From: /dev/rob0 (rob0gmx.co.uk)
Date: Fri Aug 18 2006 - 11:39:08 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Friday 18 August 2006 10:05, John Kelly wrote:
> On Fri, 18 Aug 2006 10:52:40 -0500, Noel Jones
>
> <njonesmegan.vbhcs.org> wrote:
> >There is an RBL that lists domains less than 5
> >days old, dob.sibl.support-intelligence.net.
>
> I wonder how effective that can be, after spammers learn the rule.

It cannot be effective, since it is impossible to make such a list. A
complete list would have to cover all TLD's and all registrars which
serve them.

The only real way to do it involves automated querying and parsing of
whois data.

> Seems like they could put up domains, and simply wait 6 days before
> using them.

And that too. I suspect that they're being bought in bulk and used as
needed, perhaps over a period spanning several months from the time of
registration. When one winds up in RHSBL's and/or URIBL's, its job is
done, and the next one on the stack is employed.

FWIW I invite the OP to discuss this idea on SPAM-L, where it is more
topical. But, don't get your hopes up about catching much spam with
this. The tried-and-true methods are still the best approach, and
they'll never be perfect.
--
    Offlist mail to this address is discarded unless
    "/dev/rob0" or "not-spam" is in Subject: header

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]