The 10 worst …

Spamhaus gave a bunch of us a preview of their new “Top 10 worst” (or should that be bottom 10?) lists at M3AAWG. These lists have now been released to the public.
sh_logo1
The categories they’re measuring are:

Nothing really surprising there, but it’s nice to see the numbers.
I have to wonder if the listing of the top 10 spammers will change the minds of some of the anti-CASL folks. To listen to them all the “real” spammers are criminals hiding over seas. But, according to Spamhaus, 6 of the top 10 spammers are in the US and two of the others are in Canada (albeit with Russian influence). Only two of the top 10 spammers are outside North America.
The other thing that surprised me about the top 10 spammers is that I recognize some of the names from names clients have mentioned to me as legitimate marketing partners and affiliates. These hard core spammers, some of the worst in the world, convince real companies to pay them money to send mail. It’s great for the spammers, they get paid whether or not mail is delivered. In my experience, though, it’s not so great for their customers though. Customers frequently end up dealing with major delivery problems, even for the mail the send directly.
Another thing worth discussing is the list of TLDs. This is TLDs that have the highest ratio of spam domains compared to the total number of domains in the TLD, it’s not a list of TLDs with the most spam domains. I expect that award goes to .com. I do expect this to be a volatile list. Spammers are, at heart, cheap con artists. While they will spend money to try and get their mail through, they’ll also try to find a deal when they can. As TLDs run sales and offer incentives, they’re going to attract more spammers.
I have heard some folks managing the filters saying that the new and non-standard TLDs are treated as guilty until proven innocent. I think until the TLD owners figure out they need to actually pay attention to abuse it’s best to stick with the mainstream TLDs.

Related Posts

What happened with the CBL false listings?

The CBL issued a statement and explanation for the false positives. Copying it here because there doesn’t seem to be a way to link directly to the statement on the CBL front page.

Read More

Things you need to read: 2/5/16

gearheadAsk the Expert: How Can Email Marketers Stay Out of Gmail Jail and in the Inbox? The expert in question is an old friend of mine, Andrew Barrett. I met Andrew online in the late 90s, and we worked together (briefly) at MAPS. He was out of email for a while, but I’m pleased he came back to share his talents with us. The information in the article is valuable for anyone who struggles with getting to the Gmail inbox.
Unclutter Your Inbox, Archive & Keep Your Messages. Shiv Shankar talks about some new features at Yahoo Mail. With a simple click, you can archive email so it’s available to search, but not cluttering up your inbox. One of the things that jumped out at me from that article is that Yahoo is providing 1 TB of storage. That’s more than Google!
The EEC is doing a survey on the impact of CASL and want to hear from marketers. Go check out their blog post and take their survey.
Sparkpost has a guest blog from Alex Garcia-Tobar, co-founder of Valimail about common DKIM failures. I’ve met Alex a few times and I’ve always found him a pleasure to talk to. Alex is somewhat new in the email space, but he really gets some of the challenges in the authentication space. A lot of the issues he mentions in that blog post like lack of key rotation and shared keys are some of the technical debt I was talking about in my predictions for 2016 post.
What links have you read this week that are worth sharing?

Read More

Increase in CBL listings

Update: As of Nov 24, 2015 11:18 Pacific, Spamhaus has rebuilt the zone and removed the broken entries. Expect the new data to propagate in 10 – 15 minutes. Delivery should be back to normal.
The CBL issued a statement, which I reposted for readers that find this post in the future. I think it’s important to remember there is a lot of malicious traffic out there and that malicious traffic affects all of us, even if we never see it.
Original Post from 10am pacific on Nov 24
cbl-logo-2012
Mid-morning west coast time, I started seeing an uptick in reports from many ESPs and marketers that they were getting listed on the XBL/CBL. Listings mentioned the kelihos spambot.

Read More