Hi,
How long will it take for a submission made to WS at http://www.rulesemporium.com/cgi-bin/uribl.cgi to become active?
I wonder because i got a new fresh spam that i submitted, but it's not yet listed to WS.
Edit: i just noticed that it got listed on the OB-list.
Thank you
Martin
Martin wrote to discuss@lists.surbl.org:
Hi,
How long will it take for a submission made to WS at http://www.rulesemporium.com/cgi-bin/uribl.cgi to become active?
I wonder because i got a new fresh spam that i submitted, but it's not yet listed to WS.
Hi Martin,
There are a few of us that commit to WS (and other SURBLs) that check these submissions. One of two things might happen:
1. The committer that receives your submission is a bit behind.
2. The committer reviewed your domain and decided not to list it, because it might not quite fit the criteria for WS.
Edit: i just noticed that it got listed on the OB-list.
Send it directly to me, off-list, if you like. I'll have a quick peek.
- Ryan
Possible FP:
zd-swx.com
This one is a tough one. On the one hand, I think this domain is used by Ziff Davis (publisher of PC Mag) for sending out some of their newsletters.
This domain was found at the top of a header of what appears to be a legitimate PC magazine newsletter. (I know, I'm not suppose to SURBL-check headers... but I do this on a limited and extremely audited basis... I only "set it and forget it" SURBL check on the message bodies.)
Anyway, zd-swx.com is registered by easydns.com. I can't figure out what easydns.com has to do with Ziff Davis? ...and why would Ziff Davis use this kind of service to send out newsletters? Am I missing something here?
Obviously, I have more questions than answers!
However, I believe that this is worth some serious investigation by someone more experienced and knowledgeable than me because ...wouldn't it be awful to SURBL-list a domain with legitimate ties to PC Magazine???
See copy of e-mail here: http://www.pvsys.com/pcmag.txt
Rob McEwen
On Thursday, October 7, 2004, 3:43:45 PM, Rob McEwen wrote:
Possible FP:
zd-swx.com
This one is a tough one. On the one hand, I think this domain is used by Ziff Davis (publisher of PC Mag) for sending out some of their newsletters.
This domain was found at the top of a header of what appears to be a legitimate PC magazine newsletter. (I know, I'm not suppose to SURBL-check headers... but I do this on a limited and extremely audited basis... I only "set it and forget it" SURBL check on the message bodies.)
[...]
See copy of e-mail here: http://www.pvsys.com/pcmag.txt
Nice job spotting this one. It's listed in ob.surbl.org, from Outblaze.
Given that it generally appears in message headers (see NANAS for four more examples), it's not clear how it got listed. The registration does not show Ziff Davis explicitly. Perhaps this is a company under contract to send newsletters for them:
Registrant: 1505820 Ontario Inc 610 Ford Drive Unit 1 Oakville ON L6J 7V2 CA Domain name: ZD-SWX.COM Administrative Contact: Administrator Network admin@rapid-e.biz
610 Ford Drive Unit 1 Oakville ON L6J 7V2 CA (905) 337 8616 Fax: (905) 337 2882 Technical Contact: Administrator Network admin@rapid-e.biz
610 Ford Drive Unit 1 Oakville ON L6J 7V2 CA (905) 337 8616 Fax: (905) 337 2882 Registrar of Record: easyDNS Technologies Inc. Record last updated on 18-Apr-2004. Record expires on 29-Apr-2005. Record created on 29-Apr-2003. Domain servers in listed order: NS1.ZD-SWX.COM 204.92.158.5 NS2.ZD-SWX.COM 204.92.158.6 Domain status: REGISTRAR-LOCK
I'm going ahead and whitelisting all the domains from the newsletter message body, all of which look legitimate, none of which are on blocklists, and three of which are already whitelisted:
googleadservices.com googlesyndication.com pcmag.com techsmith.com zdmcirc.com ziffdavisinternet.com
and I'm also whitelisting the sending domain:
zd-swx.com
since somehow it got into the Outblaze list. (Outblaze, I'd suggest looking into removing it on your end also. Or share some spam samples with us.)
Jeff C. -- "If it appears in hams, then don't list it."
Rob McEwen wrote>
Possible FP:
zd-swx.com
This one is a tough one. On the one hand, I think this domain is used by Ziff Davis (publisher of PC Mag) for sending out some of their
newsletters.
This domain was found at the top of a header of what appears to be a legitimate PC magazine newsletter. (I know, I'm not suppose to SURBL-check headers... but I do this on a limited and extremely audited basis... I
only
"set it and forget it" SURBL check on the message bodies.)
If it were to appear in the body, we couldn't list it.
Anyway, zd-swx.com is registered by easydns.com. I can't figure out what easydns.com has to do with Ziff Davis? ...and why would Ziff Davis use
this
kind of service to send out newsletters? Am I missing something here?
EasyDNS is only the *registrar*, not the registrant. Nothing odd about that.
However, the actual *registrant* is a little unusual for a ZD-related domain:
Registrant: 1505820 Ontario Inc 610 Ford Drive Unit #1 Oakville, ON L6J 7V2 CA
Domain name: ZD-SWX.COM
Administrative Contact: Administrator, Network admin@rapid-e.biz 610 Ford Drive Unit #1 Oakville, ON L6J 7V2 CA (905) 337 8616 Fax: (905) 337 2882
rapid-e.biz, the domain of the hoster of zd-swx.com, has 6 NANAS sightings to it.
Furthermore it currently has no NS or MX, i.e. the administrative contact for zd-swx.com is not contactable by email. The same applies to these related domains:
dbhits.com dtr3-re.com rapid-e.biz rapid-e.net synapse-swx.com ym-swx.com
You may want to point that out to the registrar(s) of these domains...
Joe
-
Jeff Chan -
Joe Wein -
Martin -
Rob McEwen -
Ryan Thompson