Jump to content

reporting sites?


piscator

Recommended Posts

Hi, Piscator!

I receive tons of spam advertising websites that don't actually send the spam.  Can I report these spam sites?  If they were gone, then there would be no spam advertising them......I get many spams daily advertising such sites.  Thanks :D

...Are you receiving this 'spamvertizing' via e-mail or some other mode?

...If it's e-mail, then (if I understand correctly) SpamCop reports any spamvertized web sites it finds in the body of the e-mail you are reporting to the abuse desk of the web server but does not include those sites on its blocklist.

...Errata: please ignore the following I posted in my original reply (in gray); it is all wrong; Instead, see the below from JeffG posted on Feb 25 2004, 10:11 PM EST. If it's not e-mail, then it may be permissable to fake out SpamCop's parser (the first part of the reporting process) by generating what appears to be an e-mail with a body that contains the spamvertized links, but then cancel the report without submitting it. Perhaps a kind deputy (or other knowledgeable member) passing through here would be able to verify or deny this.

Link to comment
Share on other sites

...If it's not e-mail, then it may be permissable to fake out SpamCop's parser (the first part of the reporting process) by generating what appears to be an e-mail with a body that contains the spamvertized links, but then cancel the report without submitting it.  Perhaps a kind deputy (or other knowledgeable member) passing through here would be able to verify or deny this.

It's much easier to just paste the spamvertized URL into the parsing window, and use the resulting email address in your manual report.

[fixed overquoting]

Link to comment
Share on other sites

...If it's e-mail, then (if I understand correctly) SpamCop reports any spamvertized web sites it finds in the body of the e-mail you are reporting to the abuse desk of the web server but does not include those sites on its blocklist.

...If it's not e-mail, then it may be permissable to fake out SpamCop's parser (the first part of the reporting process) by generating what appears to be an e-mail with a body that contains the spamvertized links, but then cancel the report without submitting it.  Perhaps a kind deputy (or other knowledgeable member) passing through here would be able to verify or deny this.

It's much easier to just paste the spamvertized URL into the parsing window, and use the resulting email address in your manual report.

...Son of a gun! It worked! I thought the parser needed headers!

Link to comment
Share on other sites

For instance, I get several spams for a site at http://naturalenhance.info/ The spam comes from various IP addresses and all advertise the above site. Is spamcop reporting to just the spammers IP or is it also reporting the advertised spam site? I would like to make sure that the above site gets reported. I receive many spams daily that all advertise this site. I paste all headers and body into the box; spamcop processes it, and I click on "send"..........I may not know quite what I'm doing but I report lots of spam...... :rolleyes:

Link to comment
Share on other sites

For instance, I get several spams for a site at http://naturalenhance.info/  The spam comes from various IP addresses and all advertise the above site.  Is spamcop reporting to just the spammers IP or is it also reporting the advertised spam site?  I would like to make sure that the above site gets reported.  I receive many spams daily that all advertise this site.  I paste all headers and body into the box; spamcop processes it, and I click on "send"..........I may not know quite what I'm doing but I report lots of spam...... :rolleyes:

As long as you are not Quick Reporting or unchecking the box for ctsummary[at]special.abuse.net, your reports should be getting through. However, Chinanet has an abysmal enforcement record.

Of course, you could always call this Jake fellow:

02/27/04 01:51:05 whois naturalenhance.info[at]whois.networksolutions.com

whois -h whois.networksolutions.com naturalenhance.info ...

NOTICE AND TERMS OF USE: You are not authorized to access or query our WHOIS

database through the use of high-volume, automated, electronic processes. The

Data in Network Solutions' WHOIS database is provided by Network Solutions for information

purposes only, and to assist persons in obtaining information about or related

to a domain name registration record. Network Solutions does not guarantee its accuracy.

By submitting a WHOIS query, you agree to abide by the following terms of use:

You agree that you may use this Data only for lawful purposes and that under no

circumstances will you use this Data to: (1) allow, enable, or otherwise support

the transmission of mass unsolicited, commercial advertising or solicitations

via e-mail, telephone, or facsimile; or (2) enable high volume, automated,

electronic processes that apply to Network Solutions (or its computer systems). The

compilation, repackaging, dissemination or other use of this Data is expressly

prohibited without the prior written consent of Network Solutions. You agree not to use

high-volume, automated, electronic processes to access or query the WHOIS

database. Network Solutions reserves the right to terminate your access to the WHOIS

database in its sole discretion, including without limitation, for excessive

querying of the WHOIS database or for failure to otherwise abide by this policy.

Network Solutions reserves the right to modify these terms at any time.

NOTICE: Access to .INFO WHOIS information is provided to assist persons in

determining the contents of a domain name registration record in the Afilias

registry database. The data in this record is provided by Afilias Limited

for informational purposes only, and Afilias does not guarantee its

accuracy.  This service is intended only for query-based access.  You agree

that you will use this data only for lawful purposes and that, under no

circumstances will you use this data to: (a) allow, enable, or otherwise

support the transmission by e-mail, telephone, or facsimile of mass

unsolicited, commercial advertising or solicitations to entities other than

the data recipient's own existing customers; or (B) enable high volume,

automated, electronic processes that send queries or data to the systems of

Registry Operator or any ICANN-Accredited Registrar, except as reasonably

necessary to register domain names or modify existing registrations.  All

rights reserved. Afilias reserves the right to modify these terms at any

time. By submitting this query, you agree to abide by this policy.

Domain ID:D5700419-LRMS

Domain Name:NATURALENHANCE.INFO

Created On:26-Feb-2004 01:44:44 UTC

Expiration Date:26-Feb-2005 01:44:44 UTC

Sponsoring Registrar:R152-LRMS

Status:ACTIVE

Status:OK

Registrant ID:C4356560-LRMS

Registrant Name:Jake Swanson

Registrant Organization:Swanson Ltd

Registrant Street1:2544 57th Ave

Registrant City:Bradenton

Registrant State/Province:FL

Registrant Postal Code:34203

Registrant Country:US

Registrant Phone:+1.3472742603

Registrant FAX:+1.3472742603

Registrant Email:support[at]dvrmedia.info

Admin ID:C4356560-LRMS

Admin Name:Jake Swanson

Admin Organization:Swanson Ltd

Admin Street1:2544 57th Ave

Admin City:Bradenton

Admin State/Province:FL

Admin Postal Code:34203

Admin Country:US

Admin Phone:+1.3472742603

Admin Email:support[at]dvrmedia.info

Billing ID:C4356560-LRMS

Billing Name:Jake Swanson

Billing Organization:Swanson Ltd

Billing Street1:2544 57th Ave

Billing City:Bradenton

Billing State/Province:FL

Billing Postal Code:34203

Billing Country:US

Billing Phone:+1.3472742603

Billing Email:support[at]dvrmedia.info

Tech ID:C4356560-LRMS

Tech Name:Jake Swanson

Tech Organization:Swanson Ltd

Tech Street1:2544 57th Ave

Tech City:Bradenton

Tech State/Province:FL

Tech Postal Code:34203

Tech Country:US

Tech Phone:+1.3472742603

Tech Email:support[at]dvrmedia.info

Name Server:NS1.RAKDONDNS.INFO

Name Server:NS2.RAKDONDNS.INFO

Link to comment
Share on other sites

Hi, Piscator!

For instance, I get several spams for a site at http://naturalenhance.info/  The spam comes from various IP addresses and all advertise the above site.  Is spamcop reporting to just the spammers IP or is it also reporting the advertised spam site?  I would like to make sure that the above site gets reported.  I receive many spams daily that all advertise this site.  I paste all headers and body into the box; spamcop processes it, and I click on "send"..........I may not know quite what I'm doing but I report lots of spam...... :rolleyes:

...Hmm, I just tried SpamCop parser of an invented HTML formatted spam with an anchor tag (<a href=..., a hyperlink) and an image tag (<img src=...). It found the anchor href but not the image src to report as spamvertizing.

...If it is going to report spamvertizing, you should see something like this:

Re: http://naturalenhance.info/stuff.htm (Administrator of network hosting website referenced in spam)

[x] To: postmaster#chinanet.cn.net[at]devnull.spamcop.net (Notes)

[x] To: ctsummary[at]special.abuse.net (Notes)

[x] To: yzxu#publicf.bta.net.cn[at]devnull.spamcop.net (Notes)

[x] To: anti-spam#chinanet.cn.net[at]devnull.spamcop.net (Notes)

Link to comment
Share on other sites

  • 3 months later...
TPTB decided a long time ago to stop SpamCop from reporting the contents of all IMG tags.

(More newbieness showing)

Who is TPTB and why did he/she/they decide to stop reporting IMG tag contents? The IMG tags in the spam I see while reporting using the two-part web form look like spam URLs instead of innocent bystanders.

Link to comment
Share on other sites

Who is TPTB and why did he/she/they decide to stop reporting IMG tag contents? The IMG tags in the spam I see while reporting using the two-part web form look like spam URLs instead of innocent bystanders.

It's too easy for a spammer to use somebody else's image, so it's not safe to report the image host.

As for the acronym question, I'll defer to The Powers That Be to answer that one...

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...