funsec mailing list archives

Re: Comment Spam: new trends, failing counter-measures and why it's a big deal


From: Gadi Evron <ge () linuxbox org>
Date: Mon, 13 Feb 2006 15:51:00 +0200

Dude VanWinkle wrote:
On 2/12/06, Gadi Evron <ge () linuxbox org> wrote:

Another important point to make is the domains used. Much like with
emails spam, these change very frequently and seem to be registered in
bulk. I don't doubt these are the same people.



Can you provide some of the domains used for spamming? I was just
wondering if their whois registrations are similar. If so, it may be
possible to generate a PTDL (Possibly Throwaway Domain List) based off
of a bot crawling the whois database for similarly registered sites.

Plz let me know if this is a stupid idea and why.

Nope, a good one. Blacklisting for domains works well. :)
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: