Jump to content


  • Content Count

  • Joined

  • Last visited

Everything posted by nhraj700

  1. Hey all, Looking for some input on what "you" would do in addition to what I am already doing. I am at wit's end and considering giving up on this one. I seem to have landed on some spambot or persistent POS spammer's list on an email address that typically has had no spam sent to it or was successfully filtered by the provider. Unfortunately this ordeal has burned up all of my Spamcop fuel. I am reporting every spam email to Spamcop, UCE, ORA.FDA, ACMA, Phishing at US CERT, Phishing at Antiphishing org. This attack is repetitive in content and seems to be repetitive in sources. What bothers me is sometimes I get auto-response from Spamcop stating ISP has taken care of the address but what is weird is it is usually dated the day or two before and I am reporting within seconds of getting it. Is the spammer sending some sort of auto-response to Spamcop to trick it? Below is hopefully enough of a list of tracking url's that might give someone with better experience to ascertain what steps I might take and see a pattern. [Edited to add offenders at a glance] These seem to be the major offenders over and over. proxad[dot]net cv[dot]net nl[dot]leaseweb[dot]com pratiksunucum[dot]com primary[dot]net dedibox[dot]fronline[dot]net hostnit[dot]com quadranet[dot]com vpls[dot]comus[dot]leaseweb[dot]com leaseweb[dot]de multacom[dot]com velia[dot]net netmyne[dot]com stackip[dot]net he[dot]net netbudur[dot]com ikoula[dot]com dacentec[dot]com heg-us[dot]com colocrossing[dot]com psychz[dot]net aknietteteeva[dot]gmail[dot]com [End Edit] Thanks in advance. https://www.spamcop.net/sc?id=z6566520311z41fa0c960e85e844a30002d278ed6f9az https://www.spamcop.net/sc?id=z6566520312z6ce0103f34a127b8f20ded2333c8d06az https://www.spamcop.net/sc?id=z6566520313z8a760a7cd8dfb78366d954b0e4460973z https://www.spamcop.net/sc?id=z6566520314z66c0ec5b5300a4a5734ad34540c62f58z https://www.spamcop.net/sc?id=z6566520315zf3db2a8604dcf93f6007a32efad861b7z https://www.spamcop.net/sc?id=z6566520316zdbd95a02f7dfb85453517bbbe5c1e117z https://www.spamcop.net/sc?id=z6566520317z41c2e155668cb8b886f066a4874c6d00z https://www.spamcop.net/sc?id=z6566520318z253fb3c16c5537e73d18db3203070de1z https://www.spamcop.net/sc?id=z6566520319z1164ef6a60b17d090a142ccff880defaz https://www.spamcop.net/sc?id=z6566520320z18000c74cc774082bb65d03342691fe8z https://www.spamcop.net/sc?id=z6566520321z2e7fa652d590841ded710d39b824bd9az https://www.spamcop.net/sc?id=z6566520322zb0a2689b23f9d3c7384e782de1208e93z https://www.spamcop.net/sc?id=z6566520323z1c9c291593ff190f20a0b056f59a85faz https://www.spamcop.net/sc?id=z6566520324z8a09b1f06b53160183624992abb3110cz https://www.spamcop.net/sc?id=z6566520325z04094c2130063750649dd06968ce07ccz https://www.spamcop.net/sc?id=z6566520326z5b3541758582127ae705892424c27e9bz https://www.spamcop.net/sc?id=z6566520327zb78c4a1273c690a265e02f49d1426372z https://www.spamcop.net/sc?id=z6566520328z2bb0a9838d540a0df0ebd1b5a7fa5b39z https://www.spamcop.net/sc?id=z6566520329z6166255f0056dd0c0183cddcb85d5c08z https://www.spamcop.net/sc?id=z6566520330z977931b5a816ec376b8d9d8e3faee0b6z
  2. nhraj700

    Massive spam Attack - Looking For Input

    Petzl, Thank you for your input and recommended WIN program. NameCheap has indicated to me that while they don't host the data for these domains and can't check the server logs for spam abuse from the 30 or so I sent them through Spamcop reports, they however have opened up a case with Spamhaus. Is that a good thing and have you seen positive results from that or is this a "pass the buck" kind of move? They told me to report directly to the hosts, but I am assuming that isn't working as Spamcop is doing that through the reporting process. Out of the 30 I sent, only 5 domains showed up on the Spamhaus DBL list and according to NameCheap, that's what prompted them to open a case.
  3. nhraj700

    Details of update to Spamcop 5.0 coming tomorrow?

    I was hoping too the IPv6 issue was addressed with this 5.0 update. I hardly get spam on Gmail, but Hotmail is another story.
  4. nhraj700

    munging cloudflare spammed links

    I would like to second this change request with respect to any full path of web links as they can be linked to the recipient.. I was recently hit by one of these bots from AWS a month ago and received hundreds of spam until I saw this post from RobiBue and stopped all SpamCop processing on them. Once I stopped reporting them to SpamCop, they stopped immediately. I received another one this morning and unfortunately I didn't catch the source and bot servers and now I have received 50 of them in on swoop. https://www.spamcop.net/sc?id=z6507110875zae91e5b4e32f5271d867a53e6361d3acz Too many to mung up for my liking. I simply sent them to all other anti-spam agencies and skipped SpamCop.
  5. nhraj700

    Is Google even paying attention to Spamcop?

    Why is Spamcop sending it to the wrong address? Is there a procedure for asking SpamCop to fix it? I am running into several of these from 209 domain addresses from Google also. Just curious how we can get this rectified.
  6. I just sent a complaint via that feedback function. Thanks for that tip. Tired of modifying headers.
  7. nhraj700

    KnujOn shutting down

    Just a heads up for anyone forwarding spam to KnujOn.com, they are shutting down their servers. I am posting what they posted on their servers recently as I was receiving error messages back from their mail server the last few days. One less effort in the fight. Dear KnujOn members, friends and visitors, This project will cease accepting samples from the public on 22 May 2018. The knujon.net will stop accepting email samples and the server will be shut down. The servers at coldrain.net will stop forwarding email. knujon.org will cease accepting new memberships and donations as of 8 March 2018. knujon.com will remain active to maintain historical information about the project but no sample data will be accepted. All currently held samples and all samples accepted up until 22 May 2018 will be processed. This research was started by Dr. Robert Bruen and Garth Bruen in 2003. After 15 years we have reached clear fundamental conclusions concerning the management of the Internet, findings which are neither pleasing nor surprising. We have taken this work as far as we can at this stage. A final comprehensive report of KnujOn findings will be published and maintained at knujon.com. We thank everyone for their dedication and participation in this project and hope you will join us when we start our next project which will be based on KnujOn findings. The details of this further research will be announced on knujon.com.
  8. nhraj700

    KnujOn shutting down

    Posted in case anyone is interested. Received this email this morning. Dear Member, On 22 May 2018 Knujon.net will cease accepting forwarded samples and the server will be shut down. Coldrain-related servers will also cease forwarding samples as well. The site Knujon.com will remain active and continue to publish updates to reports as well as maintain documents as an archive repository. The KnujOn project, for several reasons, will be winding down and completing its work. As many may suspect we do not have the resources required to maintain this project. However, KnujOn has largely achieved what it set out to do. Fifteen years ago my father, Dr. Robert Bruen, and I started KnujOn principally as a research project. The project was intended to test and evaluate the overall Internet infrastructure as it pertains to consumer abuse and systemic subversion. We have collected enough information to draw fundamental conclusions. Our final findings will be published and our members will have access to detailed analysis. Our research started as a technical endeavor but quickly became political (political in the broad sense of different groups competing for control of resources and influence). The political situation evolved into a criminal one and eventually into a clear problem of corruption and abuse of public trust as well as power. While KnujOn has been able to fix a number of problems within the Internet architecture, the core issue is beyond our ability to address. We have neither the resources to deliver the solutions that are truly needed nor to deliver the kind of user experience KnujOn members deserve. With that being said, our work is in fact successful and you have a lot to be proud of. All of this will be fully documented in our final report. On the technical side you should start seeing your report refreshed. Our service provider, without prior notice, switched the operating system of our key publishing server. This small change caused all of our uploads to fail or be overwritten with blank data. We were not aware of this problem for some time and fixing it was difficult because there were no actual errors in our code. This has been corrected and all samples received before 22nd will be processed and analyzed. Statistics and other report publishing will begin again now that this problem with our hosting company has been identified. In this effort we continue to support you, but the collection and processing of additional samples beyond this are not required to support the conclusions we have already reached. I know you may have been frustrated by our lack of progress and response, trust that no one is more frustrated than I am. Everything we have done was for the public good and with the best intent. We thank everyone for their dedication and participation in this project and hope you will find our final report useful. -Garth at Knujon.com
  9. nhraj700

    Spamcop cannot find source IP

    I received this same kind of message today and thanks to PETZL I have successfully submitted it. Thanks PETZL!!
  10. nhraj700

    Parsing never completes, no Submit button

    Lking, I did read other posts, but was not clear if my issue was the same problem. Thank you for your response.
  11. nhraj700

    Parsing never completes, no Submit button

    Why can't I submit this? Failed Report
  12. nhraj700

    error: couldn't parse head

    Thanks lisati! As long as it is working. This isn't an isolated case. Almost all of the spam recently is generating this error.
  13. Hello, When sending spam directly to Spamcop, I get the subject message. I read the More information on this error.. and concluded to avoid the error do this, " The best way to submit spam to SpamCop is by forwarding it as an attachment to your unique submission address - shown above the submission form on your personal start page." Well I am doing this and still get the error. Is there anything I am missing or is this out of my control now? Is this spam still being reported to the administrators? This is coming mostly from Gmail, but occasionally Hotmail. https://www.spamcop.net/sc?id=z6380768477z0c81c0b5720b01d4552628d022b4075az https://www.spamcop.net/sc?id=z6380763504zc82d178f4e41951d7c1d93b77ae46228z
  14. nhraj700

    Nobody home at LimeStoneNetworks

    I too am getting a ton of spam from or hosted by these idiots. I have been sending reports through Spamcop to Limestone for two months. It appears no one is looking at that email abuse address. Here is one from today. https://www.spamcop.net/sc?id=z6380693368z56a89faa1e6d741e9383c53f40b54b8cz These guys are not out of reach from US authorities so why aren't they being dealt with? It's not like they are from Russia or China.
  15. Hello, If someone has the time, could you please look at the following links and tell me if these reports are just going to some bit bucket. For months now I have been getting spam that always links to nocix dot net. But it appears the administrator of the IP block where the sender is located is never notified because of this devnull thingy. I report everyday to UCE dot GOV, knujon and spamcop, but these keep coming. Doesn't appear to slow them down. I always look in the statistics section to see if I see others are reporting this outfit, but never have seen it reported. Thanks in advance for any enlightenment!! https://www.spamcop.net/sc?id=z6351030473z7f0e5d8f8612c0d9f263f767bbbb3ab2z https://www.spamcop.net/sc?id=z6350895292z2e1c59d04d27d3632b881846c0d8c98az https://www.spamcop.net/sc?id=z6350836906ze8b6ba64cae535dbf765ca30bf7301f2z https://www.spamcop.net/sc?id=z6350638647z7f3d0e6c790a03419b03f0bbbd324033z
  16. nhraj700

    Explanation of this spam and devnull!

    Thanks for the detailed answer. I don't quite understand every aspect of this, but I take it most of it is forged IP addresses? Also it is a Microsoft account that I have. Why would Microsoft be a cause of the "weirdness"?
  17. nhraj700

    Explanation of this spam and devnull!

    My ISP is Charter and this particular email account is Hotmail/Outlook. Does either use the SCBL?
  18. Any ideas on these a-holes sending me this stuff? It seems that if I leave the "Administrator of network hosting website referenced in spam" checked on, I immediately get more spam from them. If I uncheck that box and report, it seems to quiet down. Maybe it is a coincidence and I am paranoid. About a month ago I was flooded with similar spam and I diligently reported within an hour of receiving it. Then it stopped for awhile but now is back with a vengeance. They also put my name and prefix to my email in the subject line or encode it in the body of the email. I assume they want to know who is reporting it. Anything I should do differently like strip out the subject and/or mime encoding? https://www.spamcop.net/sc?id=z6293048215z084d86a18650e27d2f63aff90a33255bz https://www.spamcop.net/sc?id=z6293048213z7fbff584d26196e341f7122679fd33d1z https://www.spamcop.net/sc?id=z6293048211z7a351ab2a4880642d4789b29023b0c7dz https://www.spamcop.net/sc?id=z6293048208zce55c8e0cb969cf317b3cf89ba4c1624z
  19. nhraj700

    Flavor of the week Spammer

    See my post below. I am getting hammered by this Richard Cabeza. Received 50 since midnight today. I've reported everyone of them to knujon, spamcop and uce dot gov.