Jump to content

anyone8

Membera
  • Posts

    113
  • Joined

  • Last visited

Posts posted by anyone8

  1. 19 hours ago, gnarlymarley said:

    anyone8, as per Lking mentioned some of these domains are flaky.

    What I do is to keep the tracking URL and then go back to it a few minutes later to see if SpamCop would pick up the IP. Sometimes waiting and refreshing works for flaky domains.

    I had missed that he mentioned it being flaky. However, this one seems pretty consistent to me: Every time I've pulled up the tracking URL, SpamCop says it's not routable. However, every time I try to go to the site myself, it redirects me another page that complains about my java scri_pt being disabled. I tried both just before writing this, thinking by now any cached DNS probably expired. It's almost like they're tricking SpamCop somehow, but I don't know if that's possible in this scenario.

  2. 15 hours ago, petzl said:

    Suggest you get a browser app that blocks java maybe that is why my browser couldn't connect?
    Java can be dangerous and load malware/virus
    For Opera I use extension "java scri_pt Switch" with ON|OFF"
    One time you could select "notify before allowing Java"?
    SpamCop URL check would not have java either
     

    Yes I have it disabled and then enable it for sites where I'm willing to do so. For example, it's enabled for forum.spamcop.net, but if I go to some site I've never been to before, it would be disabled unless/until I change the option for that site. Of course I wouldn't do that for the one this thread is about, even though it told me to.

     

  3. Thanks petzl. Since it still loads here, and redirects me to a site that says "You need to enable java scri_pt to run this app." I guess maybe the DNS is cached somewhere in my home setup or ISP. That would be good if it's been taken down and just a matter of time for the DNS records to expire. Hopefully I'm not misunderstanding how this stuff works.

  4. 5 minutes ago, petzl said:

    just means that the cache was refreshed
    Tracking message source: 2603:10a6:20b:3ae:0:0:0:22:
    Routing details for 2603:10a6:20b:3ae:0:0:0:22
    [refresh/show] Cached whois for 2603:10a6:20b:3ae:0:0:0:22 : abuse@microsoft.com
    Using best contacts sewr@senpluspluseop.onmicrosoft.com

    Yeah it tracks the source fine, and a couple Facebook links I didn't think I should report. But there's one it doesn't:

    Tracking link: http://www.[removed].com/
    No recent reports, no history available
    Host www.[removed].com (checking ip) IP not found ; www.[removed].com discarded as fake.
    www.[removed].com is not a routeable IP address
    Cannot resolve http://www.[removed].com/

    I [removed] the domain here so the forum wouldn't possibly link to them, but the full URL is in the tracking, at least when I run it.

  5. I guess I don't quite understand, as (after reading your reply) both the tracking URL and simply feeding the questionable link to the parser give me the error I started the thread with ("not routable..."). Are we getting different results from the parser, like maybe I have a bad setting somewhere? Thanks!

  6. Getting the "not a routeable IP address" for a website, I tried loading it myself (probably not the best, I know) to see if had really been taken down. Somehow my browser can load it, but the SpamCop parser thinks it's not real.

    I thought I'd seen something like this on the forum, so I searched for the phrase quoted above. However, the two results the search found didn't seem to be about getting this error on a web link in a spam. I've seen this error before, so maybe it's been discussed and I'm just bad at searching.

    I haven't mentioned the website here because I don't want to send any traffic their way, but I'll provide the tracking URL. It's not the Facebook ones. I unchecked those because they don't even appear in the email. Hidden in the source somewhere I guess. It's the other link I think the spammer intended to be clicked on.

    Should you decide to load it, I recommend disabling java scri_pt in your browser, as the site that loaded complained about that, which I assume means it would have ran some scri_pt if I had it enabled. The tracking URL is https://www.spamcop.net/sc?id=z6890152416zed192f2331ec5aa17ec3e257614c9ae9z

    Looking for input on either this error on a link (as in is there anything to do or has spammer simply beat the system), or past discussion of this error on the forum. Thanks!

  7. 7 minutes ago, gnarlymarley said:

    I get that mailhosts forgery message if my ISP changes or I try to submit an email for an address not on my mailhosts. You might need to resend the mailhosts email setup without deleting the mailhosts entry to have the mailhost entry refreshed.

    Thanks for the suggestion. I checked all 3 in hopes of giving it the more complete picture or whatever that screen says, received all 3 test emails and all 3 "Test email processed succesfully." Unfortunately, submitting the spam still gets:

    Possible forgery. Supposed receiving system not associated with any of your mailhosts

    I don't think anything has changed, but here's the new tracking URL:

    https://www.spamcop.net/sc?id=z6888686487z76722979172b27303fd7f1106688ae57z

    In between my two posts today, I successfully processed some spam that came to my Hotmail account, so at least the problem seems to be specific to certain situations, such as the email I'm trying to report or maybe something with how Yahoo handles incoming mail. 

  8.  

    Got an error that mentioned mailhosts, so I removed the address that received the spam and added it again, being sure to select all the places SpamCop could possibly send a test email to. The mailhosts setup seemed to work fine, but still can't process the spam:

    Possible forgery. Supposed receiving system not associated with any of your mailhosts

    Here's the tracking URL if you want to see more: https://www.spamcop.net/sc?id=z6888681010zf48fe7c0004631638877aaba97d5eed2z

    Is there some problem with mailhosts, or have spammers figured out how to put spam into my Yahoo account in a way that keep SpamCop from working? Or is Yahoo doing something incorrect with the incoming mail? Thanks in advance.

    Edit: to clarify "setup seemed to work fine," I mean all 3 test emails were received and the SpamCop mailhosts thing said it processed them successfully.

  9. Quote

    News: (Last Modified: 4/25/2023, 4:05:15 PM -0700)

    System Outages

    Some users are experiencing issues with connecting to SpamCop and receiving
    various errors when trying to parse and report spam. We are aware of the issues,
    caused by internal infrastructure problems. Our Network Operations teams are
    working hard to get this resolved.
    Thank you for your patience.

    Went to report a spam and saw the above. Thought I'd put it here in case spamcop itself isn't loading for anyone. Good to know they're working on it.

  10. 8 hours ago, anyone8 said:

    First I got "500 Internal Server Error" then I clicked on the "spamcop.net" link at the top of the page and got the "directive" error.

    Looks like they fixed the errors I mentioned earlier. Then I got the "Can't continue parsing. DNS-server-error; Try to refresh this page later." It seems better this afternoon, so hopefully they fixed that too. I guess time will tell.

  11. 2 hours ago, Hanco said:

    I started seeing the DNS error yesterday. Like others, I found refresh resolved usually after one or two tries. It did seem to get worse with time though.

    It has been bad for me too through March/April with higher levels of prizes/surveys and recently “love interest” - and the fake invoices (refund scam GeekSquad etc.) plus there’s a Fake Facebook Signin Alert which comes multiple times per day.

     

    Is it a coincidence that the forum is under a spam attack with new members registered posting airline tickets and intuit quick books nonsensically.

    Interesting. I'd been seeing the error saying it can't continue parsing because of a DNS error occasionally for a while, but it seemed like it was happening with every spam I reported yesterday. Today, it seems to be fine.

    As for the increase in spam, I didn't think to mention a time-frame, but it seems like just the last few days or week for me. More and more of them don't display a message body (Hotmail accessed via web browser) but somehow SpamCop finds links that it would report if I didn't uncheck them (call me paranoid, but I assume if the email appears blank but SpamCop finds a link, the spammer might be trying to cause a false report).

    It's hard to say on the forum spam. I briefly tried to run a forum for Linux users, and only got spam posts. So it seems spammers find and spam forums even if no one else finds them. On the other hand, I long ago (could have been way back when SpamCop had newsgroups accessed via a newsreader) read that some of this stuff comes because SpamCop has an impact on spammers.

  12. On 9/13/2021 at 3:19 PM, AmyLynn said:

    I've been getting what emanmb has been getting for a month now. I have to delete the report and file again other wise it tells me it's old and doesn't file the report. Happens about 5 times throughout the whole entire day. It's super annoying having to remove the "unreported spam" to send it again. I'm glad to know it's not just me though!

    I'm glad you posted this. Since the "report now" next to the unreported spam didn't let me send anything (it seemed to act like the  reports had already been sent) and my report history showed reports had been sent, I figured the error was temporary and considered the spam reported. However, your post gave me the idea to set the option to cc me on all reports (not sure all accounts have this option). Of the reports I attempted to send today, the one that threw an error several hours ago is the only one for which the cc didn't show up. I think this issue is the first one I've seen (been using Spamcop over 20 years) where it was actually necessary to submit a spam again to get the reports to send. Then again, I could be forgetting!

    This gets even stranger: For the regular spam report, the error is 452, but for my cc the error is 550. (all or part of some addresses replaced with "..." just like i did in my previous post)

    Can't send report: smtpEnvelope (...@bounces.spamcop.net, report_spam@hotmail.com): smtpFrom: mail From ...@bounces.spamcop.net: error (452 #4.3.1 temporary system error (12) )
    Can't send report: smtpEnvelope (...@bounces.spamcop.net, ...): smtpFrom: mail From ...@bounces.spamcop.net: error (550 No expected reply from SMTP)

    But wait, there's more: For two I reported about 1 minute apart, this is how the emails showed up:

    image.png.a9fca7d6c050376f83e28aee62c0ba95.png

    I wonder if some of SpamCop's servers' clocks are out of sync. I don't know if that would be enough to cause the errors, but here's hoping that something one of us says or does will result in an admin fixing this!

  13. In case it helps anyone troubleshoot, I got this for the first time this morning.

    Can't send report: smtpEnvelope (...@bounces.spamcop.net, report_spam@hotmail.com): smtpFrom: mail From ...@bounces.spamcop.net: error (452 #4.3.1 temporary system error (12) )
    Can't send report: smtpEnvelope (...@bounces.spamcop.net, abuse@hostus.us): smtpFrom: mail From ...@bounces.spamcop.net: error (550 No expected reply from SMTP)
    Can't send report: smtpEnvelope (...@bounces.spamcop.net, postmaster@hostus.us): smtpFrom: mail From ...@bounces.spamcop.net: error (550 No expected reply from SMTP)

    Note: I replaced part of the @bounces.spamcop.net address with "..." on the chance that a spammer would see the address here and use it for some nefarious purpose. Hopefully, that part of the error message wasn't critical to anyone that may be looking into these errors.

  14. Thanks for pointing me in the right direction. I wasn't sure whether to look at the message, or maybe there was an issue with my computer or SpamCop's parser.

    Although there are no double periods in the whole email, that got me to looking at the message. I tired removing things that looked strange. The one that seemed to be the problem was a hostname that began with "xHRZDMoSZQtTgIAffdczjrWWwatOgPNzFmircaawrvITFdBVQxutRnEWUepKPlOSwGJOqJfGFYyixSZjQnQWiQxqdPmvWeFgxrYmbRuJHWQgniKgFaMzPNMarqJOpuDIqmBFzSYld" as it started working when I changed that portion to "removed."

    If I recall correctly (it's been years), we shouldn't report things with material changes, so I cancelled. But at least we know what was tripping up the parser.

  15. I've been using SpamCop for years, but either something has gone wrong or the last spam I received is stalling it somehow. My first thought was reload, but it stopped at the exact same point. So I went back to the reporting box and tried pasting in the spam again, thinking maybe it would go through this time. Neither of my ideas made any difference. It's been so long since I've ran into any issue like this, I'm not sure how to troubleshoot beyond this, so anything I haven't already tried would be appreciated.

    It always stops at the same point:

    Quote

    Parsing header:
    host 2a01:111:e400:fc11:0:0:0:42 (getting name) no name
    host 2603:10b6:300:c2:0:0:0:27 (getting name) no name

    Here's one of the tracking URLs: https://www.spamcop.net/sc?id=z6702233527zbcd30846d6b3149bd78570af38518361z

    Thanks!

  16. On 8/3/2016 at 5:43 AM, fragile said:

    Well seemingly big news from Yahoo(aka Verizon) Mail I have noticed. When viewing an email in Yahoo Mail, under the "More" drop down menu, instead of their being a View Full Header option, it has now changed to View Raw Message which opens a new window with the full message in text only. This makes it very easy to copy and paste into Spamcop, so no more forwarding thank god.

    Thanks for posting this. Last time I needed it, it was still the "view raw message" option, and I hadn't noticed the change yet. I had resorted to using the "Allow apps that use less secure sign in" to allow me to retrieve spam from Yahoo using a POP client, so I'm glad to be able to change that setting back and get the message source an easier way.

  17. Due to Yahoo's problems, and they now allow IMAP for all accounts, I have started using mailwasher again. The free version works fine for me as I now only use it to report spam and it makes the process pretty automated.

    Thanks for this information. I didn't realize they allowed IMAP. Now I can get the message headers for the occasional spam without POPing all my Yahoo mail. :)

  18. It sounds like you've got the idea of not causing a mail loop. In other words, if you're forwarding your_address[at]spamcop.net to your_address[at]example.com, then not forwarding your_address[at]example.com to your_address[at]spamcop.net or the mail would just be going around in circles.

    However, I thought we would be able to forward any other address to our spamcop address and receive the spam-free version at our spamcop forwarding address (such as your_address[at]example.com in the previous paragraph). It sounds like you have it set up right, so I have to wonder if I'm wrong, or if the spam filter is really really aggressive.

    I know the spam filter is pretty aggressive, as one of my addresses can't even send a test message through. Just a reminder, Cisco is running a different spam filter than the spam filters we enjoyed when our email was handled by CES.

    Hope this helps!

  19. I thought I had posted this a couple weeks ago, but just in case it helps: It is possible to retrieve yahoo mail using POP. Assuming your POP client lets you, you can then view source or forward as attachment to your spam submittal address.

    If I recall correctly, you have to set an option for spam to be included in POP. Either way, it will retrieve your inbox too.

    Just as a friendly reminder, some (most? all?) POP clients default to delete mail from server when retrieving. That may not be what you want in this case.

    Hope this helps. Let me know if anyone needs more details.

  20. as far as i can tell, cisco has abandoned us...

    i have been a spamcop user for more than 10 years, and i find this incredibly irresponsible. :angry:

    I don't think they've abandoned us. Farelf just posted a few hours ago, "Certainly is a terrible muddle but we are told SC is aware that there are forwarding problems and that they are working on them"

    I agree it would be frustrating for those who depend on spamcop email. I had assumed a big company like Cisco would have no trouble handling mail forwarding for however many email users were on SpamCop/CESmail.

×
×
  • Create New...