Jump to content


Photo

ZeroHour Intent catches

zerohour intent zero hour brts

  • Please log in to reply
743 replies to this topic

#1 Ray

Ray
  • Members
  • 13 posts

Posted 02 May 2012 - 08:32 AM

Hi,

Since a few weeks some of our end-users aren't receiving newsletters anymore.
The block reason is: ZeroHour Intent (linktrack.info)

X-Barracuda-BRTS-URL-Found: linktrack.info (*Spam.Unknown)

We're using Model 600, with Firmware v5.1.0.0.13

Energize updates are running every 10 to 30 minutes.

What is happening?

Regards,
Ray

#2 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 02 May 2012 - 09:39 AM

Hello and thank you for contacting Barracuda Networks technical forums.

Link tracking is considered suspicious in nature and can be flagged as suspect in the event of malicious urls that are published, that we may pick up in our systems.

We have reset this domain from our list currently, but it is possible for it to be blocked up again if abused.

Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#3 Ray

Ray
  • Members
  • 13 posts

Posted 03 May 2012 - 01:19 AM

Hi Matthew,

Thanks for your reply.

So the reason is that the company that's sending newsletters has some link tracking in their e-mails?
Is there a overview of websites that are blocked because the ZerHour intent?

Regards,
Ray

#4 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 03 May 2012 - 08:34 AM

Hello ray,

The domain was listed after more than several malicious links were sent out using their service. We do not provide a web site with these domains at this time , but if your domain may be listed you look for it's status @ barracudacentral.org.

Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#5 Ray

Ray
  • Members
  • 13 posts

Posted 03 May 2012 - 09:14 AM

Hi Matthew,

Ok, thank you for your support.

Regards,
Ray

#6 Tim Mattson

Tim Mattson
  • Members
  • 1 posts
  • LocationFremont, CA.

Posted 23 October 2012 - 06:18 PM

I am also receiving the ZeroHour Intent denial for svmi.com...can you please remove this domain?

#7 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 24 October 2012 - 07:51 AM

Hi tim,

We have gone ahead and cleared out svmi.com after reviewing some evidence emails and data sources. We apologize for any inconvenience.

Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#8 Kint Tan

Kint Tan
  • Members
  • 1 posts

Posted 09 November 2012 - 07:15 AM

Hi,

We are facing the same issue here. A lot of links have been block even our site *.elmwood.ac.uk is also blocked.

Would you help please?

Thanks,
Kint

#9 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 09 November 2012 - 08:45 AM

Hello kint, and thank you for contacting Barracuda Networks technical forums.

Please contact support so we may discuss your report there. We can confirm elmwood.ac.uk is legitimately listed in our database due to the malicious content seen.

Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#10 Rick

Rick
  • Members
  • 4 posts

Posted 19 December 2012 - 12:14 PM

How about kpronline.com? Is there any way i can whitelist that domain on my spam firewalls? The e-mails are getting blocked on my outbound appliances just because someone has that domain in their e-mail signature. Please advise.

Thanks,

Rick

#11 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 19 December 2012 - 01:26 PM

Rick, please work with us on these false positives if you are experiencing them..

Regardless of the location of the URI link, we will always block them if the link is found.

Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#12 Rick

Rick
  • Members
  • 4 posts

Posted 19 December 2012 - 02:42 PM

Matthew, what would you like me to do? Call?

Thanks,

Rick

#13 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 19 December 2012 - 02:45 PM

Yes please . this way we can get as much data as possible to review and potentially alleviate the issues at hand.

sometimes using email as a medium can be blocked form our anti spam systems :) , if you were submitting the same links we block etc..

Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#14 Rick

Rick
  • Members
  • 4 posts

Posted 19 December 2012 - 02:47 PM

ok. I will open a ticket.

Thanks,

Rick

#15 Rob Edmonds

Rob Edmonds
  • Members
  • 2 posts

Posted 01 November 2013 - 07:07 AM

Hi Support

 

could you check standup2racism.org.uk for me please?

 

Thanks

Rob



#16 Matt Heller

Matt Heller
  • Administrators
  • 13 posts

Posted 01 November 2013 - 09:29 AM

Hi rob,

 

This domain has been classified with us due to phishing emails seen. If you have some legitimate samples we can review , please open a case with us to hlep us further analyze this domain.



#17 Rob Edmonds

Rob Edmonds
  • Members
  • 2 posts

Posted 01 November 2013 - 09:42 AM

Thanks Matt



#18 Paul McAneny

Paul McAneny
  • Members
  • 1 posts

Posted 08 January 2014 - 05:17 AM

Hi Matt,

 

Could you please check ciana.co.uk?

 

Best Regards

 

Paul Mc



#19 mheller

mheller

    Nobody

  • Moderators
  • 1,299 posts
  • LocationSan Jose, CA

Posted 10 January 2014 - 11:29 AM

Hi paul, sorry for the delayed response but it looks like this domains classification has been neutralized



Matthew Willson-Heller
Support Escalation Manager, US

Barracuda Networks Inc.
Phone: +1 408.342.5300 x5346
Fax: +1 408.342.1061
Web: www.barracudanetworks.com



#20 CIT Helpdesk

CIT Helpdesk
  • Members
  • 2 posts

Posted 14 January 2014 - 09:34 AM

Hi Matt,

 

Could you please check visitflorida.com?

 

Thanks!

 

Juan