You have the unfortunate luck of being on the cutting edge
of the spam runs, most of these domains are now in 4 or 5 SURBL
lists, which will give you scores of close to 12 alone. They are
also listed at Spamhaus as of yesterday and the name servers from
one day before.
A partial list at IP 220.80.107.186 is:
openjab.-com A 220.80.107.186
www.openjab.-com A 220.80.107.186
pointmac.-com A 220.80.107.186
ns0.pointmac.-com A 220.80.107.186
isince.-com A 220.80.107.186
netsince.-com A 220.80.107.186
sinceschool.-com A 220.80.107.186
www.sinceschool.-com A 220.80.107.186
sincerum.-com A 220.80.107.186
www.sincerum.-com A 220.80.107.186
nthopen.-com A 220.80.107.186
www.nthopen.-com A 220.80.107.186
cupopen.-com A 220.80.107.186
patopen.-com A 220.80.107.186
www.patopen.-com A 220.80.107.186
printhero.-com A 220.80.107.186
ns0.printhero.-com A 220.80.107.186
sincesoft.-com A 220.80.107.186
www.sincesoft.-com A 220.80.107.186
openemu.-com A 220.80.107.186
www.openemu.-com A 220.80.107.186
openjay.-com A 220.80.107.186
www.openjay.-com A 220.80.107.186
openivy.-com A 220.80.107.186
www.openivy.-com A 220.80.107.186
Locally I get these results for an test email with a single line of:
http://sinceschool.-com
X-Spam-Status: Yes, score=13.5 tests=RAZOR2_CF_RANGE_51_100=0.056.
RAZOR2_CHECK=1.511. URIBL_AB_SURBL=0.417. URIBL_JP_SURBL=2.462.
URIBL_RHS_URIBL_BLACK=2.33. URIBL_SBL=0.996. URIBL_SC_SURBL=4.263.
URIBL_WS_SURBL=1.462 autolearn=no version=3.0.4
This is with only the one local URIBL rule included. With the
actual text and proper Bayes training, you should get another 3-4 points
and other local rules give me more. Also, add in header points for coming
from dynamic hosts (mostly zombie-bots) and you should get another few
points.
I don;t know if all of these are active yet, but they probably are.
All ".com"'s changed to ".-com" to avoid the list's filter.
Paul Shupak
[EMAIL PROTECTED]
