On Thursday, October 7, 2004, 3:43:45 PM, Rob McEwen wrote:
Possible FP:
zd-swx.com
This one is a tough one. On the one hand, I think this domain is used by Ziff Davis (publisher of PC Mag) for sending out some of their newsletters.
This domain was found at the top of a header of what appears to be a legitimate PC magazine newsletter. (I know, I'm not suppose to SURBL-check headers... but I do this on a limited and extremely audited basis... I only "set it and forget it" SURBL check on the message bodies.)
[...]
See copy of e-mail here: http://www.pvsys.com/pcmag.txt
Nice job spotting this one. It's listed in ob.surbl.org, from Outblaze.
Given that it generally appears in message headers (see NANAS for four more examples), it's not clear how it got listed. The registration does not show Ziff Davis explicitly. Perhaps this is a company under contract to send newsletters for them:
Registrant: 1505820 Ontario Inc 610 Ford Drive Unit 1 Oakville ON L6J 7V2 CA Domain name: ZD-SWX.COM Administrative Contact: Administrator Network admin@rapid-e.biz
610 Ford Drive Unit 1 Oakville ON L6J 7V2 CA (905) 337 8616 Fax: (905) 337 2882 Technical Contact: Administrator Network admin@rapid-e.biz
610 Ford Drive Unit 1 Oakville ON L6J 7V2 CA (905) 337 8616 Fax: (905) 337 2882 Registrar of Record: easyDNS Technologies Inc. Record last updated on 18-Apr-2004. Record expires on 29-Apr-2005. Record created on 29-Apr-2003. Domain servers in listed order: NS1.ZD-SWX.COM 204.92.158.5 NS2.ZD-SWX.COM 204.92.158.6 Domain status: REGISTRAR-LOCK
I'm going ahead and whitelisting all the domains from the newsletter message body, all of which look legitimate, none of which are on blocklists, and three of which are already whitelisted:
googleadservices.com googlesyndication.com pcmag.com techsmith.com zdmcirc.com ziffdavisinternet.com
and I'm also whitelisting the sending domain:
zd-swx.com
since somehow it got into the Outblaze list. (Outblaze, I'd suggest looking into removing it on your end also. Or share some spam samples with us.)
Jeff C. -- "If it appears in hams, then don't list it."