[geeklog-devtalk] Spam warnings?

[Michael Askew]

Dirk,


> MTBlacklist doesn't even list the domain they used on Thursday, and 

> they

> used new domains on Friday, Saturday, and today (ro7kalbe DOT com and

> vrajitor DOT com are todays domains, less than 2 hours old).


Good point about the age of the domains. I recently did an analysis of 
some spam going to a mailing list I manage over a two week period. It 
seemed clear that most of the spam was from the same source, but no two 
messages contained links with the same domain. All the domains I 
checked out were less than a month old, and owned by the same person.

Is there merit in writing a filter based on the ages of domains 
appearing in links? Or based on the name/email of the domain's owner? I 
wonder how much of a delay that would cause when content is submitted, 
and if a cache of passed/failed domains would help.

-Michael