[Bug 2944] New: New non-local test: age of domain names in spam

[bu...@bugzilla.spamassassin.org]

http://bugzilla.spamassassin.org/show_bug.cgi?id=2944

           Summary: New non-local test: age of domain names in spam
           Product: Spamassassin
           Version: 2.61
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Rules
        AssignedTo: spamassassin-dev@incubator.apache.org
        ReportedBy: spamass@hcidesign.com


I've found that spammers very frequently register a URL and then use it as a 
destination for a spam email advertisement within a week of that registration. 

So here is the idea:

1) extract URLs in message
2) ask whois how old the registration is for those URLs
3) score young URLs as more likely to be spam
4) score old URLS (1 year old, let's say) as less likely to be spam.

Any old url used for spam advertisements is likely to already be listed as a 
known destination for spam, so it won't be easy for spammers to work around 
this one.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.