On Mon, 2009-11-23 at 17:08 -0700, LuKreme wrote:
> On Nov 23, 2009, at 7:39, Matus UHLAR - fantomas <uh...@fantomas.sk>
> wrote:
>
> > Yes, why to differ between non-abusing and abusing marketers...
>
> We've been through this before. On my mail, habeas is a very strong
> indicator of spam. It does not appear in legitimate mail.
>
> I don't know who these legitimate marketers are, but I don't feel I'm
> missing anything.
>
Although these don't all appear to be business related, very few would
be marked as spam without the HABEAS_ACCREDITED bonus.
First, the suspicious ones:
$ grep HABEAS_ACCREDITED /var/log/mail/info | grep -v score=- | grep -o
-P '@.+?> ->' | cut -d\> -f 1 | sort | uniq -c | sort -rn
20 @mail.beliefnet.com
8 @dellconsumer.bounce.ed10.net
5 @news.college.us.com
4 @cmpgnr.com
3 @Zip-Times.com
3 @mailengine.nelsonpub.com
3 @mail.classmates.com
2 @yournewsletters.net
2 @mta-inbound.cluster3.convio.net
2 @financial2.net
1 @pbinews.com
1 @me20218.mailengine1.com
1 @mailengine.dermstore.com
1 @e.macys.com
Now, the list thus far this week...
$ grep HABEAS_ACCREDITED /var/log/mail/info | grep -o -P '@.+?> ->' |
cut -d\> -f 1 | sort | uniq -c | sort -rn
64 @mail.beliefnet.com
45 @bounce.linkedin.com
30 @pmcorpsend.com
26 @b.mypoints.com
25 @b.e.bathandbodyworks.com
23 @yournewsletters.net
23 @mailva.evite.com
21 @returns.sales.overstock.com
20 @bounce.homedepotemail.com
18 @dellconsumer.bounce.ed10.net
17 @reply.newsmax.com
17 @info.lanebryant.com
17 @b.e.victoriassecret.com
16 @health.webmd.com
15 @pbinews.com
13 @enews.potterybarn.com
13 @cmpgnr.com
13 @bounce.convio.net
12 @taggedmail.com
11 @us.emarsys.net
11 @prod-mail1.inboxmarketer-mail.com
11 @email.bn.com
10 @bounce.shermanstravel.com
8 @singlesnet.com
8 @ebay.com
8 @b.update.hallmark.com
8 @b.news.lowermybills.com
8 @b2a.mx0.net
7 @unionvoice.org
7 @shopittome.com
7 @mailengine.nelsonpub.com
7 @list.cheapflights.com
7 @financial2.net
7 @bounce.walmart.com
7 @bounce.astrology.com
7 @b.email.brylanehome.com
6 @post.taipan2.net
6 @hsci2.net
6 @flixster.com
6 @express2.email-advantage.com
6 @b.e.drugstore.com
6 @b.e.allposters.com
6 @b.e.1800flowers.com
5 @pminews.com
5 @news.college.us.com
5 @info.catherines.com
5 @clickmail.VacationRentals.com
4 @wb.com
4 @TexasR.fbmta.com
4 @realage-mail.com
4 @mydailymoment.com
4 @membership.ufcu.org
4 @intliv2.net
4 @email.electronicdesign.com
4 @email.businessfinancemag.com
4 @Dennys.fbmta.com
4 @bounce.stnlmailsvc.com
4 @b.e.art.com
4 @australia.care2.com
3 @Zip-Times.com
3 @twconnect.co.uk
3 @reply.collegeboard.com
3 @qmail7.arcamax.com
3 @qmail1.arcamax.com
3 @myusairways.com
3 @mail.classmates.com
3 @Lyrismail.CelebrateExpress.com
3 @ientrynetwork.net
3 @enews.williams-sonoma.com
3 @email.kgstores.com
3 @compusaonline.com
3 @bounce.ivnlmailsvc.com
3 @bounce.hsnlmailsvc.com
3 @bounce.expediamail.com
3 @boardroomdhn.bounce.ed10.net
3 @b.cts.vresp.com
2 @zt03.net
2 @www1.nmgmail.com
2 @sharpdirect.sharpusa.com
2 @response.ideeli.com
2 @r4lmail2.recipe4living-recipes.com
2 @pmemailer.com
2 @peppersandrogersgroup.com
2 @partner.pch.bounce.ed10.net
2 @oxford2.net
2 @ndc-fulmailapp3.walmart.com
2 @mta-inbound.cluster3.convio.net
2 @mmorning.net
2 @manidoo-village.com
2 @mailings5.cygnusb2b.com
2 @LyrisMail.Buycostumes.com
2 @learning2.net
2 @email.azamaracruises.com
2 @e.justmysize.com
2 @cvs.bounce.ed10.net
2 @cp20.com
2 @cantina.fbmta.com
2 @briantracyintl.com
2 @bounce.mkt2180.com
2 @bounce.mkt1031.com
2 @bounce.glnlmailsvc.com
2 @b.email.womanwithin.com
2 @b.email.kingsizedirect.com
2 @b.email.jessicalondon.com
1 @wout3.gliq.com
1 @trk.fcs-newsletters1.net
1 @tmkrmssmtp1.tmkrms.com
1 @specials.firemountaingems.com
1 @response.whatcounts.com
1 @reply.projectsatwork.com
1 @post.hsci2.net
1 @pmedianews.com
1 @orvisnews.com
1 @numbersusa.com
1 @npdor.com
1 @netlogmail.com
1 @myhealthwealthandhappiness.com
1 @MizzouAlumni.org
1 @me20218.mailengine1.com
1 @mam11.gliq.com
1 @mail.us.pampers.com
1 @mail.thefunnystuff.net
1 @mailengine.dermstore.com
1 @mail9.job.com
1 @mail96.subscribermail.com
1 @mail5.job.com
1 @mail4.nextjump.com
1 @mail1.eventbrite.com
1 @LISTSERV.DIRECTMAILEXPRESS.NET
1 @lists.3ho.org
1 @killerdana-alerts.com
1 @jewelrytv.rsys1.com
1 @i-say.com
1 @geicomail.com
1 @ga-mail.teamsterstakeaction.org
1 @ga-mail.action.earthjustice.org
1 @gaiam.rsys1.com
1 @e-rewards.net
1 @enews.potterybarnkids.com
1 @email.whitehat.com
1 @email.thermofisher.com
1 @email.quickenloans.com
1 @email.logisticstoday.com
1 @email.livenationent.com
1 @email.eepn.com
1 @e.macys.com
1 @e.hanes.com
1 @bounces.democratsenators.org
1 @bounces.amreg.com
1 @bounce.messages.bitdefender.com
1 @bounce.cordblood.com
1 @blingo.pch.bounce.ed10.net
1 @b.email.onestopplus.com
1 @arbys.fbmta.com
1 @americangirl-email.com
1 @agoravip.com
1 @actionnetwork.org
1 @1800petmeds.com
--
Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX
www.austinenergy.com
