> I don't know how this will work but I'm building the data now. For > those of you who are familiar with Day old bread lists to detect new > domains, as you know there's a lag time in the data and they often > don't have data from all the registries. So - here's a different > solution. > > What I'm thinking is to accumulate every domain name that interacts > with my system and storing it in a list. Eventually after a week or > so I should have a good list. Then the idea is to do a lookup to see > if a new domain is NOT on the list. This will catch all really new > domains, but will have some false positives. But - if it is mixed > with other conditionals it might be a good way to detect and block > spam from or linking to tasting domains.
If you use the AWL, you have the list ready. Just scan the AWL DB for domain names. AWL has even more precise data than you want to gather. We could use it as well. If we assume we trust a new sender less than a sender we've already seen, then just score any message that has a sender not contained in the AWL DB (eg +1.0). -- Paweł Sasin "WIRTUALNA POLSKA" Spolka Akcyjna z siedziba w Gdansku przy ul. Traugutta 115 C, wpisana do Krajowego Rejestru Sadowego - Rejestru Przedsiebiorcow prowadzonego przez Sad Rejonowy Gdansk - Polnoc w Gdansku pod numerem KRS 0000068548, o kapitale zakladowym 67.980.024,00 zlotych oplaconym w calosci oraz Numerze Identyfikacji Podatkowej 957-07-51-216.