Over 3000 entries, that IS super :)
On Sunday, June 15, 2003 15:30, Kami Razvan <[EMAIL PROTECTED]> wrote: >Hi Dan: > >We have a super list of all URL's found in the body. It includes .biz and >any other URL's in the body. > >Take a look at it.. > >ftp://ftp.XYZ/IMail > >Replace XYZ with the domain of my email address. > >Regards, >Kami > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Dan Patnode >Sent: Sunday, June 15, 2003 6:18 PM >To: [EMAIL PROTECTED] >Subject: [Declude.JunkMail] .biz Super List > > >.biz is getting worse with time. By in large, these are sent from general >purpose (dialup and broadband) US based accounts, referencing Asian IPs. To >counter this, I've begun harvesting .biz domains from the bodies of captured >spam - for use in hard tests. My first day's catch: > >BODY 0 CONTAINS mainroute.biz >BODY 0 CONTAINS ibetterbuy.biz >BODY 0 CONTAINS health-now.biz >BODY 0 CONTAINS drugcabinet.biz >BODY 0 CONTAINS order-this.biz >BODY 0 CONTAINS mymedicinecabinet.biz >BODY 0 CONTAINS homerx.biz >BODY 0 CONTAINS lender-search.biz > >If Scott adds a test that looks up the IP of links in the message body, we >could just block the IPs. Until then, anyone else building >such a list? > >Dan > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, >just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe >Declude.JunkMail". The archives can be found at >http://www.mail-archive.com. > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
