http://groups.google.com/groups?hl=en&lr=&ie=ISO-8859-1&scoring=d&q=bfast.com+group%3A*abuse*&btnG=Google+Search
ValueClick owns BeFree, and recently bought the notorious Rokso listed spam house, Hi-Speed Media to add to their operations. The company generally sends spam for first rate clients from their closely associated operations, but make no bones about it, they are a very high volume host that controls over 10,000 IP's.
64.70.10.64/26 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.70.10.64 - 64.70.10.127] - 12/26/2003
64.70.17.0/24 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.70.17.0 - 64.70.17.255] - 12/26/2003
64.70.38.156/30 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.70.38.156 - 64.70.38.159] - 12/26/2003
64.70.54.0/24 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.70.54.0 - 64.70.54.255] - 12/26/2003
64.158.223.0/24 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.158.223.0 - 64.158.223.255] - 12/26/2003
65.167.38.0/25 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [65.167.38.0 - 65.167.38.127] - 12/26/2003
64.251.4.0/24 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.251.4.0 - 64.251.4.255] - 12/26/2003
64.251.16.192/27 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.251.16.192 - 64.251.16.223] - 12/26/2003
66.117.0.0/19 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [66.117.0.0 - 66.117.31.255] - 12/26/2003
66.207.130.0/23 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [66.207.130.0 - 66.207.131.255] - 12/26/2003
64.251.19.0/24 ValueClick/BFAST/Hi-Speed Media/HBCLB.com (SBL10912, 8948, 11533, ROK2762, etc.)[64.251.19.0 - 64.251.19.255] - 01/04/2004
For places like this, I would recommend only negative weighting what's unique to the list owner, in some cases a header search might be required if the MAILFROM uses the bfast.com domain, i.e.
HEADERS -10 CONTAINS from: [EMAIL PROTECTED]
I'm not sure if you've verified this either, but I think that PrintPal may buy spamming services, in which case, they picked the right spammer to carry their messages.
Matt
Robert Grosshandler wrote:
Hi
I have Whitelist revdns .befree.com in my global.cfg.
The following e-mail didn't get whitelisted. When I check out the reverse on it, I find that it is pg1bms00.bfast.com
So, if I add Whitelist revdns .bfast.com I should be in better shape. Am I missing
anything?
Received: from PG1BMS00.BEFREE.COM [66.207.131.110] by smtp.igive.com with ESMTP (SMTPD32-8.05) id AF8C64470020; Tue, 13 Jan 2004 14:05:32 -0600 Received: from omitted by PG1BMS00.BEFREE.COM (LSMTP for Windows NT v1.1b) with SMTP id <[EMAIL PROTECTED]>; Tue, 13 Jan 2004 15:20:58 -0500 Date: Tue, 13 Jan 2004 13:50:00 -0500 From: [EMAIL PROTECTED] Subject: Printpal.com January Affiliate News To: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: 8bit Message-Id: <[EMAIL PROTECTED]>
--- [This E-mail scanned for viruses by Declude Virus]
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
