Post a few of his/her base domains - just to be sure we will be taking 
about the same guy..

Thanks

-Nick

MadRiverAccess.com|Skywaves.com Tech Support 
US/Canada 877-873-6482 or International +1-802-229-6574 
Emergency Support 24/7: [email protected] 
General and Non-Emergency support ticket: 
https://www.skywaves.com/content/secure/support_ticket.htm




----------------------------------------

From: "Dave Beckstrom" <[email protected]>
Sent: Monday, October 18, 2010 9:38 AM
To: [email protected]
Subject: [Declude.JunkMail] Good filter?


There is pervasive
spammer who's uri pattern for the linked spam site is pretty
consistent.  They all have a "/" followed by some kind of
home-grown obfuscation which his server
recognizes:   
 
 http://cja244.larickcoppas.com/6878d778dcffdc763118115082cc190a3c0343 
 
Anyone come up with a clever filter for
this?
 
Also, these spammers are using domainsite.com as their registrar for
their spamvertized domains.  Has anyone worked on a solution where the URI
can be checked against the registrar and if its registered with
domainsite.com then weight can be added or it can be
blocked?
 
 

---
[This E-mail was scanned by Declude]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [email protected], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned by Declude]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [email protected], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to