On 05/23/2014 06:22 PM, James B. Byrne wrote:
While the number of messages getting through has dropped off to near zero this
morning I nonetheless took the time to look into registrars with respect to
SPAM and found this interesting web site: http://rss.uribl.com/nic/
As of this morning the top domain registrars with respect to spam origin are
these:
Top 100 Registrars with Blacklisted Domains for last 5 days
Rank Registrar Listed Active Percent
1 ENOM, INC. 3335 7403 45.05%
2 GO DADDY SOFTWARE, INC. 1326 12718 10.43%
3 GMO INTERNET, INC. D/B/A ONAMAE.COM AND DISCOUNT-DOMAIN.COM
1080 1692 63.83%
4 REGRU-REG-RIPN 592 1515 39.08%
5 PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
456 1660 27.47%
6 OVH 321 1710 18.77%
7 MONIKER ONLINE SERVICES, INC.
233 488 47.75%
. . .
If I read this correctly then one out of every two recently active Enom
registered domains is engaged in SPAM activities. What I cannot tell is
whether the total number of active domains refers to recent registrations (<5
days old) or number of domains registered with Enom that have evidenced some
Internet activity as measured by some indeterminate means.
I also note that the 'Privacy' service for the spam site owner contact
registered at Enom is Moniker. Who also has a one out of two ratio of spam
domains to total active domains.
If this information is accurate then it seems to me on the basis of the
evidence that it is entirely reasonable to block email from domains registered
with either Enom or Moniker; and GMO Internet looks like a good candidate as
well.
Comments?
Obviously "active domains" is what they're seeing in mailflow
Don't let such stats misguide you - the're just a snapshot taken off
mailflow, but the don't tell you how the ratio between spammy:nonspammy
outside that snapshot.
If you expect that by detecting "new" means less spam, you'll be
dissapointed.
(been there... .-)
