on Wed, Sep 29, 2004 at 06:27:37PM -0700, Jeff Chan wrote:
Most of the professional spams I've seen lately seem to have only the spammer's own domain in them.
Really? Most of those I've seen lately have the spammers (obfuscated) domain and three bogus domains constructed out of the victim's localpart, e.g. http://schampeo.org, http://schampeo.net, http://schampeo.com - it's become so reliable a filter that I am toying around with skipping all SURBL checks on any such message.