Jump to content


  • Content Count

  • Joined

  • Last visited

Everything posted by emanmb

  1. emanmb

    Parsing error

    Another odd thing is 10-30% were being processed normally.
  2. emanmb

    Parsing error

    Alrighty then! Got the waiver email, "Hello SpamCop user, Your waiver request has been processed. You should now be able to report spam through your account: _______[at]yahoo.com. - Don D'Minion - SpamCop Admin - " then I went to report my first spam of the day and still would not go thru. So I started this post, went back to the email and FWD'ed it to SC and still the same result. "Hostname verified: web142514.mail.bf1.yahoo.com Possible forgery. Supposed receiving system not associated with any of your mailhosts Will not trust this Received line. Mailhost configuration problem, identified internal IP as source Mailhost: Please correct this situation - register every email address where you receive spam No source IP address found, cannot proceed. Add/edit your mailhost configuration Finding full email headers Submitting spam via email (may work better) Example: What spam headers should look like Nothing to do."
  3. emanmb

    Parsing error

    OK, I just went ahead and requested a waiver.
  4. emanmb

    Parsing error

    So I went to "Add/edit your mail host configuration" link and my Yahoo address is not there! How could that happen? I added that address back in the stone age when I signed up! Actually the Yahoo acct is the same address I use for sign in to SC! wth. OK so I TRIED to reinstate my yahoo address and replied the special emails back to the special SC address and that failed. What is going on here? On the page "Complex header analysis" I get this explanation: "SpamCop could not automatically identify any additional email accounts from this sample. The most common reason for this is that the email account you have configured is being forwarded to another mail host. Each mail host must be configured individually (click "try again" and enter the email address of the final destination account). Please select from the options below." I'm then given these options: "Delete all configuration for _____[at]yahoo.com Removing this configuration allows you to start over or give up. You can try again by selecting "Mailhosts". Try again.. Here, you can send additional sample emails to your accounts. Request waiver.. If the mailhost for _____[at]yahoo.com uses a complicated configuration using multiple different domains, you may request that a SpamCop administrator review this sample and manually categorize this mail host. Until this process is complete, you cannot report spam." So I need to request a waiver?
  5. emanmb

    Parsing error

    I'm having the exact same problem. Parsing header: 0: Received: from ( by; Thu, 08 May 2014 12:37:14 +0000 Hostname verified: web142513.mail.bf1.yahoo.com Possible forgery. Supposed receiving system not associated with any of your mailhosts Will not trust this Received line. Mailhost configuration problem, identified internal IP as source Mailhost: Please correct this situation - register every email address where you receive spam No source IP address found, cannot proceed. Add/edit your mailhost configuration Finding full email headers Submitting spam via email (may work better) Example: What spam headers should look like Nothing to do. I've been reporting spam from that address since I joined here and have had maybe 16 spam reports fail in the last 48hrs. This is a new issue for me as well. Submitted: May 8, 2014 10:04:54 PM GMT+07:00 +0700: Attention No reports filed Submitted: May 8, 2014 10:04:32 PM GMT+07:00 +0700: Results No: 01/05/2014 No reports filed Submitted: May 8, 2014 10:04:11 PM GMT+07:00 +0700: Vanguard Express World Fund Courier Service. No reports filed Submitted: May 8, 2014 10:03:51 PM GMT+07:00 +0700: Audio Transcription Service Provider - USD 0.60 per audio minute No reports filed Submitted: May 8, 2014 10:03:28 PM GMT+07:00 +0700: GOODNEWS No reports filed Submitted: May 8, 2014 5:37:25 PM GMT+07:00 +0700: My Dear Friend Kindly Reply Urgently No reports filed Submitted: May 8, 2014 4:36:41 PM GMT+07:00 +0700: GBT Bank of the Benin (CBB) No reports filed My reporting method is to get the email source directly from Mac Mail and paste that into SC's reporting page. The spams are coming to a free Yahoo acct. Let me know if I can supply any more info.
  6. Not in Mac OS using either Firefox or Safari, OS X 10.6.8 OTOH, I have an Ameritech (before company became sbcglobal, then ATT) Yahoo email and all the old functions are still there when signed into that account. Free Yahoo is just a mess and my older OS brings up a warning when going into free yahoo alerting me to upgrade my safari or firefox. There aren't anymore Safari upgrades for my OS so for now I use FF but will be upgrading to get more current. Even FF can be flaky w/the new yahoo.
  7. I used to do this before I learned the alt-shift-F method and since that method no longer works, yours IS an option, but SC won't be able to read the links in the spam. Yahoo web mail is a mess w/laggy performance and the occasional need to refresh the page to get buttons to work. One sure fire way to get the links parsed is to have your Yahoo mail accessed by an email client where you'll be able to view the full source and fwd that. For me it's gotten to be too much work trying to ruin a spammer's day.
  8. http://forum.spamcop.net/forums/index.php?showtopic=13568
  9. Same here. CNTRL + ALT + F no longer works correctly. I used the key combo to send in some test emails and they never showed up on my reporting page. The amount of spam I will be reporting will be dropping by a huge amount now as I'm not going to bother with cutting and pasting the headers ever again which still leaves the links unreported. I guess is OK as I've reported gazzillions of spams over the years here and it's kind of tiring, but it's not good for aiding in the reporting of spammers. e
  10. emanmb

    Need Help with User Group spam

    I received the exact same spam the group received and that one I tried to report and SC couldn't parse the header. The list minder has directed me to a page where a copy of the LIST'S spam resides. I tried to report that and SC couldn't parse the header for that either. I'm on good terms w/the list and have offered to change my email address for using the list which they think may be the best answer unless someone in this forum knows of some way around that. We've all agreed that someone has spoofed my address. I was just hoping that someone who can decipher the headers/SC report better than I could take a look and tell me wassup.
  11. I belong to a photography based user group/email list and the list minder has had to put my account on supervision as spam coming from my address has been sent to the group. I'm using my gmail account for this list and have already changed my password a couple weeks ago. The list minder just recently took me off supervision and sure enough they got another spam from my email address. What I'm hoping to get here is: 1)some advice as to how to prevent this from happening if that is possible. 2) Find out if this is just a case of address spoofing or something more sinister such as a compromised account. 3) Get some advice for the list minder so he can adjust things at his end to block these spams if that's possible. I'm not sure how to post a link to the spam report here so I'll need advice for that. In any case SC couldn't parse the header. I access this gmail account via 2 methods; my iphone and via my web browser on my comp. I only use Macs so viruses and are unlikely and have been scanned for with negative results. I will share the advice here with the list minder as well. Thanks in advance!
  12. I can't figure out if 2 emails today are spam or not. I fwd spam to SC, knujon, uce.gov and phishing-report[at]us-cert.gov. Occasionally, actually rarely, I'll get an email from an abuse dept. thru SC saying something like this: "Thank you for submitting your abuse complaint. One of our support engineers has picked it up and assigned it to the customer in question and it will be resolved as soon as possible. Thanks so much, DigitalOcean" Today I got an email in my spam folder from 2 different addresses with the same subject, "Email spam for malekal.com" Message for both emails say: Theses emails spam are sent from a botnet (check the mails headers), im not responsible of theses spam emails. Someone is probably trying to get the site blacklisted or to get bad reputation (called this "a Joe Job" - see : http://blog.dynamoo.com/2013/08/malekalcom-joe-job.html) The responsible is " Reveton Guy ", try to get revenge after a mass shutdown of their malvertising : http://www.malekal.com/2013/07/30/en-juicyads-reveton-malvertising/ http://www.malekal.com/2013/07/28/en-plugrush-reveton-malvertising/ http://www.malekal.com/2013/07/26/en-reveton-adxpansion-com-malvertising/ The August 11, they tried to get my website blacklisted using hacked website : http://www.malekal.com/2013/08/12/en-reveton-go-now-by-hacked-website/ Just wondering if I should report this or if it's a legit complaint, BUT I think my answer is, since these 2 emails DID NOT come thru the SC system, they are probably spam. In any case wondering what the pros here think of this. The message here I cut and paste and not necessarily accurate links as they are disabled in Yahoo spam folder fyi. Eric [edit] links broken anyway - Members don't paste links (even if you think they're already disabled), refer to the "Help" link just below the server statistics graphic at the top right of each and every page, the very first topic under that section. The (former) links above all respond to contact on port 80 and pasting unknown or suspect links in public to an anti-spam site is just about the last thing you want to do - the second last thing you want to do is to post ANY link "here" without considering the consequences most carefully.
  13. emanmb

    Reporting-parsing problems?

    Try hitting cancel or worst case "Remove all unreported spam". Cancel worked for me.
  14. emanmb

    Reporting-parsing problems?

    I'm having the same issue of my spam in the queue being stuck in a loop as it were. I started noticing that the spam reports, as I was making them, started looking the same. Followed the above suggestion to look at past reports and they have been reported. They were submitted Submitted: August 21, 2013 2:57:08 AM GMT+07:00 +0700. I know I didn't submit this many and there are still reports to be made. Also I don't know how to see how many are left in my queue to report. I cleared the issue by canceling the reports I knew were duplicates.
  15. emanmb

    Reply From Spammer or Victim?

    Got it thanks!
  16. Most of my spam reports go out from my free yahoo address. I send them all to SC, knujon, uce.gov, and phishing-reportATus-cert.gov in one FWD using my browser and not an email client. I use the alt-shift-F method to fwd spams in Yahoo. Today I browse back to my yahoo page and I'm signed out. I try to sign back in but can't. Go thru the "I can't remember my PW" routine and reset my PW. Once back into my yahoo acct, I see there are a bunch of mailer-daemon emails, one each from SC, uce.gov, and knujon, and another one from yahoo saying: Dear , At Yahoo!, your account safety is our top priority. Recently, we have detected some unusual activity on your account and as a result, we've temporarily locked it for your protection. You may unlock your account immediately by logging in on a PC. If you have additional questions, please visit us at http://io.help.yahoo.com/contact/index?y=P...care#voice-form to get the help you need. Sincerely, Your Yahoo! Customer Experience Team Now I guess that Yahoo can see that suspicious emails/spam are being fwd'ed from my acct, but isn't checking WHERE those emails are going, i.e. well know spam reporting agency addresses. Would this cause them to lock my account? Now I have started using HotSpot Shield which shows me as being in the US and I turn that on and off as needed. I can't send email from my Yahoo when using HSS so that I turn it off then for sure. Just thought I should mention that in case it's a red flag to Yahoo and might help solve this. Thanks e
  17. emanmb

    Locked account for reporting spam?

    Thanks turetzer. I was a little unsettling at the time as it seemed as if I was "hacked". Coming back to your email page and finding your login doesn't work sets off alarms. Then I see the emails from Yahoo and mailer daemon once I got back in and realized what was happening. Yahoo has popped up catchas at times when fwd'ing and a couple spams wouldn't send no matter what I did because of some error, and a few times sending to all 4 reporting addresses wasn't possible so I had to fwd the spam twice sending to only 2 addresses at a time. I use my Yahoo acct for a lot of stuff but the new layout they made doesn't always work. I like it but it needs some tweaking. It get's a fair amount of spam but being diverted to another folder as in gmail keeps things tidy. I don't like gmail's layout and esp don't like hotmail so Yahoo handles most of my 'stuff'. e
  18. Before I go lie down, should I, 1: keep fwd'ing spam to SC? 2: click the 'problem resolved' button so I can report what I've fwd'ed already? e
  19. bounce report bounced <Service AT admin.spamcop.net>): unknown user: "spamcop_admin"
  20. I got the message as well. http://i190.photobucket.com/albums/z210/em...9at125204PM.jpg I clicked the button. OK I thought this was just a once and your done kinda thing but I'm still getting the message as I make my reports at http://www.spamcop.net/
  21. I'm just curious about this one. I thought level3.net was one of the "good guys" but just reported about 5 of the same spam message which all showed this in the report.. Finding IP block owner: Routing details for De-referencing level3.net[at]abuse.net abuse net level3.net = spamtool[at]level3.net, abuse[at]level3.net Report routing for spamtool[at]level3.net, abuse[at]level3.net spamtool[at]level3.net redirects to abuse[at]level3.net abuse[at]level3.net redirects to abuse[at]level3.com abuse[at]level3.com bounces (99 sent : 99 bounces) abuse[at]level3.net redirects to abuse[at]level3.com abuse[at]level3.com bounces (99 sent : 99 bounces) Sorry, no reporting addresses found for I won't pretend I understand any of this but my assumption is that if the IP for the sender is identified and the company that runs it, then they will be notified by SC. Thanks for any clarification.
  22. In my days spam reporting today I noticed that for one spam, my provider here in Thailand is listed. Then I see that the reporting IP address was the same as mine. I won't pretend I know diddly about any of this so I thought I should ask, is this something I should be worried about? Thanks.
  23. emanmb

    Network Error (tcp_error)

    Annnnnd of course it's back to normal now. I've found that when odd things occur, a power cycle of the router can "cure" issues as well. T.I.T. This is Thailand.
  24. I'm getting an error when reporting spam today via the site. Network Error (tcp_error) A communication error occurred: "Operation timed out" The Web Server may be down, too busy, or experiencing other problems preventing it from responding to requests. You may wish to try again at a later time. For assistance, contact your network support team. I go to report spam at http://www.spamcop.net, click report spam and eventually I arrive at the error message. I turn on Hotspot Shield, try again and all is well. I need to have HSS ON to get to the forums as well. I won't pretend I know Jack about the whys and wherefores of these kinds of things, but I have set my IP in Hotspot Shield to US one. Yesterday I had no issues reporting. I assume that this issue originates at my end i.e.my ISP or something else?