complexity1006pill.us conflict8955pill.us cornstalk8555pill.us dakota323pill.us diatribe3927pill.us disneyland1937pill.us fateful3948pill.us follow7065pill.us fraudulent4567pill.us fugacious2107pill.us genius5748pills.us guano7904pills.us horrid3661pill.us immature4319pills.us lettish3429pill.us limped6950pill.us living5155pill.us outweigh9214pills.us patellas2315pill.us payout4174pills.us phaseout2762pills.us priceless4311pills.us referral9466pill.us sabbaths396pill.us scrawny8814pill.us scuttle5567pills.us seafarers9127pill.us septuagint8949pill.us seraglios121pill.us sewerage5665pills.us silenced221pills.us simpleness128pill.us slowpokes4043pill.us smeltery7284pills.us smock928pill.us smocked5251pill.us sot3669pills.us sprang3978pill.us stillness4372pills.us striptease9199pill.us suborning7098pills.us tangential3858pill.us temazepam2834pill.us unburdened2613pills.us unpainted4643pills.us victimize4839pill.us vizier7547pill.us whosever7825pill.us wicks5749pills.us wimbledon743pill.us worrisome5163pill.us wrigley3912pills.us yapped2284pills.us
Uh-huh. And that's just the output from:
egrep "^[a-z]+[0-9]+" domains|grep \.us|grep pil
There are similar lists for 'tab', 'rx', 'med', 'rned', and this is just the '.us' domains. .biz has 160 'pil' domains alone.
akimbo6968tabs.us anaerobe9918tabs.us apologies4018tabs.us copenhagen1026tabs.us coulisse4359tabs.us deepened4521tabs.us flatfoot8255tabs.us insecure7285tabs.us permanent2811tabs.us pollinator6632tabs.us popliteal9927tabs.us remake9252tabs.us sceptical5237tabs.us senses3444tabs.us shahs6172tabs.us slumbrous754tabs.us tentative1876tabs.us wiggle6767tabs.us withdrawn5155tabs.us workman3166tabs.us
acappela9459rx.us adding8383rx.us alex6346rx.us anapest869rx.us astrolabe9495rx.us beat7063rx.us best8938rx.us bridegroom6963rx.us burying1974rx.us canvas8741rx.us catatonia9112rx.us courtly4086rx.us department5215rx.us exuberance8985rx.us foetus4647rx.us foresaw3895rx.us guillotine416rx.us hardcore3684rx.us magenta4358rx.us matchless3341rx.us megacunt1810rx.us misentry1982rx.us moisten982rx.us olive306rx.us outfox2624rx.us penney5099rx.us reassess837rx.us reel2598rx.us ruin6998rx.us scours6508rx.us sharif7046rx.us sods4562rx.us sprinkler9531rx.us treating849rx.us tunny1567rx.us very9221rx.us
alderman8723meds.us bales5994meds.us boris5251meds.us borrower6275meds.us coolness6579meds.us dehydrated8623meds.us dukedom221meds.us gratuitous4973meds.us hard8589meds.us hectare912meds.us joke1903meds.us matting9896meds.us mimeograph648meds.us odometer3845meds.us oleaginous9337meds.us pompadour8149meds.us prelim7911meds.us puling7796meds.us querela1822meds.us quint997meds.us scrapbook3383meds.us sheik1028meds.us slaphappy7346meds.us sneezed4222meds.us stipulator7250meds.us teenage5800meds.us thinness6484meds.us thrust3047meds.us tmg4933meds.us
Funny thing is, they seem to be the same person, going by the whois records. 330 alone have the contact address admin@gohsadsa.biz, for example.
Blue Rock Dove - hard core spammers:
misshaped982twisty.com
likely phish candidate:
myebay-secure.net