Discuss

discuss@lists.surbl.org

1862 discussions

SURBL bomb
by Matthew Wilson 18 Nov '04

18 Nov '04

SURBL list, Has anyone seen any emails with hundreds of URIs - meant to overload filtering servers and the SURBL DNS servers, not poison them...? Matthew Wilson, MCSE (2003), MCSA-Messaging Network Administrator matthew(a)boomer.com Boomer Consulting, Inc. 610 Humboldt Manhattan, KS 66502 http://www.boomer.com 1-888-266-6375 x 17

6 7

Possible warning to users. Santa phish.
by Chris Santerre 16 Nov '04

16 Nov '04

I just got a spam that hit 2 SURBL domains. Advert for "Send your kids an email from santa!" How nice of spammers to not only tkae your $10, but harvest your children's email account and name as well. I'll be drafting up a warning to my users shortly. Others may want to do the same. Spread the love :) Content preview: Commercial Announcement ======================================= Get a Letter From Santa! Go here to get started: http://kelepouri113.com/ssnbpsq.php?oioWAHTwnlp94ooMSG_bcfchahj.3284859ioWAH Twnlp94oo22SJWMerchantsOverseas.comioWAHTwnlp94oo1027163931&f=493&i=1908 [...] Content analysis details: (5.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.7 EXCUSE_6 BODY: Claims you can be removed from the list 0.8 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 0.2 HTML_90_100 BODY: Message is 90% to 100% HTML 0.6 MY_ALT RAW: Empty ALT uri 0.5 MY_NO_QU RAW: Q without a U 0.4 MY_OBFU_LONG RAW: One long word! 2.0 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist [URIs: kelepouri113.com equalispecialvecto.com] --Chris (Santa don't need this crap right now!)

1 0

RE: [SURBL-Discuss] Should we list ratware?
by Chris Santerre 16 Nov '04

16 Nov '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Monday, November 15, 2004 10:06 PM >To: Chris Santerre >Cc: SURBL Discussion list (E-mail) >Subject: Re: [SURBL-Discuss] Should we list ratware? > > >On Monday, November 15, 2004, 8:13:18 AM, Chris Santerre wrote: >> MailinglistMaster.com > >Q: "Should we list ratware?" > >A: Only if the domain appears exclusively in spams. > A2: Or if the domain is responsible for one of the major tools for delivering spams. I sure the heck don't want anyone in my company getting an email with a link to their site. I'm guessing ISPs and colleges would feel the same. --Chris

1 0

RE: [SURBL-Discuss] FW: SURBL+ Checker Submission
by Chris Santerre 16 Nov '04

16 Nov '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Monday, November 15, 2004 10:33 PM >To: SURBL Discussion list >Subject: Re: [SURBL-Discuss] FW: SURBL+ Checker Submission > > >On Monday, November 15, 2004, 3:54:18 PM, David Funk wrote: >> On Mon, 15 Nov 2004, Chris Santerre wrote: > >>> Both domains in this submission are Whitelisted. Let me guess..... >>> >>> sina.com and 6to23.com appear in ham :/ >>> >>> --Chris > >> Not to dissapoint you Chris but sina.com is the Chinese equivalent >> of yahoo/geocities, big ISP (webmail, hosting, etc). >> Clearly whitelisting material. > >Yes, sina.com one of the globally most visited web sites according >to Alexa: > > http://www.alexa.com/site/ds/top_sites?ts_mode=global&lang=none > >6to23.com is also on the Alexa Global 500. > >Both have legitimate uses, so we don't list them. > LOL....Show offs! ;) I didn't know Dave could read Chinese :-) Well then they better clean up their act now, just like yahoo :/ --Chris

1 0

RE: [SURBL-Discuss] domain check dealsforrecruiters.net
by Chris Santerre 16 Nov '04

16 Nov '04

>-----Original Message----- >From: Jeff Chan [mailto:jeffc@surbl.org] >Sent: Monday, November 15, 2004 11:59 PM >To: Chris Santerre >Cc: SURBL Discussion list (E-mail) >Subject: Re: [SURBL-Discuss] domain check dealsforrecruiters.net > > >On Monday, November 15, 2004, 12:47:43 PM, Chris Santerre wrote: >> I've got numerous reports on these guys. But I can't make up >my mind. But I >> have at least 6 spammy looking submitted mails. > >> so anyone got an opinion on dealsforrecruiters.net? > >FWIW It shows up on no RBLs. > >The real question is whether it has legitimate uses. Can >we tell from their web site? Their web site seems to offer >"Targeted-mail marketing" and it also seems to have a >subscription form. I did not try the subscription but >if it's open, perhaps vigilantes are signing up anti-spam >addresses to try to get these guys listed? If so that >would be highly annoying and a counterproductive waste of >our time, and I wish they would stop. > Agreed. I'm putting them on my watch closely list. They will go unlisted.....for now. --Chris

1 0

Keep getting this spam, not listed in multi.
by Martin 16 Nov '04

16 Nov '04

Hi, I've keep getting the same spam every now and then. I think i have reported this spam atleast 4 times on the submission form at rulesemporium.com. How come it won't be listed? The domain in the spam is http://www.pinksheetsMUNGED.com and the spam is about stocks. I get this spam reported almost every day from different users in our organization. This is 100% spam! When will this be added to multi? I can send the message in original if you want, just let me know. Thank you / Martin

3 5

RE: [SURBL-Discuss] Re: [SURBL-Announce] SURBL stats: list hit r a tes measured in DNS
by Chris Santerre 16 Nov '04

16 Nov '04

>-----Original Message----- >From: Jose Marcio Martins da Cruz [mailto:Jose-Marcio.Martins@ensmp.fr] >Sent: Monday, November 15, 2004 3:27 PM >To: SM >Cc: Chris Santerre; Jeff Chan >Subject: Re: [SURBL-Discuss] Re: [SURBL-Announce] SURBL stats: list hit >ra tes measured in DNS > > >SM wrote: > >>> > http://j-chkmail.ensmp.fr/urlbl/urlbl.txt >> >Wrong link... > >http://j-chkmail.ensmp.fr/jeff/urlbl/urlbl.txt > >Jose-Marcio Thanks, but..... These stats are pretty useless: STATS BY URL BL ================================================= * ab.surbl 139803 38226 * j-chkmail 207945 54310 * multi.surbl 175657 54486 * ob.surbl 990 260 * sc.surbl 220 180 * ws.surbl 354 246 Because you said it goes by alphabet and stops at first hit. Mutli.surbl contains everything in SC and WS. So everything after mutli is of no use. Your other stats are cool though ;) --Chris

3 3

domain check dealsforrecruiters.net
by Chris Santerre 16 Nov '04

16 Nov '04

I've got numerous reports on these guys. But I can't make up my mind. But I have at least 6 spammy looking submitted mails. so anyone got an opinion on dealsforrecruiters.net? --Chris

3 2

FW: SURBL+ Checker Submission
by Chris Santerre 16 Nov '04

16 Nov '04

Both domains in this submission are Whitelisted. Let me guess..... sina.com and 6to23.com appear in ham :/ --Chris >-----Original Message----- >From: SURBL+ Checker >Sent: Friday, November 12, 2004 3:16 AM >Subject: SURBL+ Checker Submission > > >Date: Fri Nov 12 02:16:03 2004 >Reporter IP: MUNGED > >Applicable List: URIBL:ws.surbl.org >Reported URI/IP: 6to23.com >Rating: Black - 100% spam > >Email Source: >---------------------------------------- > >Received: from hotmail.com (unverified) by mailgate.munged.mungo!! > (Content Technologies SMTPRS 4.3.14) with ESMTP id ><T6d361aa1e8ac1000026e8(a)mailgate.freakingmunge.com> for <info(a)mungymungomunged.com>; > Thu, 11 Nov 2004 22:12:30 +0000 >Message-ID: <T6d361aa1e8ac1000026e8(a)mailgate.isaidmunge.com> >From: "nbbv(a)hotmail.com" <nbbv(a)hotmail.com> >Subject: Promote your business >To: Mungo likes to munge the munging! >Content-Type: text/html;charset="GB2312" >Content-Transfer-Encoding: 8bit >Reply-To: nbbv(a)hotmail.com >Date: Fri, 12 Nov 2004 06:11:33 +0800 >X-Priority: 3 >X-Mailer: Microsoft Outlook Express 6.00.2800.1106 > ><STYLE type="text/css"> > ></STYLE> ></HEAD> ><BODY> >Promote your business ! > >  We offer you e-mail addresses databases >for advertisement mailing; we sell databases >also carry out mailing and hosting for the >advertising projects. > >Products > >World Email Lists .  Their validity >and originality are verified. Black"><A href="http://asp3.6to23.com/oss/index.htm" >target="_blank">Details please go to >our website</A> > >Country or area total emails and price > >America      175 Million Email >Address >Europe       156 Million Email >Address >Asia         168 Million >Email Address >China(PRC)   80 Million Email Address >  >HongKong     3.25 Million Email >Address >TaiWan       2.25 Million >Email Address >Japan        27 Million >Email Address  >Australia    6 Million Email Address > >Canada       10 Million Email >Address   >Russia       38 Million Email >Address >England      22 Million Email >Address >German       40 Million >Email Address   >France       38 Million Email >Address >India        12 Million >Email Address >other Country or Area   > >--------------------------------------------------------------- >------------------------------ >            >            >           >            >  >Category Name total emails > >Apparel, Fashion, Textiles and Leather  4,654,565 > >Automobile & Transportation     >        6,547,845 >Business Services         >            >  6,366,344 >Chemicals           >            >        3,445,565 >Computer & Telecommunications    >       654,655 >Construction & Real Estate     >         3,443,544 > >Consumer Electronics       >            > 1,333,443 >Energy, Minerals & Metals     >          6,765,683 > >Environment           >            >      656,533 >Food & Agriculture       >            >   1,235,354       >            > >Gems & Jewellery       >            >     565,438 >Health & Beauty       >            >      804,654 >Home Supplies         >            >      323,232 >Industrial Supplies        >            > 415,668 >Office Supplies         >            >    1,559,892 >Packaging & Paper      >            >     5,675,648 >Printing & Publishing       >            >6,563,445 >Security & Protection       >            >5,653,494 >Sports & Entertainment     >            > 3,488,455 >Toys, Gifts and Handicrafts    >         2,135,654 > >--------------------------------------------------------------- >------------------------------ > >¡¤All of Country email lists + email sender >express +add url express + etrae express+Ebook >--------------------------------------------------------------- >------------------------------ > > > >Send Your Ad to Millions > >5 million bulk email >50 million bulk email >100 million bulk email >200 million bulk email > >Imagine emailing 500,000 recipients and 1 >out of every 1000 orders your product, that's >500 new orders! >* We go all-out to make sure our customers >are completely satisfied >* If any emails fail to make delivery, we >replace them free of charge >* 100% Spam free, rest assured you will not >be accused of spamming >* Almost all of our emails are sent to valid >email addresses >* No software required, we do all the mailing >from our own server >* Don't be fooled in signing up with similar >sites offering services that cannot compare >to ours >* Get the most bang for your buck with bulk >email advantage! >--------------------------------------------------------------- >------------------------------ > > > ><A href="http://asp3.6to23.com/oss/index.htm" >target="_blank">Details go to >website</A> > > > > >the email company > >copyright¡¤2004-2005 all reserved > > >------------------------------------------------------------ >remove please email: <A >href="mailto:emailad1234@sina.com?Subject=remove">emailad1234@s >ina.com</A> >------------------------------------------------------------ ></BODY> > >---------------------------------------- > >

4 3

Should we list ratware?
by Chris Santerre 16 Nov '04

16 Nov '04

MailinglistMaster.com They produce StealthMail Master 5.0, rateware. "The anonymous bulk email software you need to protect your connection from being shut down when you send out bulk email. With this new technology your ISP will not have a problem with your bulk e-mail operation. It uses special proxies for anonymity. Reliable proxy service comes with the software. Proxies are updated daily. We update our proxies several times a day. The program gets its speed from up to 300 concurrent connections to different proxy servers. We carefully select the proxies we add to our database.Instant and very accurate delivery rate is assessed by the program. This is the most reliable proxy mailer out there. It is sold on a membership basis. You can purchase either a monthly or a lifetime membership." --Chris

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss