On Friday, April 22, 2005, 9:27:56 AM, Steven Champeon wrote:
See:
http://www.merit.edu/mail.archives/nanog/2005-01/msg00225.html
for one particular spamgang (dunno who); seems to be entirely dedicated to sending out spam in multipart with one redirector link (ends in .html, with embedded hash URL) and one remove link (ends in .htm, otherwise the same hash URL). I'm sure if you did some research you could find out more about current SURBLized domains that point to the name servers listed in the post.
Good point.
Thanks for your data too. That particular spammer appears to have used their domains within three weeks of registering them.
Jeff C. -- "If it appears in hams, then don't list it."