Re: [Declude.JunkMail] URL Redirectors
George, Spammers will use a variety of Yahoo sub-domains, most of which are valid. I'm not familiar with that one in particular, but it might help to search Google for examples of that showing up (that's how I do some of my research). http://www.google.com/search?hl=enlr=ie=UTF-8client=googletq=%22drs.yahoo.%2Bcom%22 Blocking that one address though would only be a fraction of the spam that actually uses Yahoo's redirection though. Yahoo does use it themselves of course, and they also have it configured for links in messages sent by third parties, such as Classmates for instance. Matt George Kulman wrote: Hi all, I have an IMail client who doesn't have budget funds available for Declude where these are easily filterable. A fair amount of their spam contains a URL redirection such as: http://drs.yahoo.com/effloresce/*http://click.com-click.com.ph/click.php?id= leneyeiID=40gi=hallmark 1. Is anyone aware of a dnsbl that deals with spamming URL redirectors? 2. Is anyone aware of legitimate email using this type of URL? 3. Is the drs.yahoo.com ever used for legitimate email. TIA, George --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] URL Redirectors
Matt, Thanks for the info. It's still difficult for me to imagine a legitimate user having a redirected web site being pointed to as their web site in an email. More research I guess. George -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matthew Bramble Sent: Wednesday, November 12, 2003 2:37 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] URL Redirectors George, Spammers will use a variety of Yahoo sub-domains, most of which are valid. I'm not familiar with that one in particular, but it might help to search Google for examples of that showing up (that's how I do some of my research). http://www.google.com/search?hl=enlr=ie=UTF-8client=googletq=%22drs.yaho o.%2Bcom%22 Blocking that one address though would only be a fraction of the spam that actually uses Yahoo's redirection though. Yahoo does use it themselves of course, and they also have it configured for links in messages sent by third parties, such as Classmates for instance. Matt George Kulman wrote: Hi all, I have an IMail client who doesn't have budget funds available for Declude where these are easily filterable. A fair amount of their spam contains a URL redirection such as: http://drs.yahoo.com/effloresce/*http://click.com-click.com.ph/click.php?id = leneyeiID=40gi=hallmark 1. Is anyone aware of a dnsbl that deals with spamming URL redirectors? 2. Is anyone aware of legitimate email using this type of URL? 3. Is the drs.yahoo.com ever used for legitimate email. TIA, George --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] URL Redirectors
George, I did build a test for this exact thing and shared it on my site (called Y!DIRECTED), but I thought that you might have been more interested in that URL in particular and replied accordingly. My Y!DIRECTED filter will stop most of this stuff and it allows for places like Yahoo and Yahoo's ads (and counterbalances for the chance that a link might be forwarded or replied to and sent to a local user). It only works with Declude Pro (like all other custom filters). MailPure :: Filter Software :: Declude Filters http://www.mailpure.com/software/decludefilters/ Matt George Kulman wrote: Matt, Thanks for the info. It's still difficult for me to imagine a "legitimate" user having a redirected web site being pointed to as "their web site" in an email. More research I guess. George -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matthew Bramble Sent: Wednesday, November 12, 2003 2:37 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] URL Redirectors George, Spammers will use a variety of Yahoo sub-domains, most of which are valid. I'm not familiar with that one in particular, but it might help to search Google for examples of that showing up (that's how I do some of my research). http://www.google.com/search?hl=enlr=ie=UTF-8client=googletq=%22drs.yaho o.%2Bcom%22 Blocking that one address though would only be a fraction of the spam that actually uses Yahoo's redirection though. Yahoo does use it themselves of course, and they also have it configured for links in messages sent by third parties, such as Classmates for instance. Matt George Kulman wrote: Hi all, I have an IMail client who doesn't have budget funds available for Declude where these are easily filterable. A fair amount of their spam contains a URL redirection such as: http://drs.yahoo.com/effloresce/*http://click.com-click.com.ph/click.php?id = leneyeiID=40gi=hallmark 1. Is anyone aware of a dnsbl that deals with spamming URL redirectors? 2. Is anyone aware of legitimate email using this type of URL? 3. Is the drs.yahoo.com ever used for legitimate email. TIA, George --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] URL Redirectors
Title: Message Matt, I'm familiar with the Y!DIRECTED and other tests that you've so kindly made available. In this case I'm trying to find a way to identify these and block them with the basic IMail tests. If I can't, then I'll have to route all of their mail through my Declude Pro environment. George -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matthew BrambleSent: Wednesday, November 12, 2003 5:16 PMTo: [EMAIL PROTECTED]Subject: Re: [Declude.JunkMail] URL RedirectorsGeorge,I did build a test for this exact thing and shared it on my site (called Y!DIRECTED), but I thought that you might have been more interested in that URL in particular and replied accordingly. My Y!DIRECTED filter will stop most of this stuff and it allows for places like Yahoo and Yahoo's ads (and counterbalances for the chance that a link might be forwarded or replied to and sent to a local user). It only works with Declude Pro (like all other custom filters). MailPure :: Filter Software :: Declude Filters http://www.mailpure.com/software/decludefilters/MattGeorge Kulman wrote: Matt, Thanks for the info. It's still difficult for me to imagine a "legitimate" user having a redirected web site being pointed to as "their web site" in an email. More research I guess. George -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matthew Bramble Sent: Wednesday, November 12, 2003 2:37 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] URL Redirectors George, Spammers will use a variety of Yahoo sub-domains, most of which are valid. I'm not familiar with that one in particular, but it might help to search Google for examples of that showing up (that's how I do some of my research). http://www.google.com/search?hl=enlr=ie=UTF-8client=googletq=%22drs.yaho o.%2Bcom%22 Blocking that one address though would only be a fraction of the spam that actually uses Yahoo's redirection though. Yahoo does use it themselves of course, and they also have it configured for links in messages sent by third parties, such as Classmates for instance. Matt George Kulman wrote: Hi all, I have an IMail client who doesn't have budget funds available for Declude where these are easily filterable. A fair amount of their spam contains a URL redirection such as: http://drs.yahoo.com/effloresce/*http://click.com-click.com.ph/click.php?id = leneyeiID=40gi=hallmark 1. Is anyone aware of a dnsbl that deals with spamming URL redirectors? 2. Is anyone aware of legitimate email using this type of URL? 3. Is the drs.yahoo.com ever used for legitimate email. TIA, George --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
