At 08:11 14-12-2008, Dave Pooser wrote:
<%word%><%otherword%>.com format and both are in the same /24. So I started checking PTR records for the whole /24 and I'm seeing snowshoe farms like this (mildly borked to not hit URI lists):3.193.111.66.in-addr.arpa name = dancethree[dot]com.
Verify the registrant information available from Whois and see whether such domains regularly appear in spam or ham.
Regards,-sm
