Jump to content

parser issue reporting spam


TumbleWeed

Recommended Posts

​Sorry if I'm off topic here. I really tried hard but I don't really know where else to post this (english is not my mothertongue).

I recently noticed that for some time now I keep getting spam with links referring to some web-page similar to this:

https://www.google.de/url?sa=t&url=http%3A%2F%2F%67%65%6C%64%2D%74%72%61%64%65%2E%72%75%2F&usg=AFQjCNEpKAOYITvBF85BzdcaI6XfmBvNaA

​Spamcop keeps parsing this as referring to google and of course google doesn't want to get to know about it as it is a web-site from .ru

​While recently all spam referring to .ru web-pages stop quite quickly after reporting them a few times, this one seems to be increasing in numbers so I guess it makes sense dealing with this issue somehow.

​Can anybody give me some idea how to approach this please?

Link to comment
Share on other sites

Hi TumbleWeed, Welcome.

Reporting the websites spamvertised (spam advertised) in spam is SpamCop's third priority. Another organization, www.knujOn.com (No Junk spelled backwards) is primarily interested in the links in the spam. Personally I report all my spam to both spamcop,net and knujOn.com

Link to comment
Share on other sites

  • 4 weeks later...

Yes! You are right!
If you got spam/SCAM with a spamvertised link like this:


http://www,kredit-schnell,ruXXX
as the real spamvertised page, financial spam/scam/ponzi, looks like a german source:

it gives:
ISP does not wish to receive reports regarding https://www,google,de/url?sa=t&hs=asd&url=http%3A%2F%2Fwww,kredit-schnell,ru%2F&usg=AFQjCNHfAkohqqvmpzippQ7U1AioLXx-jA - no date available
Host www.google.de (checking ip) = 209.85.147.94
Routing details for 209.85.147.94
[refresh/show] Cached whois for 209.85.147.94 : network-abuse[at]AT google.com
Using abuse net on network-abuse[at]AT google.com
abuse net google.com = abuse[at]AT google.com
Using best contacts abuse[at]AT google.com ...


GOOGLE here is used for masking the real webpage that is spamvertised, successfully!
www.kredit-schnell.ru
is hosted in China, and the complaint resistent spam-House there is:

Parsing input: www.kredit-schnell.ru

Host www.kredit-schnell.ru (checking ip) = 220.164.140.186
Routing details for 220.164.140.186
[refresh/show] Cached whois for 220.164.140.186 : anti-spam[at]ns.chinanet.cn.net
abuse net chinanet.cn.net = abuse[at]12321.cn, spam[at]ccert.edu.cn, anti-spam[at]ns.chinanet.cn.net, cncert[at]cert.org.cn
Using last resort contacts spam[at]ccert.edu.cn abuse[at]12321.cn anti-spam[at]ns.chinanet.cn.net cncert[at]cert.org.cn

Statistics:
220.164.140.186 not listed in bl.spamcop.net
More Information..
220.164.140.186 not listed in cbl.abuseat.org
220.164.140.186 not listed in dnsbl.sorbs.net


Reporting addresses:
abuse%5Bat%5D12321.cn
spam%5Bat%5Dccert.edu.cn
anti-spam%5Bat%5Dns.chinanet.cn.net
cncert%5Bat%5Dcert.org.cn


So they do not get a spam report or get less of them!
The behaviour of this may be changed in future?

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...