Hi Dan: We have a super list of all URL's found in the body. It includes .biz and any other URL's in the body.
Take a look at it.. ftp://ftp.XYZ/IMail Replace XYZ with the domain of my email address. Regards, Kami -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Patnode Sent: Sunday, June 15, 2003 6:18 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] .biz Super List .biz is getting worse with time. By in large, these are sent from general purpose (dialup and broadband) US based accounts, referencing Asian IPs. To counter this, I've begun harvesting .biz domains from the bodies of captured spam - for use in hard tests. My first day's catch: BODY 0 CONTAINS mainroute.biz BODY 0 CONTAINS ibetterbuy.biz BODY 0 CONTAINS health-now.biz BODY 0 CONTAINS drugcabinet.biz BODY 0 CONTAINS order-this.biz BODY 0 CONTAINS mymedicinecabinet.biz BODY 0 CONTAINS homerx.biz BODY 0 CONTAINS lender-search.biz If Scott adds a test that looks up the IP of links in the message body, we could just block the IPs. Until then, anyone else building such a list? Dan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
