On Fri, June 19, 2009 00:22, Yet Another Ninja wrote: > w-crook.com.ar.multi.uribl.com has address 127.0.0.2 > w-crook.com.ar.multi.surbl.org has address 127.0.0.46
it now make sense with ttl in 300 sec :) but if i get time, i would make meta rules to spot the phish sometime is the exe even detected in clamav now ? -- xpoint
