Jump to content

Lking

Forum Admin
  • Posts

    31,653
  • Joined

  • Last visited

Posts posted by Lking

  1. 2 hours ago, kolor said:

    where is link to nospammer.net .What is this .I'm confused .???

    In the body of the emial

    <DIV><a style=3D"color: blue; background-color: ffffdd"
    href=3D"http://www.nospammer.net/SpamSubmission/SubmitSpam?id=3DI3QGAH0GXWB=
    nRmpfeUJ0RQ__&sig=3De340MBnYVsRoIzFtaiVlcHl4NCx2MTNwEzZfBg__">
    If this email is not spam, click here to submit the signatures to FortiGuar=
    d - AntiSpam Service.
    </a></DIV>

    as indicated in the report

    Quote

    (Administrator of network hosting website referenced in spam)

     

  2. The issue is two different but related problems.  As you may have noticed there is a difference between the base domain, "SpamCop.net" and the SUB domain "forum.spamcop.net' 

    SpamCop.net is perhaps the more stable of the two. However, when SpamCop was bough by Cisco maintenance of the user interface became a lower priority. In fairness, before the change in ownership there were issues with dead links to the forum were creeping into SpamCop.net (as I remember).

    The forum is a somewhat different issue of evolution.  The forum has always been a user volunteer supported operation. Volunteers have had varying degrees of access, control and time given to the forum.  With the changing "personal" several initiatives to improve/structure the wealth of information and history in the forum have been started and abandoned.  Add to this the need to change the underlying software forum software and database has resulted in an uncounted number of broken links.

    All a sad but true result of an irregularly maintained system that is +40(?) years old.

  3. On 10/3/2019 at 10:07 AM, Shoo said:

    I get a "No Data Found" message. 

    I don't think that configuration of you mailhost is the cause of that problem.  From your OP I take it that you are using the SC web form to submit.  What mail application are you using to get the spam?  Some do not give you the header without modification, which causes the reported problem.

  4. 10 hours ago, Hanco said:

    That’s me and these reports I send for sure. Avg reporting time 2 hrs now. Very fresh!

    When the "Reporting Time" was added to the screen, there were lots of threads about the accuracy. Seems to fall to 2 hrs and sticks there.

    10 hours ago, Hanco said:

    P address will never become blacklisted through the reports I send?

    And why should they??? They don's SEND any spam.  Remember the objective of the SCBL is to block/filter incoming spam, not rate all the IP in the world.  In the beginning spammers would include phony links to NY Times/ Washington Post, etc. to make it look like the spamvertised product was valid.  A dynamic process.

     

    10 hours ago, Hanco said:

    I hope someone else is receiving the junk I get

    Thanks.  I am fairly sure that in spite of the view from your end of the "fire hose" 1k - 100k others are receiving spam for the same IP, it only takes a couple of live reports. And of course there are all the spam traps which are heavily weighted..

  5. 4 hours ago, Shoo said:

    When I view the message source, I'm not sure where the header ends and the "decoded email body" starts. 

    The header end with the first blank line.

    From: "Lisette Neira" <lneira@century-group.com>
    Reply-To: "Lisette Neira" <reply_lozwwn_esqpwiya_o@cp20.com>
    MIME-Version: 1.0
    Content-Type: text/html;charset=Windows-1252
    X-Brightmail-Tracker: AAAABgr/Be80R5mPNEkVeDRJFXE0SOroNEkVdw==
    X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrNqMTGxcIABLo3o6bFGiyYxWmx78B3FgdGj+Mv3jMFMEZx+OWXKAQXJOYmcGT07L7AVsBQAaIaGBlWMcrnlpYbFmckFpckJhYVpxelpuYVFOWn6JblGoCA0SZGqOE7GLdflDnFKCklzpsQMS1WSKAYaGBGaV5JalF8UWlOavErRnEORiVh3pkgWZ7MvJLizHSYjAQHk5IIr03U5FghXqBNCCmpBkar1Lv51bzrtwc9u+OfzT/fM680kaG/U3mraYz/EqZ3R+Lm7JNg6z909lqu7TtluzYj7wkXZ2S/S07ieFe/33L7Lc8mpwJZu5uyYYEu2nEqOvx+s3/0eu4qvc/QKeJ55GLw3QsTfmavV5X5LLAnUPSUnMmPHfqnuOeHnv9xwYLDaMKWtwxKHkosQO8bajEXFScCAMcuQddOAQAA
    
    <!-- X-Campaign: 38293016/84269892/21719015952 -->
    <style> .dvPreheader { display: none !important; mso-hide: all; }</style><div class="dvPreheader" style="display: none !important; mso-hide:all;">This month's sample of our top talent currently available for new opportunities. Contact me today to learn more.</div>

     

  6. Hanco, when I follow your Reporting URL I get

    Quote
    Report spam to:

    Re: 2603:10b6:0:52:0:0:0:29 (Administrator of network where email originates)
    To: report_spam@hotmail.com (Notes)

    Re: http://bulkoffers.win/unsub?m=GVY%2FULisjkPf0IM... (Administrator of network hosting website referenced in spam)
    To: abuse@vpsnet.lt (Notes)

     

    normal completion.  Follow your Tracking URL again.  Next time try refreshing your browser.  Let us know the results.

  7. If someone would provide a Tracking URL it would help others evaluate the problem.

    I do not remember seeing any evidence of browser based issues.  On the other hand, web mail apps, like mail.google.com, have caused problem.

    Providing information about how you are reporting would be helpful.  Are you using your browser to cut & past into the SpamCap web reporting application from your mail app? Or are you submitting vi email and then using your browser to go to spamcop.com?  Or are you cutting & pasting from a web email application?

    Any details would help others help you.

  8. 5 hours ago, j4v3d said:

    When can you expect to see less spam emails coming through?

    There is no direct correlation between an individuals spam submission and a change in spam received.

    An exception to that would be if your ISP (email server) uses the SpamCop Block List.  Otherwise, there would not be a notices change.

  9. 13 hours ago, gnarlymarley said:

    unique identifiers to try to figure out who is reporting.

    You give them more credit than evidence I have seen.  Why spend the time and effort?  Which is more cost effective 1) Maintain some database/records to sort out 10 100 emails out of a 100,000 emails sent? or 2) Just change IP/ host when/if you get blocked?    For example I have been reporting ~20 years and my domain receives a hundred or so spam every day and I report them all.  If your suggestion were correct you would think by now even the dumbest spammer/bot/cartel would have figured out to RED flag my domain; or at least some of the mailboxes they spam.

    I admit I have no controls or filters on the front end of my mail server so that everything is received.  I filter incoming locally, and report all the chaff.

    Keep in mind, IMHO, most spammers or those running a bot farm, have bought or were given a tool, files of emails and content to send.  Not the sharpest knives in the drawer.  How often do you receive spam that has been mis configured?  "Dear   ," or "Hi <name>,"  Or some other obvious blank not filled in?    I am male.  I get spam for woman's underwear, morning sickness.  Lots of UK specific events   Those are the ones I spot among the drugs, sex, sunglasses and right wing and preppers..

    Example 2) It level of smarts it takes to spam an anti-spam website AND not filter the forum out of the rotation after years and years  (I am assuming no one here clicks trough )

    Just my observation.

×
×
  • Create New...