lisati

What constitutes a "bounce" in this context isn't always apparent to a volunteer such as myself. It could be anything, such as a dead email address, a full inbox or auto replies that have, for some reason, been counted as a bounce. As for why the reporting address didn't update, it's likely that whoever is responsible for updating reporting addresses in the database(s) Spamcop consults hasn't made any changes for a while.

I've seen some with apparent connections to Russia. Thankfully my provider filters them out before they make it to my inbox or junk/spam folder.

What I'm seeing at the tracking link is typical of mail I receive at an Outlook email account, where the top-most (most recent) Received header trips things up so that reports go to report_spam[at]hotmail.com - I usually delete or comment out the header in such situations, which is normally sufficient to get the report(s) sent to a more appropriate address.

I wouldn't worry about it too much, there are situations where unwanted email arriving from some sources need some special handling. If I recall correctly, I started noticing this behaviour a few years back, not long after Yahoo made some changes that tripped up the Spamcop parser.

One of the links in the body of the message tracks back to cloudflare.

Sounds a bit like "backscatter" where a provider has the "wrong" email address to use when sending out a bounce or other form of non-delivery report. Some see it as spam, some don't. Unfortunately there's often no easy and reliable way for a provider to determine from the email headers if the return address is legit without the risk of annoying and/or inconveniencing innocent bystanders.

Thanks for that. I haven't sent reports to the spam[at]uce.gov address for a couple of years, after my provider seemed to be having trouble delivering to them. Their explanation was that it was a DNS issue, and persisted with that explanation even when confronted with evidence that it wasn't.

Having some kind of table for us to use does sound like it might have some merit. There's also a section of this forum that some contributors use to submit updates and corrections. under Spamcop Reporting Help -> Routing/Report Address issues

That's OK. I first noticed changes to the way Yahoo emails were being processed a couple of years ago, after Yahoo changed something at their end which seemed to break regular processing.

For some reason, I saw a "report spam now" button when looking at the report linked to by tracking link. Be that as it may...... There are a variety of reasons that Spamcop will not send reports directly to a provider. Perhaps the admins want to keep an eye on spam reports for that particular provider, or perhaps it needs some kind of special handling. I've noticed with reporting emails that appear to arrive via Yahoo, for example, sometimes the reports go to "internal spamcop processing" (or similar) and sometimes they go to an abuse address.

I recall being mildly surprised recently to see some reference to Oath when reporting a spam, I was half expecting it to go to the usual Yahoo reporting address. o I don't have a link to hand but think I saw something a few months back about Yahoo now being part of Oath.

Ah, yes, Grace Hopper. I once saw a photo of said moth. Didn't she (Ms. Hopper) have some connection with the initial development of COBOL?

Cool. That's what's forums like this are for, amongst the various ideas that tossed into the discussion, there are often those which are helpful.

I can confirm #2: Whenever I report stuff that appears to have originated in my provider's system, usually webmail, I often get a "nothing to do" or "no IP address" type of message. (I haven't had one for a while, I don't get them that often.) As for #1, I can't remember. It's always a good idea to make sure that you have mailhosts set up for ALL the email addresses that receive spam that you are likely to report, AND keep them update them if something in the way your provider processes email changes.

My English teachers at school might have had a relatively minor objection to "aint."

It better not be one of those cards that I sometimes get offered by spammers and scammers!

I haven't had one for a few weeks now. One thing I've noticed is that the Return-Path headers seems to be of variable quality or interest, tending towards the "don't trust it at all" end of the spectrum. Sometimes they match the intended recipient's address, sometimes they don't.

i That was my thought when checking new replies to this thread. I, too, see the "user notification" option when I've added fuel, and it disappears when my "fuel" runs out.

As I understand it, Spamcop's primary focus is to maintain a blocking/blacklist of sources of spam. Any reports that get sent out and are actually actioned by provider are a bonus. Even if the reports get dev-null'ed, Spamcop can still. use the spam you report to help provide data for its blocking list. There are other ways of tracking down a suitable reporting address. I rarely bother manually sending reports to providers, but occasionally visit sites such as multirbl.valli.org and mxtoolbox that can assist in provide information that is of some help. Other volunteers at this forum might be able to jump in and suggest approaches that more directly address what you are asking.

On a side note, I've never had a spamcop.net email account, but have seen examples of "your account has been hacked" messages arriving at a small number of my email addresses. Don't shy away from reporting them - the ones I've seen have always been traced back to somewhere other than the server hosting the supposedly hacked account.

My bad. I was possibly suffering from a coffee deficiency or some such problem.

It might not mean much but even if there wasn't the added space, my minimal parsing skills want to add a forward slash after what looks like an IPv4 address. Time for me to wander off and enjoy my freshly made coffee.

😁