rconner Posted March 8, 2008 Share Posted March 8, 2008 I just manually reported a malware site to its hosting provider. My report was immediately bounced because the service’s spam filter decided it was spam (logically enough, since it contained the e-mail packet). What makes this a bit amusing is the fact that the spam filter barfed because the hosting service's own URL was listed on URIBL. In other words, "we reject your report because it contains an evil URL -- namely, our own." FWIW, the reply appeared in my SpamCop filter, so I will cancel it and will instead give the relevant info in a quote: spam detection software, running on the system "psa810.hq.widestore.net", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see [at][at]CONTACT_ADDRESS[at][at] for details. Content preview: spam detection software, running on the system "psa810.hq.widestore.net", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see [at][at]CONTACT_ADDRESS[at][at] for details. [...] Content analysis details: (13.9 points, 7.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60% [score: 0.5000] 3.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URIs: myc-hoo.com] 3.8 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist [URIs: myc-hoo.com] 4.1 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: myc-hoo.com] 3.0 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist [URIs: myc-hoo.com] -- rick Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.