URL host links limit

[gnarlymarley]

I have noticed that sometimes spammers use too many URLs in their spam.  Would it be possible to group links by hostname and processs them by that?  When the report is sent, they combine there.  Moving it to the hostname means if all the links share the same hostname, they can still be reported.  This would also save on DNS look ups if the links are below the limit.

https://www.spamcop.net/sc?id=z6698896959z37653b35adb76c14bc27cd5541f78a03z

[petzl]

6 hours ago, gnarlymarley said:

I have noticed that sometimes spammers use too many URLs in their spam.  Would it be possible to group links by hostname and processs them by that?  When the report is sent, they combine there.  Moving it to the hostname means if all the links share the same hostname, they can still be reported.  This would also save on DNS look ups if the links are below the limit.

https://www.spamcop.net/sc?id=z6698896959z37653b35adb76c14bc27cd5541f78a03z

Sometimes yo goto do this your self Namecheap sites are the ones that hammer our group here!
Domain Name: TIZIFI.COM
   Registry Domain ID: 2522690312_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.namecheap.com
   Registrar URL: http://www.namecheap.com
   Updated Date: 2020-05-06T08:47:07Z
   Creation Date: 2020-05-06T08:47:04Z
   Registry Expiry Date: 2021-05-06T08:47:04Z
   Registrar: NameCheap, Inc.
   Registrar IANA ID: 1068
   Registrar Abuse Contact Email:  mailto:abuse[AT]namechea[DOT].com
 

[gnarlymarley]

Here is another tracking URL that demonstrates what I mean by combining.  In this example, we can see that it looks up two different hostnames.  It would be nice if these could be grouped by server name so that it would only have to do two look ups instead of four.

https://www.spamcop.net/sc?id=z6698611793zb63e53a6ab1d3867166620a089eae7a8z