Patent ID: 7516184
Filing Date: 2009-04-07
Classification: G06Q,H04L

Abstract:
1. A method for evaluating a message comprising: receiving said message including an originator; authenticating that said message originated at said originator; performing a registrar lookup to determine a registrar for said originator; performing a registrar reputation lookup for determining a registrar reputation for said registrar, wherein said registrar reputation is based at least in part on a monitored behavior of said registrar in registering one or more domains associated with a distribution of unwanted messages; calculating a registrar reputation factor based upon the registrar reputation; determining whether said message includes a specific feature; calculating a specific feature factor; determining whether said message includes a specific character string; calculating a specific character string factor; summing the registrar reputation factor, the specific feature factor, and the specific character string factor to obtain a total score; and comparing the total score with a threshold value.