Go Back    Forum > Featured > General Discussion

Reply
 
LinkBack Thread Tools
  #1  
08-02-2020, 07:58 AM
lordsmurf's Avatar
lordsmurf lordsmurf is online now
Site Staff | Video
 
Join Date: Dec 2002
Posts: 13,502
Thanked 2,448 Times in 2,080 Posts
This site needs your help.

I need an "easy button" for some forum admin tasks. The manual methods are just too unwieldy.


The bounty:

I'm not necessarily asking for free help here -- though it would be nice. Perhaps you can return the favor for my past advice that helped you?

If not, I can offer:
- free Premium Membership (with benefits growing after new site is launched, price increasing)
- discount on my hardware
- some money
- a favor, to be used at a later date, and that's never a bad thing to have with me
- some tape conversion work, either discounted or free (least preferred, but will do it begrudgingly)
- some combination of the above

So, with that out of the way, onto the help needed...


The reason:

Spam is a problem.
Disposable email accounts are a problem.

In recent years, lots of anti-spam and anti-disposable APIs have popped up. Most want a high monthly fee. Several are dubious in origin. Most are dubious in reliability. All seem to have wasteful API calls (thus incur more charges) by verifying known-crap addresses and TLDs. Most/all of these services were born from updates lists found at Github. I wouldn't even be surprised if these pay services were using Github/etc as their backend database source origins.

I want to do better, less wasteful for both expenses and resources.

I want to get multiple external lists, our own internal lists, merge/de-dupe, then implement on a regular basis. We audit email signups at least once per month, and I cringe when I see that spam or disposables were allowed in.


The script(s?) wanted:

I want to be able to dump a list of domains.
Example:
Code:
0-mail.com
0815.ru
10minutemail.com
etc
Dump those into a script. It will auto-remove any domains with TLDs that have been blocked wholesale. For example, .ru and .xyz are fully blocked here, we have near-zero legitimate signups from those TLD sources.

That will leave .com and others.

Another script (or the same script) can de-dupe, and then sort.

I need two sorts available:
(1) alphabetical, and
(2) alphabetical by TLD. This way, bad TLDs can be seen more easily.

Subdomains and compound CC TLDs must be considered. So "spam.163.com" is alphabetical by "163" and TLD is ".com". I'm fungible on this small area of the script sorting, something just needs to work easily here.

Full email lists are available for this, so you can test sort with live data.


Questions?

Post questions here, any clarifications needed. Then we can move to PM/email as needed.

I really hope somebody(ies) here has the skills to do any/some/all of this. This is too far outside my skills.

- Did my advice help you? Then become a Premium Member and support this site.
- For sale in the marketplace: TBCs, workflows, capture cards, VCRs
Reply With Quote
Someday, 12:01 PM
admin's Avatar
Ads / Sponsors
 
Join Date: ∞
Posts: 42
Thanks: ∞
Thanked 42 Times in 42 Posts
  #2  
08-04-2020, 09:52 PM
keaton keaton is offline
Premium Member
 
Join Date: Jan 2017
Location: USA
Posts: 184
Thanked 85 Times in 60 Posts
I spent a couple hours doing a quick python script to take a text file as input with one domain entry per line, and generate two text files out. Here's a sample of the test input and output I did, to see if this is what you are envisioning.

Input file
Code:
www.alpha.com
charlie.xyz
www.beta.cc
alien.io
charlie.xyz
www.yahoo.com
Output - Alpha sorted
Code:
alien.io
www.alpha.com
www.beta.cc
charlie.xyz
www.yahoo.com
Output - TLD sorted
Code:
www.beta.cc
www.alpha.com
www.yahoo.com
alien.io
charlie.xyz
Currently, these two output files are generated from scratch each time.

Assuming this is on the right track so far, it seems you also want to give it a second input file that looks like this
Code:
.xyz
.io
.ru
This input file would be used to prune the list of domains before they are output, as shown above. Another output file could be added which would list all the domains that were pruned during this process. I suppose those could also be output as two separate files using the same sort method described above for the 'good' domains, if desired.

Would this input file only contain entries with a single dot in them, i.e. ".ru", but not ".domain.ru"? If not, how many layers of "nesting" would be the maximum?

If output files for 'bad' domains is wanted. Do they need to be added to existing output files? Or would they also be generated from scratch each time like the 'good' output files example mentioned above?
Reply With Quote
  #3  
08-05-2020, 09:17 AM
lordsmurf's Avatar
lordsmurf lordsmurf is online now
Site Staff | Video
 
Join Date: Dec 2002
Posts: 13,502
Thanked 2,448 Times in 2,080 Posts
The above script you're worked on looks like it might somewhat do what is wanted here: http://www.digitalfaq.com/forum/news...ase-email.html
- sort emails by TLD
- sort by FQDN (domain, not subdomain)
- sort by TLD
- main missing aspect is filter out freemails (gmail, hotmail, etc)

Happy butterflies in stomach, elated anticipation there, for that one.

For the spam/disposable de-dupe, this what is needed, why, where the data comes from, how it will be used:

These are our current internal lists, which block forum registrations:

Worthless TLDs, 99-100% used by spam or abuse.
Code:
.accountant
.ae
.af
.asia
.bid
.by
.cat
.cc
.cf
.click
.club
.country
.cn
.cx
.date
.dj
.download
.faith
.fun
.ga
.gdn
.gq
.hk
.hm
.id
.info
.ir
.jetzt
.kim
.kr
.la
.life
.link
.live
.loan
.ltd
.me
.men
.ml
.mobi
.mom
.museum
.nf
.ninja
.np
.qq
.online
.ooo
.ovh
.party
.ph
.pw
.pm
.pro
.racing
.red
.reise
.ren
.rocks
.ru
.science
.so
.space
.st
.stream
.su
.tc
.tk
.to
.top
.trade
.ua
.vip
.vn
.wang
.webcam
.win
.work
.world
.ws
.xyz
.zip
Known subdomain use, bad domains. These are wildcarded entries:
Code:
.10mail.org
.1s.fr
.33mail.com
.abrupter.com
.adriaticmail.com
.anonbox.net
.axeprim.eu
.bulc.club
.ceramicsouvenirs.com
.coolyarddecorations.com
.dropmail.me
.dynainbox.com
.e4ward.com
.emailtmp.com
.emific.com
.factorican.com
.goverloe.com
.hopto.org
.ilyushu.com
.instambox.com
.itemxyz.com
.mailcatch.com
.mailexpire.com
.marvsz.com
.mezimages.net
.minemail.in
.minespace.in
.mintemail.com
.mistrioni.com
.otherinbox.com
.piquate.com
.pixymix.com
.thc.lv
.universallightkeys.com
.vondata.com.ar
.yourdomain.com
.x24hr.com
Bad domains:
Code:
@0clickemail.com
@0hcow.com
@0hdear.com
@0hio.net
@0ils.org
@0live.org
@0nce.net
@0wnd.net
@0wnd.org
@10mail.org
@10minut.com
@10minut.com.pl
@10minutemail.co.uk
@10minutemail.com
@10minutemail.de
@10minutemail.eu
@10minutemail.net
@10minutemail.org
@10minutemail.us
@10minutmail.pl
@115mail.net
@123-m.com
@126.com
@139.com
@163.com
@1pad.de
@10minutemail.co.uk
@10minutemail.co.za
@1shivom.com
@20email.eu
@20mail.in
@20mail.it
@20minutemail.com
@21cn.com
@24hinbox.com
@2emea.com
@2odem.com
@2prong.com
@30minutemail.com
@33mail.com
@3d-painting.com
@4warding.com
@4warding.net
@4warding.org
@6ip.us
@6paq.com
@6url.com
@60minutemail.com 
@675hosting.com
@675hosting.net
@675hosting.org
@7days-printing.com
@7tags.com
@75hosting.com
@75hosting.net
@75hosting.org
@9ox.net
@99experts.com
etc
We audit registrations, and update this list as needed. But that is a reactive method. To be more proactive, I want to compare the internal domain list to these:

https://gist.github.com/adamloving/4401361
https://github.com/ivolo/disposable-.../wildcard.json
https://gist.github.com/pakoito/adfc...ddress-domains
https://github.com/TicketeStartup/te...l-domains.json
https://www.mogelmail.de/# (bottom of page)

I can prepare a single text file, with all domains, one per line, from all available lists/sources.
Each lists is a tad different, but Notepad++ can help there.
Some of the above lists are also no longer updated, so this will be a one-and-done on those lists.
More will be added as needed, updated lists re-processed when re-running the script.

Now look at that first "adamloving" link, specifically these entries at/near the top:
Code:
0-mail.com
0815.ru
0clickemail.com
0wnd.net
0wnd.org
antichef.net
antispam.de
baxomale.ht.cx
It has worthless entries. Specifically the .RU and .CX domain. The script that processes these should remove/trash those entries on the de-dupe and sort (using the worthless TLD list at top, and I'm assuming a back-to-front search algorithm will find those).

We tried to de-dupe in Excel, and got nowhere, overly complex, version specific.
And it still didn't address all the worthless TLD-using domain in the list, and I found myself trying manually removing way too many entries.

With the sorted, de-duped, and bad-TLD-removed list, as output by the script, we can quickly add back the @ (or can the script do that in output file?), and it's ready for a quick manual review. After review, ready for use in the internal blocklists.

The only possible sticking point is subdomains, which are wildcarded by the spammers (and thus wildcard blocked), so those should not appear in the sorted domains list. Manual review may be unavoidable, because a simple "two-dots" method won't work due to ccTLD like domain.co.uk. Something that states if length >3 for either dot then subdomain (spammer.spam.com where "spam"=4), if <3 assume ccTLD (notspam.co.uk, as both =2). I can help program, I can follow the logic, but writing is a weakness.

This is one method used to keep the forum free of spam and "anonymous"/disposable abuse.

On your nested question, it is realistically never more than 3 or 4.
- subdomain.spammer.com
- subdomain.spammer.co.uk
- the "adamloving" list has an entry for "ypmail.webarnak.fr.eu.org", but that's a weird outlier that you'll never see in practice. I'm not concerned about anything so large, as it gets into complex DNS that most spammers won't know how to do.

Does this all make more sense now?

I think what you've done so far is on the right track to zap both of our needs.
I need one of those bowing smileys.

- Did my advice help you? Then become a Premium Member and support this site.
- For sale in the marketplace: TBCs, workflows, capture cards, VCRs
Reply With Quote
Reply




Similar Threads
Thread Thread Starter Forum Replies Last Post
Help wanted: Database email export sorting script/app? lordsmurf General Discussion 2 10-30-2023 07:52 AM
Composite vs. s-video output mod, image quality comparision ofesad Capture, Record, Transfer 21 10-27-2023 02:43 AM
Luminance clipping in capture Pt1: PAL VCR comparision Bogilein Capture, Record, Transfer 12 05-27-2020 03:04 AM
Dupe content a.k.a. Google doesn't care if you own the content admin Web Development, Design 1 07-25-2013 07:04 PM
How to author a comparision DVD? manthing Author, Make Menus, Slideshows, Burn 4 06-20-2010 05:15 AM

Thread Tools



 
All times are GMT -5. The time now is 08:34 AM