Re: A flood of new domains ?

2012-03-23 Thread Benny Pedersen
Den 2012-03-23 09:02, Per Jessen skrev: http://files.jessen.ch/proxy.log log mime type ? if it ends in txt, mime will let me see it as text without download into my c drive :)

Re: A flood of new domains ?

2012-03-23 Thread Robert Schetterer
Am 23.03.2012 09:02, schrieb Per Jessen: > Robert Schetterer wrote: > >> Am 22.03.2012 10:19, schrieb Per Jessen: >> It's also the rate of change that is >>> interesting - I very rarely see two emails with the same link. >>> >> >> one more indicate for a bright planned campaign >> what are they t

Re: A flood of new domains ?

2012-03-23 Thread Per Jessen
Robert Schetterer wrote: > Am 22.03.2012 10:19, schrieb Per Jessen: > It's also the rate of change that is >> interesting - I very rarely see two emails with the same link. >> > > one more indicate for a bright planned campaign > what are they try to push...? It varies - one link I've just cli

Re: A flood of new domains ?

2012-03-22 Thread Per Jessen
;>>>> Has anyone else noticed this stream of new spamvertized domains : >>>>>> >>>>>> http://files.jessen.ch/list-of-new-domains >>>>>> >>>>>> Typically accompanied by messages/subject lines such as: >>>>>>

Re: A flood of new domains ?

2012-03-22 Thread Robert Schetterer
: >>>>> >>>>>> Am 21.03.2012 09:09, schrieb Per Jessen: >>>>>>> Has anyone else noticed this stream of new spamvertized domains : >>>>>>> >>>>>>> http://files.jessen.ch/list-of-new-domains >>>>>

Re: A flood of new domains ?

2012-03-22 Thread Robert Schetterer
>>>>>> Has anyone else noticed this stream of new spamvertized domains : >>>>>> >>>>>> http://files.jessen.ch/list-of-new-domains >>>>>> >>>>>> Typically accompanied by messages/subject lines such as: >&

Re: A flood of new domains ?

2012-03-22 Thread Robert Schetterer
Am 22.03.2012 10:30, schrieb xTrade Assessory: > Robert Schetterer wrote: >> one more indicate for a bright planned campaign >> what are they try to push...? > > > I guess that is easy and simple ... the more the merrier > > they are smart but we got smarter too and now it is getting harder and

Re: A flood of new domains ?

2012-03-22 Thread Axb
On 03/22/2012 10:19 AM, Per Jessen wrote: Robert Schetterer wrote: Am 22.03.2012 08:23, schrieb Per Jessen: Robert Schetterer wrote: Am 21.03.2012 09:09, schrieb Per Jessen: Has anyone else noticed this stream of new spamvertized domains : http://files.jessen.ch/list-of-new-domains

Re: A flood of new domains ?

2012-03-22 Thread xTrade Assessory
Robert Schetterer wrote: > one more indicate for a bright planned campaign > what are they try to push...? I guess that is easy and simple ... the more the merrier they are smart but we got smarter too and now it is getting harder and harder for "them" so they switch identification as fast as po

Re: A flood of new domains ?

2012-03-22 Thread Robert Schetterer
his stream of new spamvertized domains : >>>>> >>>>> http://files.jessen.ch/list-of-new-domains >>>>> >>>>> Typically accompanied by messages/subject lines such as: >>>>> >>>>> You should check your status update and se

Re: A flood of new domains ?

2012-03-22 Thread Per Jessen
Robert Schetterer wrote: > Am 22.03.2012 08:23, schrieb Per Jessen: >> Robert Schetterer wrote: >> >>> Am 21.03.2012 09:09, schrieb Per Jessen: >>>> Has anyone else noticed this stream of new spamvertized domains : >>>> >>>> ht

Re: A flood of new domains ?

2012-03-22 Thread Robert Schetterer
Am 22.03.2012 09:43, schrieb xTrade Assessory: > Robert Schetterer wrote: >> spam often is very recipient related >> i.e my beloved spambot armee relocated from china/us now to india/brasil >> during last year , looks like thats trendy > > > regarding BR > > we get most from afrinic 41.0 and pak

Re: A flood of new domains ?

2012-03-22 Thread xTrade Assessory
Robert Schetterer wrote: > spam often is very recipient related > i.e my beloved spambot armee relocated from china/us now to india/brasil > during last year , looks like thats trendy regarding BR we get most from afrinic 41.0 and pakistan 182.177, and of course our own adsl blocks if you like

Re: A flood of new domains ?

2012-03-22 Thread Robert Schetterer
Am 22.03.2012 08:23, schrieb Per Jessen: > Robert Schetterer wrote: > >> Am 21.03.2012 09:09, schrieb Per Jessen: >>> Has anyone else noticed this stream of new spamvertized domains : >>> >>> http://files.jessen.ch/list-of-new-domains >>> >>

Re: A flood of new domains ?

2012-03-22 Thread Per Jessen
Robert Schetterer wrote: > Am 21.03.2012 09:09, schrieb Per Jessen: >> Has anyone else noticed this stream of new spamvertized domains : >> >> http://files.jessen.ch/list-of-new-domains >> >> Typically accompanied by messages/subject lines such as: >> >

Re: A flood of new domains ?

2012-03-21 Thread Robert Schetterer
Am 21.03.2012 09:09, schrieb Per Jessen: > Has anyone else noticed this stream of new spamvertized domains : > > http://files.jessen.ch/list-of-new-domains > > Typically accompanied by messages/subject lines such as: > > You should check your status update and see if it cha

A flood of new domains ?

2012-03-21 Thread Per Jessen
Has anyone else noticed this stream of new spamvertized domains : http://files.jessen.ch/list-of-new-domains Typically accompanied by messages/subject lines such as: You should check your status update and see if it changed This method of language learning is super easy. Please confirm that

Re: [AMaViS-user] yahoo.com adds new domains.

2008-06-20 Thread Quanah Gibson-Mount
Rocketmail isn't new. I've had a rocketmail account since the 1990's. --Quanah --On Thursday, June 19, 2008 6:40 PM -0400 Michael Scheidell <[EMAIL PROTECTED]> wrote: As if email from freebie @yahoo.com addresses isn't enough, Yahoo has now announces two ne

Re: [AMaViS-user] yahoo.com adds new domains.

2008-06-20 Thread Michael Scheidell
Quanah Gibson-Mount wrote: Rocketmail isn't new. I've had a rocketmail account since the 1990's. yes, and now you belong to yahoo read the story. -- Michael Scheidell, President Main: 561-999-5000, Office: 561-939-7259 > *| *SECNAP Network Security Corporation Winner 2008 Technosium hot co

Re: yahoo.com adds new domains.

2008-06-20 Thread mouss
Michael Scheidell wrote: [snip] sharpen up your SA rules, justin: time to watch those rules, including the 'forged from yahoo' rules. no spf records. wonder if they will dkim sign them: $ host -t txt ymail.com ymail.com has no TXT record $ host -t txt rocketmail.com rocketmail.com has no T

yahoo.com adds new domains.

2008-06-19 Thread Michael Scheidell
As if email from freebie @yahoo.com addresses isn't enough, Yahoo has now announces two new domains that the freebie spammers can spam from: ymail.com and rocketmail.com *SAN FRANCISCO — Yahoo Inc. is offering free e-mail accounts under two new designations in an effort to attract Web su

Re: New domains

2007-10-08 Thread Jonas Eckerman
mouss wrote: > Wouldn't this be reinventing /etc/hosts? No. The hosts file contained all individual *hosts* a machine needed to know about, and still contains all hosts a machine needs to know about without using the DNS. This database would contain all *domains* that has been used in mail.

Re: New domains

2007-10-01 Thread mouss
Jonas Eckerman wrote: (The idea below is not mine, someone else (I'm sorry, but I forgot who) wrote about it here (I think) before.) Giampaolo Tomassoni wrote: brand-new domains, Something that could work for this without the problems inherent in using whois or registry databases

Re: R: New domains (was: URIWhois plugin)

2007-09-28 Thread Jeff Chan
Quoting Kenneth Porter <[EMAIL PROTECTED]>: > --On Thursday, September 27, 2007 7:05 PM +0200 Giampaolo Tomassoni > <[EMAIL PROTECTED]> wrote: > > > The only problem is that a spammer could "query" it days before it will > > bulk send, thereby impairing the effectiveness of such approach. > > > >

Re: R: New domains (was: URIWhois plugin)

2007-09-28 Thread Kenneth Porter
--On Thursday, September 27, 2007 7:05 PM +0200 Giampaolo Tomassoni <[EMAIL PROTECTED]> wrote: The only problem is that a spammer could "query" it days before it will bulk send, thereby impairing the effectiveness of such approach. I think we need some "official" data like the domain's creatio

Re: R: New domains

2007-09-28 Thread Jonas Eckerman
Giampaolo Tomassoni wrote: The only problem is that a spammer could "query" it days before it will bulk send, thereby impairing the effectiveness of such approach. So we check (with DNS) wether a domain MX record exists before adding it to the database. Something like this: 1: It receives a

Re: New domains (was: URIWhois plugin)

2007-09-27 Thread Dave Pooser
> 2. As mentioned above the whois data is sometimes populated *after* the > domains > start appearing in spams. Remember that the whois data is still mostly batch > processed once or twice a day. Many of the TLD zone files (where the DNS > delegations actually come from) are updated in near real

Re: New domains (was: URIWhois plugin)

2007-09-27 Thread Jeff Chan
Quoting Jonas Eckerman <[EMAIL PROTECTED]>: > (The idea below is not mine, someone else (I'm sorry, but I > forgot who) wrote about it here (I think) before.) > > Giampaolo Tomassoni wrote: > > > brand-new domains, > > Something that could work for this wi

R: New domains (was: URIWhois plugin)

2007-09-27 Thread Giampaolo Tomassoni
> -Messaggio originale- > Da: Jonas Eckerman [mailto:[EMAIL PROTECTED] > Inviato: giovedì 27 settembre 2007 18.17 > A: users@spamassassin.apache.org > Oggetto: New domains (was: URIWhois plugin) > > (The idea below is not mine, someone else (I'm sorry, but I &g

New domains (was: URIWhois plugin)

2007-09-27 Thread Jonas Eckerman
(The idea below is not mine, someone else (I'm sorry, but I forgot who) wrote about it here (I think) before.) Giampaolo Tomassoni wrote: brand-new domains, Something that could work for this without the problems inherent in using whois or registry databases is to simply check how