Jump to content

Lking

Forum Admin
  • Content Count

    20,114
  • Joined

  • Last visited

Everything posted by Lking

  1. Like Fredie, the spam seem to be back https://www.spamcop.net/sc?id=z6539674301z237b78bf7ae63db01d0dab06ee5e4606z They started this morning with 3, two to non-mailboxes. Got 15+ this afternoon all sent to random mailboxes.
  2. Lking

    re. @devnull.spamcop.net

    db17 the report will be sent by SC. If you are unsure you could always, as a test, send a random spam to yourself and evaluate how all the SC spam reports you generate look.
  3. Lking

    re. @devnull.spamcop.net

    There are several reasons that SC may send a spam report to @devnull.spamcop.net SC does not find a valid abuse address for the source IP. spam reports sent to the identified/ listed abuse address have bounced 6 or more time. (No need to clutter the internet or wast the bandwidth) The abuse address has ask SC not to send reports. (SC does not want to be a spammer). SC has reason to believe that the ISP passes the report onto the spammer When you submit your spam example, at the bottom of the screen you should see "Report spam to:" Notice the "Re: User Notification" with the unchecked selection box. By checking the box and entering an email address you can send the report to anyone you wish.
  4. If you logoff SC and then go to the Tracking URL you will see that your email address is replaced with "x"
  5. "Dear" Color me confused : ) The confusion is that we (you and I) are talking about two different things. You (and I) use SC to parse the spam email header to identify the source and supporting ISPs of the spam and the spamvertised links in the body of the email. I understand that you /*then*/ use the information from SC to manually expand where the spam report is sent. In addition to the basic results from SC, I also send all 'raw' spam to government databases, US and Australian (spam@uce.gov & Report@submit.spam.acma.gov.au), for archival and whatever use. When a quick visual scan of spam reveals that the name of an established company (Amazon, UPS, American Express...) is used to bate the spam receivers, I also send the raw spam to those companies as a "FYI some spamming a**hole is using your 'good' name to defraud people." In my example above: I noticed the From: Amazon displayed in the "Correspondents" column in Thunderbird so I single that spam out for special handling. Depending on the time of day and other factors, I also take a quick look at the body of some spam scanning for besmirched company names. {It is another discussion, whether or not these corporations have a 'good name'. I am sure they think so and have the resources to defend it.} I have chosen this less time intensive processing because of the volume of spam sent to the several domains I use (232 spam yesterday). In addition to the domain I have had sense 1996, I also manage domains for two non-proffets. I receive all email to these domains unfiltered (note To: bigknow{at}xxxx.com above). For me I "Do not have the time" to do the hard work that @RobiBue does.We each do what we can do. As an aside I am confused by the thinking(?) of spammers. Looking at the "odd" mailboxes spam is sent to. Instead of dropping mis addressed email on the floor, I receive and report it. So I see these odd mailboxes. I can see guessing 'Bob@', 'John@' or "testemail@". I do not understand "f***you@", "A**hole@", "whore@". Who thinks someone would open an email addressed to "whore@"?
  6. Please provide a Tracking URL so that others can see how 'SpamCop does not handle' you submission.
  7. The attached spam is forwarded without change. MY email, Subject: [blah...] spam Report, From: XXX is not what ACMA is referring to. The Attached email "Subject: [Norton AntiS´╗┐pam]TEXT ALERT: Winner, Winner John, is it you? >> Check Now" "From: Amazon <reply@leneif.info>" is not changed, as required.
  8. NO I am not. That would result in a spam Report, from SC going to amazon. I am suggesting something like this header from MY email: with an amazon related spam attached; in this case Note when I "Submit" the spam I BCC the email to SC to hide my private 16 char reporting account from Amazon. Also note: Yes the FROM: is an obvious fake, but the sender is using the well known retailer's name to get "bigknow" to open the email.. I do the same for others common spam FROM UPS, American Express and others.
  9. I stand corrected. What I meant to say was that I add amazon[dot]com to the list of addresses when I submit said spam. So the copy of the spam comes from me not SC. I do get the obligatory auto-response "Thank you"
  10. I don't see a suggestion to also send reports/forward spam to stop-spoofing[AT}amazon.com I add that address to all spam that I quickly identify as relating to Amazon or often amazon.uk
  11. Welcome to the forum. Short answer: No Longer answer: Finding links in the body of spam email is the lowest priority for the parser, after identifying the source and sending spam reports. With those priorities it is a mater of allocation of assets i.e. CPU cycles. And there is a cascading impact. If a link is found in the tail end of a large spam, the spam report also becomes larger than 50Kb to include the link; even more cycles and outgoing bandwidth. The CPU cycles and bandwidth all cost money, which makes it a return on investments. Although Cisco, the current owner, may have deep pockets, the 50Kb limit was established back in the dark ages when SpamCop was privately owned.
  12. Lking

    Spring Has Sprung

    Got my first "Ray Ban" spam of the year! A sure sign warmer weather is on the way.
  13. Lking

    Spring Has Sprung

    Got a spare room?
  14. Lking

    Spring Has Sprung

    Yea what a deal. I took the snow picture two weeks after it started here. Wasn't really in the mood. If we "northerners'" are just starting, Sydney is just returning to normal right? Well normal for Sydney
  15. Lking

    Spring Has Sprung

    Based on the few forum spam received overnight, spammers must be watching "March Madness"
  16. Lking

    I am getting more spam when I report

    When you submit a spam, at the bottom of the screen you should see something like the following. By clicking on the checked boxes you can deselect a report and not sent a spam report to anyone of the suggested recepents.
  17. Lking

    I am getting more spam when I report

    Yes Bob, welcome! As RobiBue suggested a Tracking URL would be helpful. It is quite possible that your spammer is clever enough to hide your email address in the spam AND dumb enough to send you more spam because you reported them to SpamCop. Not being a spammer I don't see how "asking" to be reported by sending more spam to a know reporter fits into a business model. But then I am not a dumb spammer; see Rule #3 "Spammer Rules." What RobiBue suggest is quite possible. Another possibility is that your email has made its way onto a list being passed/sold around among spammers and so your volume of spam is currently on the rise. I is also possible that your email ISP has somehow changed their spam filtering and as a result you are seeing more spam that slips through to your inbox. Be assured by things will change again. In the meantime, help the internet community by reporting all the spam you have time to report. Your good karma will be rewarded.
  18. I don't think the header is causing the issue. the email body html contains several html format errors that may be the reason for not finding link. The errors are simple, and a email app or web email would not dough "forgive" the sender and try to display the links in the email body. The parser on the other hand MUST be sure that spam reports that are send are valid. Guessing what was meant could result in bogus spam reports. JMHO
  19. Looks OK IF you use Chrome and likes more apps installed on your local platform.
  20. Useful discussion. Please be careful to NOT include active "malicious" links in your post. Some suggestions for breaking links would be to replace periods "." in the URL with a coma ',' or '{DOT}' include spaces to break[ ]-[ ]up the URL as in http: // spamcop . net When you do include a URL double check your post to make sure the system did not out smart you and generate a live link. THANKS
  21. Maybe include the link that redirects to them. We can always be hopeful.
  22. Grrrrrrr! Maybe if you include a note to Amazon along with the spam Report about the redirect.
  23. Lking

    Profile picture

    nice grasshopper.
×