I don't know how feasible this would be, or maybe it's already been done...
Is there a way to check an incoming email for any links, then do a whois search against those links, compare that to a local database and flag as spam? I notice a lot of the spam I get has links to online stores, but they often are in different domains, but if I do a whois they are typically all registered to the same person...
Jason
