Hello Justin,
Wednesday, December 10, 2003, 12:51:28 PM, you wrote:
J> On Wed, 10 Dec 2003, Christopher Kunz wrote:
>> What is the typical half-life of a spam domain? As far as I can recall
>> from my brief glimpses at the stuff in my spam folders, I have never
>> seen that a domain was spamvertised in two different spam runs.
Christopher, the TYPICAL half-life of a spam domain is short. You have
that right. However, the nature of half-lives is that they're stastical;
some specific items will approximate the half-life, and some necessarily
will be atypical.
J> I have a 15,000 entry list of spamming domains and netblocks. I started
J> it back in January of 2000 and hit the 15k mark last December. I haven't
J> touched it since. I'm still amazed at how much spam is still catches,
J> even though some of those domains are from spam runs more than 2 years
J> ago. YMMV of course.
Examples:
uri RM_u_27meg /27meg\.com/i
describe RM_u_27meg text references likely spammer
score RM_u_27meg 9.5 # 91s/0h of 63143 corpus
uri RM_u_artlist /art(?:list|market|price)\.com/i
describe RM_u_artlist text references known spammer
score RM_u_artlist 9.1 # 194 spam, 0 ham, Jul 19 2003; 69s/0h
of 63143 corpus
uri RM_u_awayoutofdebtfast /awayoutofdebtfast\.com/i
describe RM_u_awayoutofdebtfast text references known spammer
score RM_u_awayoutofdebtfast 9.1 # 177s/0h of 63143 corpus
uri RM_u_BaliHotels /\bbali.{0,30}\.com/i
describe RM_u_BaliHotels text references known spammer
score RM_u_BaliHotels 12.12 # 17s/0h of 63143 corpus
uri RM_u_biogenusa /biogenusa\.biz/i
describe RM_u_biogenusa text references known spammer
score RM_u_biogenusa 9.1 # 193s/0h of 63143 corpus
uri RM_u_bookmanmarketing /bookmanmarketing\.com/i
describe RM_u_bookmanmarketing text references known spammer
score RM_u_bookmanmarketing 9.10 # 24s/0h of 63143 corpus
uri RM_u_DaumNet /daum\.net/i
describe RM_u_DaumNet text references known spammer
score RM_u_DaumNet 9.00 # 52 spam, 0 ham, Oct 25 2003; 46s/0h of
63143 corpus
uri RM_u_dealsbytheminute /dealsby(?:the)?(?:minute|hour)\.biz/i
describe RM_u_dealsbytheminute text references known spammer
score RM_u_dealsbytheminute 9.1 # 93 spam, 0 ham, Sep 7 2003; 188s/0h of
39283 corpus
uri RM_u_ehostz /\.ehostz\.org/i
describe RM_u_ehostz text references known spammer
score RM_u_ehostz 9.1 # 1 spam, 0 ham, Aug 4 2003; 6s/0h of
39283 corpus
uri RM_u_gootle /gootle\.us/i
describe RM_u_gootle text references known spammer
score RM_u_gootle 9.1 # 23 spam, 0 ham, Sep 27 2003; 54s/0h of
39283 corpus
uri RM_u_HarryandDavid /HarryandDavid\.m0\.net/i
describe RM_u_HarryandDavid text references known spammer
score RM_u_HarryandDavid 5.1 # 10s/0h of 63143 corpus
uri RM_u_hostingprod /hostingprod\.com/i
describe RM_u_hostingprod text references known spammer
score RM_u_hostingprod 9.1 # 134s/0h of 63143 corpus
uri RM_u_justdoing /justdoing\.biz/i
describe RM_u_justdoing text references known spammer
score RM_u_justdoing 4.5 # 5 spam, 0 ham, Sep 5 2003; 37s/0h of
39283 corpus
uri RM_u_kdmweb /kdmweb\.net/i
describe RM_u_kdmweb text references known spammer
score RM_u_kdmweb 9.1 # 40s/0h of 63143 corpus
uri RM_u_kecak /kecak\.com/i
describe RM_u_kecak text references known spammer
score RM_u_kecak 9.1 # 17s/0h of 63143 corpus
uri RM_u_med12z /\.med12z\.com/i
describe RM_u_med12z text references known spammer
score RM_u_med12z 9.1 # 28 spam, 0 ham, Aug 9 2003; 30s/0h of
39283 corpus
uri RM_u_nanosoft /nano-soft\.biz/i
describe RM_u_nanosoft text references known spammer
score RM_u_nanosoft 9.1 # 27 spam, 0 ham, Sep 12 2003; 37s/0h of
39283 corpus
uri RM_u_OfferClicks /OfferClicks\.com/i
describe RM_u_OfferClicks text references known spammer
score RM_u_OfferClicks 9.1 # 489s/1h of 63143 corpus %%%???%%%
uri RM_u_photoidcards /photoidcards\.com/i
describe RM_u_photoidcards URL link might be to spam site
score RM_u_photoidcards 9.10 # 12s/0h of 63143 corpus
uri RM_u_pillsavings /pillsavings?[0-9]*\.com/i
describe RM_u_pillsavings URL link might be to spam site
score RM_u_pillsavings 9.10 # 130 spam, 0 ham, Sep 11 2003; 95s/0h
of 39283 corpus
uri RM_u_postnote /postnote\.com/i
describe RM_u_postnote text references known spam source or service
score RM_u_postnote 9.00 # 55s/0h of 63143 corpus
uri RM_u_revclx /revclx\.us/i
describe RM_u_revclx text references known spammer
score RM_u_revclx 7.00 # 52s/0h of 63143 corpus
uri RM_u_rs6 /rs6\.net/i
describe RM_u_rs6 text references likely spammer
score RM_u_rs6 1.00 # 13s/1h of 63143 corpus %%%???%%%
uri RM_u_rxpalace /rxpalace\.biz/i
describe RM_u_rxpalace text references known spammer
score RM_u_rxpalace 7.00 # 23 spam, 0 ham, Oct 24 2003; 42s/0h
of 39283 corpus
uri RM_u_seven12q /seven12q.com/i
describe RM_u_seven12q text contains link to known spammer
score RM_u_seven12q 9.5 # 36 spam, 0 ham, Oct 1 2003; 59s/0h of
39283 corpus
uri RM_u_supersavingsonline /supersavingsonline\.biz/i
describe RM_u_supersavingsonline text references known spammer
score RM_u_supersavingsonline 9.5 # 50 spam, 0 ham, Oct 24 2003; 53s/0h of
39283 corpus
uri RM_u_tclk /tclk\.net/i
describe RM_u_tclk text references known spammer
score RM_u_tclk 9.1 # 224 spam, 0 ham, Sep 5 2003; 72s/0h of
39283 corpus
-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
