[SURBL-Discuss] Whitelist catholicexchangeMUNGED.com

Jeff Chan jeffc at surbl.org
Sat Sep 18 00:58:25 CEST 2004


On Friday, September 17, 2004, 3:45:45 PM, Joe Wein wrote:
>> I have a customer who keeps tripping catholicexchangeMUNGED.com
>>
>> Can we get this removed from WS SURBL?

> Registered in 2000. The only spams I've seen this in were 419s, which
> generally use other people's domains, or (rarely) very recently registered
> domains.

> Folks, please do not list domains mentioned in 419s or used as 419 sender
> domains, unless they are freshly registered (usually ns=yahoo,
> whois=melbourneit.com, but have seen others).

> Joe

I agree.  They look like 419 Joe Jobs.

Usually the entire message body of 419s should be ignored for
SURBL purposes.  419s are usually only interesting for the
sender information, which SURBLs don't do.

Jeff C.



More information about the Discuss mailing list