[SURBL-Discuss] Spammer Anti-SURBL tactic

[Steven Champeon]

Speaking of anti-SURBL tactics, I got this turdlet today (snippet
of HTML email below):

<DIV>We are giving out Free Import / Export / Wholesales/ Distributers /
Retailers&nbsp; Contact Database</DIV>
<DIV>&nbsp;</DIV>
<DIV>If You interested Pls get at Following URL</DIV>
<DIV>&nbsp;</DIV>
<DIV><A onmouseover="window.status='http://www.impexp-data.com';return true;"
onmouseout="window.status=' ';return true;"
href="http://indigisys.com/chawla1/open.htm" target=_blank>Business =
Database</A> </DIV>
<DIV>&nbsp;</DIV>
<DIV>Free Business / Marketing Tools&nbsp;( Free SMS to All over world Unl=
imited )&nbsp;</DIV>
<DIV><A
onmouseover="window.status='http://www.impexp-data.com/sms';return true;"
onmouseout="window.status=' ';return true;"
href="http://indigisys.com/chawla1/open.htm" target=_blank>FREE SMS = Tools
</A></DIV>

It *looks* like whoever owns indigisys.com wants to hide the fact
that they're actually indigisys.com by pretending to be impexp-data.com,
which doesn't exist. Does SURBL's lookup code catch this? 

-- 
hesketh.com/inc. v: +1(919)834-2552 f: +1(919)834-2554 w: http://hesketh.com
join us!   http://hesketh.com/about/careers/account_manager.html    join us!