the domain with "com" in front is indeed on both URIBL but it just don#t exist in the messages at all - why does SA extract the domains wrong from the mailsource when there is no "comfacebook" at all besides the SA report?
URIBL_DBL_SPAM Contains a spam URL [URIs: com__facebook.com] URIBL_BLACK Contains an URL listed in the URIBL blacklist [URIs: com__facebook.com]
signature.asc
Description: OpenPGP digital signature
