csouter Posted December 26, 2017 Share Posted December 26, 2017 I've just received these 4 spams in the last hour. They seem to be arriving in pairs. 1. https://www.spamcop.net/sc?id=z6432003135z85b1283f75fe26fc67527132f3879eacz 2. https://www.spamcop.net/sc?id=z6432007009z4a4fd1a767cf2e2257b4392b71349c33z 3. https://www.spamcop.net/sc?id=z6432011457zbe5b0b3621ce9e6e4bf5846e9a7a7999z 4. https://www.spamcop.net/sc?id=z6432011515zfd9beaed8a2c8f9122436b50289c01ddz It would appear from the parse that the MailChimp abuse address gets the SpamCop "/dev/null treatment." I would have thought that an enormous mail forwarding organisation such as MailChimp ought to be investigating spammers and shutting them down, not ignoring SpamCop reports. It would also appear that SpamCop reports about the spamvertised Akamai links contined in those spams also get the same treatment, which mystifies me somewhat, considering that even though the reporting address is abuse-spamcop [at] akamai [dot] com, the reports are not sent because the annotation in the original parse states that akamai admins refuse to accept this type of report. If this is the case, why have a special "abuse-spamcop" account at all? WEIRD! I have a nasty feeling that I'm going to be getting a lot of spams like this, today, because it's quite unusual for me (a) to receive "paired" spams, and (b) to receive more than one spam pointing to the same host on the same day. (What I mean is that I usually get one copy per day of any given spam type). And the last time I received multiple copies of the same spam was a run of almost 500 on the same day, sent to one of my Gmail accounts about 5 years ago, just before that huge server takedown in wnich Microsoft and a few other major industry players were involved. Thoughts, anyone? Link to comment Share on other sites More sharing options...
Lking Posted December 26, 2017 Share Posted December 26, 2017 Looking at example #1 & #3 Quote Tracking message source: 198.2.181.90: Routing details for 198.2.181.90[refresh/show] Cached whois for 198.2.181.90 : abuse@mailchimp.com Using abuse net on abuse@mailchimp.com abuse net mailchimp.com = abuse@mailchimp.com Using best contacts abuse@mailchimp.com abuse@mailchimp.com bounces (99 sent : 99 bounces) <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< Using abuse#mailchimp.com@devnull.spamcop.net for statistical tracking. You would think for business reasons they would care. But they seem to bounce all (or just SpamCop) email sent to abuse{AT}.. As for the links in the body of #1 & #3 seems that akamai.com has set up a special address for spamcop spam reports. Quote Re: https://bestkeptphoto.us5.list-manage.com/subsc... (Administrator of network hosting website referenced in spam)abuse-spamcop@akamai.com #2 & #4 are the same except there are too many links in the body so only the devnul for the source is recorded Anyway that is what I see. Link to comment Share on other sites More sharing options...
lisati Posted December 26, 2017 Share Posted December 26, 2017 I've noticed that spam I've received that tracks back to a mailchimp account tends to get devnulled. When I see this, I usually manually forward the offending email(s) to abuse[at]mailchimp.com, which commonly results in an autoresponse, and occasionally a follow-up email. Link to comment Share on other sites More sharing options...
petzl Posted December 26, 2017 Share Posted December 26, 2017 27 minutes ago, lisati said: I've noticed that spam I've received that tracks back to a mailchimp account tends to get devnulled. When I see this, I usually manually forward the offending email(s) to abuse[at]mailchimp.com, which commonly results in an autoresponse, and occasionally a follow-up email. Maichimp seem to act on spam complaints manually sent to them. Legacy issue where mailchimp have told SpamCop not to send reports, but still make them via spamcop Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.