LOL, this is the crazy Vdrug dude! That's what I call them. I'm seeing him use lots of new domains with random numbers and characters. These are all in my bigevil.cf file. spammers pay about $10 to register a new domain, and they are doing it at a pretty high rate.
--Chris > -----Original Message----- > From: Greg Webster [mailto:[EMAIL PROTECTED] > Sent: Tuesday, December 23, 2003 3:05 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Single image spams with random info > > > We're getting a TON of these, all of similar format. > > <html><body> > <center><!--2rdxveiyf7a8--><a > href="http://www.mdv678.com?rid=1098";><!--srz4f4qaLBUw--><img > src="http://www.whosout.com/c2.gif"; border=0></a></center> > </html></body> > > The '2rdxveiyf7a8' and 'srz4f4qaLBUw' some random string of characters > in the same place all the time. The domains are completely random it > appears - sometimes with words (like whosout.com) or a random set of > characters. > > Suggestions on how to block them? I've been adding the domains to a > special rule, but they must own hundreds of them. > > Thanks, > > Greg > > -- > Greg Webster - [EMAIL PROTECTED] > In-Touch Software Corporation > Ph: (604)278-0515 - Fax: (604)608-3112 > > > > ------------------------------------------------------- > This SF.net email is sponsored by: IBM Linux Tutorials. > Become an expert in LINUX or just sharpen your skills. Sign > up for IBM's > Free Linux Tutorials. Learn everything from the bash shell > to sys admin. > Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
![http://www.whosout.com/c2.gif"](http://www.whosout.com/c2.gif"){kind=link}