From jeffc@surbl.org Tue May 10 07:34:11 2005
From: Jeff Chan <jeffc@surbl.org>
To: discuss@lists.surbl.org
Subject: [SURBL-Discuss] Feedback on adprofile.net wanted
Date: Mon, 09 May 2005 22:34:13 -0700
Message-ID: <357174725.20050509223413@surbl.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3393279075840391010=="

--===============3393279075840391010==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

adprofile.net reportedly appeared in a flowers.com ham as:

<td align=3D"middle"><a href=3D"http://tx.adprofile.net/tx/r?CID=3D12&M=3D3&s=
id=3D800ABC123"><IMG height=3D90
src=3D"http://a1234.g.akamai.net/f/1233/1234/1a/www.1800flowers.com/800f_asse=
ts/images/flowers/images/banners/swift me
too120X90.gif" width=3D"120" NOSEND=3D"1" border=3D"0"></a></td>

Yet it's listed on WS by Bill Stearns.   This may be a false
positive.  Does anyone have any more information about it?

Catherine Hampton says it's not on her spam radar and others
have said that they may be web spammers on guestbooks, wikis,
etc. but not email spammers.  They seem to have some minor
NANAS.

Feedback wanted.  :-)

Jeff C.
--
Don't harm innocent bystanders.


--===============3393279075840391010==--


From schampeo@hesketh.com Tue May 10 08:07:37 2005
From: Steven Champeon <schampeo@hesketh.com>
To: discuss@lists.surbl.org
Subject: Re: [SURBL-Discuss] Feedback on adprofile.net wanted
Date: Tue, 10 May 2005 02:07:20 -0400
Message-ID: <20050510060720.GA13827@hesketh.com>
In-Reply-To: <357174725.20050509223413@surbl.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============6993687918544966261=="

--===============6993687918544966261==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

on Mon, May 09, 2005 at 10:34:13PM -0700, Jeff Chan wrote:
> adprofile.net reportedly appeared in a flowers.com ham as:
>=20
> <td align=3D"middle"><a href=3D"http://tx.adprofile.net/tx/r?CID=3D12&M=3D3=
&sid=3D800ABC123"><IMG height=3D90
> src=3D"http://a1234.g.akamai.net/f/1233/1234/1a/www.1800flowers.com/800f_as=
sets/images/flowers/images/banners/swift me
> too120X90.gif" width=3D"120" NOSEND=3D"1" border=3D"0"></a></td>
>=20
> Yet it's listed on WS by Bill Stearns.   This may be a false
> positive.  Does anyone have any more information about it?

Seen here tonight in spam for idiotclimber.com et al.:

<center><br><br><font size=3D1 face=3Dverdana color=3Dgray>If you wish to sto=
p future
messages from  Christianfamilyloans, please <a
href=3D"http://tx.adprofile.net/tx/r?CID=3D46505&ADTBID=3DEMAIL604"> follow t=
his link
</a> <br>or contact us at: Christianfamilyloans, P.O. Box 78361, San
Francisco, CA 94107-8361.
</font><br><br>

Note that the other CAN-SPAM mention is commented out at the top of
the HTML message, so who knows?

This email is a commercial advertisement sent in compliance with the
CANSPAM Act of 2003. We have no desire to send you information that is
not wanted, therefore, if you wish to be excluded from future mailings,
please use the link at the bottom of the page.

This is an email promotion being sent to you by idiotclimber.com. To
stop all future mailings, follow the link below or send your email
address to:

                Member Services
                   242 W. 36th St,12th floor New York, NY 10018
                 (866) 872-6022

http://www.idiotclimber.com/cgi-bin/unsubscr.cgi?email=3D445273&cid=3D34&pid=
=3D     =20

Other domains:

ibidclause.com
idiotclimber.com
idoiclamp.com
iflager.com
indigocraze.com
instepluck.com
interchairs.com
intercheeze.com
interestlone.com
iratelamp.com
iratelounge.com
ironcleets.com
ironiclever.com
ironlaser.com
itchinglover.com

--=20
hesketh.com/inc. v: +1(919)834-2552 f: +1(919)834-2554 w: http://hesketh.com
join us!   http://hesketh.com/about/careers/account_manager.html    join us!

--===============6993687918544966261==--


From jeffc@surbl.org Tue May 10 17:36:30 2005
From: Jeff Chan <jeffc@surbl.org>
To: discuss@lists.surbl.org
Subject: Re: [SURBL-Discuss] Feedback on adprofile.net wanted
Date: Tue, 10 May 2005 08:36:42 -0700
Message-ID: <818639413.20050510083642@surbl.org>
In-Reply-To: <357174725.20050509223413@surbl.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3758435656697934075=="

--===============3758435656697934075==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

On Monday, May 9, 2005, 10:34:13 PM, Jeff Chan wrote:
> adprofile.net reportedly appeared in a flowers.com ham as:

> <td align=3D"middle"><a href=3D"http://tx.adprofile.net/tx/r?CID=3D12&M=3D3=
&sid=3D800ABC123"><IMG height=3D90
> src=3D"http://a1234.g.akamai.net/f/1233/1234/1a/www.1800flowers.com/800f_as=
sets/images/flowers/images/banners/swift me
> too120X90.gif" width=3D"120" NOSEND=3D"1" border=3D"0"></a></td>

> Yet it's listed on WS by Bill Stearns.   This may be a false
> positive.  Does anyone have any more information about it?

> Catherine Hampton says it's not on her spam radar and others
> have said that they may be web spammers on guestbooks, wikis,
> etc. but not email spammers.  They seem to have some minor
> NANAS.

> Feedback wanted.  :-)

OK we know they appear in spam, but does adprofile.net appear in
any other ham?  Would folks with ham corpora please check this
one?

TIA,

Jeff C.
--
Don't harm innocent bystanders.


--===============3758435656697934075==--


From brettc@ActiveState.com Wed May 11 03:53:34 2005
From: Brett Cove <brettc@ActiveState.com>
To: discuss@lists.surbl.org
Subject: Re: [SURBL-Discuss] Feedback on adprofile.net wanted
Date: Tue, 10 May 2005 18:57:51 -0700
Message-ID: <4281669F.6030103@activestate.com>
In-Reply-To: <357174725.20050509223413@surbl.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3494752316114189956=="

--===============3494752316114189956==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Jeff Chan wrote:
> adprofile.net reportedly appeared in a flowers.com ham as:
>=20
> <td align=3D"middle"><a href=3D"http://tx.adprofile.net/tx/r?CID=3D12&M=3D3=
&sid=3D800ABC123"><IMG height=3D90
> src=3D"http://a1234.g.akamai.net/f/1233/1234/1a/www.1800flowers.com/800f_as=
sets/images/flowers/images/banners/swift me
> too120X90.gif" width=3D"120" NOSEND=3D"1" border=3D"0"></a></td>
>=20
> Yet it's listed on WS by Bill Stearns.   This may be a false
> positive.  Does anyone have any more information about it?

They have been hitting our spamtraps heavily for over a year now (April=20
2004, which is as far back as i could check), mostly arriving via SBL'd=20
relays.

> Catherine Hampton says it's not on her spam radar and others
> have said that they may be web spammers on guestbooks, wikis,
> etc. but not email spammers.  They seem to have some minor
> NANAS.

Could this explain the high traffic rating on Alexa=20
(http://www.alexa.com/data/details/?url=3Dadprofile.net)?

We've had these guys blocked for a long time and have received no=20
complaints.

-Brett

--===============3494752316114189956==--


From dbfunk@engineering.uiowa.edu Thu May 12 05:40:47 2005
From: David B Funk <dbfunk@engineering.uiowa.edu>
To: discuss@lists.surbl.org
Subject: Re: [SURBL-Discuss] Feedback on adprofile.net wanted
Date: Wed, 11 May 2005 22:33:59 -0500
Message-ID: <Pine.HPX.4.58.0505112227080.17750@d-is00.icaen.uiowa.edu>
In-Reply-To: <357174725.20050509223413@surbl.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============2175257634596389886=="

--===============2175257634596389886==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

On Mon, 9 May 2005, Jeff Chan wrote:

> adprofile.net reportedly appeared in a flowers.com ham as:
>
> <td align=3D"middle"><a href=3D"http://tx.adprofile.net/tx/r?CID=3D12&M=3D3=
&sid=3D800ABC123"><IMG height=3D90
> src=3D"http://a1234.g.akamai.net/f/1233/1234/1a/www.1800flowers.com/800f_as=
sets/images/flowers/images/banners/swift me
> too120X90.gif" width=3D"120" NOSEND=3D"1" border=3D"0"></a></td>
>
> Yet it's listed on WS by Bill Stearns.   This may be a false
> positive.  Does anyone have any more information about it?
>
> Catherine Hampton says it's not on her spam radar and others
> have said that they may be web spammers on guestbooks, wikis,
> etc. but not email spammers.  They seem to have some minor
> NANAS.
>
> Feedback wanted.  :-)

Havn't seen spam refs to adprofile.net in a while, did see it in
"worldwideexpress" spam in early 2004.

Dave

--=20
Dave Funk                                  University of Iowa
<dbfunk (at) engineering.uiowa.edu>        College of Engineering
319/335-5751   FAX: 319/384-0549           1256 Seamans Center
Sys_admin/Postmaster/cell_admin            Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{

--===============2175257634596389886==--