Discuss

discuss@lists.surbl.org

1862 discussions

Re: Additional URIBL phish/fraud list
by Jeff Chan 18 Sep '04

18 Sep '04

On Friday, September 17, 2004, 4:24:37 PM, Bill Landry wrote: > This is a list that MailPolice hosts and I have been running it for a few > hours and it has already flagged some phish and fraud e-mails. Here is some > info about the list: http://rhs.mailpolice.com/#rhsfraud > This is my configuration for SA 2.64 with the SpamCopURI plug-in: > uri MP_URI_RBL > eval:check_spamcop_uri_rbl('fraud.rhs.mailpolice.com','127.0.0.2') > describe MP_URI_RBL URI's domain appears in MailPolice fraud list > tflags MP_URI_RBL net > score MP_URI_RBL 2.0 > And for SA 3.0 with the URIDNSBL plug-in: > urirhsbl URIBL_MP fraud.rhs.mailpolice.com. A > header URIBL_MP eval:check_uridnsbl('URIBL_MP') > describe URIBL_MP URI's domain appears in MailPolice fraud list > tflags URIBL_MP net > score URIBL_MP 2.0 > Bill Thanks for finding that additional phishing data Bill! It may be worth noting that we're working on including these into PH inside multi.surbl.org, and that we have 15 times more name servers than mailpolice.com does. ;-) Jeff C. -- Jeff Chan mailto:jeffc@surbl.org http://www.surbl.org/

1 0

Whitelist catholicexchangeMUNGED.com
by Fred 18 Sep '04

18 Sep '04

I have a customer who keeps tripping catholicexchangeMUNGED.com Can we get this removed from WS SURBL? Frederic Tarasevicius Internet Information Services, Inc. http://www.i-is.com/ 810-794-4400 mailto:info@i-is.com

4 5

Funniest domain so far?
by Chris Santerre 17 Sep '04

17 Sep '04

scabpickingisfun.com Can you top that? --Chris

2 1

Pls check: paypal
by Alex Broens 17 Sep '04

17 Sep '04

Jeff & Co. Just scored this a while ago. * 3.0 WS_URI_RBL URI's domain appears in ws database at ws.surbl.org * [www.paypal.com [in URI RBL at multi.surbl.org] In the original msg there's a a weird charachter after the .com which I cannot explain. maybe a space? could you pls check where this may be showing up (no in my local zone :) thanks Alex

2 1

RE: [SURBL-Discuss] Pls check: paypal
by Chris Santerre 17 Sep '04

17 Sep '04

Only one I have is this: www1-paypalSUPERMUNGEDFORYOURPROTECTION.com Sorry :) www1-paypal.com >-----Original Message----- >From: Alex Broens [mailto:surbl@alexb.ch] >Sent: Friday, September 17, 2004 10:22 AM >To: SURBL Discussion list >Subject: [SURBL-Discuss] Pls check: paypal > > >Jeff & Co. > >Just scored this a while ago. > > * 3.0 WS_URI_RBL URI's domain appears in ws database >at ws.surbl.org > * [www.paypal.com [in URI RBL at multi.surbl.org] > >In the original msg there's a a weird charachter after the >.com which I >cannot explain. > >maybe a space? > >could you pls check where this may be showing up (no in my >local zone :) > >thanks > >Alex > > >_______________________________________________ >Discuss mailing list >Discuss(a)lists.surbl.org >http://lists.surbl.org/mailman/listinfo/discuss >

1 0

Watchit :)
by Alex Broens 17 Sep '04

17 Sep '04

Jeff, FYI: a spam with a link to http://www.cabdriver.kjcjvjv.com.com/ just showed up. Obviously dumbo spammy goofed up... as we obviosuly won't want to SURBLize com.com (cnet) and this may be reported by some spamtrapping system it may be a good idea to check if com.com is whitelisted. thanks Alex

2 1

intercompras.com.gt
by Jeff Chan 17 Sep '04

17 Sep '04

Is anyone familiar with intercompras.com.gt? It's in Guatemala, and appeared recently in the SC data. Can't tell if it's an ISP or something like that. Jeff C.

3 4

RE: [SURBL-Discuss] [OT] FUN: Something to send your family membe rs!
by Chris Santerre 16 Sep '04

16 Sep '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Wednesday, September 15, 2004 5:12 PM >To: SURBL Discussion list >Subject: Re: [SURBL-Discuss] [OT] FUN: Something to send your family >members! > > >On Wednesday, September 15, 2004, 11:51:55 AM, Raymond >Dijkxhoorn wrote: >>>> So for anyone who knows what I'm talking about on this >page, feel free to >>>> spam it to all your friends and family! ;) > >>> Wouldn't it be added to SURBL then? :) > >> Some sites have the luck to be whitelisted, this is one of them ;) > >It's all random, you know. ;-) We use a the Monte Carlo method >with an old dartboard full of domain names to decide what to >whitelist. ;-) Crap!! We really need to standardize. I've been throwing chicken bones and reading tea to whitelist! --Chris

1 0

Re: [SURBL-Discuss] [OT] FUN: Something to send your family members!
by SM 16 Sep '04

16 Sep '04

Hi Chris, At 09:14 15-09-2004, Chris Santerre wrote: >So for anyone who knows what I'm talking about on this page, feel free to >spam it to all your friends and family! ;) Wouldn't it be added to SURBL then? :) Regards, -sm

4 4

RE: [SURBL-Discuss] important reduce wrise renkles & skin spots ( fwd)
by Chris Santerre 15 Sep '04

15 Sep '04

>-----Original Message----- >From: Raymond Dijkxhoorn [mailto:raymond@prolocation.net] >Sent: Friday, September 10, 2004 8:48 PM >To: discuss(a)lists.surbl.org >Subject: [SURBL-Discuss] important reduce wrise renkles & skin spots >(fwd) > > >Hi! > >Our favorite pill spammers also try to get around SURBL now. > >I dont want to end up making SA rulesets for this, any suggestions ? > >ns3.airmaramba.biz >ns3.avk29.biz > >The same crap... But, with less SA hits now, since its not touched by >SURBL. Bah. > >---------- Forwarded message ---------- >Date: Sat, 11 Sep 2004 01:50:29 +0100 >From: kenneth clakley <auroraschorn(a)rfc.every1.net> >To: wilfredo moote <reyes(a)prolocation.net> >Subject: important reduce wrise renkles & skin spots > >suc-oneonta sony-steo lettery > > >>From inside to outside, from w^eig_ht l`o^ss to skin care. From mental >relief to physical relief, from antidepressant to muscle >relaxant. The care >inside out. > >you can copy > >wjq.s.adjuster6370pinn.com/56/ > >to your browser > Not all of these are listed in SURBL: (Yes one day I hope to make this info availible to you.) * 1: abrasions6681tabs.biz * 2: absentia4304drug.biz * 3: abstention2386tads.us * 4: accordance3414drugs.biz * 5: addable8060biz.com * 6: adorer457dryg.com * 7: agronomy9603dryg.com * 8: aground8965drugs.biz * 9: agues346rneds.us * 10: aider8333tads.com * 11: alighted2110tads.us * 12: alitalia9689pi11.us * 13: amateurish8859rx.us * 14: anaerobe9918tabs.us * 15: annularity789drugs.biz * 16: antioch8386drygs.us * 17: apercus9591dryg.us * 18: aperiodic1001pill.biz * 19: appetite352tads.us * 20: arc4679biz.biz * 21: armenian5748drug.biz * 22: armenian8291drygs.com * 23: arteriole1448drygs.us * 24: articular9420tabs.biz * 25: aspirated8343pi11.us * 26: assemblies7268biz.us * 27: assumpsit9521drygs.us * 28: astf2571pills.us * 29: attendee9327tads.us * 30: authorise5969rneds.us * 31: avk29.biz * 32: axing5875pi11s.us * 33: aye3054biz.us * 34: bedtime7591rx.us * 35: benzene4347drug.us * 36: benzine6086dryg.com * 37: bier3709pi11.biz * 38: bleach2839drugs.us * 39: breakup9732pi11.us * 40: bream1462rneds.us * 41: bridegroom6963rx.us * 42: brimming6028pill.biz * 43: bumble2318pills.biz * 44: burnie5422pinn.com * 45: caraway307biz.us * 46: carp6499pi11s.us * 47: caw5709biz.us * 48: cctv6483tabs.biz * 49: centralism3766rx.us * 50: charlatan9181rneds.us * 51: chopsticks4847tabs.biz * 52: cleat7228pirrs.com * 53: closed6129tads.us * 54: cobra133pirrs.com * 55: cog5687tads.us * 56: collocutor9120dryg.com * 57: comparable6635tads.com * 58: concinnity6196pi11s.us * 59: congener1455rneds.com * 60: copenhagen1026tabs.us * 61: crane7149biz.biz * 62: crucify8156pi11.us * 63: cyrconium8981biz.us * 64: dale1949pi11.us * 65: dayak3409tabs.biz * 66: decatur9854rx.us * 67: dehydrated8623meds.us * 68: destitute6182drygs.com * 69: dewlap752drygs.com * 70: dhl7809tads.com * 71: digestion5594rneds.us * 72: digital9420rx.biz * 73: directory1403rx.biz * 74: disjoint5156drygs.com * 75: docket9430pi11.us * 76: duodenum1797nx.com * 77: duodenum6414biz.us * 78: earwax8995rneds.com * 79: embody6740tabs.biz * 80: emerge2198dryg.com * 81: enactment859drygs.us * 82: enriched3735pi11.us * 83: entail2096drygs.us * 84: epitheory4065dryg.com * 85: ergo2905drygs.us * 86: fabricate2671rneds.us * 87: faire4813rneds.com * 88: farcical3545rneds.us * 89: fatality5443drugs.com * 90: fateful3948pill.us * 91: feminine2966biz.us * 92: ferryboat4957meds.biz * 93: fie9819meds.biz * 94: fitful1499tads.us * 95: flank4240biz.us * 96: flatfoot8255tabs.us * 97: flew7838tads.com * 98: flimsiness4164dryg.us * 99: fortress221drug.biz * 100: fox621dryg.us * 101: frankly8033pi11s.us * 102: fraudulent4567pill.us * 103: glassy5030nx.com * 104: gratuitous4973meds.us * 105: griffith4438biz.us * 106: grin7749pi11.us * 107: guano7904pills.us * 108: gui7176biz.com * 109: haphazard8933tads.us * 110: hard8589meds.us * 111: harmonious682pi11s.us * 112: healing7489biz.com * 113: heartbreak7918rneds.biz * 114: hits359pills.biz * 115: hopefully3701rneds.us * 116: humpback726pirrs.com * 117: hyaena988drygs.us * 118: identifier618pi11.us * 119: imbed3506pinn.com * 120: impede276tads.us * 121: indenting1562pill.com * 122: indoor954pill.biz * 123: inequality2661pi11s.us * 124: infinitive6385biz.us * 125: inflect5194drygs.us * 126: insure3484biz.us * 127: integrated7310tads.us * 128: involute6538drygs.us * 129: issued5633drug.biz * 130: jell8297drugs.us * 131: joliet5195biz.com * 132: kathy8786pi11.us * 133: katzner3273biz.us * 134: kick6502pi11.us * 135: killing8335biz.us * 136: knowingly606meds.us * 137: lawful7322dryg.us * 138: laxative5682dryg.us * 139: laziness6976dryg.com * 140: leaden9828biz.us * 141: lessee7050tabs.biz * 142: lettish3429pill.us * 143: liaison6083tabs.biz * 144: limped6950pill.us * 145: lotus9106rneds.com * 146: luxuriate7999tads.us * 147: madder8828biz.us * 148: magenta4358rx.us * 149: med12now.com * 150: mediate3804rx.us * 151: medic7.com * 152: medspro7.com * 153: microcode3252meds.biz * 154: milan1517biz.com * 155: mirroring5831dryg.us * 156: mis6163pi11s.us * 157: misogynist2527dryg.biz * 158: moisten982rx.us * 159: monitor8072pill.biz * 160: narrowly1946biz.us * 161: narrowly9558pi11.us * 162: negater6398tads.com * 163: nevermore8513pi11.us * 164: newmedsgo.com * 165: nude7755pi11s.us * 166: obscuring7328drygs.biz * 167: odometer3845meds.us * 168: oleaginous9337meds.us * 169: onyx810dryg.us * 170: optimize5129drug.com * 171: oscillator9247biz.com * 172: osprey9824drug.us * 173: outgoing9256pi11s.us * 174: outweigh9214pills.us * 175: overhand1383biz.us * 176: packaged2320rneds.biz * 177: paperwork970tads.com * 178: paramour5839biz.biz * 179: parfaits6405drygs.us * 180: passivism3981tads.com * 181: payout4174pills.us * 182: pelves963tads.com * 183: penney5099rx.us * 184: phantasia6277biz.us * 185: phoneme6858biz.com * 186: phosphite1908tads.com * 187: plasticize6988drygs.com * 188: pleader7286pi11.us * 189: plus2766rx.biz * 190: pollacks6901biz.us * 191: pompadour8149meds.us * 192: poncho4491dryg.us * 193: pottage6834pirrs.us * 194: prairie4725biz.com * 195: pressman1177nx.com * 196: pretzel3736pills.com * 197: primness6560nx.us * 198: probity7464tads.com * 199: procuress4029pinn.com * 200: project2089biz.com * 201: propylene3479pi11s.us * 202: qts7851drygs.us * 203: quits8304drygs.com * 204: quoter7237tabs.biz * 205: race874pi11s.us * 206: racetrack2853pirrs.com * 207: radial1212rx.biz * 208: rainproof4172tads.com * 209: ram7888dryg.com * 210: randomness3999pi11.us * 211: rata2536tads.com * 212: rating1857rneds.us * 213: rationale9722dryg.us * 214: receive5709tads.us * 215: recruited2055rneds.com * 216: replenish4787nx.com * 217: reproduced2714tads.us * 218: resist9528rneds.com * 219: rework5964drugs.us * 220: rhubarb454rneds.us * 221: richmond8106dryg.com * 222: ringlet6664biz.us * 223: rustic9925rneds.com * 224: safflower170dryg.com * 225: sahib5037biz.com * 226: salesman8694tabs.biz * 227: sanguine882rneds.com * 228: sanita77.biz * 229: satrapy8385tads.com * 230: sauntering5306biz.biz * 231: scarfs7993pi11s.us * 232: scatters8393rneds.com * 233: sceptical5237tabs.us * 234: schlepp5206biz.com * 235: science6119dryg.us * 236: scratchpad4718tads.us * 237: scuttle5567pills.us * 238: searim7571tads.us * 239: seascape9247dryg.us * 240: seconds9619pills.biz * 241: seduction6895drygs.us * 242: sergeancy8489pinn.com * 243: servile9023tads.us * 244: sewerage5665pills.us * 245: sextette9640drug.us * 246: shadowy9804pinn.com * 247: shaves4465drugs.biz * 248: shied5615rneds.us * 249: shingle6722dryg.us * 250: shipshape6075pi11.us * 251: shirts7008drygs.us * 252: showplace1294pirrs.com * 253: showroom3161drygs.us * 254: shrieking3773pi11s.us * 255: shrinks489pinn.com * 256: shudder4751dryg.us * 257: shudder6654meds.biz * 258: sideband9064dryg.us * 259: silenced221pills.us * 260: silvers2867biz.us * 261: simpleness128pill.us * 262: siphonage8358pi11.us * 263: skills4744rneds.us * 264: skunk2642drugs.us * 265: sky5490pirrs.com * 266: skydives9635pi11s.us * 267: slates8323rx.biz * 268: slays1093drugs.biz * 269: sleety6351pills.biz * 270: slide6037drygs.us * 271: smeltery7284pills.us * 272: smithies7780biz.us * 273: smock928pill.us * 274: smoldering3120drugs.biz * 275: snivels460biz.biz * 276: snoozed2548rneds.com * 277: soaker1916tads.com * 278: societies7375tads.us * 279: sociologic3084biz.us * 280: sods4562rx.us * 281: soluble7830pinn.com * 282: souped9129pill.biz * 283: sparring2432pi11s.us * 284: spidery4421biz.com * 285: spiritous5262dryg.us * 286: spoilt7777rneds.com * 287: squelched807rx.us * 288: stack7167biz.us * 289: statutory1625pi11s.us * 290: stein3843dryg.us * 291: stereo661drugs.us * 292: stiffed5912tads.com * 293: stillness4372pills.us * 294: stillwater7481drug.us * 295: stockinet9618nx.com * 296: stolidly8964biz.us * 297: stony4921rneds.com * 298: stoppage9046drugs.us * 299: subcell5587drugs.us * 300: summit4716drygs.com * 301: sundae8155pi11.us * 302: sundance4111pills.biz * 303: swaged5905biz.com * 304: tachometer4191rx.us * 305: tangential3858pill.us * 306: tentative8691pinn.com * 307: terminable3646drygs.com * 308: textiles528tads.us * 309: them1275pinn.com * 310: thickly6764drugs.us * 311: threadbare2938rneds.us * 312: throughput9067pi11.us * 313: thumbscan6966tads.us * 314: thumper4635pi11s.us * 315: tidings7196rx.biz * 316: tiled2118rneds.com * 317: timeworn642tads.us * 318: tingle3751drygs.com * 319: tipped2161pills.us * 320: tiptoe1538rx.us * 321: toaster7461drygs.com * 322: towing613pill.biz * 323: transient3126drygs.com * 324: transitive7329pi11.us * 325: treatable4145pill.biz * 326: trinity7698pi11s.us * 327: tunny1567rx.us * 328: ugh5315biz.biz * 329: unawares6248pinn.com * 330: unburdened2613pills.us * 331: uncocked5801tabs.biz * 332: undefended7133pinn.com * 333: underload9603pirrs.com * 334: unhewn2916drug.us * 335: unordered6621rx.us * 336: unpainted4643pills.us * 337: valencia9167pill.biz * 338: vcr1047pinn.com * 339: vermouth9192drugs.biz * 340: very9221rx.us * 341: voodoo5623rx.biz * 342: wanton5925pill.biz * 343: waterside9155dryg.us * 344: weak2133drug.us * 345: weaponless8185biz.com * 346: weeper9194nx.com * 347: wimbledon743pill.us * 348: winney6568drugs.biz * 349: winning7272tads.com * 350: wolfhound8782biz.us * 351: workman3166tabs.us * 352: worrisome5163pill.us * 353: wrasse8984pi11.us * 354: yachtsmen1959pi11s.us * 355: yip3909tads.com --Chris

6 17

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss