Jump to content
Sign in to follow this  
Kewl

Reporting to Spammer?

Recommended Posts

We can not tell without a Tracking URL.  Then we would know what reports the parser sent.

In general the spamvertised links in submitted email are the lowest priority, but given resources, yes reports would be sent.

Share this post


Link to post
Share on other sites

It seems to me that superlative.com has a large IP address space (https://whois.arin.net/rest/net/NET-74-118-120-0-1/pft?s=74.118.120.0.) That shows a /22 range with 1024 addresses (well, minus 2)

they could be the spammer host (or not).

there doesn't seem to be an upstream they are subletting from... at least I couldn't find one...

This link (https://ipinfo.io/74.118.123.4) tells me a bit of a different story, but the data could be old...

Share this post


Link to post
Share on other sites

Thank you for the Tracking URL.  To answer your original question

6 hours ago, Kewl said:

Are the reports about this spamvertised website going to the spammer?

Yes.  If you look at the bottom of the parser report, spam reports are sent to jstrader{AT}superlative{DOT}com " (Administrator of network hosting website referenced in spam) "

Share this post


Link to post
Share on other sites

Yeah, that would be them themselves. IOW you'd be sending the report straight to the spammer....

unfortunately, they get their addresses straight from IANA/ARIN

At least that's what I see, unless someone has more insight...

Share this post


Link to post
Share on other sites

Thanks for the feedback folks.  

I will just continue to uncheck the reports about the spamvertised website.

Share this post


Link to post
Share on other sites
On 7/6/2018 at 12:30 PM, RobiBue said:

unfortunately, they get their addresses straight from IANA/ARIN

Yes or they have "legacy" entries from those manually put in to override ARIN.
These should be done with an expiry date many are defunct. RIPE is more accurate, however years ago they denied SpamCop look-ups 
I use a windows program  http://www.nirsoft.net/utils/ipnetinfo.html  for domains http://www.gena01.com/win32whois/

for text web-browser  http://www.netdemon.net/ it does more like port scan can no longer register as programer retired.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×