Hi!
blah.com This was in a ProFTPd mailing list message "how do I set up a virtual host for "blah.com".
Uhm, if people need to type 'some' domain, its often blah.com or foo.com, thats common use, and the spammer using blah.com does take nice advantage of this.
These all look relatively ok to me. I'm whitelisting them.
Note that there is some slight overlap with the "Large ham corpus" and another recent FP report, in the astrology, surveymonkey, and blah.com mentions.
Counter-arguments welcome, but most include some evidence that these don't appear in hams.
Ohw well, if i get fresh ones from blah.com i'll let you know, so far i did not.
Bye, Raymond.