You are not logged in.

#1 2011-08-01 9:03 am

zinga
Member
Registered: 2011-08-01
Posts: 4

API queries for email always get domain?

Hi,
There seems to be a mismatch between API queries for emails and the search form on the website.

Here's an example:
http://www.stopforumspam.com/api?email= … ghtmail.ru (255 results)
http://www.stopforumspam.com/search.php … ghtmail.ru (no results)

Even the domain search seems to be a bit off:
http://www.stopforumspam.com/search.php?q=@nightmail.ru (250 results)
http://www.stopforumspam.com/api?email=@nightmail.ru (255 results)

I'm going to assume that this difference is just due to the front-end searcher limiting stuff to 250 results, and the API limiting to 255 results.
But is there any way to force the API to check the exact email and not the domain?

I'm getting legit users using the email domain, which are obviously being blocked by SFS because it appears the API is just completely blacklisting the domain.

Thanks.

Offline

#2 2011-08-01 9:25 am

pedigree
uıɐbɐ ʎɐqǝ ɯoɹɟ pɹɐoqʎǝʞ ɐ buıʎnq ɹǝʌǝu ɯ,ı
From: New Zealand
Registered: 2008-04-16
Posts: 7,104

Re: API queries for email always get domain?

Anything with a result of 255 that refreshes the lastseen each time you reload it, is listed as a "bad domain", which is one rotating email address as a method to avoid email matching; a deliberate attempt to bypass the api functionality.

Normal process for adding a domain is to ensure its not a legitimate site.  As the time of its addition, it was either not loading or was being abused (see http://www.stopforumspam.com/search?d=nightmail.ru)

Ill remove this domain from the list but I would heavily suggest that if you dont have a Russian/Euroasian website, that you block this domain yourself.

Offline

#3 2011-08-01 10:16 am

zinga
Member
Registered: 2011-08-01
Posts: 4

Re: API queries for email always get domain?

Thanks for the response.

pedigree wrote:

Anything with a result of 255 that refreshes the lastseen each time you reload it, is listed as a "bad domain", which is one rotating email address as a method to avoid email matching; a deliberate attempt to bypass the api functionality.

I can understand the rationale for forcing a domain-wide block in the API, which is why I was inquiring whether there was a method to force it to exact match email addresses (short of me querying the front-end and parsing the output).
Is there perhaps some argument that can be added for this?  eg

http://www.stopforumspam.com/api?email=non-existent-email@nightmail.ru&force_exact_email=1

Last edited by zinga (2011-08-01 10:17 am)

Offline

#4 2011-08-01 10:21 am

pedigree
uıɐbɐ ʎɐqǝ ɯoɹɟ pɹɐoqʎǝʞ ɐ buıʎnq ɹǝʌǝu ɯ,ı
From: New Zealand
Registered: 2008-04-16
Posts: 7,104

Re: API queries for email always get domain?

zinga wrote:

Thanks for the response.

pedigree wrote:

Anything with a result of 255 that refreshes the lastseen each time you reload it, is listed as a "bad domain", which is one rotating email address as a method to avoid email matching; a deliberate attempt to bypass the api functionality.

I can understand the rationale for forcing a domain-wide block in the API, which is why I was inquiring whether there was a method to force it to exact match email addresses (short of me querying the front-end and parsing the output).
Is there perhaps some argument that can be added for this?  eg

http://www.stopforumspam.com/api?email=non-existent-email@nightmail.ru&force_exact_email=1

There will be shortly, with a &nobademail command passed to the api.  its not live yet but is live on our test server.  This extends to nobadip, nobadusername and nobadall to skip bad field matching on each field.

Offline

#5 2011-08-01 10:49 am

zinga
Member
Registered: 2011-08-01
Posts: 4

Re: API queries for email always get domain?

pedigree wrote:

There will be shortly, with a &nobademail command passed to the api.  its not live yet but is live on our test server.  This extends to nobadip, nobadusername and nobadall to skip bad field matching on each field.

That sounds interesting.

How does the "nobadusername" work?

Offline

#6 2011-08-01 11:57 am

pedigree
uıɐbɐ ʎɐqǝ ɯoɹɟ pɹɐoqʎǝʞ ɐ buıʎnq ɹǝʌǝu ɯ,ı
From: New Zealand
Registered: 2008-04-16
Posts: 7,104

Re: API queries for email always get domain?

At the moment, there are a couple of bad usernames.  xrumer being one.  If you query for xrumer_seo@gooddomain.com, it will response as a valid spammer.

Offline

#7 2011-08-01 12:01 pm

zinga
Member
Registered: 2011-08-01
Posts: 4

Re: API queries for email always get domain?

Oh I see.
Thanks for all the responses.
The changes sound great! smile

Offline

Board footer

Powered by FluxBB

Close
Close