Jump to content

MIG

Memberp
  • Posts

    353
  • Joined

  • Last visited

Posts posted by MIG

  1. 4 hours ago, lisati said:

    For some reason, I saw a "report spam now" button when looking at the report linked to by tracking link. Be that as it may......

    There are a variety of reasons that Spamcop will not send reports directly to a provider. Perhaps the admins want to keep an eye on spam reports for that particular provider, or perhaps it needs some kind of special handling. I've noticed with reporting emails that appear to arrive via Yahoo, for example, sometimes the reports go to "internal spamcop processing" (or similar) and sometimes they go to an abuse address.

     

    Hey Lisati,

    Sorry I didn't acknowledge your post, didn't see it... need new eyes.. Thanks for the explanation, "keep an eye, special handling" GH can understand...

    Re "report now", yes I didn't clear/cancel the 2nd parse - thanks "TEAM😁!"

  2. 1 hour ago, petzl said:

    SpamCop admin will send report on to Level3
    also you have not submitted report?

    Thanks Petzl,

    Geez, GH thought SCA was Lvl3😩. Anyhoo, it just got weirder, I received an email from SFB@L3 thanking me for notifying an abuse address I didn't notify😵 

    I simply do not understand why SCparser doesn't know "that" abuse address, why does it have to go all the way to Lvl3?  (feels like dealing with KGBMi5FBi)...

    Re "submitted SC report", I did, I used account that has my email address as recipient, n then, I parsed with acc that has no email address so I could post the URL here.... 'Cause, as we know, SC doesn't have the facility to keep recipient email addresses private... Maybe I didn't cancel the 2nd parse, I'll check, thanks for the heads-up!

    Cheers!

    GH

  3. 14 hours ago, petzl said:

    the report will go to SpamCop admin chances are putting in real address will have it "bitbined" but not to SpamCop

    Hey Petzl,

    "Go to SCA",  I understand,

    "Bitbinned, but not to SC", I don't.

    Why not devnull it with the regular redirect to SC?

    GH still confused...

    Cheers!

  4. Hey Tesseract,

    Thank you!

    • " common factor seems to be an invalid host name both for starting with . and for containing @ "

    I agree, using account with MailHosts configured - my results match yours, using an account without MailHosts, the results are:

    https://www.spamcop.net/sc?id=z6545556269zcc99c68f6b5503a9beee14fed8dfa944z

    https://www.spamcop.net/sc?id=z6545556709z3accdd54783b338901c40c748bee5947z

    https://www.spamcop.net/sc?id=z6545556992za7eece61ab47f04741f34bc8b0d86b17z

    🤔 G🦗 H

     

     

  5. 1 hour ago, Jelmer Jellema said:

    1. Mailhosts disabled. I guess we should check our mailhosts anyway, because of recent network changes.

    (a) mailhost check code of SC "crashes" when it tries to parse a host with a dot..

    (b) mailhost check code "crashes" when it tries to parse a host with a dot, while the mailhost setup for the particular reporter is out of date (but as I get it, other people, with different mailhosts, experience the same issue)

    (c) should not use mailhosts as it crashes stuff   

    (d) reconfigure mailhosts

    Hey Jelmer,

    Welcome back, no apology necessary! 

    • MailHosts disabled:  the successful parse was done with an account WITHOUT MailHosts, I'm reluctant to tamper with my SC account (with MailHosts) as they were a bugger to set up, reluctant to go thru that one again, "disabled" that's another thing all together....🤔
    • NW/ changes, chk MailHosts: yep! Good idea.

    (a) 🤔

    (b) 🤔

    (c) Not always, my rule of thumb: if SC parser produces wonky results, I change accounts (MailHosts/No MailHosts) & reparse, if, both accounts are unable to successfully parse I start digging and come here for support... 

    (d) Good idea.

    Cheers!

    G🦗 H

  6. 13 minutes ago, Tesseract said:

    Hey Tesseract, 

    I reparsed, firstly I removed:

    From MAILER-DAEMON  Fri May 10 02:41:48 2019
    Return-Path: <>
    X-Original-To: x
    Delivered-To: x

    I also amputated the embedded http links, not necessary to get a resolved parse, just based on my understanding of information provided by knowledgeable SCF members, each time a link is parsed it's a hit for the spammer... grrrr

    Results:

    https://www.spamcop.net/sc?id=z6545327526z3c3d9b7ea27f204c8c57cac8f816abb7z

    Re "removed" stuff, I probably can't explain without confusing everybody, however, the previously referenced knowledgeable SCF members, I'm sure, will pitch in with sage advice...

    I'm curious to test again if you'd like to share the other tracking URLs please?

    Cheers!

    G🦗 H

  7. 3 hours ago, petzl said:

    1. Can look at past episodes/news I missed.
    2. My big touch screen "all in one" computer is by my lounge, with big screen up high on wall 

    1. Got it..
    2. I've seen those, they're bigger than my lounge/office combined👀

    Cheers!

     G🦗 H

     

  8. On 5/6/2019 at 4:25 AM, oZoneCapHill said:

    https://www.spamcop.net/sc?id=z6543836809z438812bd7b6c2eaf52d5d36941b1cef2z

    Chain error AM5EUR02FT025.mail.protection.outlook.com not equal to last sender received line discarded

    Hey oZoneCapHill

    With all Outlook/Hotmail mail, the "original"/Classic or "new", was BETA, now referred to a "production" by MS, always remove the first:

    Received: from xxx all the way through to +0000 

    In the example you've submitted it's as follows:

    Received: from AM5EUR02HT165.eop-EUR02.prod.protection.outlook.com
    (2603:10b6:a02:a8::18) by BYAPR02MB4678.namprd02.prod.outlook.com with HTTPS
    via BYAPR03CA0005.NAMPRD03.PROD.OUTLOOK.COM; Sun, 5 May 2019 11:38:40 +0000

    The explanation provided by SpamCop Admin (as to why it's optimal to do this), was/is:

    "A couple of years ago Hotmail had to give up two /16 networks they were using (33,554,432 IP addresses) as they were not assigned to them. Microsoft had to quickly reconfigure their network and used IPv6 to do so. Unfortunately when doing so, they did not do it carefully and make sure they had full name resolution through out the network, where the forward and reverse dns on each server matches.  This means we can't trust their headers and will often take them as the source of the spam."

    • Using the SC URL you've submitted I removed the above "Received, etc > +0000", ran it thru SC, using a  SC account with MailHosts , this is the result:

    https://www.spamcop.net/sc?id=z6543932098z889c38dc916f2b763336930b55cf1af9z

    ****

    To address the MailHosts issue, (imo) the fastest, most successful & least painful (for you) solution, is to contact SC admin, provide details & ask for their assistance. Many folks have either had trouble setting up the hosts & or, having modified previously setup hosts, find the mods have "buggered" up spam being parsed successfully... 

    ****

    Back to the SC URL you've provided:

    The 2nd issue (when the SC generates a result) is "no links detected", irrespective of the fact there are indeed embedded links... There's various good commentary, across SCF, as to why the parser may not detect links & why this is less of an issue than the parser not being able to parse the spam at all.

    I think from memory, these posts also contain: "try x", "try y", solutions, in some of the posts.

    With your specific URL, I'm unsure if the reason, is a failing by SC parser, or, the actual formatting in the message body.

    Again, with your specific URL, the links resolve to: 

    111.90.150.137, AS 45839 (Shinjiru Technology Sdn Bhd), abuseATshinjiruDOTcomDOTmy

    Condensing all of the above: with working hosts & modifying the spam, before presenting to SC parser, it would be good to see if there's better results. 

    Cheers!

    G🦗H

     

     

  9. On 5/4/2019 at 9:12 PM, petzl said:

    Channel 7 TV.
     ***duopolies***
    "Politicians and diapers must be changed often, and for the same reason.” Mark Twain

    Don't you have a 📺 Petzl?

    ***Exactly!***

    Mark Twain was a very smart man, 'cept, in "our" case, any change means more of the same😩

  10. 3 hours ago, petzl said:

    How long you been with Yahoo?.

    Surprisingly (to me anyway) I do know the answer, 15 years in Oct. And, on the graves of all my treasured ones, I've never, never, had 1 spam in my Yahoo acc, Hotmail on the other hand, until I found SpamCop, I believed my details had to be on some out-of-control-crap-web-rotation... 

    CieLeVie.

    Avagoodwe Petzl. Election soon, gird your loins!

     G🦗 H

  11. 46 minutes ago, petzl said:

    not about receiving spam it is yahoo sending spam.

    10-4 Petzel,

    ?, are you "saying" the 3 urls in this topic are from spam the source of which is yahoo?

    Curious...

    Cheers!

    G🦗 H

  12. 2 hours ago, petzl said:

    Yahoo were useless at stopping spam. May take a while for new owners to work it out.

    Hey Petzl & Lisati,

    Yahoo acc 15 years, it's been good for us, never had one spam, not before the "Oath" change & not since, seamless🤫, have to shush that comment, don't wanna jinx them & start getting a flood.

    74.6.130.122 - HOSTNAME:  sonic316-12dotconsmrdotmaildotbf2dotyahoodotcom

    DOMAIN: yahoo.com

    Organization: Yahoo!

    AS 26101 (Yahoo!)

    NETWORK OWNER(ISP): Oath Holdings

    Reading the reference article "Oath was renamed Verizon Media 08/01/2019"

    Looks like their changes have been many & not complete, no surprise, that's "business" in a "Global" world.

    Cheers!

    G🦗 H

  13. On 4/25/2019 at 12:59 AM, Lking said:

    If there are other commonly used, relevant abbreviations/acronyms let me know in this thread and I will add them to the list.

    MTA, not sure if it's "commonly" used, it is used by SCF members.... Meaning? No idea.

    Thanks!

  14. It's "later", so another observation for you salfordian, the "topic heading" I referred to was YOUR "topic heading..."

    Based on this topic & your previous, you have "tude", that & paranoia are treatable conditions, seek help.

     

     

  15. I know Petzl, & few SC others, you salfordian, on the other hand, have a bit of a "questionable" rep, shall we say.

    Looking at previous posts is an absolute baseline for ANY person with ANY technical exposure/nouse.

    What are you afraid of? 

    If you'd pull your head out of wherever it is you'd see Petzl didn't ask ?s to your so called "general observation question".

    If you're going to name call at least target the offender. 

    You're a tad defensive salfordian, one wonders why?

    Well actually I would, but, I can't be bothered.

    Later!! 

     

  16. 18 minutes ago, bolandross said:

    Clicking on the first link (69494888809) shows a site that doesn't contain the source code of the reported mail, but clicking on the other two links shows a site that does!

    Super!!! Good digging BolandrossThanks for posting back, much appreciated. 

    Your information will help others as well as you & me! Happy, happy, joy, joy!

    Cheers, G🦗H

    Master, Forum Admins

     🦗 doing cartwheels & high 5 emojis required please?

     

  17. 23 hours ago, bolandross said:

    1. can you tell me if there is a way to see the source of the reported mail again?

    2. I noticed that in »Past Reports« I can see the reports and contacted addresses, but not the spam mail that was reported.

    Hey @bolandross

    Is this what you see?717747227_SCREPORTS.jpg.c3b619df4323ccbb72569a0cba3076d2.jpg

    If yes, have you filled in your email address in: https://www.spamcop.net/mcgi?action=showadvanced [PREFERENCES][Personal copies of outgoing reports] ?

    If you've not done so, please enter your email address, select [SAVE], log out, log back in, parse a spam, see if the info you need is available? 

    If it is, please let us know & if no, please let us know & please include the Spamcop Tracking URL?

    Thanks!

    CheersG🦗H!

  18. 4 hours ago, Lking said:

    Aren't we all??

    Might be I'm a deluded G🦗H but, I'm of the belief Master, you rarely spend any time in a state of confusion, not becoming for a Master, 'n, last time I read "The Road to becoming (a) Master", worth reading, recommend to all;  the 1st chapter was how not to be confused, 'n the 2nd chapter was, if you fail chapter 1, how to convince everyone you passed... 

    🙇 G🦗H 🙇  - does anyone/everyone know when the male bowing emoji is selected, it transforms into a female bowing emoji 🤔? That's a whole new discussion.

    Bye!

  19. 4 hours ago, Lking said:

    1. Looking at your own or someone else's Tracking URL.

    2. No

    Hey Master & all who are on this one:

    1

    If I'm logged out, doesn't that take away the "ownership" element?

    • Anyone like to pitch me a couple of TURLs so I can test further pleeeze...?

    & [View entire message]

    Logged in:

    https://www.spamcop.net/sc?id=z6537922468z2b2e813402d293f1e52e3f50e513a151z

     entire msg visible

    https://www.spamcop.net/sc?id=z6537922468z2b2e813402d293f1e52e3f50e513a151z;action=display

    Logged out:

    https://www.spamcop.net/sc?id=z6537922468z2b2e813402d293f1e52e3f50e513a151z

     entire msg visible

    https://www.spamcop.net/sc?id=z6537922468z2b2e813402d293f1e52e3f50e513a151z;action=display

    2.

    No is not an answer, well not for a G🦗H, anyways, if 'full email" & "entire message" aren't the same, what's the difference pleeze? 
     

    Always learning G🦗H🙃

  20. 8 hours ago, RobiBue said:

    Klappa had two posts.

    1. He mentioned you can add a recipient in settings (actually the [Preferences] tab/link) but he didn't mention that it's under Report Handling Options by adding an  email address to the Public standard report recipients field.
    2. In the 2nd post (the one you quoted) he asked where (about adding a recipient for every report independently), but just recently, we all found out, that you can do that only if you have either
      1. a paid account, or
      2. fuel added (until it runs out)

    HTH

    Hey RobbieBue,

    Thank you!

    1. That's what I thought Klappa meant, I wanted to clarify so I could add the info, specific to his query, rather than go down a deep dark rabid hole. 

    It's great you answered (both). It combines the two issues clearly.

    Given some SC doco is outdated, the more often SC idiosyncrasies are clarified (in the forum), the more people git helped😄

    Cheers!

    🙏🦗

×
×
  • Create New...