Re: Question about AI generated spam and prompts

Hi!

Those are ongoing for over a year. Very high volume and many new domain regi=
strations.=20

Some of the problems we saw recently is that we listed large batches in SURB=
L and several are no longer in DNS when the campaigns go out due to the quic=
k takedowns.

Another part of the set they use older com domains with =E2=80=98ok=E2=80=99=
 reputation and shortly before the sending they move them to Cloudflare.=20

Can outline a lot about this specific =E2=80=98sender=E2=80=99 as we have be=
en closely following them for a long time now.=20

Lots of the same campaign types but the variations are always tiny. Harder t=
o filter unfortunately.=20

They use 20-25 domains a day for this. Parts are aged and parts are brand ne=
w=E2=80=A6=20

With kind regards,
Raymond Dijkxhoorn

> Op 30 mei 2026 om 19:40 heeft John Hardin <[email protected]> het volgend=
e geschreven:
>=20
> =EF=BB=BFOn Fri, 29 May 2026, Tom Williams via users wrote:
>=20
>> I have a few samples of these if anyone is interested.
>=20
> Feel free to send me an archive via private email. The messages ideally ne=
ed to be complete raw messages (all headers intact). If you need to sanitize=
 local domain info feel free.
>=20
>=20
> --
> John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
> [email protected]                         pgpk -a [email protected]
> key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
> -----------------------------------------------------------------------
>  Journalism is about covering important stories.
>  With a pillow, until they stop moving.               -- David Burge
> -----------------------------------------------------------------------
> 7 days until the 82nd anniversary of D-Day