cyberpolice.ru just got added to sc.surbl.org. Does anyone know if they are spammers or not?
Jeff C.
On Wed, 1 Sep 2004 21:02:26 -0700, Jeff Chan jeffc@surbl.org wrote:
cyberpolice.ru just got added to sc.surbl.org. Does anyone know if they are spammers or not?
Large spamrun has been sent out using this domain. We have plenty of copies on file here.
From - Thu Sep 02 15:39:37 2004
X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-Path: www@cyberpolice.ru Received: from mx2.mailsecurity.net.au (mx2.mailsecurity.net.au [67.18.110.234]) by corp.mailsecurity.net.au (8.12.11/3.0.0) with ESMTP id i81It2vK027557 for xxx@xxx.xxx.au; Thu, 2 Sep 2004 04:55:10 +1000 Received: from 67.18.110.234 ([61.145.73.222]) by mx2.mailsecurity.net.au (2.52a) with SMTP id i81IrkFI002376 for xxx@xxx.xxx.au; Thu, 2 Sep 2004 04:53:49 +1000 X-Message-Info: HGKVBW2ciaONIbIZry4u281+RKcvq898uozZX Received: from mail468.ziw.comcast.net (252.100.33.96) by xk82-njb704.comcast.net with Microsoft SMTPSVC(5.0.2195.6824); Sun, 01 Sep 2002 13:49:27 -0600 Received: from QU823 (kt251.242.170.48.rvrzi136.yv.comcast.net 207.186.144.163) by mail30.ido.comcast.net (3.35.6i9/63.15.00) with SMTP id eas2NM99Zqfb29; Sun, 01 Sep 2002 12:48:27 -0700 Message-ID: 254xp1g122khh7hy$q02ssm9qo6$bar0i753@IVX2 From: "www@cyberpolice.ru" www@cyberpolice.ru To: "xxx" xxx@xxx.com.au References: marmot965-I762SKomUEsslLUV135X0q06@comcast.net Subject: [Possible Spam] denton Date: Sun, 01 Sep 2002 16:48:27 -0300 MIME-Version: 1.0 Content-type: multipart/report; boundary="======1979==46726======" X-MS-SpamCheck: This message is likely to be spam, SPAM Database (score=350, required 150, BAYES_60 50.00, RCVD_IN_BL_SPAMCOP_NET 50.00, RCVD_IN_DYNABLOCK 50.00, RCVD_SPAMHAUS_XBL 100.00, SARE_BOUNDARY_07 50.00, SARE_HEAD_SPAM 50.00) X-MS-From: www@cyberpolice.ru
MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--6546910835501891"
----6546910835501891 Content-Type: text/plain; Content-Transfer-Encoding: quoted-printable
Best forum about mailing and spam Get involved today! http://www.cyberpolice-MUNGED.ru
Hi!
cyberpolice.ru just got added to sc.surbl.org. Does anyone know if they are spammers or not?
Large spamrun has been sent out using this domain. We have plenty of copies on file here.
Joe going on:
Dear visitor,
If you got here by following a link in unsolicited email, please note that there's no point in asking us to take you off our mailing list since we don't run any lists. The email 'advertising' our website is being sent by spammers who are obviously very upset with our (presumably successful) anti-spam efforts. Such practice is commonly known as joe-job. In addition we're being mailbombed with bounces, so if you attempt to contact us, you'll probably find it impossible at the moment. Anyways, we apologise for any inconvenience this might cause you.
Bye, Raymond.
OK, so Joe Job or spammer?
Whitelist or not?
Sounds like an anti-spam domain, FWIW, but appearances are sometimes deceiving.
Jeff C.
On Thursday, September 2, 2004, 1:06:15 AM, Jeff Chan wrote:
OK, so Joe Job or spammer?
Whitelist or not?
Sounds like an anti-spam domain, FWIW, but appearances are sometimes deceiving.
And I can't read Russian. Was hoping someone here could.
Let me send a note to Michael Tokarev, author of rbldnsd. Maybe he's heard of them.
Jeff C.
"David Hooton" david.hooton@gmail.com wrote:
Received: from mx2.mailsecurity.net.au (mx2.mailsecurity.net.au
[67.18.110.234])
by corp.mailsecurity.net.au (8.12.11/3.0.0) with ESMTP id i81It2vK027557 for xxx@xxx.xxx.au; Thu, 2 Sep 2004 04:55:10 +1000 Received: from 67.18.110.234 ([61.145.73.222]) by mx2.mailsecurity.net.au (2.52a) with SMTP id i81IrkFI002376 for xxx@xxx.xxx.au; Thu, 2 Sep 2004 04:53:49 +1000
inetnum: 61.145.73.208 - 61.145.73.223 netname: SANSHUI-JLB-LTD country: CN descr: SANSHUI JIANLIBAO CO.,LTD
X-Message-Info: HGKVBW2ciaONIbIZry4u281+RKcvq898uozZX
This means the remaining Received lines are bogus.
Hmm... Why would a Russian spammer have to use a Chinese spam server?
----6546910835501891 Content-Type: text/plain; Content-Transfer-Encoding: quoted-printable
Best forum about mailing and spam Get involved today! http://www.cyberpolice-MUNGED.ru
This text smells like a Joe job to me. It's too short and too boring.
Joe
Thanks all, I'm whitelisting cyberpolice.ru . If anyone has evidence it's not a joe job and they're really spammers, please let me know.
Got a vacation message from Michael Tokarev so he presumably won't be able to reply for several days.
Jeff C.
On Thu, 2 Sep 2004 02:37:09 -0700, Jeff Chan jeffc@surbl.org wrote:
Thanks all, I'm whitelisting cyberpolice.ru . If anyone has evidence it's not a joe job and they're really spammers, please let me know.
Got a vacation message from Michael Tokarev so he presumably won't be able to reply for several days.
OK... I asked my russian speaking friend about it and he says it's definitively an antispammer site, so the whitelisting is OK.
FWIW, he translated the home page (with some tool he has) and it says:
So, if you have come on this page, it is possible to assume, that the problem of a spam already has mentioned you to some extent. To you has bothered to spend online-time (whether it be working which could be used more productively, or house, paid of own pocket) on razgrebanie dust in the mail box? Has bothered to delete the necessary letters only because you (or the program which you use for this purpose) have not noticed them in a heap of this dust? Your child receives references on pornosajty in mail? You on a regular basis receive letters with viruses? I can assure you, you are not lonely. And the listed misfortunes - only a little bit of that evil which bears this vile phenomenon to the ordinary Internet user as, however, and to system administrators. - Well also what? - the some people will tell - I simply remove these unnecessary letters, and all. No, not everything, my dear. It is quite possible, that while you really "simply" delete them. But keep in mind, if in your box one "uninvited" letter in their month there will be any more less than ten, and further in a geometrical progression has got. In fact spamery are in the habit to sell the bases of addresses, and in due course any more so "it will be simple" to you it to do. On the statistics daily published on a Yandex - one of servers most actively struggling with a spam - every day approximately 37 percent of the correspondence are filtered by a server as a spam. And it not including that spam which nevertheless has got in boxes of addressees! You if 22 minutes from each hour showed you advertising would began to watch TV? And if you had also to pay for each of these minutes from the pocket? A question rhetorical. As you include the TV, when it is necessary for you, and the spam comes " without knock " at any time.
To familiarize with last statistical data of post service of a Yandex it is possible to the address http: // mail.yandex.ru/monitoring/. - Yes, but in the letter which I have received, it is told, that the letter it as legally, as well as free-of-charge advertising newspapers which put in a mail box at my entrance. This error. These newspapers as it is correctly noticed, free-of-charge for you. However advertizers pay their manufacture and delivery. In a case with a spam all just what isn't needed. You and your provider pay delivery to you absolutely unnecessary information. Spamer does not spend almost any resources. One letter sent by him, gets at least to 50-100 addressees! Among other reasons resulted spamerami in the justification of the actions, very much frequently there is also a reference on รท.4 an item 29 of the Constitution of the Russian Federation so there can be an impression, that the Constitution obliges you as citizen to give the box for a different sort of stuff. And recently past wave of anonymous letters with a theme "Taxes", obviously, having the purpose gathering of addresses of naive users for a new database, came to an end a touching phrase " ATTENTION: If you did not direct us the information on interest in documents, we bring the apologies for the admitted mistake ". To tell the truth, having read this phrase three-four times for a day, even the full burdock would suspect, in my opinion, wrong. " Your electronic address has been taken from open sources. " Well also what? Clear business, from the closed source you have not taken it. " But nevertheless (!) we apologize, if our message has caused you any anxiety! Yours faithfully Open Company " DIALJUKS. " Please, be not mistaken. They to you have more respect, than at the pickpocket cutting pockets of your expensive coat to steal 100 roubles. And if they really had to apologize before everyone to whom their message has troubled, even on one minute they would stop it to do by very old men. And here that is strange - advertising on TV or on street boards never comes to an end apologies or justifications. Why it?
More in detail about legislative aspects of the given problem you can learn from the following document: http: // www.russianlaw.net/law/doc/a25.htm. If you have suddenly decided to take advantage of services of the polite person who has sent to you the letter with counterfeit heading and with the invented return address, assuring you in its deep respect for you, and begging you to buy official connection to the operator of cellular communication (let not in your city or even the country are particulars), the device for welding / are sharp metal or tourist trip to Moscow suburbs, reflect for a minute - and what if it and in a real life will lead itself(himself) as? By the way, examples of such succession of events are - to recollect even the same notorious Center of the American English enough. In fact deeply ignorant and illiterate people which are not having the slightest representation about advertising and marketing can resort to a spam as to means of advertising, at the best "bought" on promises of the doubtful firms promising " an effective advertising campaign on the Internet ", and in the worse - simply deprived any moral principles only. Whether so it is necessary to expect from them worthy behaviour in a reality? The best, that you can make after reception of such letter is to remember the name of firm never there to address, and to advise the same to all familiar.
Partly in violent blossoming the Russian spam imperfection of our legislation, partly - primordial Russian laziness, and also lack of information of the ordinary users seeing in a window of program Outlook Express only the colourful document with phones and with assurances of the deepest respect, and in a field "Sender" - "Natasha" or "GSM" and not having the slightest concept that it is possible to make is guilty that never henceforth such to see or even to see as it is possible less often. And in fact if even one percent sent spamerom letters would come back as complaints to its provider probability of that the provider would not sit slozha hands, to a question on a spam ovechaja: " the Spam? What spam? ", would be very high - much above, than now. However, some providers send all complaints straight in/dev/null and meaningly support spamerov, but such providers nevertheless, fortunately, minority.