Jump to content

Lking

Forum Admin
 View Profile  See their activity

  • Posts

    31,653

  • Joined

  • Last visited

 Content Type 

Posts posted by Lking

    Spamcop generates reports against my own domain!

    in SpamCop Reporting Help

    Posted

    12 minutes ago, rdorsch said:

    Many thanks for your reply, I opened a new feature request as you suggested. For completeness I include here the tracking URLs:

    Submitted: 14.5.2020, 17:40:25 +0200: 
    =?UTF-8?B?6L+Q6YCB5bu66K6uIDMwLzUvMjAyMA==?=
    7058512602 ( http://www.bokomoko.de/ ) To: abuse@netcup.de
    7058512598 ( 185.222.58.117 ) To: complain@rootlayer.net

    "What we have here is a failure to communicate"

    An example of a tracking URL is https://www.spamcop.net/sc?id=z6634628358z460dafae0c54205ace1fe027dc2ff311z

    This can be found near the top of the screen after you submit the spam. If you submit by email the tracing URL is the link sent to you to review and complete/submit your spam.

    In my example above you will see the tracking URL on the third line.  IF we had access to the tracking URL someone could cut and past the body of the spam into google translate and see why your domain is in the body.

    Spamcop generates reports against my own domain!

    in SpamCop Reporting Help

    Posted

    On 5/23/2020 at 2:49 AM, rdorsch said:

    Since the domain which is referenced in the spam email and my mail domain are the same,

    If I understand the issue correctly without a Tracking URL another thing to consider is, if your email and domain are on the same host and IP. As you know spamcop looks at IPs not domain names directly.  Having your domain listed in a spam is odd.  spam I have received, even those requesting to buy one of my domains, don't include the domain in the body.

    In any case your point is well taken. If the domain in the body of the spam is the same as a domain in your mailhost configuration, the solution should be relative straight forward.

    I would suggest a post in New Feature Request with a Tracking URL as an example to illustrate your request/suggestion.

    New spammer trick?

    in SpamCop Lounge

    Posted

    On 5/19/2020 at 12:05 PM, Spamnophobic said:

    OK I know we have been here before, but could somebody examine my tracking url:

    https://www.spamcop.net/sc?id=z6634628358z460dafae0c54205ace1fe027dc2ff311z

    with the double header I think things have gotten confused. @gnarlymarley without knowing @Spamnophobic 's 16 digit code "they" could not have sent to the reporting address.

    UNLESS they replied to a spam report with the following sequence:

    • @Spamnophobic a spam (email #1) and reported it to spamcop (email #2)
    • spamcop sent a spam report to the the source (email #3)
    • the spammer/his ISP... received email #3 and auto responded (?) with email #4 sent to a coded address at spamcop
    • spamcop received email #4 send to a coded mail box associated with the spam report (email #3) and forwarded the email to @Spamnophobic
    • @Spamnophobic received email #4 which has the spamcop connection hidden and thinking it is spam @Spamnophobic reports email #4
    • The reporting of email #4 generates the tracking URL above.

    It has been a really long time sense I have received a reply to an spam report. Looking at the full email in the tracking URL there are spamcop.net ironpost references in both headers (at the top and bottom of the email)

    to paraphrase Cicero, Mark Twain, Blaise Pascal  'If I had more time this would have been shorter.'

     

    SpamCop says it's too old, it's not

    in SpamCop Reporting Help

    Posted

    Of course the spammer has no control over thr date entered by your ISP or other servers in the chain after their ISP.

    A spammer can of course forge the "Date:" header entry visible to all, and if they control their ISP they could control the date in the first "Received:" line in the header visible using the source with a ctrl-U

    The SpamCop parser used the dates contained in the "Received:" header lines, checking for logical sequence and age.  If a date is questionable, I have see 'possible forgery'

    Which dates are you looking at?  An example of the header, using a Tracking URL would be helpful.

    Emails not being received

    in SpamCop Email System & Accounts

    Posted

    Reading other threads in this forum, SpamCop email System & Accounts should be informative.

    For example: SpamCop Email Service Changes

    When SpamCop and the SCBL was sold to CISCO inc this forum and the email system were retained as a legacy. with advice to all email account holders to find other email servers.

    After a coupe of years the system was reduced to "forwarding only." no SpamCop filtering.

    As I remember, a couple of years ago forwarding was also discontinued, though the email domain remained.  Perhaps someone who has retained a SpamCop email address could add to the current status.

    As noted in the link above, SpamCop Email System & Accounts have gently been going away sense August 2014.

    spam

    in SpamCop Reporting Help

    Posted

    Quote

    Reports disabled for abuse@getresponse.net

    Using abuse#getresponse.net@devnull.spamcop.net for statistical tracking.

    Getresponse is an online marketing company. The number of reports compared to the total number of email send must be low.

    I do not know, but I am guessing that getresponse has ask SpamCop not to send spam reports and that is why sending reports is disabled.

    That does not keep SpamCop from collecting reports about the IP and adding their IP to the blocklist IF the number of reports or email received by a spam trap is high enough.

    No longer receiving email notioce that reports ready to be processed

    in SpamCop Reporting Help

    Posted

    1 hour ago, Bob said:

    don't see Preferences but I went to Settings> Account Settings

    Bob you need to login to your spamcop REPORTING account at https://www.spamcop.net/mcgi?action=loginform

    NOT the forum which is at http://forum.spamcop.net

    In the forum you will see <settings> in the drop down menu in the top right corner.  When logged into your reporting account there is a <preferences> tab across the top

    Sorry for not being clear before

     

    No longer receiving email notioce that reports ready to be processed

    in SpamCop Reporting Help

    Posted

    There are two possibilities, 1) your ISP is dropping the emails from SPAMcop on the floor thinking they are spam, or 2) your ISP is bouncing the email.

    If the emails from SpamCop are being bounced, you should see a bounce flag when you login to your account.  Check with your ISP to correct their action and then clear the flag.

    If your ISP is dropping the email or putting them in your spam folder, have a heart-to-heart talk with your ISP about your displeasure. and besure SpamCop is on your white list if available.  Historically ISPs have randomly changed the way they handle email/spam without any notice to users or explanation.

    URGENT - very confused - need to unblock mail server

    in SpamCop Blocklist Help

    Posted

    If you follow the link in the page pointed to by https://www.spamcop.net/bl.shtml?77.32.164.53  you will see that " 77.32.164.53 not listed in bl.spamcop.net "

    The SCBL is dynamic so an IP may no longer be on the list.  It requires several reports from reporters or spam traps for an IP to be added to the SCBL.  After 24 hours the IP will be removed if no more reports are received.

    For related information, I suggest you read through the 15 year old  thread to witch you added your post.

    spam from Google Mail Groups

    in SpamCop Reporting Help

    Posted

    22 minutes ago, denby said:

    So when I get them, I send an e-mail to abuse...

    Sorry it is not clear to me if you are sending an email outside of the SpamCop system or if you mean you are sending spam reports inside the system.

    In your original post it is not clear to me where in the chain of events the message you included ( > ---------- Original Message ---------- ) Is this the spam you reported resulting in the spam report you linked to? Or is later.  Before I removed email addresses, for security, I was not clear how the FROM or TO or Subject related to you (your email that others can not see).

    As @gnarlymarleysuggested, the related tracking URL would help.  The Tracking URL can be found at near the top of the reporting page or it is the link you received when you submit the spam by email as an attachment.

    My confusion may be due to my low caffeine level.

    ISP does not wish to receive reports regarding

    in SpamCop Reporting Help

    Posted

    5 hours ago, Oceaniana said:

    So basically the spammer cant be stopped? mediaform.com.au sends me emails weekly sometimes 3-4 times a week

    Unfortunately, that is generally the state of the world. On the other hand, in some/many countries privet companies or groups do not have the power to control or constrain the actions of individuals in other countries.  SpamCop/Cisco is in The United States and mediaform.com.au would appear to be in Australia.

    Fortunately for you Australia I believe does have stronger anti-spam laws than other countries.  Have you contacted/reported this to Report{AT}submit.spam.acma.gov.au  Their website is https://www.acma.gov.au/

    Have you contacted PayPal? I would read their privacy statement first. I found a link in the lower right of the screen. First look found

    Quote

    We may share your Personal Data or other information about you with others in a variety of ways as described in this section of the Privacy Statement.

     

    ISP does not wish to receive reports regarding

    in SpamCop Reporting Help

    Posted

    1 hour ago, Oceaniana said:

    Ever since I bought a printer off eBay(I never signed up for this), they keep spamming me, I even unsubscribed from the link at the bottom of the email after a few months, but eventually, you get back on the list.

    I thought eventually they would look into this the ISP, (ISP does not wish to receive reports regarding) But obviously 1-year latter they don't. In the past, had this happen before from a different spammer and seem to get resolved after a while. I have had over 50 emails and it's not resolved, it's insane. I usually get the email source and paste it to submit, but I have also recently submitted a few times the email as an attachment to hoping that might work but it still continues.

    Several issues here. 1) eBay's policies 2) Your options on eBay 3) SpamCop's policies 4) Who can control what

    1) eBay

    • (I'm guessing) that due to the large number of promotional emails eBay and subsidiaries send in an effort to increase volume so they can scrape 1-2% off each sale, they send "lots" of "unwanted" emails which people report as spam.  Based on the response you received, eBay has ask SpamCop not to send spam reports. Not wanting to clutter the bandwidth, SpamCop doesn't: Why would they if the reports go straight to the bit bucket?  I too get occasionally still get email from eBay after an unfruitful eBay effort ~5 years ago.  Other email seem to be directly related to Google searches.
    • Having been a customer, you gave eBay your email when you opened an account and (again guessing) just clicked on the accept 'term of use' like most of us do.
    • It may seem like splitting hairs, but there is a difference between "unwanted email" and spam.

    2) Your options

    • Have you logged into your eBay account and changed you contact options?  Deleted your account?
    • eBay may or may not respond to "Unsubscribe" or changes in member options. It would appear not.
    • Most email apps have filters that can redirect selected email to the trash

    3) SpamCop

    • As noted above if an ISP ask SpamCop not to receive spam reports, SpamCop will not send them.
    • Depending on the number of IP addresses reports are spread across, eBay may not appear on the block list.

    4) Control

    • Of course SpamCop has no control over eBay policies or actions.
    • Unless your ISP uses the SCBL, listing one or more eBay IPs will not effect emails you receive from eBay.
    Quote

    I thought eventually they would look into this the ISP,

    I assume by "they" you mean SpamCop.  The (eBay's ISP) ask not to receive reports.  Different IPs controlled by the ISP may automatically go on and off the SCBL based on reported spam, etc. (See SCBL Rules) What is there to look into?

    Link obfuscation flaw?

    in SpamCop Reporting Help

    Posted

    Keep in mind that the links in the body of the spam are the lowest priority for the parser.  Historically SpamCop has been concerned with the source of the spam.  Groups like KnukOn (No Junk) were concerned with following the money - the links in the body of spam.

    Pulling back the veil, following the trail and sending spam Reports to links in the body takes away assets from the primary task of building the block list. You can of course submit your own.

×
×
  • Create New...