# IDENTIFIED SPAMMERS
#
#  This file contains recipes for known spammers and spam source sites
#  that have not recently generated enough volume to appear on the
#  Rogues list or the High Volume list.


# AccelerateBiz (Chanato)
#
# Last reported spam:  12/20/05
# Data files last updated: 12/20/05
#
# Other Relevant Info:
#
#  8/24/05:
#   I suspect an SBL is imminent for these idiots; theyve
#   been hitting my spamtraps heavily for the last couple of
#   weeks.
#
#  9/29/05:
#   Added the Chanato spamhaus -- it's a morph of these
#   guys.
#
# Status: Active Spammer
#
TESTNAME='AccelerateBiz'
TESTDOMAINS=${SBDIR}/black/acceleratebiz-domains.txt
TESTCIDR=${SBDIR}/black/acceleratebiz-ips.cidr
TESTPATTERNS=${SBDIR}/black/acceleratebiz-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051220
TESTUPDATED=20051220
TESTTYPE=HEADER
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Acetech USA, Inc.
#
# Last reported spam: 4/14/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#   SBL: http://www.spamhaus.org/sbl/sbl.lasso?query=SBL16307
#   SpamHaus DROP Listed -- bad news.
#
# Status: Active Spammer
#
TESTNAME='Acetech USA'
TESTDOMAINS=${SBDIR}/black/acetechusa-domains.txt
TESTCIDR=${SBDIR}/black/acetechusa-ips.cidr
TESTPATTERNS=${SBDIR}/black/acetechusa-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060414
TESTUPDATED=20060415
TESTTYPE=HEADER
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Alloy Online
#
# Last reported spam: 12/06/05
# Data files last updated: 12/09/05
#
# Other Relevant Info:
#
#  12/09/05:
#   Long time, fairly low-volume spammer, but a spammer
#   nonetheless who has been hitting stealth spamtraps
#   and other purpose-created spamtraps here for the last
#   couple of years.
#
# Status: Active Spammer
#
TESTNAME='Alloy Online'
TESTDOMAINS=${SBDIR}/black/alloyonline-domains.txt
TESTCIDR=${SBDIR}/black/alloyonline-ips.cidr
TESTPATTERNS=${SBDIR}/black/alloyonline-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051206
TESTUPDATED=20051209
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# AsSeenOnTV Network
#
# Last reported spam: 12/20/05
# Data files last updated: 11/06/05
#
# Other Relevant Info:
#
# Status: Active Spammer
#
TESTNAME='AsSeenOnTV Network'
TESTDOMAINS=${SBDIR}/black/asseenontvnetwork-domains.txt
TESTCIDR=${SBDIR}/black/asseenontvnetwork-ips.cidr
TESTPATTERNS=${SBDIR}/black/asseenontvnetwork-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051220
TESTUPDATED=20051106
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# AWG (youngjoo/qline)
#
# Last reported spam:  4/12/06
# Data files last updated: 4/12/06
#
# Other Relevant Info:
#
#   ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=AWG%20aka%20youngjoo%20aka%20qline
#
#   Spammer mostly for Japanese "deai" porn/"dating" sites.
#
# Status: Active Spammer
#
TESTNAME='AWG'
TESTDOMAINS=${SBDIR}/black/youngjoo-domains.txt
TESTCIDR=${SBDIR}/black/youngjoo-ips.cidr
TESTPATTERNS=${SBDIR}/black/youngjoo-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060412
TESTUPDATED=20060412
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Belmonte, Amadeo (Data One Marketing/I-Net Values)
#
# Last reported spam: 12/20/05
# Data files last updated: 11/07/05
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Amadeo%20Belmonte%20/%20Data%20One%20Marketing%20/%20I%20Net%20Values%20Inc.
#
# Status: Active Spammer
#
TESTNAME='Amadeo Belmonte'
TESTDOMAINS=${SBDIR}/black/belmonte-domains.txt
TESTCIDR=${SBDIR}/black/belmonte-ips.cidr
TESTPATTERNS=${SBDIR}/black/belmonte-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051220
TESTUPDATED=20051107
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Camargo, Ivo Ottavio Reali
#
# Last reported spam:  12/19/05
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#   ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Ivo%20Ottavio%20Reali%20Camargo
#
#   9/12/04:
#     Hosts Eddie Marin, has landed on ROKSO on his own right.
#
# Status: Active Spammer
#
TESTNAME='Ivo Ottavio Reali Camargo'
TESTDOMAINS=${SBDIR}/black/ivocamargo-domains.txt
TESTCIDR=${SBDIR}/black/ivocamargo-ips.cidr
TESTPATTERNS=${SBDIR}/black/ivocamargo-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051219
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Cave Creek
#
# Last reported spam:  2/26/06
# Data files last updated: 11/06/05
#
# Other Relevant Info:
#    Newsflash 4/14/98 -- disconnected by good.net! :>
#    9/19/98 -- spamming again through throwaway accounts at Bellatlantic. :(
#    6/11/99 -- thoroughly entrenched at Genuity/BBNPlanet. :(
#    6/10/00 -- Still at BBN, still at Genuity, and still spamming.
#    2/20/04:
#     Still hosting spammers, not sure if allowing spam to be sent
#     from their IP space.
#    7/19/05:
#     Still allowing spam to be sent from their IP space too. :/
#
#
# Status: Active Spammer
#
TESTNAME='Cave Creek'
TESTDOMAINS=${SBDIR}/black/cavecreek-domains.txt
TESTCIDR=${SBDIR}/black/cavecreek-ips.cidr
TESTPATTERNS=${SBDIR}/black/cavecreek-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060226
TESTUPDATED=20051106
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Chen, Hong (YonHen Internet Marketing Center)
#
# Last reported spam:  12/09/05
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Hong%20Chen%20/%20YonHen%20Internet%20Marketing%20Center
#
# Status: Active Spammer
#
TESTNAME='Hong Chen'
TESTDOMAINS=${SBDIR}/black/hongchen-domains.txt
TESTCIDR=${SBDIR}/black/hongchen-ips.cidr
TESTPATTERNS=${SBDIR}/black/hongchen-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051209
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Datran Media
#
# Last reported spam: 4/10/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Datran%20Media
#
# Status: Active Spammer
#
TESTNAME='Datran Media'
TESTDOMAINS=${SBDIR}/black/datranmedia-domains.txt
TESTCIDR=${SBDIR}/black/datranmedia-ips.cidr
TESTPATTERNS=${SBDIR}/black/datranmedia-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060410
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Earle IV, Charles (World Mail Direct)
#
# Last reported spam:  3/29/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Charles%20Earle%20IV%20-%20World%20Mail%20Direct
#
# Status: Unknown
#
TESTNAME='Charles Earle IV'
TESTDOMAINS=${SBDIR}/black/earle-domains.txt
TESTCIDR=${SBDIR}/black/earle-ips.cidr
TESTPATTERNS=${SBDIR}/black/earle-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060329
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Elogic.cc
#
# Last reported spam: 2/26/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=elogic.cc
#
# Status: Active Spammer
#
TESTNAME='ELogic'
TESTDOMAINS=${SBDIR}/black/elogic-domains.txt
TESTCIDR=${SBDIR}/black/elogic-ips.cidr
TESTPATTERNS=${SBDIR}/black/elogic-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060226
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Excuria
#
# Last reported spam:  12/20/05
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=eXcuria%20-%20inkjet%20cartridge%20spammers
#
# Status: Active Spammer
#
TESTNAME='Excuria'
TESTDOMAINS=${SBDIR}/black/excuria-domains.txt
TESTCIDR=${SBDIR}/black/excuria-ips.cidr
TESTPATTERNS=${SBDIR}/black/excuria-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051220
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Fabian, Brian and Gregory Parsons
#
# Last reported spam:  10/29/05
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Brian%20Fabian%20/%20Gregory%20Parsons
#
#  10/29/05:
#   Brian Fabian quit spamming a while back after an earlier ROKSO
#   listing.  Apparently he's started up again with a new partner. :(
#   It's a shame.
#
# Status: Active Spammer
#
TESTNAME='Brian Fabian'
TESTDOMAINS=${SBDIR}/black/fabian-domains.txt
TESTCIDR=${SBDIR}/black/fabian-ips.cidr
TESTPATTERNS=${SBDIR}/black/fabian-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051029
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Gans, Amir
#
# Last reported spam: 12/16/05
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#   ROKSO: http://www.spamhaus.org/rokso/sbl_listings.lasso?spammer=Amir%20Gans&rokso_id=ROK
#
# Status: Active
#
TESTNAME='Amir Gans'
TESTDOMAINS=${SBDIR}/black/amirgans-domains.txt
TESTCIDR=${SBDIR}/black/amirgans-ips.cidr
TESTPATTERNS=${SBDIR}/black/amirgans-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051215
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Gillespie, Levon (SpamForum.biz)
#
# Last reported spam:  12/16/05
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Levon%20Gillespie%20/%20spamforum.biz
#
#  6/19/05:
#   Floods of spam from this one all of the sudden.
#   Moved to High Volume list.
#
# Status: Active Spammer
#
TESTNAME='Levon Gillespie'
TESTDOMAINS=${SBDIR}/black/gillespie-domains.txt
TESTCIDR=${SBDIR}/black/gillespie-ips.cidr
TESTPATTERNS=${SBDIR}/black/gillespie-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051216
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Greenwood, Peter (Players Club)
#
# Last reported spam:  4/10/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Jeffrey%20P%20Goldstein%20/%20Gregory%20Greenstein%20-%20emailhello.com%20/%20%20impulse%20marketing
#
#  8/07/05:
#    Long-time spammer, at one time partnered with Eric
#    Reinertsen and I had their listings combined.  Now
#    broken out.
#
# Status: Active Spammer
#
TESTNAME='Peter Greenwood'
TESTDOMAINS=${SBDIR}/black/greenwood-domains.txt
TESTCIDR=${SBDIR}/black/greenwood-ips.cidr
TESTPATTERNS=${SBDIR}/black/greenwood-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060410
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Harrison Direct (Aurora Direct)
#
# Last reported spam: 12/01/05
# Data files last updated: 12/01/05
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Aurora%20Direct%20/%20Harrison%20Direct
#
#   12/01/05:
#    Formerly listed as part of Vendare, but appears to have
#    been working with Datran and possibly other big spamhausen.
#    So now listed separately.
#
# Status: Active Spammer
#
TESTNAME='Harrison Direct'
TESTDOMAINS=${SBDIR}/black/harrison-direct-domains.txt
TESTCIDR=${SBDIR}/black/harrison-direct-ips.cidr
TESTPATTERNS=${SBDIR}/black/harrison-direct-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051201
TESTUPDATED=20051201
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Hites, John ("Steve Sorenson"/Advertising International)
#
# Last reported spam: 11/06/05
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#   ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=John%20Hites%20-%20%27%27Steve%20Sorenson%27%27%20/%20Advertising%20International
#
# Status: Active Spammer
#
TESTNAME='John Hites'
TESTDOMAINS=${SBDIR}/black/johnhites-domains.txt
TESTCIDR=${SBDIR}/black/johnhites-ips.cidr
TESTPATTERNS=${SBDIR}/black/johnhites-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051106
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# HomeBizClub
#
# Last reported spam: 12/20/05
# Data files last updated: 11/07/05
#
# Other Relevant Info:
#
#  SBL: http://www.spamhaus.org/sbl/sbl.lasso?query=SBL20331
#
#  3/08/05:
#   Aggressive "mainsleaze" type spammers that seem to have
#   adopted soc.religion.islam and the moderators as favorite
#   targets of their spam. <wry grin>  They were on InfoLink
#   for some time, but InfoLink apparently kicked them off.
#   Although InfoLink is a ROKSO-listed spam outfit, these
#   particular spammers are the reason it got on my radar
#   and got its SpamBouncer recipe.
#
# Status: Active Spammer
#
TESTNAME='HomeBizClub'
TESTDOMAINS=${SBDIR}/black/homebizclub-domains.txt
TESTCIDR=${SBDIR}/black/homebizclub-ips.cidr
TESTPATTERNS=${SBDIR}/black/homebizclub-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051220
TESTUPDATED=20051107
TESTTYPE=HEADER
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# HostnetCA
#
# Last reported spam:  12/20/05
# Data files last updated: 11/07/05
#
# Other Relevant Info:
#
#  SBL: http://www.spamhaus.org/sbl/sbl.lasso?query=SBL26601
#
#  6/06/05:
#   PRODUCTTESTERSNEEDED.COM and other similar domains in
#   headers, always in all-caps.  Hitting lots of spamtraps.
#
# Status: Active Spammer
#
TESTNAME='HostnetCA'
TESTDOMAINS=${SBDIR}/black/hostnetca-domains.txt
TESTCIDR=${SBDIR}/black/hostnetca-ips.cidr
TESTPATTERNS=${SBDIR}/black/hostnetca-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051220
TESTUPDATED=20051107
TESTTYPE=HEADER
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Ibragimov, Ruslan (send-safe.com)
#
# Last reported spam:  4/09/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#   ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Ibragimov%20Ruslan%20/%20send-safe.com
#
# Status: Active Spammer
#
TESTNAME='Ibragimov Ruslan'
TESTDOMAINS=${SBDIR}/black/ruslan-domains.txt
TESTCIDR=${SBDIR}/black/ruslan-ips.cidr
TESTPATTERNS=${SBDIR}/black/ruslan-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060409
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Imperium Strategies ("Donald Tacchino")
#
# Last reported spam:  2/28/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#   11/30/05:
#    Long-time Vendare partners in spam, but their domain
#    registrations follow a pattern more typical of Traffix
#    than Vendare.
#
# Status: Active Spammer
#
TESTNAME='Imperium Strategies'
TESTDOMAINS=${SBDIR}/black/imperium-strategies-domains.txt
TESTCIDR=${SBDIR}/black/imperium-strategies-ips.cidr
TESTPATTERNS=${SBDIR}/black/imperium-strategies-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060228
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Inbar, Amichai
#
# Last reported spam:  4/09/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#   11/30/05:
#    Long-time Vendare partners in spam, but their domain
#    registrations follow a pattern more typical of Traffix
#    than Vendare.
#
# Status: Active Spammer
#
TESTNAME='Amichai Inbar'
TESTDOMAINS=${SBDIR}/black/amichai-inbar-domains.txt
TESTCIDR=${SBDIR}/black/amichai-inbar-ips.cidr
TESTPATTERNS=${SBDIR}/black/amichai-inbar-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060409
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Intermix Media (Previously eUniverse, FlowGo, North Plains, LLC)
#
# Last reported spam: 12/20/05
# Data files last updated: 6/06/05
#
# Other Relevant Info:
#
#
#   7/19/02:
#    Spamming root addresses at nameservers.
#
#   11/09/02:
#     Appear to have hooked up with Frank Bernal/Optin Inc. and Sweepsclub,
#     among other spammers, who spam on their behalf.  They appear to be hosting
#     haven domains instead of spamming from their own netblocks.
#
#   11/13/02:
#     Now also appear to have hooked up with IDSBI. :/
#
#   11/19/02:
#     AT&T, which hosts most of the Euniverse/Flowgo sites, is whining about
#     complaints because of one that they dont host.  Update made, although
#     AT&T really should do something about their spamming customers.
#
#   12/19/03:
#     Appears to be a morph of the Euniverse/Flowgo spammers.
#
#    1/11/04:
#     Appear to have teamed up with spam-for-hire outfit Atriks.
#
#    4/28/05:
#     Found out about name change to Intermix Media, sued today by
#     NY Attorney General Elliott Spitzer for fraudulently installing
#     spyware on computers that respond to their spams. :/
#
# Status: Active Spammer
#
TESTNAME='Intermix Media'
TESTDOMAINS=${SBDIR}/black/intermix-domains.txt
TESTCIDR=${SBDIR}/black/intermix-ips.cidr
TESTPATTERNS=${SBDIR}/black/intermix-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051220
TESTUPDATED=20050606
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# iwon.com
#
# Last reported spam: 10/30/05
# Data files last updated: 7/20/04
#
# Other Relevant Info:
#
#     7/31/02:
#       Company that bought what was left of Excite@Home,
#       apparently has turned to spamming to pay for it. :/
#
#    12/11/03:
#      Spamming harder than ever.
#
# Status: Active Spammers
#
TESTNAME='Iwon'
TESTDOMAINS=${SBDIR}/black/iwon-domains.txt
TESTCIDR=${SBDIR}/black/iwon-ips.cidr
TESTPATTERNS=${SBDIR}/black/iwon-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051030
TESTUPDATED=20040720
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Jones, Dana (golfballsunlimitedusa.com/we-deliver.net)
#
# Last reported spam: 3/25/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#   Disconnected 1/26/98 by ACSI! :)
#   Reconnected at some point prior to 4/15/98 by Digex. :(
#   Reconnected at some point prior to 10/14/98 by AGIS. :(
#   Actively spamming through throwaway accounts :(
#   Is forging David Taylors t-1net.com domain onto spams.
#   Is forging MAILER-DAEMON addresses onto spams.
#   This is a =REAL= jerk.
#   2/25/99 -- back in action through infohwy.com :(
#   6/10/00 -- appears to exist, but no record of spamming for the
#     last 6 months or so.  Well see if hes gone....
#   10/13/02 -- He isnt gone. <sigh>
#   10/10/03 -- On Savvis, spamming away.
#
# Status: Active Spammer
#
TESTNAME='Dana Jones'
TESTDOMAINS=${SBDIR}/black/danajones-domains.txt
TESTCIDR=${SBDIR}/black/danajones-ips.cidr
TESTPATTERNS=${SBDIR}/black/danajones-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060325
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Jumpstart Technology LLC
#
# Last reported spam: 11/13/05
# Data files last updated: 11/13/05
#
# Other Relevant Info:
#
#   ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Jumpstart%20Technology%20LLC
#
#  11/13/05:
#   It's highly likely that this is a morph of Vendare
#   Group, but since SpamHaus has them listed separately,
#   I will for now.
#
TESTNAME='Jumpstart'
TESTDOMAINS=${SBDIR}/black/jumpstart-domains.txt
TESTCIDR=${SBDIR}/black/jumpstart-ips.cidr
TESTPATTERNS=${SBDIR}/black/jumpstart-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051113
TESTUPDATED=20051113
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Lin Hsien Ming (himailer.com, callin.net, yuya.com.tw)
#
# Last reported spam: 12/15/05
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Lin%20Hsien%20Ming%20/%20himailer.com,%20callin.net,%20yuya.com.tw
#
# Status: Active Spammer
#
TESTNAME='Lin Hsien Ming'
TESTDOMAINS=${SBDIR}/black/linhsienming-domains.txt
TESTCIDR=${SBDIR}/black/linhsienming-ips.cidr
TESTPATTERNS=${SBDIR}/black/linhsienming-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051215
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# LMI Hosting
#
# Last reported spam: 3/25/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=lmihosting.com
#
# Status: Unknown
#
TESTNAME='LMI Hosting'
TESTDOMAINS=${SBDIR}/black/lmihosting-domains.txt
TESTCIDR=${SBDIR}/black/lmihosting-ips.cidr
TESTPATTERNS=${SBDIR}/black/lmihosting-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060325
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Mansfield, Wayne
#
# Last reported spam: 4/14/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  6/18/02:
#   Sued someone who was spammed by them and complained publicly
#   for complaining. :(
#
#  11/21/02:
#    Lost the lawsuit, said theyd appeal, dropped it, and started
#    spamming anew. :/  Now using throwaway accounts and the usual
#    bag of tricks to avoid detection, so I added a body text filter.
#
#   1/29/04:
#    Comindico.com.au has started sending spam again.  Not sure if
#    this is Wayne Mansfield, or someone else who took over that domain.
#    Interesting....
#
#   2/01/04:
#    Comindico isn't Mansfield anymore, if it ever was.  Fixed.
#
# Status: Active Spammer
#
TESTNAME='Wayne Mansfield'
TESTDOMAINS=${SBDIR}/black/mansfield-domains.txt
TESTCIDR=${SBDIR}/black/mansfield-ips.cidr
TESTPATTERNS=${SBDIR}/black/mansfield-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060414
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Marin, Eddie (OneRoute)
#
# Last reported spam: 8/08/05
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Eddy%20Marin%20-%20Oneroute
#
#  11/15/02:
#   At one point affiliated with Frank Bernal's Opt Out Inc, but
#   a system administrator there complained today, and indicated
#   that they are separate companies.  Happy to oblige. :)
#
#  12/04/02:
#   Just got notified that 4optinworld.com, direct4optin.com, and
#   (most importantly) optinllc.com/optinllc.net are all part of
#   OneStopData, not Optin Inc.  So I moved those domains from
#   the Optin Inc. recipe to here.
#
#  2/21/03:
#   Obtained a new netblock at PG&C Leasing, which is probably
#   owned by Eddy Marin at this point.  New domains, as well.
#
#  1/29/04:
#   Still on the ROKSO Top-10 spammers for December 2003. :/
#
# Status: Active Spammer
#
TESTNAME='Eddie Marin'
TESTDOMAINS=${SBDIR}/black/marin-domains.txt
TESTCIDR=${SBDIR}/black/marin-ips.cidr
TESTPATTERNS=${SBDIR}/black/marin-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20050805
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Maritime Global (MGN)
#
# Last reported spam:  12/20/05
# Data files last updated: 12/20/05
#
# Other Relevant Info:
#
#   8/27/2005:
#    Long-time spammers, run a legitimate-looking portal for
#    ocean-based long-haul shipping.  They spam scraped email
#    addresses, the works, however, and move arond to different
#    IPs constantly.  Debated putting them in the Mainsleaze
#    category, but I couldn't find any information about them
#    that indicates that their email is actually wanted by
#    anybody, even in their industry.
#
# Status: Active Spammer
#
TESTNAME='Maritime Global'
TESTDOMAINS=${SBDIR}/black/maritimeglobal-domains.txt
TESTCIDR=${SBDIR}/black/maritimeglobal-ips.cidr
TESTPATTERNS=${SBDIR}/black/maritimeglobal-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051220
TESTUPDATED=20051220
TESTTYPE=HEADER
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Mesa Media
#
# Last reported spam:  11/04/05
# Data files last updated: 10/30/05
#
# Other Relevant Info:
#
#  10/30/05:
#   Aggressive new spammer in Wholesale Internet (Kansas City)
#   netspace.  Interestingly, has several domains that include
#   the term "SayKoh", all registered through the RegisterFly
#   privacy service.  (IMHO a spam support service.) The company
#   SayKoh is a part of ROKSO-listed spammer Atriks/Brian Haberstroh's
#   outfit.  But the emails coming from these guys don't use Haberstroh's
#   signature VirtualMDA network of "legal" open proxies/trojaned
#   computers. They're sent from their own assigned/registered IPs.
#
#   So either SayKoh *isn't* Atriks, but just a one-time partner,
#   or Haberstroh is branching out.
#
# Status: Active Spammer
#
TESTNAME='Mesa Media'
TESTDOMAINS=${SBDIR}/black/mesamedia-domains.txt
TESTCIDR=${SBDIR}/black/mesamedia-ips.cidr
TESTPATTERNS=${SBDIR}/black/mesamedia-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051104
TESTUPDATED=20051030
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Metarewards
#
# Last reported spam:  12/20/05
# Data files last updated: 12/20/05
#
# Other Relevant Info:
#
#   SBL: http://www.spamhaus.org/sbl/sbl.lasso?query=SBL27366
#
#  6/11/05:
#   Teamed up with Atriks, appears to be hosting graphics for
#   Atriks spam.  However, has a history of spamming on its
#   own that earned it an SBL listing, and has earned it a
#   listing here as well.
#
# Status: Active Spammer
#
TESTNAME='Metarewards'
TESTDOMAINS=${SBDIR}/black/metarewards-domains.txt
TESTCIDR=${SBDIR}/black/metarewards-ips.cidr
TESTPATTERNS=${SBDIR}/black/metarewards-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051220
TESTUPDATED=20051220
TESTTYPE=BODY
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Mizhen, Boris
#
# Last reported spam:  4/09/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#   ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Boris%20Mizhen
#
# Status: Unknown
#
TESTNAME='Boris Mizhen'
TESTDOMAINS=${SBDIR}/black/mizhen-domains.txt
TESTCIDR=${SBDIR}/black/mizhen-ips.cidr
TESTPATTERNS=${SBDIR}/black/mizhen-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060409
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Niutech (TheUseful.com)
#
# Last reported spam:  10/20/05
# Data files last updated: 9/17/05
#
# Other Relevant Info:
#
#   SBL: http://www.spamhaus.org/sbl/sbl.lasso?query=SBL29134
#
# Status: Active Spammer
#
TESTNAME='Niutech'
TESTDOMAINS=${SBDIR}/black/niutech-domains.txt
TESTCIDR=${SBDIR}/black/niutech-ips.cidr
TESTPATTERNS=${SBDIR}/black/niutech-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051020
TESTUPDATED=20050917
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# OC3 Networks
#
# Last reported spam:  4/11/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=OC3%20Networks%20-%20Ilan%20Mishan
#
#   12/10/03:
#     Spewing away, listed by SBL, etc.
#
#   10/06/04:
#     Still spewing away.
#
#   11/11/04:
#     Supposedly bankrupt, blocks reverting to ARIN.  Well see.
#
#   12/05/04:
#     Someone is still  using these netblocks to spam. :(
#
# Status: Active Spammer
#
TESTNAME='OC3 Networks'
TESTDOMAINS=${SBDIR}/black/oc3-domains.txt
TESTCIDR=${SBDIR}/black/oc3-ips.cidr
TESTPATTERNS=${SBDIR}/black/oc3-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060411
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Promenade Marketing
#
# Last reported spam:  11/06/05
# Data files last updated: 11/07/05
#
# Other Relevant Info:
#
#  10/30/05:
#   Spamming customer of Cave Creek Internet Exchange, also listed
#   as a spammer here.  But this one is getting prolific enough
#   and looks like it's trying to appear "legitimate", i.e. sending
#   CAN-SPAM compliant spam. :/
#
# Status: Active Spammer
#
TESTNAME='Promenade Marketing'
TESTDOMAINS=${SBDIR}/black/promenade-marketing-domains.txt
TESTCIDR=${SBDIR}/black/promenade-marketing-ips.cidr
TESTPATTERNS=${SBDIR}/black/promenade-marketing-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051107
TESTUPDATED=20051107
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Python Video
#
# Last reported spam:  12/18/05
# Data files last updated: 12/20/05
#
# Other Relevant Info:
#
#  10/21/05:
#   Old-time Canadian porn/xxx spamhaus that uses every
#   scummy trick in the book to avoid being blamed for
#   their spam. :/  Finally got sick of them and listed
#   them separately.
#
# Status: Active Spammer
#
TESTNAME='Python Video'
TESTDOMAINS=${SBDIR}/black/python-video-domains.txt
TESTCIDR=${SBDIR}/black/python-video-ips.cidr
TESTPATTERNS=${SBDIR}/black/python-video-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051218
TESTUPDATED=20051220
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Richter, Scott
#
# Last reported spam: 4/03/06
# Data files last updated: 4/12/06
#
# Other Relevant Info:
#
#   Former ROKSO listing:
#    ROKSO http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Scott%20Richter%20-%20Saverealbig.com
#
#   12/04/03:
#     Hosts tons of spammers, doesnt appear to do any legitimate business.
#     Listed in SBL, ROKSO.  Seriously bad news.  (And possibly a morph
#     of Scott Richter.) :/
#
#    1/30/04:
#     Teaming up with ROKSO spammer Joshua Baer on stock spam.
#
#    2/08/04:
#     Definitely a morph of Scott Richter.  Wholesale Bandwidth entry
#     consolidated with Richter entry.
#
#    11/03/04:
#     Hooked up with Brian Haberstroh, hosting a bunch of new Haberstroh
#     domains.
#
#    6/28/05:
#     Got an unmistakeable Scotty spam, but to spamtrap@spambouncer.org
#     and absolutely nothing else.  It proves Richter isn't doing pure
#     closed-loop confirmed opt-in, but given the lack of hits on any
#     other addresses, I'm not inclined to take this too seriously.
#
#    7/21/05:
#     There has been a great quiet on the earth where Richter is
#     concerned since late February/early March this year.  Maybe his
#     claim to have gone straight is for real....  Hes met SpamHaus's
#     criteria for removal from ROKSO, although not mine for removal
#     from the SpamBouncer, not yet.  (I wait til a year after the last
#     spam, and in this case probably wont count the one I got last
#     month.  The last previous spam was 3/02/2005.)
#
#    7/26/05:
#     Long-time Richter associate Dustin Parker appears to be spamming
#     from Richter-owned blocks, using domains affiliated with
#     OptinRealBig. :/  I don't know at this point whether this is
#     a former employee/associate of Richter's doing this after his
#     boss left the business, or is Richter himself hiding behind
#     someone else's name.
#
#    12/20/2005:
#     Not a peep from Scotty since June. Wow....
#
#    4/12/2006:
#     It was too good to last. :(  Stuff from new Richter-owned
#     netblocks is hitting spamtraps. Not high-volume, might be
#     a bad customer, but....
#
# Status: Unknown
#
TESTNAME='Scott Richter'
TESTDOMAINS=${SBDIR}/black/richter-domains.txt
TESTCIDR=${SBDIR}/black/richter-ips.cidr
TESTPATTERNS=${SBDIR}/black/richter-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060403
TESTUPDATED=20060412
TESTTYPE=HEADER
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Schlenker, Dean (eGo Direct Mail/Cyberside Marketing)
#
# Last reported spam:  3/26/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#   ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Dean%20Schlenker%20-%20eGo%20Direct%20Mail%20/%20Cyberside%20Marketing
#
# Status: Active Spammer
#
TESTNAME='Dean Schlenker'
TESTDOMAINS=${SBDIR}/black/schlenker-domains.txt
TESTCIDR=${SBDIR}/black/schlenker-ips.cidr
TESTPATTERNS=${SBDIR}/black/schlenker-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060326
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# SettleCLTD (Modern Seminar)
#
# Last reported spam:  12/20/05
# Data files last updated: 12/20/05
#
# Other Relevant Info:
#
#  8/24/05:
#   Long-time and fairly aggressive "seminars" spammer based
#   in Egypt.  Appears to have a political agenda, but
#   probably just in the "phony seminars for money" scam.
#
# Status: Active Spammer
#
TESTNAME='SettleCLTD'
TESTDOMAINS=${SBDIR}/black/settlecltd-domains.txt
TESTCIDR=${SBDIR}/black/settlecltd-ips.cidr
TESTPATTERNS=${SBDIR}/black/settlecltd-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051220
TESTUPDATED=20051220
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Soloway, Robert (Newport Internet Marketing)
#
# Last reported spam: 4/12/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#   ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Robert%20Soloway%20-%20Newport%20Internet%20Marketing
#
# Status: Active Spammer
#
TESTNAME='Robert Soloway'
TESTDOMAINS=${SBDIR}/black/soloway-domains.txt
TESTCIDR=${SBDIR}/black/soloway-ips.cidr
TESTPATTERNS=${SBDIR}/black/soloway-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060412
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# SubscriberBase (Involve Media/John Carrington/Wayland "Larry" Winn)
#
# Last reported spam: 12/19/05
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  12/21/03: Long-time spammers, finally listed.
#
#  6/30/04: Appear to have hooked up with Scott Richter.
#
#  10/24/04: And now with Brian Haberstroh. :/
#
#  10/24/04: And now with DirectQlick, although I continue
#            to see Haberstroh spam with links to SubscriberBase-
#            affiliated URLs. :/
#
# Status: Active Spammers
#
TESTNAME='SubscriberBase'
TESTDOMAINS=${SBDIR}/black/sbase-domains.txt
TESTCIDR=${SBDIR}/black/sbase-ips.cidr
TESTPATTERNS=${SBDIR}/black/sbase-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051219
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# TAMNetwork
#
# Last reported spam:  4/15/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL15315
#
# Status: Active Spammer
#
TESTNAME='TAMNetwork'
TESTDOMAINS=${SBDIR}/black/tamnetwork-domains.txt
TESTCIDR=${SBDIR}/black/tamnetwork-ips.cidr
TESTPATTERNS=${SBDIR}/black/tamnetwork-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060415
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Taub, Adam (Estrela Marketing)
#
# Last reported spam:  12/20/05
# Data files last updated: 12/20/05
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Adam%20Taub%20/%20Estrela%20Marketing
#
# Status: Active Spammer
#
TESTNAME='Adam Taub'
TESTDOMAINS=${SBDIR}/black/adamtaub-domains.txt
TESTCIDR=${SBDIR}/black/adamtaub-ips.cidr
TESTPATTERNS=${SBDIR}/black/adamtaub-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051220
TESTUPDATED=20051220
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Topica
#
# Last reported spam: 12/15/05
# Data files last updated: 9/23/05
#
# Other Relevant Info:
#
#    topica.com provides free mailing lists for internet users, and also runs
#    a for-pay mailing list service for commercial customers.  Free lists must
#    use confirmed opt-in, but commercial lists are not required to do so.
#
#    email-publisher.com is essentially a spam-for-hire operation, and is
#    treated as such in the appropriate place.  Topica does not do a good
#    job of enforcing confirmed opt-in even for its free customers, though.
#    IMHO it uses its free lists as "hostages" -- because it sends both
#    spam and legitimate list mail from the same location, it hopes that
#    blacklists will not block it.  Wont work with me. :)
#
#   8/04/02:
#    Per a conversation I had with a fellow anti-spam activist working with
#    Topica, Ive whiteliested a Topica netblock that will contain only
#    confirmed opt-in lists.  While Id prefer Topica quit sending any
#    opt-out email, Ill meet them or any other provider halfway as
#    long as doing so doesnt mean my users get spammed. :)
#
#   4/20/03:
#    Updating new Topica netblocks used to send spam, not email-publisher.com.
#
#   10/01/03:
#    Consolidating all of Topica together in one place.  Thought for
#    a long time that this was a legitimate host of mailing lists that
#    just had a lot of trouble keeping spam out.  It isn't -- these
#    guys are spammers, plain and simple.  They use the free, confirmed
#    opt-in email lists for essentially the same purposes that a
#    terrorist uses civilian hostages. <sigh>  Fortunately, I don't have
#    to play Topicas game, as I would if human lives were at stake instead
#    of free mailing lists. :)
#
#   6/19/05:
#    Started hitting spamtraps here again a couple of weeks ago, now for
#    several different customers. <sigh>  Reactivated.
#
#
# Status: Active Spammer
#
TESTNAME='Topica'
TESTDOMAINS=${SBDIR}/black/topica-domains.txt
TESTCIDR=${SBDIR}/black/topica-ips.cidr
TESTPATTERNS=${SBDIR}/black/topica-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051031
TESTUPDATED=20050923
TESTTYPE=HEADER
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Traffix
#
# Last reported spam:  12/19/05
# Data files last updated: 12/20/05
#
# Other Relevant Info:
#
#    ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Traffix
#
# Status: Active Spammer
#
TESTNAME='Traffix'
TESTDOMAINS=${SBDIR}/black/traffix-domains.txt
TESTCIDR=${SBDIR}/black/traffix-ips.cidr
TESTPATTERNS=${SBDIR}/black/traffix-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051219
TESTUPDATED=20051220
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Tranzact Media (Andria Petito)
#
# Last reported spam:  12/09/05
# Data files last updated: 12/09/05
#
# Other Relevant Info:
#
#    ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Andria%20Petito%20/%20Tranzact%20Media
#
# Status: Active Spammer
#
TESTNAME='Tranzact Media'
TESTDOMAINS=${SBDIR}/black/tranzactmedia-domains.txt
TESTCIDR=${SBDIR}/black/tranzactmedia-ips.cidr
TESTPATTERNS=${SBDIR}/black/tranzactmedia-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051209
TESTUPDATED=20051209
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Uncaged Marketing
#
# Last reported spam:  4/14/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Uncaged%20Marketing
#
TESTNAME='Uncaged Marketing'
TESTDOMAINS=${SBDIR}/black/uncaged-domains.txt
TESTCIDR=${SBDIR}/black/uncaged-ips.cidr
TESTPATTERNS=${SBDIR}/black/uncaged-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060414
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Vayan Marketing
#
# Last reported spam:  4/12/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Uncaged%20Marketing
#
TESTNAME='Vayan Marketing'
TESTDOMAINS=${SBDIR}/black/vayan-domains.txt
TESTCIDR=${SBDIR}/black/vayan-ips.cidr
TESTPATTERNS=${SBDIR}/black/vayan-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060412
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Virtumundo
#
# Last reported spam:  4/13/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  12/20/2005 -- spamming a couple of spamtraps heavily the
#    last few weeks for multiple clients/customers.
#
TESTNAME='Virtumundo'
TESTDOMAINS=${SBDIR}/black/virtumundo-domains.txt
TESTCIDR=${SBDIR}/black/virtumundo-ips.cidr
TESTPATTERNS=${SBDIR}/black/virtumundo-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060413
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Webfinity (Dynamic Pipe)
#
# Last reported spam:  4/13/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Webfinity/Dynamic%20Pipe
#
TESTNAME='Webfinity'
TESTDOMAINS=${SBDIR}/black/webfinity-domains.txt
TESTCIDR=${SBDIR}/black/webfinity-ips.cidr
TESTPATTERNS=${SBDIR}/black/webfinity-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060413
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# WebHostPlus/Datapeer
#
# Last reported spam:  4/15/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
# Status: Active Spammer
#
TESTNAME='WebHostPlus'
TESTDOMAINS=${SBDIR}/black/webhostplus-domains.txt
TESTCIDR=${SBDIR}/black/webhostplus-ips.cidr
TESTPATTERNS=${SBDIR}/black/webhostplus-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060415
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Young, Dan (Rosalee Young/JDR Media)
#
# Last reported spam:  9/10/05
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#   ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Dan%20and%20Rosalee%20Young%20/%20JDR%20MEDIA
#
# Status: Active Spammer
#
TESTNAME='Dan Young'
TESTDOMAINS=${SBDIR}/black/danyoung-domains.txt
TESTCIDR=${SBDIR}/black/danyoung-ips.cidr
TESTPATTERNS=${SBDIR}/black/danyoung-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20050910
TESTUPDATED=20060415
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Zhardanovsky, Alex (Azoogle)
#
# Last reported spam: 11/03/05
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#    6/28/02:
#     Spammers-for-hire for the charity "Save the Children" :(
#
#    10/01/02:
#      Now spamming from throwaway accounts, but still referencing
#      their domain for listwashing. :/
#
#    11/13/02:
#      Spamming from azogle.com now.
#
#    12/04/02:
#      Reports on a number of private antispam mailing lists indicate
#      that Azoogle "pounds" mail servers, does not accept ACCESS DENIED
#      messages, will not go away.  So I moved them to the Rogues list,
#      will treat them as knowing and deliberate rogue abusers from here
#      on out.
#
# Status: Active Spammers
#
TESTNAME='Azoogle'
TESTDOMAINS=${SBDIR}/black/azoogle-domains.txt
TESTCIDR=${SBDIR}/black/azoogle-ips.cidr
TESTPATTERNS=${SBDIR}/black/azoogle-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051030
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc