Thoughts?
Other than the fact I tend to agree with its conclusions by looking at those hostnames, I suppose it means that the plugin needs some special case exceptions for ebay, paypal, and amazon.
Maybe it will need to run after domainkeys (if that is running) to help verify that the paypal/ebay path isn't too obviously spoofed. (Although that check can be done fairly well simply with a regex.)
Loren
