Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Spamassassin KAM_SOMETLD_ARE_BAD_TLD
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Spamassassin KAM_SOMETLD_ARE_BAD_TLD

jmginerjmginer Member, Patron Provider

Hello, just to inform a interesting issue that we have detected witth a customer.

If you send emails using a TLD like:

.stream, .trade, .pw, .top, .press, .bid & .date

You have a high probability to become considered as SPAM.

The Spamassassin rule is named: KAM_SOMETLD_ARE_BAD_TLD

Thanked by 1WSS

Comments

  • WSSWSS Member

    That rule rules.

  • rm_rm_ IPv6 Advocate, Veteran
    edited March 2018

    kek (edit: that's not a TLD yet?)

  • Shot2Shot2 Member

    @jmginer said:
    Hello, just to inform a interesting issue that we have detected witth a customer.

    If you send emails using a TLD like:

    > .stream, .trade, .pw, .top, .press, .bid & .date
    > 

    You have a high probability to become considered as SPAM.

    The Spamassassin rule is named: KAM_SOMETLD_ARE_BAD_TLD

    Sheer stupidity. Laziness-as-fuckness.

  • NeoonNeoon Community Contributor, Veteran
    edited March 2018

    Its reasonable, these domains cost barely 0.50$, which seem to pull a lot of these shit heads, setting up a page for trojans and viruses.

    The same is for CSGO, Valve drops CSGO to 10 bucks, and guess next day?

    40k new accounts banned due to cheating.

    Everyone who uses csgo shit his pants.

  • AidanAidan Member

    What about .tk & all of those "free" domains?

  • NeoonNeoon Community Contributor, Veteran

    @Aidan said:
    What about .tk & all of those "free" domains?

    These are even worse, better get .ovh

  • hzrhzr Member

    KAM* implies this is a user-contributed filter that is neabled and picked up by certain users, not part of SA Core

    Thanked by 2PandaRain mrTom
  • lemonlemon Member

    Get that customer a new domain with a tld that doesn't look like they're going to disappear in 4 weeks.

    Thanked by 1ucxo
  • WSSWSS Member

    What about .bike and .cricket tho!?!!

  • AidanAidan Member

    @WSS said:
    What about .bike and .cricket tho!?!!

    Premium domains, automatically whitelisted.

    Thanked by 1ElliotJ
  • rm_rm_ IPv6 Advocate, Veteran

    hzr said: KAM* implies this is a user-contributed filter that is neabled and picked up by certain users

    Wow, neabled is almost its own wrod by now

  • trnjtrnj Member
    edited March 2018

    .ml is a scpam extetion. Block it everywhere (in mail servers and etc).
    African "mafia" uses it to scam people around the world.

    They are pretending to be an American company (under different names), but based in Maryland (maybe that's why they take .ml extension).

  • Isn't Maryland abbreviated as MD?

    Thanked by 1Aidan
  • AidanAidan Member

    @saibal said:
    Isn't Maryland abbreviated as MD?

    Indeed, though scammers aren't the smartest...

  • trnjtrnj Member
    edited March 2018

    @saibal said:
    Isn't Maryland abbreviated as MD?

    I know, but maybe it sounds similar to people from other countries (I do not know the actual reason).

    For example

    [email protected]

    MARYLAND U.S.A

    P.O BOX 77677 MARYLAND

    And tons of similar ml domains under control of these scam corporations (african mafia from cameroon).

  • lemonlemon Member
    edited March 2018

    Yes, only people from africa scam.

  • trnjtrnj Member
    edited March 2018

    @lemon said:
    Yes, only people from africa scam.

    I think they are big companies with a lot of staff in africa and the us (probably native black from the us or africans on tourist visas).

    So be careful with this extention and block it if possible.

  • hzrhzr Member

    trnj said: probably native black from the us or africans on tourist visas

    what the fuck

    Thanked by 3Aidan lemon tehdan
  • trnjtrnj Member

    @hzr said:
    what the fuck

    People think they are dealing with the US company, actually, they are supporting the economy of cameroon :) Sorry for offtop, just my 50 cents on sbj...

  • I have this issue too. Anyone knows what to enter into Spamassasin configuration file to disable this rule? I am not server admin, so i can only add rule, unable to delete files

    My idea to set score 1 instead of 5 is:
    score KAM_SOMETLD_ARE_BAD_TLD 1.0

  • postcdpostcd Member
    edited March 2022

    Mine mentioned rule worked, yet since received e-mail headers has in headers:

      2.0 PDS_OTHER_BAD_TLD      Untrustworthy TLDs
                                 [URI: abc.top (top)]
      1.0 KAM_SOMETLD_ARE_BAD_TLD .stream, .trade, .pw, .top, .press,
                                 .guru, .casa & .date TLD Abuse
    

    i will maybe lower the score even more to 0.

Sign In or Register to comment.