Jump to content
someone

continiuos spam/phishing links from track-server-100.com

Recommended Posts

i have been continuously reporting spam and phishing links from 

http://lqqj.track-server-100.com

http://zxbs.track-server-100.com

 

 

here is the link for the various reports links

https://www.spamcop.net/sc?track=http%3A%2F%2Flqqj.track-server-100.com%2Fcampaigns%2Flr9594dlkga4e%2Ftrack-url%2Ftv557e62bda93%2Fc994dd732a656544ace086cc8de9ad709c9d1831

https://www.spamcop.net/sc?track=http%3A%2F%2Fzxbs.track-server-100.com%2Fcampaigns%2Fxk735agfgwa93%2Ftrack-url%2Ftv557e62bda93%2F20924da1412e5de0de1f3c90ac36d655dfa5d299

https://www.spamcop.net/sc?track=http%3A%2F%2Flqqj.track-server-100.com%2Fcampaigns%2Foj39492240bb8%2Ftrack-url%2Ftv557e62bda93%2F97a662b435cbbca53958932d542e8b1ec082cf90

https://www.spamcop.net/sc?track=http%3A%2F%2Fzxbs.track-server-100.com%2Fcampaigns%2Fpx962wqj35aa2%2Ftrack-url%2Ftv557e62bda93%2F2099c845e4f92d7fee73d168bc0b7d9ff4c8883e

https://www.spamcop.net/sc?track=http%3A%2F%2Flqqj.track-server-100.com%2Fcampaigns%2Ffc398cok54fc8%2Ftrack-url%2Ftv557e62bda93%2Fb547405f9394f888294c8f1aca68c4e68b151f08

https://www.spamcop.net/sc?track=http%3A%2F%2Flqqj.track-server-100.com%2Fcampaigns%2Fvm07160h285f4%2Ftrack-url%2Ftv557e62bda93%2Fe437c28b1f073694165a5c96a91d66091bbc2186

https://www.spamcop.net/sc?track=http%3A%2F%2Fzxbs.track-server-100.com%2Fcampaigns%2Fkx627b6tyn664%2Ftrack-url%2Ftv557e62bda93%2F88b9717d2f971ad9b62a0be8f3d38488bce7f4de

https://www.spamcop.net/sc?track=http%3A%2F%2Fzxbs.track-server-100.com%2Fcampaigns%2Fkx627b6tyn664%2Ftrack-url%2Ftv557e62bda93%2F88b9717d2f971ad9b62a0be8f3d38488bce7f4de

https://www.spamcop.net/sc?track=http%3A%2F%2Fzxbs.track-server-100.com%2Fcampaigns%2Fsj997rmb0w931%2Ftrack-url%2Ftv557e62bda93%2F1b7104ae94393bbafa7008e78114c6f10bfc91f6

https://www.spamcop.net/sc?track=http%3A%2F%2Fzxbs.track-server-100.com%2Fcampaigns%2Fln675xnvbqfa0%2Ftrack-url%2Ftv557e62bda93%2F863970628ba6925d12f7c6a4d9049777e748ed4a

https://www.spamcop.net/sc?track=http%3A%2F%2Fzxbs.track-server-100.com%2Fcampaigns%2Fln675xnvbqfa0%2Ftrack-url%2Ftv557e62bda93%2F863970628ba6925d12f7c6a4d9049777e748ed4a

 

 

despite multiple reports to cloudflare.com the attacks have not stopped. what should i do ?

Share this post


Link to post
Share on other sites

Thank you for your continued effort.  It would have been more informative if you would have provided Tracking URLs

If you logout of SC and follow one of the your links I think you will see how little the rest of us see.

Quote

SpamCop v 5.0.0 © 2019 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6513924428z0a655178f5fb2ad5c5d2deabe378c96ez

That link is a TRACKING URL  and we all can see where reports were sent.

Share this post


Link to post
Share on other sites
4 hours ago, someone said:

Had a look at this one only; SpamCop abuse address cache needed refreshing (works now)

A good Whois for IPv6 addresses is 

https://dnslytics.com/whois-lookup

Says it's from India  also send abuse to INCIDENT [AT] cert-in.org.in 

pradeep.elcom[AT]gmail.com  bounces/bogus
 

 

 

Share this post


Link to post
Share on other sites
1 hour ago, someone said:

reported to INCIDENT [AT] cert-in.org.in   also

Don't think so? At least not via SpamCop

Edited by petzl

Share this post


Link to post
Share on other sites

a reply to each of these reports from  abuse@cloudflare.com

Thank you for your report.

To expedite processing of your abuse report, please submit your abuse report through Cloudflare's abuse reporting web form at:

https://www.cloudflare.com/abuse/

Cloudflare offers network service solutions including pass-through security services, a content distribution network (CDN) and registrar services. Due to the pass-through nature of our services, our IP addresses appear in WHOIS and DNS records for websites using Cloudflare. Cloudflare is not a website hosting provider, and we cannot remove material from the Internet that is hosted by others.

 

 

and when i have attempted to report this via the above link the report is not accepted as can be seen from the attachment below.

 

any more suggestions ? i already reported this spam emails to

 

<abuse@cloudflare.com>,
abuse@google.com,
phishing@godaddy.com,
contact@stopbadware.org,
incident@cert-in.org.i
n

 

nswq.track-server-100.jpg

Share this post


Link to post
Share on other sites

I wouldn't bother with the links in the spam body. Oftentimes they are just sites that spammers try to get in trouble.

I know, in this case they are not, or most probably not, but many times, when they are connected to the spammer themselves, they contain a tracking link which links you (or better, your address) to the received spam, and every time the link gets a hit, it means for the spammer:

a) they get paid
b) they can send one or more spams to that email address

The less (or zero) activity the spammer gets on the link, the more likely your address will get dropped from his list.

And as you have already noticed, cloudflare doesn't care what or who they are hosting as long as they get paid

so again, my suggestion here is either:
a) don't report these kind of links
   or
b) don't even bother reporting this type of spam

I know, the latter sounds counter intuitive, but taking into consideration that spamcop checks the link, that means that the spammer gets their activity and you'll get another swarm of spam delivered...

Of course, you are welcome to do some manual work and edit those links by removing the tracking path completely (with the notice for the abuse desk that the link has been modified to protect yourself)

here is a boilerplate I place in the spams I receive for that purpose:

Comments: The recipient of the email wishes to stay anonymous and therefore
       has munged his name and/or address for privacy reasons to strings like "x-x-x" or "x".
       Please respect his privacy. 

I was hoping SC version 5 would have the full links reduced to host/domain only and not the full path... pity
 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×