Re: namechep and DOB

Mark London <[email protected]>
Newsgroups gmane.mail.spam.spamassassin.general
Message-ID <[email protected]>
Alex - Check out the FROM_FMBLA_NEWDOM rules.  Are you seeing any emails 
hitting them?

In my case, URIBL_RHS_DOB is no longer working at all.   Is this still 
working? - Mark

On 7/8/2024 5:13 PM, Alex wrote:
> Hi,
>
> I'm seeing emails from smartlendingclub dot com getting through that 
> are clearly spam. It's a namecheap domain registered in the last two 
> weeks or so.
>
> IIRC, in the past there was more flexibility with the URIBL_RHS_DOB 
> rules to penalize domains recently registered, but now it doesn't 
> appear to have hit any rules related to registration dates.
>
> Domain name: smartlendingclub dot com
> Registry Domain ID: 2891563192_DOMAIN_COM-VRSN
> Registrar WHOIS Server: whois.namecheap.com <http://whois.namecheap.com>
> Registrar URL: http://www.namecheap.com
> Updated Date: 0001-01-01T00:00:00.00Z
> Creation Date: 2024-06-17T18:42:01.00Z
> Registrar Registration Expiration Date: 2025-06-17T18:42:01.00Z
>
> This email also hit the following rules:
> describe RCVD_IN_IADB_VOUCHED   ISIPP IADB lists as vouched-for sender
>
> But this rule has virtually 0 score?
> describe RCVD_IN_IADB_DOPTIN_LT50  IADB: Confirmed opt-in used less 
> than 50% of the time
>
> It hit some other IADB rules like RCVD_IN_IADB_SENDERID but not any 
> DOB rules. Am I missing something? Maybe it was the HOSTKARMA rules 
> I'm remembering?
>
> Are there RBLs available that can be used to determine registrar or 
> date of registration? I understand the limits of querying a registrar 
> but thought there might be an RBL out there with this info?
>
>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.