You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by "Rosenbaum, Larry M." <ro...@ornl.gov> on 2005/03/21 16:34:56 UTC
ZDNET redirecting to spammer websites?
We received a drug spam containing the following URL:
http://chkpt.zdnet.com/chkpt/supposedtoallow/fdl%2ev%69%61%67%73.co%6d/p/b/kmioa
This URL will actually take you to fdl.viags.com (which then goes to
www.simply-rx.net). As far as I know, the SA SURBL check will check
zdnet.com, not the spammer domain viags.com. What is going on here, and
what should we do about it?
Larry
Re: ZDNET redirecting to spammer websites?
Posted by Duncan Hill <sa...@nacnud.force9.co.uk>.
On Monday 21 March 2005 15:34, Rosenbaum, Larry M. typed:
> We received a drug spam containing the following URL:
>
> http://chkpt.zdnet.com/chkpt/supposedtoallow/fdl%2ev%69%61%67%73.co%6d/p/b/
>kmioa
>
> This URL will actually take you to fdl.viags.com (which then goes to
> www.simply-rx.net). As far as I know, the SA SURBL check will check
uri ZDNET_RELAY /http:\/\/chkpt\.zdnet\.com\/chkpt\//
score ZDNET_RELAY 5
And add your voice to the complaints to ZDNet.
Re: ZDNET redirecting to spammer websites?
Posted by ga...@netrox.net.
If you right click on that link you will see the real URL which is..
http://chkpt.zdnet.com/chkpt/supposedtoallow/fdl.viags.com/p/b/kmioa
"fdl.viags.com"
The stuff in front is just to hide the real url and to re-direct your effort.
So I would not give zdnet too hard of a time, else they my have a few
choice words for you.
> We received a drug spam containing the following URL:
>
> http://chkpt.zdnet.com/chkpt/supposedtoallow/fdl%2ev%69%61%67%73.co%6d/p/b/kmioa
>
> This URL will actually take you to fdl.viags.com (which then goes to
> www.simply-rx.net). As far as I know, the SA SURBL check will check
> zdnet.com, not the spammer domain viags.com. What is going on here, and
> what should we do about it?
>
> Larry
>
Re: ZDNET redirecting to spammer websites?
Posted by jdow <jd...@earthlink.net>.
In that case I'd have a few REALLY choice words for them. They are
serving as an open spam redirector. Of course, I never get anything
legitimate from them so zdnet.com can simply be black listed locally
for the entire domain.
{^_^}
----- Original Message -----
From: <ga...@netrox.net>
> Let's try this again... My first response got lost in the ether.
>
>
> If you right click on that link you will see the real URL which is..
>
> http://chkpt.zdnet.com/chkpt/supposedtoallow/fdl.viags.com/p/b/kmioa
>
> "fdl.viags.com"
>
> The stuff in front is just to hide the real url and to re-direct your
effort.
>
> So I would not give zdnet too hard of a time, else they my have a few
> choice words for you.
>
>
>
>
>
> > We received a drug spam containing the following URL:
> >
> >
http://chkpt.zdnet.com/chkpt/supposedtoallow/fdl%2ev%69%61%67%73.co%6d/p/b/kmioa
> >
> > This URL will actually take you to fdl.viags.com (which then goes to
> > www.simply-rx.net). As far as I know, the SA SURBL check will check
> > zdnet.com, not the spammer domain viags.com. What is going on here, and
> > what should we do about it?
> >
> > Larry
> >
Re: ZDNET redirecting to spammer websites?
Posted by ga...@netrox.net.
Let's try this again... My first response got lost in the ether.
If you right click on that link you will see the real URL which is..
http://chkpt.zdnet.com/chkpt/supposedtoallow/fdl.viags.com/p/b/kmioa
"fdl.viags.com"
The stuff in front is just to hide the real url and to re-direct your effort.
So I would not give zdnet too hard of a time, else they my have a few
choice words for you.
> We received a drug spam containing the following URL:
>
> http://chkpt.zdnet.com/chkpt/supposedtoallow/fdl%2ev%69%61%67%73.co%6d/p/b/kmioa
>
> This URL will actually take you to fdl.viags.com (which then goes to
> www.simply-rx.net). As far as I know, the SA SURBL check will check
> zdnet.com, not the spammer domain viags.com. What is going on here, and
> what should we do about it?
>
> Larry
>
Re: ZDNET redirecting to spammer websites?
Posted by Jeff Chan <je...@surbl.org>.
On Monday, March 21, 2005, 9:43:02 PM, Jeff Chan wrote:
> On Monday, March 21, 2005, 7:34:56 AM, Larry Rosenbaum wrote:
>> We received a drug spam containing the following URL:
>> http://chkpt.zdnet.com/chkpt/supposedtoallow/fdl%2ev%69%61%67%73.co%6d/p/b/kmioa
>> This URL will actually take you to fdl.viags.com (which then goes to
>> www.simply-rx.net). As far as I know, the SA SURBL check will check
>> zdnet.com, not the spammer domain viags.com. What is going on here, and
>> what should we do about it?
>> Larry
> 1. Make SA check the redirected-to domain: viags.com.
BTW I've made a bugzilla for this:
http://bugzilla.spamassassin.org/show_bug.cgi?id=4176
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
Re: ZDNET redirecting to spammer websites?
Posted by Jeff Chan <je...@surbl.org>.
On Monday, March 21, 2005, 7:34:56 AM, Larry Rosenbaum wrote:
> We received a drug spam containing the following URL:
> http://chkpt.zdnet.com/chkpt/supposedtoallow/fdl%2ev%69%61%67%73.co%6d/p/b/kmioa
> This URL will actually take you to fdl.viags.com (which then goes to
> www.simply-rx.net). As far as I know, the SA SURBL check will check
> zdnet.com, not the spammer domain viags.com. What is going on here, and
> what should we do about it?
> Larry
1. Make SA check the redirected-to domain: viags.com.
2. Contact zdnet and tell them to close their redirector or at
least filter it so spammers get denied or flagged:
http://www.surbl.org/redirect.html
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/