Jump to content
Sign in to follow this  
5280 Guy

Constant reporting problems

Recommended Posts

I use Gmail and copy the headers when I submit a report.    This is spam that I keep getting from Jim Cramer.  It doesn't seem like reporting is working.  I have stripped out the regular part of the response and have only included the errors.  Any suggestions?

Thanks.


Routing details for 10.157.33.183
I refuse to bother abuse@iana.org.

Using abuse#iana.org@devnull.spamcop.net for statistical tracking.
Using last resort contacts abuse#iana.org@devnull.spamcop.net
Chain error mx.google.com not equal to last sender received line discarded
Tracking message source: 2002:a9d:21b7:0:0:0:0:0:
Display data:
"whois 10.157.33.183@whois.arin.net" (Getting contact from whois.arin.net )
Found AbuseEmail in whois abuse@iana.org
10.0.0.0 - 10.255.255.255:abuse@iana.org
Routing details for 10.157.33.183
I refuse to bother abuse@iana.org.
Using abuse#iana.org@devnull.spamcop.net for statistical tracking.
Using last resort contacts abuse#iana.org@devnull.spamcop.net
Yum, this spam is fresh!
Message is 0 hours old
2002:a9d:21b7:0:0:0:0:0 not listed in cbl.abuseat.org
2002:a9d:21b7:0:0:0:0:0 not listed in dnsbl.sorbs.net
2002:a9d:21b7:0:0:0:0:0 not listed in accredit.habeas.com
2002:a9d:21b7:0:0:0:0:0 not listed in plus.bondedsender.org
2002:a9d:21b7:0:0:0:0:0 not listed in iadb.isipp.com
Finding links in message body
Parsing text part
error: couldn't parse head
Message body parser requires full, accurate copy of message
More information on this error..
no links found

Please make sure this email IS spam: 
From: Jim Cramer <offers@thestreet.com> (Here is your limited-time club invitation)
 ------=_Part_23590669_2119084344.1524930398294
 Content-Type: text/plain; charset=utf-8

View full message

 

Report Spam to:

Re: 2002:a9d:21b7:0:0:0:0:0 (Administrator of network where email originates)
 To: abuse#iana.org@devnull.spamcop.net (Notes)

Re: User Notification (Notes)
 To:  

Additional notes (optional - max 2000 characters):

  

ATTENTION: Report only those e-mail addresses and web sites that you think your spammer has used. Avoid checking any boxes left empty unless you know that your spammer has used the addresses or sites thus identified. Each false report that you submit means wasted time for a network administrator, so take care. The last thing SpamCop wants are network administrators so accustomed to false claims that they no longer take these spam reports seriously.

 

 

 

 

 

 


Comments for:abuse#iana.org@devnull.spamcop.net (2002:a9d:21b7:0:0:0:0:0) 
 
Return to report

Comments for:User Notification () 
 
Return to report

 

© 2018 Cisco Systems, Inc. All rights reserved. HTML4 / CSS2 Firefox recommended - Policies and Disclaimers

Share this post


Link to post
Share on other sites
14 minutes ago, 5280 Guy said:

Any suggestions?

I suggest that in the future you include the Tracking URL instead of copying part of the report.  That way we all could see the header, and other sources of any problem. I this case the Tracking URL is:

Quote

SpamCop v 4.9.0 © 2018 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:

https://www.spamcop.net/sc?id=z6461933973z4767a21d25b34cc44e73745c9fbc6e84z

 

26 minutes ago, 5280 Guy said:

It doesn't seem like reporting is working.

Reporting spam to SpamCop does add to the SpamCop Block List (SCBL).  Unless your ISP uses the SCBL to filter incoming email you will not see a direct result of your submissions.  Gmail does not use the SCBL.   Another possibility is that the ISP of the source of the spam will stop providing internet access to the spammer. However, in this case for one of several reasons SpamCop will not send spam reports to the source ISP (" I refuse to bother abuse@iana.org. ")

I suggest you also read several other current threads regarding parsing of gmail headers.  Use the Search engine in the top right corner of the screen.  Search for gmail.

 

Share this post


Link to post
Share on other sites

Here is the whole deal.  This used to work, but now I get errors every time.SpamCop v 4.9.0 © 2018 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6461933973z4767a21d25b34cc44e73745c9fbc6e84z

Header/body/ parser results deleted by moderator.

Edited by Lking
edited to make thread readable.

Share this post


Link to post
Share on other sites

The advantage of including the Tracking URL in your post is that you DO NOT then need to clutter the thread with the long content of the reported spam. Anyone that wants to can click on the Tracking URL link and see the details.  

Share this post


Link to post
Share on other sites
9 hours ago, 5280 Guy said:

OK Gmail is getting "spoofed" headers you need to only copy from including this line

ARC-Authentication-Results: i=1; mx.google.com;

Then it will parse correctly  https://www.spamcop.net/sc?id=z6462122803z4edf40cea6065e3f021240fc039e11d2z

Look at headers of your non-Gmail spam you will see they don't contain these spoofed headers.
included spoofed headers in notes and send to abuse at gmail as well

Edited by petzl

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×