On Friday, September 17, 2004, 3:45:45 PM, Joe Wein wrote:
I have a customer who keeps tripping catholicexchangeMUNGED.com
Can we get this removed from WS SURBL?
Registered in 2000. The only spams I've seen this in were 419s, which generally use other people's domains, or (rarely) very recently registered domains.
Folks, please do not list domains mentioned in 419s or used as 419 sender domains, unless they are freshly registered (usually ns=yahoo, whois=melbourneit.com, but have seen others).
Joe
I agree. They look like 419 Joe Jobs.
Usually the entire message body of 419s should be ignored for SURBL purposes. 419s are usually only interesting for the sender information, which SURBLs don't do.
Jeff C.