Older Steve submission. Yup same file. And I can see why these guys would have been added. Looks like spammers were using a spacer.gif image from them in theis spams. Hence lots of NANAS hits. This was before we looked for posion like this.
Removed.
--Chris
-----Original Message----- From: Jeff Chan [mailto:jeffc@surbl.org] Sent: Wednesday, August 18, 2004 9:52 PM To: SURBL Discussion list Subject: Re: [SURBL-Discuss] Strange happenings...
On Wednesday, August 18, 2004, 6:17:26 PM, Bill Landry wrote:
Replying to my own post. I see now that the URI above gets
redirected to:
http://qspace.iplace.MUNGEDcom/cobrands/41/?sc=1452NLCRamp;&CM=
MHHNewsletterServices&CE=TextArea3
and "iplace.com" is listed in WS. So my next questions is, should "iplace.com" be listed in WS?
Probably not. Anyone know if these guys are spammers or why it's on WS?
Name: icreditreport.com Address: 205.180.159.210 Aliases: qspace.iplace.com
If this appeared in a legitimate message, then we probably should whitelist. Was it in a ham?
Comments?
Jeff C.
Discuss mailing list Discuss@lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss
On Thursday, August 19, 2004, 6:57:32 AM, Chris Santerre wrote:
Older Steve submission. Yup same file. And I can see why these guys would have been added. Looks like spammers were using a spacer.gif image from them in theis spams. Hence lots of NANAS hits. This was before we looked for posion like this.
Removed.
--Chris
Thanks Chris. Are we working on fixing those as a class?
Jeff C. __
-----Original Message----- From: Jeff Chan [mailto:jeffc@surbl.org] Sent: Wednesday, August 18, 2004 9:52 PM To: SURBL Discussion list Subject: Re: [SURBL-Discuss] Strange happenings...
On Wednesday, August 18, 2004, 6:17:26 PM, Bill Landry wrote:
Replying to my own post. I see now that the URI above gets
redirected to:
http://qspace.iplace.MUNGEDcom/cobrands/41/?sc=1452NLCRamp;&CM=
MHHNewsletterServices&CE=TextArea3
and "iplace.com" is listed in WS. So my next questions is, should "iplace.com" be listed in WS?
Probably not. Anyone know if these guys are spammers or why it's on WS?
Name: icreditreport.com Address: 205.180.159.210 Aliases: qspace.iplace.com
on Thu, Aug 19, 2004 at 09:57:32AM -0400, Chris Santerre wrote:
Older Steve submission. Yup same file. And I can see why these guys would have been added. Looks like spammers were using a spacer.gif image from them in theis spams. Hence lots of NANAS hits. This was before we looked for posion like this.
Hm. I don't have an example of an iplace.com spam in my corpus.
icreditreport.com shows up in spam sent from tm0.com/exactis.com, from 03/2003 and another from 11/2003.
At any rate, come on, it's Experian. They're a bunch of lying scum.
"You are receiving this one time mailing because you agreed to receive special offers from an Email OffersOnDemand marketing partner."
Yeah, RIGHT.
-
Chris Santerre -
Jeff Chan -
Steven Champeon