I just checked the all the spammy domains found on tonight's surge of spams that hit NANOG ...I checked them at http://multirbl.valli.org to see *which* DNS blacklists had each domain in the clickable link of each spam blacklisted. I did that check about an hour after those were sent, which was went I sat down at my computer and saw that. Here are the results: africancichlidphotos DOT com --listed on ivmURI --listed on HostKarma africameetsafrica DOT com --listed on ivmURI arpitshah DOT co DOT in --listed on ivmURI --listed on SpamHaus DBL dinkinsautoservice.com --listed on ivmURI --listed on HostKarma electronicstradingllc DOT com --listed on ivmURI hutsonlegal DOT com --listed on ivmURI --listed on HostKarma janatyachar.org --listed on ivmURI --listed on URIBL --listed on HostKarma marketingdeguerrilla DOT net --listed on ivmURI --listed on URIBL --listed on SURBL micheleruiz DOT com --listed on ivmURI --listed on HostKarma ogdenautomotiveinc DOT com --listed on ivmURI pilotsref DOT com --listed on ivmURI photographytoday DOT org --listed on ivmURI --listed on HostKarma probeautystudios DOT com --listed on ivmURI purefitnesslincoln DOT com --listed on ivmURI rosasmedley DOT com --listed on ivmURI --listed on HostKarma thomasanthonyguerriero DOT co --listed on ivmURI throughaglassdarkly DOT net --listed on ivmURI signranch DOT com --listed on ivmURI --listed on SpamHaus DBL stillbontechnology DOT com --listed on ivmURI studioprodutora DOT com DOT br --listed on ivmURI urbanfoodstrategies DOT com --listed on ivmURI As shown, I was happy to see that my own ivmURI blacklist was 21 for 21, and nothing else came close to that. (I also verified that ALL of the ivmURI listings happened BEFORE those spams were sent to NANOG). Keep in mind... this isn't a true measure of any one of those domain blacklists' overall effectiveness since this is just one tiny metric of one small type of very sneaky spam. So please don't think I'm trying to say that ivmURI is a replacement for SpamHaus' DBL list or SURBL or URIBL, etc... because those lists do likewise catch some spammy domains that ivmURI misses or hadn't gotten to yet. But it was still very satisfying to see this success. If it would help, I'll be happy to provide the operator of NANOG complementary access if so desired. PS - if the "hits" on other blacklists for these domains suddenly expands, that would be due to added listings which happened AFTER those spams were sent to the NANOG list. (and after I did this check) -- Rob McEwen +1 478-475-9032