Ahoj,

Dňa Thu, 11 Jul 2024 08:37:05 +0200 Benoît Panizzon via mailop
<mailop@mailop.org> napísal:

> The sender domain usually just got registered before the emails are
> sent and is being deleted shortly after.

did you try to identify new domains with zrd.dq.spamhaus.net,
fresh.fmb.la or fresh*.spameatingmonkey.net ? 

I use first two in rspamd and both seems to be pretty good in their job
(while not perfect, of course). I noticed only one false positive, it
was 2-3 years ago from fmb.la -- they mark facebook.com as new :-D

The Spamhaus ZRD is really good in "today" registered, while FMB.la is
good in registered "few days ago".

regards

-- 
Slavko
https://www.slavino.sk

Attachment: pgpfbRRkIwTXQ.pgp
Description: Digitálny podpis OpenPGP

_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to