[SURBL-Discuss] URIBL and PTR records

wolfgang mewolf1 at gmx.net
Thu May 12 23:20:02 CEST 2005


when browsing unsubscribe links like http://www.signoffcorp.biz/uns.htm to 
enter a spamtrap address I just noticed that quite a few of the pages look 
extremely similar, DNS lookups show:

$ host www.signoffcorp.biz
www.signoffcorp.biz has address 217.107.217.8
$ host www.bestcds.biz
www.bestcds.biz has address 217.107.217.8
$ host www.wonder-pills.com
www.wonder-pills.com has address 217.107.217.8
$ host www.multimed.ws
www.multimed.ws has address 217.107.217.8

$ host 217.107.217.8
8.217.107.217.in-addr.arpa is an alias for 8.0/27.217.107.217.in-addr.arpa.
8.0/27.217.107.217.in-addr.arpa domain name pointer webrider.ru.
$ host webrider.ru
webrider.ru has address 217.107.216.26

so i wonder if it is possible (or already done) to also list (and save) the 
IPs of URIBL listed domains and check newly queried, yet unlisted domains 
against those IPs.

any comments?

regards,

wolfgang


More information about the Discuss mailing list