[SURBL-Discuss] URIBL and PTR records
mewolf1 at gmx.net
Thu May 12 23:20:02 CEST 2005
when browsing unsubscribe links like http://www.signoffcorp.biz/uns.htm to
enter a spamtrap address I just noticed that quite a few of the pages look
extremely similar, DNS lookups show:
$ host www.signoffcorp.biz
www.signoffcorp.biz has address 220.127.116.11
$ host www.bestcds.biz
www.bestcds.biz has address 18.104.22.168
$ host www.wonder-pills.com
www.wonder-pills.com has address 22.214.171.124
$ host www.multimed.ws
www.multimed.ws has address 126.96.36.199
$ host 188.8.131.52
184.108.40.206.in-addr.arpa is an alias for 8.0/220.127.116.11.in-addr.arpa.
8.0/18.104.22.168.in-addr.arpa domain name pointer webrider.ru.
$ host webrider.ru
webrider.ru has address 22.214.171.124
so i wonder if it is possible (or already done) to also list (and save) the
IPs of URIBL listed domains and check newly queried, yet unlisted domains
against those IPs.
More information about the Discuss