>...
>
>--nextPart12555236.45TTRGDWuC
>Content-Type: text/plain;
> charset="utf-8"
>Content-Transfer-Encoding: quoted-printable
>Content-Disposition: inline
>
>On Saturday 14 May 2005 18:30, List Mail User wrote:
>[...]
>>
>> Just to keep up; aeroseddicc. com is another multitrade group
>> domain. Note the contact email of "[EMAIL PROTECTED] com" - same as
>> for the domain multitrade-corp. com, and the telephone/fax numbers
>> match those of the domain sheenier. net. And, of course the name
>> servers' domain of aicstrungcb. biz is multitrade also. Oh, yes,
>> they also seem to have control of mail333. com.
>>
>> With enough pressure, they will run out of registrars, or be forced
>> to use the Chinese ones.
>
>Just to add to that, mail333.com addresses are used in the registration=20
>of quite a lot of spamvertized domains - see=20
><http://groups.google.co.uk/groups?q=3Dgroup:news.admin.net-abuse.*+mail333=
>=2Ecom&start=3D0&scoring=3Dd&>
>
>mail333.com itself is in whois.rfc-ignorant.org, as are most (all?) of=20
>the related domains, and I'm getting promising results using that=20
>blacklist as a URIbl:
>
># whois.rfc-ignorant.org URIBL http://www.rfc-inorant.org/
>urirhssub URIBL_RFCI_WHOIS whois.rfc-ignorant.org. A 5
>body URIBL_RFCI_WHOIS eval:check_uridnsbl('URIBL_RFCI_WHOIS')
>describe URIBL_RFCI_WHOIS Contains an URL listed in RFCI whois
>tflags URIBL_RFCI_WHOIS net
>score URIBL_RFCI_WHOIS 2.0
>uridnsbl_skip_domain ac.uk
>
>=2D-=20
>Rob Skedgell <[EMAIL PROTECTED]>
>
>--nextPart12555236.45TTRGDWuC
>Content-Type: application/pgp-signature
>
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.4.1 (GNU/Linux)
>
>iD8DBQBChkGQ4qIyNNFLbdcRAivbAJ4piS+Kv8bw2BsocE9h+lJOJg5oMgCfRhth
>cTxK4ScL4j52fTCeSdC0Q6k=
>=9C1J
>-----END PGP SIGNATURE-----
>
>--nextPart12555236.45TTRGDWuC--
>
Take a look at who made the submissions at rfci (try a lookup
on the IP address). Not all the releated domains are there - though
a dozen or so new ones went in today. Also look at Bugzilla #4104
(though I have changed/evolved the rules which I currently use since
that submission to lower the scores for the individual rules, and use
meta-rules to add points back for multiple rule hits.).
Paul Shupak
[EMAIL PROTECTED]
