RE: [Declude.JunkMail] New Phishing Scam

Nope, The original link still works: http://www.paypal.com/verification/%?6488820019=20 Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent:

RE: [Declude.JunkMail] Is this a normal redirect?

I have been geeting spam with this redirect: http://rds.yahoo.com/*-http://; followed by a host name ex:http://rds.yahoo.com/*-http://www.example.com Is there a viable use for this or can I reliably filter on it? Thanks! -Nick Hayer --- [This E-mail was scanned for viruses by Declude Virus

Re: [Declude.JunkMail] New Phishing Scam

paypal.com should be working...as it is paypal...:)... The issue was this IP masquerading as a paypal site...http://216.55.162.5/ I made a similar mistake when I didn't realize that the original HTML email had passed through a non-HTML email client, removing the hidden IP in the a href=... tag

Re: [Declude.JunkMail] Is this a normal redirect?

Nick, The new version of Y!DIRECTED will catch that one. Matt nick wrote: I have been geeting spam with this redirect: http://rds.yahoo.com/*-http://; followed by a host name ex:http://rds.yahoo.com/*-http://www.example.com Is there a viable use for this or can I reliably filter on it?

RE: [Declude.JunkMail] New Phishing Scam

That is not the phishing link that is a reale link to paypal Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Andy Schmidt Sent: Sunday, February 15, 2004 8:06 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] New Phishing Scam

Re: [Declude.JunkMail] New Phishing Scam

FYI, If this happens again and if you all would like to make a statement, I wrote a little VBS file that uses wget to download a copy of the site, checks it for the offending content, and then E-mail whomever you wish (cobbed from the Sniffer download script). A dozen of us using this,

[Declude.JunkMail] SOLID DNSBL

This test has been down for at least several days now. The site shows no info related to a change. Just a heads up to comment out the test unless someone knows of a different configuration. Matt -- = MailPure custom filters for Declude

Re: [Declude.JunkMail] SOLID DNSBL

If you are still using the reynolds FQHNs for these searches, you will need to change them to associated *.bl.dnsbl.net.au FQHNs (see http://www.declude.com/Junkmail/support/ip4r.htm for the updated hostnames. Bill - Original Message - From: Matt [EMAIL PROTECTED] To: [EMAIL PROTECTED]