From: "Marc Perkel" <[EMAIL PROTECTED]>
Chris Santerre wrote:
We have a hard enough time with tons of new domains in URIBL. Those
cost money and IMHO a bit more steps to go thru to setup then an email
address. I can't imagine trying to keep up with it. They would expire
within hours.
Remember we're not talking about the From address but the address within
the message that they want you to reply to. That address isn't going to
expire very fast because that's how the spammer gets the money. I would
say however that these email addresses could be expired over a few weeks
perhaps.
I also think that these lists could be used for a check of outgoing
email to see of people (suckers) are responding and to perhaps intercept
the email and warn the sender that they are replying to a known scammer.
Just a thought.
Marc, in general addresses of this sort seem to hold around for "hours".
When they hang around for days it's a spam that somehow slipped under
the radar. (I've seen a few. But usually I am late enough in the spam
rotation and reading the spams, if I do at all, that by then the site
is tagged and often taken down.)
It is REALLY easy to give a single IP address a large number of names.
So working off names is not really effective except for the vague
potential of click fraud and mailing dummied up replies to phishes.
(It would be a real serious gas to hook a 419 phish to Eliza and
watch for the results. Generate a somewhat paranoid Eliza then sit
back and party. Of course, if *I* could think of this extension of
the "lead them on" counter phish then I am sure somebody else has
already done it and simply failed to share it with us. If they have
and have successfully eaten a phisher's time more power to them and
I curtsey in their general direction.)
Blackballing names is something I've played with. It's only effective
for a few days except in really odd cases then we have all new names
to blackball. "Blacklist_from" suffers much the same problem. And
that is generally a more permanent address.
Of course, some spammers are more agile than others. I've seen large
numbers of Leo Kuvawhosiz addresses in one day, for example.
{^_^}
