Loren Wilton wrote:
> Gee, an entire domain to add to BigEvil!  ;-)  About 10 different
> spams from this guy in the last couple hours.  It looks like
> everrthing in front of forgetmei in the url is just random words.

> <a href=3D"http://driven.fragrant.forgetmei.com/gld/gld.php"; 

I usually just snag the part before the TLD for my own BigEvil-type
lists;  due to messages like this or spam runs that use a different
third/fourth/fifteenth-level domain for each message.  There are a
*very* few exceptions- mostly ccTLD domains that essentially tack the
country code on after the "real" TLD (software.com.br, for instance).

Among other things, some spams I've seen have more than just three or
four domain parts- they have 8-10 or more.

-kgd
-- 
"Sendmail administration is not black magic.  There are legitimate
technical reasons why it requires the sacrificing of a live chicken."
   - Unknown

Reply via email to