someone Posted January 18, 2019 Share Posted January 18, 2019 i have been continuously reporting spam and phishing links from http://lqqj.track-server-100.com http://zxbs.track-server-100.com here is the link for the various reports links https://www.spamcop.net/sc?track=http%3A%2F%2Flqqj.track-server-100.com%2Fcampaigns%2Flr9594dlkga4e%2Ftrack-url%2Ftv557e62bda93%2Fc994dd732a656544ace086cc8de9ad709c9d1831 https://www.spamcop.net/sc?track=http%3A%2F%2Fzxbs.track-server-100.com%2Fcampaigns%2Fxk735agfgwa93%2Ftrack-url%2Ftv557e62bda93%2F20924da1412e5de0de1f3c90ac36d655dfa5d299 https://www.spamcop.net/sc?track=http%3A%2F%2Flqqj.track-server-100.com%2Fcampaigns%2Foj39492240bb8%2Ftrack-url%2Ftv557e62bda93%2F97a662b435cbbca53958932d542e8b1ec082cf90 https://www.spamcop.net/sc?track=http%3A%2F%2Fzxbs.track-server-100.com%2Fcampaigns%2Fpx962wqj35aa2%2Ftrack-url%2Ftv557e62bda93%2F2099c845e4f92d7fee73d168bc0b7d9ff4c8883e https://www.spamcop.net/sc?track=http%3A%2F%2Flqqj.track-server-100.com%2Fcampaigns%2Ffc398cok54fc8%2Ftrack-url%2Ftv557e62bda93%2Fb547405f9394f888294c8f1aca68c4e68b151f08 https://www.spamcop.net/sc?track=http%3A%2F%2Flqqj.track-server-100.com%2Fcampaigns%2Fvm07160h285f4%2Ftrack-url%2Ftv557e62bda93%2Fe437c28b1f073694165a5c96a91d66091bbc2186 https://www.spamcop.net/sc?track=http%3A%2F%2Fzxbs.track-server-100.com%2Fcampaigns%2Fkx627b6tyn664%2Ftrack-url%2Ftv557e62bda93%2F88b9717d2f971ad9b62a0be8f3d38488bce7f4de https://www.spamcop.net/sc?track=http%3A%2F%2Fzxbs.track-server-100.com%2Fcampaigns%2Fkx627b6tyn664%2Ftrack-url%2Ftv557e62bda93%2F88b9717d2f971ad9b62a0be8f3d38488bce7f4de https://www.spamcop.net/sc?track=http%3A%2F%2Fzxbs.track-server-100.com%2Fcampaigns%2Fsj997rmb0w931%2Ftrack-url%2Ftv557e62bda93%2F1b7104ae94393bbafa7008e78114c6f10bfc91f6 https://www.spamcop.net/sc?track=http%3A%2F%2Fzxbs.track-server-100.com%2Fcampaigns%2Fln675xnvbqfa0%2Ftrack-url%2Ftv557e62bda93%2F863970628ba6925d12f7c6a4d9049777e748ed4a https://www.spamcop.net/sc?track=http%3A%2F%2Fzxbs.track-server-100.com%2Fcampaigns%2Fln675xnvbqfa0%2Ftrack-url%2Ftv557e62bda93%2F863970628ba6925d12f7c6a4d9049777e748ed4a despite multiple reports to cloudflare.com the attacks have not stopped. what should i do ? Link to comment Share on other sites More sharing options...
Lking Posted January 18, 2019 Share Posted January 18, 2019 Thank you for your continued effort. It would have been more informative if you would have provided Tracking URLs If you logout of SC and follow one of the your links I think you will see how little the rest of us see. Quote SpamCop v 5.0.0 © 2019 Cisco Systems, Inc. All rights reserved. Here is your TRACKING URL - it may be saved for future reference:https://www.spamcop.net/sc?id=z6513924428z0a655178f5fb2ad5c5d2deabe378c96ez That link is a TRACKING URL and we all can see where reports were sent. Link to comment Share on other sites More sharing options...
someone Posted January 18, 2019 Author Share Posted January 18, 2019 oh sorry i dint realize that here are the tracking urls https://www.spamcop.net/sc?id=z6514242512zbb39afc47fa1496aec0f32df7d8b22c8z https://www.spamcop.net/sc?id=z6512621211ze7cca07610bc49c58d639545f33f65cfz https://www.spamcop.net/sc?id=z6512850924ze0cb24d858ab5532b7d2bf9d125e9bf8z https://www.spamcop.net/sc?id=z6513181260ze9cf3fe0dc43aefe43b2f21c7adae48dz https://www.spamcop.net/sc?id=z6513183388zc90bfe7782cf8337830183706be602d9z https://www.spamcop.net/sc?id=z6513256480zf3aa41bab26c2f006d641b0971d86a88z https://www.spamcop.net/sc?id=z6513276135zc0609d58ff5612b3b248049d55e5fc5cz https://www.spamcop.net/sc?id=z6513471538z2fd61a8c2d74d0f18b539405fb56ed49z https://www.spamcop.net/sc?id=z6513732160z976758cb4ed45cb81df94513b61288d9z https://www.spamcop.net/sc?id=z6513879523z824837b0a3d8cb3c08b4587b628850c0z https://www.spamcop.net/sc?id=z6513999974z43d55bbcbca03416c5ee78fd81f48ef4z https://www.spamcop.net/sc?id=z6514159910z5f80a7cb908a800c9fa8ac4084abd63ez https://www.spamcop.net/sc?id=z6512850924ze0cb24d858ab5532b7d2bf9d125e9bf8z Link to comment Share on other sites More sharing options...
petzl Posted January 18, 2019 Share Posted January 18, 2019 4 hours ago, someone said: https://www.spamcop.net/sc?id=z6512850924ze0cb24d858ab5532b7d2bf9d125e9bf8z Had a look at this one only; SpamCop abuse address cache needed refreshing (works now) A good Whois for IPv6 addresses is https://dnslytics.com/whois-lookup Says it's from India also send abuse to INCIDENT [AT] cert-in.org.in pradeep.elcom[AT]gmail.com bounces/bogus Link to comment Share on other sites More sharing options...
someone Posted January 20, 2019 Author Share Posted January 20, 2019 https://www.spamcop.net/sc?id=z6514550646zfb61989c5a467e57a1a480201f8175ccz https://www.spamcop.net/sc?id=z6514552650z43623c4335e6dfcba50641817fe7fce8z still getting a lot of spam from the same source Link to comment Share on other sites More sharing options...
someone Posted January 20, 2019 Author Share Posted January 20, 2019 reported to INCIDENT [AT] cert-in.org.in also Link to comment Share on other sites More sharing options...
petzl Posted January 20, 2019 Share Posted January 20, 2019 1 hour ago, someone said: reported to INCIDENT [AT] cert-in.org.in also Don't think so? At least not via SpamCop Link to comment Share on other sites More sharing options...
someone Posted January 21, 2019 Author Share Posted January 21, 2019 a reply to each of these reports from abuse@cloudflare.com Thank you for your report. To expedite processing of your abuse report, please submit your abuse report through Cloudflare's abuse reporting web form at: https://www.cloudflare.com/abuse/ Cloudflare offers network service solutions including pass-through security services, a content distribution network (CDN) and registrar services. Due to the pass-through nature of our services, our IP addresses appear in WHOIS and DNS records for websites using Cloudflare. Cloudflare is not a website hosting provider, and we cannot remove material from the Internet that is hosted by others. and when i have attempted to report this via the above link the report is not accepted as can be seen from the attachment below. any more suggestions ? i already reported this spam emails to <abuse@cloudflare.com>,abuse@google.com,phishing@godaddy.com,contact@stopbadware.org,incident@cert-in.org.in Link to comment Share on other sites More sharing options...
RobiBue Posted January 21, 2019 Share Posted January 21, 2019 I wouldn't bother with the links in the spam body. Oftentimes they are just sites that spammers try to get in trouble. I know, in this case they are not, or most probably not, but many times, when they are connected to the spammer themselves, they contain a tracking link which links you (or better, your address) to the received spam, and every time the link gets a hit, it means for the spammer: a) they get paid b) they can send one or more spams to that email address The less (or zero) activity the spammer gets on the link, the more likely your address will get dropped from his list. And as you have already noticed, cloudflare doesn't care what or who they are hosting as long as they get paid so again, my suggestion here is either: a) don't report these kind of links or b) don't even bother reporting this type of spam I know, the latter sounds counter intuitive, but taking into consideration that spamcop checks the link, that means that the spammer gets their activity and you'll get another swarm of spam delivered... Of course, you are welcome to do some manual work and edit those links by removing the tracking path completely (with the notice for the abuse desk that the link has been modified to protect yourself) here is a boilerplate I place in the spams I receive for that purpose: Comments: The recipient of the email wishes to stay anonymous and therefore has munged his name and/or address for privacy reasons to strings like "x-x-x" or "x". Please respect his privacy. I was hoping SC version 5 would have the full links reduced to host/domain only and not the full path... pity Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.