Jump to content
Sign in to follow this  
kuso.cc

ShortUrl Websites are SPAM??

Recommended Posts

Hello to everybody, I'm the KUSO.CC webmaster.

I have a problem want to figure out.

So far I had receive two messages about spam warning from SpamCop.

KUSO.CC and Tinyurl are both ShortURL Websites

and according to the old article, I find the same problem in TinyURL.

That the URL in spam mail had use the shorturl redirect to spammer’s actual link,

and KUSO.CC didn't send any spam Mail.

We don't put any page about spam on our Server.

But the warning mail told me it is blocked by a type of Spamvertised Web Sites.

When I got the mail, my server IP was denied by the ISP.

In my option, there are no reasons to block redirection site, because KUSO.CC's link is not an actual link of the spam.

Does any one can help me :(

Share this post


Link to post
Share on other sites
That the URL in spam mail had use the shorturl redirect to spammer’s actual link,

and KUSO.CC didn't send any spam Mail.

31992[/snapback]

I think you're receiving notification that a spammer has included one of your URLs in their Email spew.

The reason these reports are generated is to give you the opportunity to remove the URL from your system thus reducing the value of them to spammers. Where these URLs are misued yoy could, I suppose, also take legal action if you wished. Hence the reports are provided as a courtesy.

You can choose not to receive these reports if you wish. Simply follow the links provided in the report you receive.

Either way, reports of URLs included in Emails do not cause a listing in the SpamCop BL.

Andrew

Share this post


Link to post
Share on other sites
But the warning mail told me it is blocked by a type of Spamvertised Web Sites.

When I got the mail, my server IP was denied by the ISP.

31992[/snapback]

Nothing you have said seems to lead back to a SpamCopBL listing. You need to offer some actual facts on your question. What warning? What ISP? I'm not sure I even understand your "when I got the e-mail, my server was denied" ....??? If you got the e-mail, what server was involved?

Share this post


Link to post
Share on other sites
Nothing you have said seems to lead back to a SpamCopBL listing.  You need to offer some actual facts on your question.  What warning?  What ISP?  I'm not sure I even understand your "when I got the e-mail, my server was denied" ....??? If you got the e-mail, what server was involved?

31998[/snapback]

Thanks to your reply.

This content is your server send to my ISP and my ISP forward to me.

-------------------------------------------------------------------------------------

[ SpamCop V1.487 ]

This message is brief for your comfort. Please use links below for details.

Spamvertised web site: http://kuso.cc/5Ed

http://www.spamcop.net/w3m?i=z1493675978z7...ec4a66eb138fb7z

http://kuso.cc/5Ed is 203.64.53.24; Mon, 22 Aug 2005 20:22:47 GMT

[ Offending message ]

Return-Path: <rsllxjcfp[at]ms21.hinet.net>

Received: from muviserver (host146-227-149-62.serverdedicati.aruba.it [62.149.227.146])

by icarus.com (8.11.6/8.11.6) with ESMTP id j7MI2Zl17212

for <x>; Mon, 22 Aug 2005 11:02:35 -0700

Received: from 62.149.227.146 ([219.81.195.231]) by muviserver with Microsoft SMTPSVC(6.0.3790.211);

Mon, 22 Aug 2005 19:55:34 +0200

Received: from 0.148.129.125 by ; Mon, 22 Aug 2005 13:05:12 -0500

Message-ID: <PGDX_________________KKWE[at]yahoo.com>

From: "x" <rsllxjcfp[at]ms21.hinet.net>

Reply-To: "x" <rsllxjcfp[at]ms21.hinet.net>

To: x, x, x, x,

x, x

-------------------------------------------------------------------------------------

and now the account "5Ed" I had delete when I got the mail.

When I got this mail my ISP also denied my IP.

The Server IP 203.64.53.24 was involved.

Besides, I had reassign the kuso.cc IP to 203.64.53.16 to keep the service working.

Edited by kuso.cc

Share this post


Link to post
Share on other sites
When I got this mail my ISP also denied my IP.

31999[/snapback]

Then you need to discuss this with your ISP and make sure they read the message they forwarded to you and what it means. It may be that your contract states that if any links show up in spam, then they can shut you down.

Spamvertised web site: http://kuso.cc/5Ed

The website indicated was included in a message reported as spam to spamcop.

Click on this link to reply to the report as follows.

Please select one..

URL used without permission (Stop sending reports).

This website has been disabled.

This issue is under investigation.

I am not the right person to contact about this.

This message is not spam.

Add a note to this issue.

Share this post


Link to post
Share on other sites
Spamvertised web site: http://kuso.cc/5Ed

The website indicated was included in a message reported as spam to spamcop

But the URL http://kuso.cc/5Ed is not the actual link of the SPAMMER'S WebSite,

and according to SpamCop System's trace page => http://www.spamcop.net/sc?id=z798795606z42...88df30883bd98bz

Spamcop system distinguish http://kuso.cc/5Ed is the Administrator of network hosting website referenced in spam mail body.

This is a very strange problem, the actual SPAMMER HomePage is not put in http://kuso.cc/ server, http://kuso.cc/ just provides a redirect service to another URL.

Does Spamcop system can cache the actual SPAMMER hosting website, not the mask URL by any Redirection Site.

Share this post


Link to post
Share on other sites
But the URL http://kuso.cc/5Ed is not the actual link of the SPAMMER'S WebSite,

32005[/snapback]

No, but it IS the link in the spam message. That is ALL that report is telling you and your ISP....Your link was seen in a spam message.

Spamcop system distinguish http://kuso.cc/5Ed is the Administrator of network hosting website referenced in spam mail body.

32005[/snapback]

It IS the link in the spam message. If one were to click on the link in the message, they would be sent to your site first then redirected elsewhere.

This is a very strange problem, the actual SPAMMER HomePage is not put in http://kuso.cc/ server, http://kuso.cc/ just provide a redirect service to another URL.

Does Spamcop system can cache the actual SPAMMER hosting website, not the mask URL by any Redirection Site.

32005[/snapback]

As a provider of that service, YOU have a responsibility to the internet community to stop the use of your service for spamming, which is why you receive the reports.

Spamcop does NOT try and follow any link to determine the "real source". There have been New Feature Requests for this. The general thinking is that the time is too great to keep following redirects. Again, YOUR LINK was the one in the message. As mentioned in my reply to your other post, if you could provide a quick lookup interface for spamcop to determine the redirect location, they could use that for additional reporting or even better to eliminate your reports.

As stated in that thread, I would contact the deputies to work with them on a solution. If you could easily and reliably provide the information for the redirect, they woud use that information, like they do for the non hidden redirects like Yahoo.

Share this post


Link to post
Share on other sites
No, but it IS the link in the spam message.  That is ALL that report is telling you and your ISP....Your link was seen in a spam message.

It IS the link in the spam message.  If one were to click on the link in the message, they would be sent to your site first then redirected elsewhere.

As a provider of that service, YOU have a responsibility to the internet community to stop the use of your service for spamming, which is why you receive the reports.

Spamcop does NOT try and follow any link to determine the "real source".  There have been New Feature Requests for this.  The general thinking is that the time is too great to keep following redirects.  Again, YOUR LINK was the one in the message.  As mentioned in my reply to your other post, if you could provide a quick lookup interface for spamcop to determine the redirect location, they could use that for additional reporting or even better to eliminate your reports.

As stated in that thread, I would contact the deputies to work with them on a solution.  If you could easily and reliably provide the information for the redirect, they woud use that information, like they do for the non hidden redirects like Yahoo.

32007[/snapback]

In few minutes ago, I had wrote a LOOKUP Interface for spamcop.

The Query Interface page is http://www.kuso.cc/spamcop.php

For example, typing http://kuso.cc/230 in the input text,

and you will see the real source from screen.

OR your can use http://www.kuso.cc/spamcop.php?url=http://kuso.cc/230

to get the real source URL.

I hope it can help your system to distinguish the actuall URL of spam.

Share this post


Link to post
Share on other sites

Thank you for that work, however, did you contact the deputies as mentioned to see if the coders would be interested in this interface? To discuss how to setup this interface?

I (or just about anyone you contact in this interface) is simply a user of spamcop's service and has no access to the coding.

A web page like this is fine, but spamcop is a program and not likely to use a web page lookup.

Share this post


Link to post
Share on other sites
Thank you for that work, however, did you contact the deputies as mentioned to see if the coders would be interested in this interface?  To discuss how to setup this interface? 

I (or just about anyone you contact in this interface) is simply a user of spamcop's service and has no access to the coding.

32016[/snapback]

Can you tell me how to contact with the Spamcop's system develop ?

Or you can help me to tell spamcop's system develop about this information.

In many redirection sites they are using the same way to make a redirect,

that is Browser Location Header.

When Redirection Site got a request from client, server will send a location header to let the URL make a change into Original URL.

I thought the spamcop system can detect the page's header, not only reverse the domain to IP, but also detect the header which was sent by server and got the real source page.

Share this post


Link to post
Share on other sites

If you do not delete the redirect urls when you find out about them then you are just assisting the spammers.

Redirect sites are not innocent.

Share this post


Link to post
Share on other sites
If you do not delete the redirect urls when you find out about them then you are just assisting the spammers.

Redirect sites are not innocent.

32019[/snapback]

When I got the mail I delete the account immediatly.

It is hard to for redirect site even TinyURL or SnipURL

to detect the page is from a spammer homepage or not.

Does any best method to sovle this problem ??

or I only cannot to do anything about this problem, and my IP usually denied by my ISP if someone use the redirect site service in spam (because my ISP got the spamcop's mail).

I'm very sad. :(

Share this post


Link to post
Share on other sites
Can you tell me how to contact with the Spamcop's system develop ?

Or you can help me to tell spamcop's system develop about this information.

In many redirection sites they are using the same way to make a redirect,

that is Browser Location Header.

When Redirection Site got a request from client, server will send a location header to let the URL make a change into Original URL.

I thought the spamcop system can detect the page's header, not only reverse the domain to IP, but also detect the header which was sent by server and got the real source page.

32018[/snapback]

1 and 2. Contact deputies<at>spamcop.net to get "closest" to the developer.

3. And many redirection sites have the same issues you do. Our point is that your SHOULD be contacted if your link is shown in a spam.

4. Spamcop only deals with the headers of emails. It does not attempt to follow any links, it is NOT a browser. To determine source, it primarily does whois/DNS lookups on the domain. It never contacts the server directly (which could easily be programmed to drop spamcops connections or try to break the parser).

Share this post


Link to post
Share on other sites
When I got the mail I delete the account immediatly.

Great :-)

It is hard to for redirect site even TinyURL or SnipURL

to detect the page is from a spammer homepage or not.

I agree. It's hard for Spamcop too!

Does any best method to sovle this problem ??

or I only cannot to do anything about this problem, and my IP usually denied by my ISP if someone use the redirect site service in spam (because my ISP got the spamcop's mail).

I agree it's tough!

I'm very sad. :(

32021[/snapback]

So are all the people that get spam :(

Share this post


Link to post
Share on other sites
It is hard to for redirect site even TinyURL or SnipURL

to detect the page is from a spammer homepage or not.

Does any best method to sovle this problem ??

or I only cannot to do anything about this problem, and my IP usually denied by my ISP if someone use the redirect site service in spam (because my ISP got the spamcop's mail).

I'm very sad. :(

32021[/snapback]

It is very easy, when you receive a report, you investigate and see it is spam, you delete the link. You don't even ned to go to the link in most cases.... your agreement with the spammer should allow you to delete links used in reported spam.

Your IP being denied by your ISP is a misunderstanding about what was received. Your beef is with them. You need to educate them that anytime anyone uses your service to spam, they will get a report. You need to explain specifically what you will do with that information and get them to work WITH you to slow the spamers.

Because your link is shown in the spam, you absolutely should be receiveing spamvertized URL reports so you can handle them. Your ISP should be made to understand your business and they should be reviewing the report to determine that it is NOT you spamming but others using your service to spam. They should then forward the report to you to handle (or better yet, you should work to get the reports directly).

Share this post


Link to post
Share on other sites

You should create a webpage that says "This was a redirect for a sick criminal spammer who liked to abuse other peoples systems" or something on that order.

When you get a complaint you should change the redirect in your database from the spamsite to that page and spoil the large part of thier spam run.

You should also post on that page who the spammer was (not the link just the whois info without the url"

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×