logo
home
datafeed
about
usage
mirrors
rss feeds
help us
links
contact
faq

 

Extra Datasets via Datafeed Service

The following datasets are not publically available, and can only be accessed through Datafeed Services. Additional datasets may be added if there is a specific need, and ideas for custom datasets are welcome.

  • domain_data.txt - This file contains domain names and meta data about the domain, including the age of the domain, the registrar of record, and xref score we associate with a domain to indicate its level of spamminess. NOTE: This zone should only be used to pull the TXT record result.
    # Example domain_data
    ..
    nevoxafeu.cn         :127.0.0.2:age=2;reg=35 TECHNOLOGY CO., LTD;xref=66.00
    microsoft.com        :127.0.0.2:age=6287;reg=TUCOWS INC.;xref=-21.00
    wingrespect.com      :127.0.0.2:age=2;reg=HICHINA WEB SOLUTIONS (HONG KONG) LIMITED;xref=100.00
    popularmechanics.com :127.0.0.2:age=4880;reg=NETWORK SOLUTIONS, LLC;xref=-18.00
    abcoemshop.com       :127.0.0.2:age=0;reg=TODAYNIC.COM, INC.;xref=100.00
    golf.com             :127.0.0.2:age=4804;reg=MARKMONITOR INC.;xref=-25.00
    ..
    
    # Example SpamAssassin Rule usage
    #   - Currently, no plugin exists to utilize this zone data.
    

  • black_ns.txt - This file contains nameservers we have identified as bad, and in turn proactively lists all domains registered against them to Gold and lists reactive hits to URIBL Black.
    # Example black_ns zone data
    ..
    ns1.gdlpdlvrydirect.net   :127.0.0.2:black_ns $ added on 2008-07-13 23:12:53
    ns1.panamans.com          :127.0.0.2:black_ns $ added on 2008-07-14 04:16:18
    ns1.easyquickdebts.com    :127.0.0.2:black_ns $ added on 2008-07-14 08:01:41
    ns0.holidaynicegood.com   :127.0.0.2:black_ns $ added on 2008-07-14 08:02:18
    ..
    
    # Example SpamAssassin Rule usage
    #   - urifullnsrhssub is a SpamAssassin 3.3 SVN feature only and will 
    #     not work in currently released versions of SpamAssassin!
    #   - Change blackns.your-domain.tld to the host you have this data loaded in
    #   - Rescore from 0.01 after testing effectiveness on your mail flow
    urifullnsrhssub	BLACK_NS        blackns.your-domain.tld.  A 2
    body            BLACK_NS        eval:check_uridnsbl('BLACK_NS')
    tflags          BLACK_NS        net
    score           BLACK_NS        0.01
    
    

  • black_nsip.txt - Same as black_ns.txt, but lists Nameserver IP Addresses.
    # Example black_nsip
    ..
    79.126.25.193 :127.0.0.2:black_nsip $ added on 2008-07-16 10:42:12
    67.18.198.162 :127.0.0.2:black_nsip $ added on 2008-07-16 11:31:34
    190.92.152.2  :127.0.0.2:black_nsip $ added on 2008-07-16 11:56:11
    63.216.251.67 :127.0.0.2:black_nsip $ added on 2008-07-16 12:55:15
    ..
    
    # Example SpamAssassin Rule usage
    #  - This rule will work in all SpamAssassin versions, as it works in the same 
    #    fasion as the Spamhaus SBL rule (URIBL_SBL).
    #  - Change blacknsip.your-domain.tld to the host you have this data loaded in
    #  - Rescore from 0.01 after testing effectiveness on your mail flow 
    uridnsbl         BLACK_NSIP         blacknsip.your-domain.tld.  A
    body             BLACK_NSIP         eval:check_uridnsbl('BLACK_NSIP')
    tflags           BLACK_NSIP         net
    score            BLACK_NSIP         0.01
    
    

  • black_a.txt - Same as black_ns.txt, but lists bad webhost IPs.
    # Example black_a
    ..
    217.112.37.32   :127.0.0.2:black_a $ added on 2008-07-13 09:41:30
    216.121.79.196  :127.0.0.2:black_a $ added on 2008-07-14 16:23:59
    222.208.183.174 :127.0.0.2:black_a $ added on 2008-07-14 16:35:37
    216.138.176.156 :127.0.0.2:black_a $ added on 2008-07-15 19:18:56
    ..
    
    # Example SpamAssassin Rule usage
    #  - No example provided.
    #  - A uridnsbl rule could be used in the same fashion as BLACK_NSIP is above
    #    to check to see if a NS resolves to a A record we have marked as serving
    #    spam drop pages.