> As far as the technique is concerned, it really seems silly -- I can't > see what benefit a spammer would have from doing this. I have never heard of this before but one would suppose the logic is the domains will not be listed anywhere - yet. So the mail <supposedly> gets delivered and then the domains go live.
The problem, though, is that any anti-spam program that does RHSBL tests probably does MAILFROM tests as well. So while the domain won't be listed in any RHSBLs yet, it will fail the MAILFROM test, which is likely to be weighted higher.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
---- This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
