On 2023-02-03 04:24, bugzilla-dae...@spamassassin.apache.org wrote:
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8075

nehav <nehav@radix.email> changed:

            What    |Removed                     |Added
----------------------------------------------------------------------------
                  CC|                            |nehav@radix.email

--- Comment #5 from nehav <nehav@radix.email> ---
Hello Bill, I want to follow up on the ticket. Would you mind sharing the
outcome of the test results for .online, .site and .fun? We are worried that
.online might still be seeing high volumes of spam. My team and I are still
figuring out what we can do to control it. Right now, we are in the middle of
performing a few tests ourselves. We are trying to determine the 'use & throw'
type of domains by cross-checking MX record hits for the freshly registered
domains. Second, we are trying to find the quantum of traffic on different
kinds of mail servers for .online domains. For this, we would consider
reputable servers such as google & outlook to be 'good' servers which can be
left as it is and everything else as 'others', which would then be manually
evaluated. We will also check hits on gibberish domains.

I would really appreciate more suggestions/ideas on how we can better track and
reduce spam for .online.


If they are on Digital Ocean and spamming, with a .online domain.. Pretty easy to catch..

134.209.25.157  x2      zero7.correiossrecompensass2023cc.online
138.197.149.86  x1      aspenpost.online
139.59.186.181  x4      zero8.correiossrecompensass2023cc.online
143.110.172.252 x3      zero10.correiossrecompensass2023cc.online
143.198.203.61  x1      vegagiveaways.online
165.22.105.49   x1      sparklesurveys.online
165.22.110.143  x1      surveycompany.online
165.22.126.196  x3      zero5.correiossrecompensass2023cc.online
167.172.53.189  x3      zero2.correiossrecompensass2023cc.online
167.172.53.21   x4      zero3.correiossrecompensass2023cc.online
178.128.171.246 x5      zero6.correiossrecompensass2023cc.online
178.62.65.212   x3      zero1.correiossrecompensass2023cc.online
178.62.7.247    x1      zero4.correiossrecompensass2023cc.online
188.166.175.52  x1      zero9.correiossrecompensass2023cc.online

Talk about zero day detection.. ;) These guys have been at it for months now, you think they would give up..

Just saying.. Here's an idea.. contribute a patch to SA, where if the domain is .online and is spamming, it can auto submit a report to you.


--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.

Reply via email to