Jump to content

Hanco

Members
  • Content Count

    74
  • Joined

  • Last visited

Posts posted by Hanco


  1. hwmanymore.com 
    esayant.info

    both of these I got notified suspended 10/30 after a couple of complaints and seeing them blacklisted.

    Do you see this in your abuse emails? (Notice  “we f u” / “we f you” in the path/folder!!)

    storsge.googleapis.com seems and this particular folder seems a popular proces for this idiot. And Google (network-abuse@google.com) does nothing despite report volume sent.

    https://storage.googleapis.com/eiwufhiwehifiwefiewfyuwefuwefuywefuwefyuwefu/reverse_mr.html

    This I found interesting for a few minutes at https://storage.googleapis.com/eiwufhiwehifiwefiewfyuwefuwefuywefuwefyuwefu/ (CURL output)

    It seems to be a list of most of the spam I get, though I don’t think I get all of what is listed:

    <?xml version='1.0' encoding='UTF-8'?><ListBucketResult xmlns='http://doc.s3.amazonaws.com/2006-03-01'><Name>eiwufhiwehifiwefiewfyuwefuwefuywefuwefyuwefu</Name><Prefix></Prefix><Marker></Marker><IsTruncated>false</IsTruncated><Contents><Key>AutoWarrantyValue.html</Key><Generation>1572455108497312</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-30T17:05:08.497Z</LastModified><ETag>"6183b62bd73e8607c0f892274bf6bba8"</ETag><Size>339</Size></Contents><Contents><Key>BloodSugarFormula_B2.html</Key><Generation>1571665761496134</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-21T13:49:21.496Z</LastModified><ETag>"8164d412289e29f0c78e5d9a2ab4fdc9"</ETag><Size>331</Size></Contents><Contents><Key>BrainSmartPillEmail.html</Key><Generation>1571249083573826</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-16T18:04:43.573Z</LastModified><ETag>"8ed0cdb57c0893d05279ea2a5b74eacd"</ETag><Size>339</Size></Contents><Contents><Key>ChoicigeAut0Wafcrrahnty.html</Key><Generation>1572611674589884</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-01T12:34:34.589Z</LastModified><ETag>"30569d54a25b1db3992e15e37c892aa5"</ETag><Size>341</Size></Contents><Contents><Key>CompleteTaxDebt.html</Key><Generation>1571163943995196</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-15T18:25:43.995Z</LastModified><ETag>"999e7c349e29d32935888f58c185a8b1"</ETag><Size>339</Size></Contents><Contents><Key>CoolAir.html</Key><Generation>1572632117771752</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-01T18:15:17.771Z</LastModified><ETag>"6baac3dff3c6131b9a1a9b83aa9d79e1"</ETag><Size>327</Size></Contents><Contents><Key>CreditLendLoans.html</Key><Generation>1572449183101189</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-30T15:26:23.101Z</LastModified><ETag>"24472502875f9fda01cf3ea677ceecf4"</ETag><Size>333</Size></Contents><Contents><Key>DE_bitttcoinmccpa.html</Key><Generation>1573665923818640</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-13T17:25:23.818Z</LastModified><ETag>"08e0eb5ca64ddb8bb192d0ad0ac84cb4"</ETag><Size>309</Size></Contents><Contents><Key>Frenchmethod.html</Key><Generation>1572628634529810</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-01T17:17:14.529Z</LastModified><ETag>"b80dd68fab779b84a7071a791f7a28ac"</ETag><Size>309</Size></Contents><Contents><Key>FungusEliminatorEmail.html</Key><Generation>1571497866536040</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-19T15:11:06.535Z</LastModified><ETag>"21ad2fb78113a54dda236891d8bc36b7"</ETag><Size>343</Size></Contents><Contents><Key>HerbalistCBDOilEmail.html</Key><Generation>1571447759155150</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-19T01:15:59.155Z</LastModified><ETag>"3b0e9185f056c0420206cf03bfca9c70"</ETag><Size>335</Size></Contents><Contents><Key>JD.html</Key><Generation>1570840169367671</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-12T00:29:29.367Z</LastModified><ETag>"517ac9898073e2e949614a7d1008a60c"</ETag><Size>339</Size></Contents><Contents><Key>KetoadvancedSharkTankPreSell.html</Key><Generation>1572094019472692</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-26T12:46:59.472Z</LastModified><ETag>"32048f5fd2261ebb950083a50e10bece"</ETag><Size>331</Size></Contents><Contents><Key>ManPlusMaleEnhancementEmail.html</Key><Generation>1571394540702798</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-18T10:29:00.702Z</LastModified><ETag>"d8c8dac25ba795ed973a8189f78351dc"</ETag><Size>335</Size></Contents><Contents><Key>Manpride.html</Key><Generation>1572629241925850</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-01T17:27:21.925Z</LastModified><ETag>"b0570b7e2416acdb1f07a05cceb02e99"</ETag><Size>325</Size></Contents><Contents><Key>MontezumaSecretMaleEnhancementEmail.html</Key><Generation>1571243525812022</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-16T16:32:05.811Z</LastModified><ETag>"c7df1b61f3ec1d95555a8d43024ce42c"</ETag><Size>343</Size></Contents><Contents><Key>MortgageAdvisorVALoans.html</Key><Generation>1571338952754686</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-17T19:02:32.754Z</LastModified><ETag>"62afb35902da92024679c8d3b74c8bc1"</ETag><Size>343</Size></Contents><Contents><Key>MusclePresellDadBodKillerCPS.html</Key><Generation>1572482623305388</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-31T00:43:43.305Z</LastModified><ETag>"bb05a8040ed7ebc9e4ad80e5ef33ac1f"</ETag><Size>329</Size></Contents><Contents><Key>MyCompleteMedicareSavingsEmail.html</Key><Generation>1571486715350171</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-19T12:05:15.349Z</LastModified><ETag>"5089e606387bbdaa6b11e8943ec484b0"</ETag><Size>335</Size></Contents><Contents><Key>ProlesanPure.html</Key><Generation>1572631836835587</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-01T18:10:36.835Z</LastModified><ETag>"0df806db0a21d5dc43991dc0f9ba1496"</ETag><Size>325</Size></Contents><Contents><Key>Proscsdvtate911.html</Key><Generation>1572703584342096</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-02T14:06:24.341Z</LastModified><ETag>"179ac9fad62fcacae6eab50a91073a68"</ETag><Size>443</Size></Contents><Contents><Key>ReverseMortgageQuotess.html</Key><Generation>1572551047539966</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-31T19:44:07.539Z</LastModified><ETag>"ba12c22564fbd7096ef834746eb5c233"</ETag><Size>327</Size></Contents><Contents><Key>ReverseMortgageQuotessJuno.html</Key><Generation>1571700203227643</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-21T23:23:23.227Z</LastModified><ETag>"9e504db164a7283b2f771ad34bd6312e"</ETag><Size>335</Size></Contents><Contents><Key>Reverse_Mortgage_OnlineQuiz_shortWicon.jpg</Key><Generation>1572108656794357</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-26T16:50:56.794Z</LastModified><ETag>"cb799f9547c1fd737093447e3cbd0b8f"</ETag><Size>193038</Size></Contents><Contents><Key>SE_bitttcoinmccpa.html</Key><Generation>1573664305450709</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-13T16:58:25.450Z</LastModified><ETag>"ab0f9accf10465cb555838fd046f1a15"</ETag><Size>309</Size></Contents><Contents><Key>SE_weedprofit.html</Key><Generation>1573668074683976</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-13T18:01:14.683Z</LastModified><ETag>"536d0fb69b07d423230aef598b981c48"</ETag><Size>309</Size></Contents><Contents><Key>SHARK_TANK.PNG</Key><Generation>1572093793539338</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-26T12:43:13.539Z</LastModified><ETag>"ff1be365317bfcba1e504e911411ece7"</ETag><Size>355273</Size></Contents><Contents><Key>StealthAttra.PNG</Key><Generation>1573123424054760</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-07T10:43:44.054Z</LastModified><ETag>"79499544625ec0aa113e9d768399fe90"</ETag><Size>224114</Size></Contents><Contents><Key>TotalAutoAccidentSupportEmail.html</Key><Generation>1571492833320042</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-19T13:47:13.319Z</LastModified><ETag>"9ac8ec7056edd01fcfc4093ac88b942b"</ETag><Size>339</Size></Contents><Contents><Key>UK_bitttcoinmccpa.html</Key><Generation>1573666328876754</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-13T17:32:08.876Z</LastModified><ETag>"fc2a9893c76325c62c88c88fb90d31b0"</ETag><Size>309</Size></Contents><Contents><Key>UrgentMaleProstate.html</Key><Generation>1572482444411705</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-31T00:40:44.411Z</LastModified><ETag>"e84798f74e64e36a269a9f70ed53b1ad"</ETag><Size>335</Size></Contents><Contents><Key>Us_concealed.html</Key><Generation>1570902603359669</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-12T17:50:03.359Z</LastModified><ETag>"0b27d4573f7b7ead41b0e65b8b6ffcf1"</ETag><Size>343</Size></Contents><Contents><Key>VA_Eligibility.html</Key><Generation>1571672611537247</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-21T15:43:31.537Z</LastModified><ETag>"b3753127b01a07ade08da8a62c6e4b66"</ETag><Size>335</Size></Contents><Contents><Key>VA_Eligibilitylinode.html</Key><Generation>1571684070396197</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-21T18:54:30.396Z</LastModified><ETag>"1427f78b0de9a7b032cc19a394c461dc"</ETag><Size>339</Size></Contents><Contents><Key>VivemoneCasino.html</Key><Generation>1572631427430941</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-01T18:03:47.430Z</LastModified><ETag>"3ab68c78564ebf6e656c063f6386789b"</ETag><Size>313</Size></Contents><Contents><Key>VixeaManPlusMaleEnhancementCPS.html</Key><Generation>1571504966152288</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-19T17:09:26.152Z</LastModified><ETag>"b94e612db472159f5e2a33d5fb5f845c"</ETag><Size>339</Size></Contents><Contents><Key>Walgreens.html</Key><Generation>1573760870704936</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-14T19:47:50.704Z</LastModified><ETag>"c257b301b984aa58ab29bc3eeeb7297f"</ETag><Size>333</Size></Contents><Contents><Key>amazon_rev_trax.jpg</Key><Generation>1573568124222079</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-12T14:15:24.221Z</LastModified><ETag>"114248410cd3c5a1f876499364ddf3eb"</ETag><Size>23970</Size></Contents><Contents><Key>autowarranty.html</Key><Generation>1571058295900223</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-14T13:04:55.900Z</LastModified><ETag>"9686efcd64567d5d93afac08d4917aa8"</ETag><Size>335</Size></Contents><Contents><Key>b2Freecreditclick.html</Key><Generation>1573570807368491</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-12T15:00:07.368Z</LastModified><ETag>"7a2266e1e000fd2b83f3c00c26c3c718"</ETag><Size>327</Size></Contents><Contents><Key>b2USbloodsug.html</Key><Generation>1572899106600928</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-04T20:25:06.600Z</LastModified><ETag>"0a9f3c2464e2350fa4d3644e0b91d256"</ETag><Size>331</Size></Contents><Contents><Key>b2_bloodsugarformula.html</Key><Generation>1572962996949091</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-05T14:09:56.948Z</LastModified><ETag>"3fd729e5deb2fc0eec45b6e51cd464fc"</ETag><Size>333</Size></Contents><Contents><Key>b2bloodSugaformulacps.html</Key><Generation>1573058760153285</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-06T16:46:00.153Z</LastModified><ETag>"5fd8ddbadcd9c128e763d0b0d3991fc1"</ETag><Size>333</Size></Contents><Contents><Key>b2loodsugarformula_lilhot.html</Key><Generation>1573091177012420</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-07T01:46:17.012Z</LastModified><ETag>"f9ae429bdc8a42caa82a7391fe3bfc48"</ETag><Size>333</Size></Contents><Contents><Key>b2loodsugarformula_lilmixte.html</Key><Generation>1573091622524716</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-07T01:53:42.524Z</LastModified><ETag>"c07a01f916e8f4d4dbb1317fc195af84"</ETag><Size>337</Size></Contents><Contents><Key>bej_cvsv1.html</Key><Generation>1573759454034163</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-14T19:24:14.033Z</LastModified><ETag>"53b8646cdd9501176f2d793efd0bd338"</ETag><Size>329</Size></Contents><Contents><Key>bejsamsclubv1.html</Key><Generation>1573756613037569</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-14T18:36:53.037Z</LastModified><ETag>"f32e6c4285cb5f3dc98f135ce59b7169"</ETag><Size>333</Size></Contents><Contents><Key>bitcoinInvestorMC.png</Key><Generation>1570800630831826</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-11T13:30:30.831Z</LastModified><ETag>"16fa356d0981efa491aa43723441aa0d"</ETag><Size>300799</Size></Contents><Contents><Key>blood.html</Key><Generation>1570805884097278</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-11T14:58:04.097Z</LastModified><ETag>"21c29aedfc65dcad3f50fcb5698453a1"</ETag><Size>301</Size></Contents><Contents><Key>blood.png</Key><Generation>1570805752528854</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-11T14:55:52.528Z</LastModified><ETag>"d2ac324111b690b71df9374a40fe34e4"</ETag><Size>131782</Size></Contents><Contents><Key>bloodsugarFormula.html</Key><Generation>1571226445794201</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-16T11:47:25.794Z</LastModified><ETag>"5c50a784f8178f1e61a5a7be7b40814e"</ETag><Size>343</Size></Contents><Contents><Key>bluechew1.jpg</Key><Generation>1573228797907812</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-08T15:59:57.907Z</LastModified><ETag>"59e2ef30bcd0573593b5f3995ee9af14"</ETag><Size>31846</Size></Contents><Contents><Key>bluechew2.jpg</Key><Generation>1573228798033331</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-08T15:59:58.033Z</LastModified><ETag>"17c05660872cbeb6e0c26eb68a369891"</ETag><Size>6857</Size></Contents><Contents><Key>botcoin.html</Key><Generation>1570800630427355</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-11T13:30:30.427Z</LastModified><ETag>"097cf87a04522d6e3b47320acd4792b3"</ETag><Size>305</Size></Contents><Contents><Key>cbd.PNG</Key><Generation>1571447766750985</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-19T01:16:06.750Z</LastModified><ETag>"459fcc25cd0550bf1ef3e7294da177cf"</ETag><Size>118570</Size></Contents><Contents><Key>choice_wrr1.PNG</Key><Generation>1572610515297120</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-01T12:15:15.296Z</LastModified><ETag>"ef76792bb342f59a1e3c165e41f83845"</ETag><Size>176625</Size></Contents><Contents><Key>choice_wrr2.PNG</Key><Generation>1572610523031137</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-01T12:15:23.030Z</LastModified><ETag>"7f8c73624d058e083cff63f8d04db84f"</ETag><Size>92426</Size></Contents><Contents><Key>choiceautowarr.html</Key><Generation>1571340548100344</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-17T19:29:08.100Z</LastModified><ETag>"5c50a784f8178f1e61a5a7be7b40814e"</ETag><Size>343</Size></Contents><Contents><Key>costco.PNG</Key><Generation>1573653883240280</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-13T14:04:43.240Z</LastModified><ETag>"23f441a59a6c1704efb087bf3a6838d0"</ETag><Size>213015</Size></Contents><Contents><Key>cvs.png</Key><Generation>1573650892385524</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-13T13:14:52.385Z</LastModified><ETag>"ba5ff9b697e5c396b2d7b5de99d452be"</ETag><Size>305288</Size></Contents><Contents><Key>dkjunsu2d.PNG</Key><Generation>1572354263133735</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-29T13:04:23.133Z</LastModified><ETag>"1eaa28f15f4b0983b426e2a2edb4d2cd"</ETag><Size>3130</Size></Contents><Contents><Key>donsfzja.png</Key><Generation>1571243989640391</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-16T16:39:49.640Z</LastModified><ETag>"f56e9c091fa0d00ed87c5f91b812be2a"</ETag><Size>748278</Size></Contents><Contents><Key>fredvescodvre360.html</Key><Generation>1572891463631716</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-04T18:17:43.631Z</LastModified><ETag>"b73fbba185be671d6081b874159d93f8"</ETag><Size>331</Size></Contents><Contents><Key>fungusnails.jpg</Key><Generation>1571498652270480</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-19T15:24:12.270Z</LastModified><ETag>"ffb306c87790c424748784e4de8047b4"</ETag><Size>614279</Size></Contents><Contents><Key>gmail_b2USbloodsug.html</Key><Generation>1572901246638251</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-04T21:00:46.638Z</LastModified><ETag>"0e4ab1c33d6a71bbd9de20de3f7fd186"</ETag><Size>331</Size></Contents><Contents><Key>heart.PNG</Key><Generation>1571356637217437</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-17T23:57:17.217Z</LastModified><ETag>"e0fb703d11210f20e1ffdbb62ba8c88d"</ETag><Size>264195</Size></Contents><Contents><Key>heartAttack.html</Key><Generation>1571356992501293</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-18T00:03:12.501Z</LastModified><ETag>"6a5804c3445818541e0789617d74d208"</ETag><Size>339</Size></Contents><Contents><Key>id11_stealtattrarction.html</Key><Generation>1573646799998286</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-13T12:06:39.998Z</LastModified><ETag>"d8b23cf6ff8b24aadfbd4427ebfb1d92"</ETag><Size>443</Size></Contents><Contents><Key>idMontezumaSecret.html</Key><Generation>1572901775746673</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-04T21:09:35.746Z</LastModified><ETag>"8a51748be841ad7cc0ad08d57bddc9b1"</ETag><Size>435</Size></Contents><Contents><Key>idMontezumaSecretMale.html</Key><Generation>1572890305733460</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-04T17:58:25.733Z</LastModified><ETag>"f5d346892f6b2c27578900f9a2a48572"</ETag><Size>439</Size></Contents><Contents><Key>idMontezumaSecret_mixte.html</Key><Generation>1572962997051923</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-05T14:09:57.051Z</LastModified><ETag>"f5d346892f6b2c27578900f9a2a48572"</ETag><Size>439</Size></Contents><Contents><Key>idMontezumasecrethot6.html</Key><Generation>1573067329475560</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-06T19:08:49.475Z</LastModified><ETag>"2c4a859025e6836d0e8e29cdc199e440"</ETag><Size>439</Size></Contents><Contents><Key>idmontezumasecret6.html</Key><Generation>1573052330807031</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-06T14:58:50.806Z</LastModified><ETag>"e69f4a20440ecb370f0143c2da9cb980"</ETag><Size>441</Size></Contents><Contents><Key>idprostate.jpg</Key><Generation>1572703372500567</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-02T14:02:52.500Z</LastModified><ETag>"1c7c4a142c5b7a116830bc865d7de30a"</ETag><Size>19840</Size></Contents><Contents><Key>idrreverse_mixte.html</Key><Generation>1573146083170166</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-07T17:01:23.169Z</LastModified><ETag>"1d9a1756c94997e11ee10585bd35cf2a"</ETag><Size>439</Size></Contents><Contents><Key>idstealtattrarction.html</Key><Generation>1573123977490941</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-07T10:52:57.490Z</LastModified><ETag>"4cbdfcd3040897db2f8ebccf71be018d"</ETag><Size>441</Size></Contents><Contents><Key>iemd.PNG</Key><Generation>1572526746463729</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-31T12:59:06.463Z</LastModified><ETag>"a2b9e880e9bd952cf1f0aec21ed39240"</ETag><Size>545717</Size></Contents><Contents><Key>ket 1.html</Key><Generation>1572526746453455</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-31T12:59:06.453Z</LastModified><ETag>"8552f5c088cf548338b122f804da1398"</ETag><Size>325</Size></Contents><Contents><Key>ket 2.html</Key><Generation>1572526745103436</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-31T12:59:05.103Z</LastModified><ETag>"38179e0d3105aa4dd6a3ef6261ddd49a"</ETag><Size>343</Size></Contents><Contents><Key>keto 2.html</Key><Generation>1572353810289839</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-29T12:56:50.289Z</LastModified><ETag>"c4baf5c7320b68de9fcc30e1a070ae30"</ETag><Size>329</Size></Contents><Contents><Key>keto unsub.html</Key><Generation>1572353816891488</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-29T12:56:56.891Z</LastModified><ETag>"38179e0d3105aa4dd6a3ef6261ddd49a"</ETag><Size>343</Size></Contents><Contents><Key>manplus.PNG</Key><Generation>1571394214495613</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-18T10:23:34.495Z</LastModified><ETag>"72cbf0cd9b2eddd1d11d95224aa3e231"</ETag><Size>393800</Size></Contents><Contents><Key>medic.jpg</Key><Generation>1573127113988664</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-07T11:45:13.988Z</LastModified><ETag>"d176b3901627b40b8d1369e009e75799"</ETag><Size>12945</Size></Contents><Contents><Key>medicaovidehuropnly.html</Key><Generation>1572449986236630</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-30T15:39:46.236Z</LastModified><ETag>"bfa848d6ac979e2f1334517fff05fc6c"</ETag><Size>337</Size></Contents><Contents><Key>mont.png</Key><Generation>1573067991162837</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-06T19:19:51.162Z</LastModified><ETag>"d65083ae18cf105b38fe8444258011ee"</ETag><Size>161965</Size></Contents><Contents><Key>reverse_mortgage_quotes.html</Key><Generation>1572551047302223</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-31T19:44:07.302Z</LastModified><ETag>"ba12c22564fbd7096ef834746eb5c233"</ETag><Size>327</Size></Contents><Contents><Key>reverse_mr.html</Key><Generation>1572551047438338</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-31T19:44:07.438Z</LastModified><ETag>"ba12c22564fbd7096ef834746eb5c233"</ETag><Size>327</Size></Contents><Contents><Key>reversemor.PNG</Key><Generation>1571055435103299</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-14T12:17:15.103Z</LastModified><ETag>"af0968905549c38b16623dc894940c28"</ETag><Size>89050</Size></Contents><Contents><Key>reversemor2.PNG</Key><Generation>1571838104905444</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-23T13:41:44.905Z</LastModified><ETag>"065fcf2a4899d3402906a9485bed0fc8"</ETag><Size>272849</Size></Contents><Contents><Key>reversortgaquotes.html</Key><Generation>1572350217021775</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-29T11:56:57.021Z</LastModified><ETag>"9b06a35cb60462b91a99deec704147ee"</ETag><Size>339</Size></Contents><Contents><Key>rghjhgj.JPG</Key><Generation>1571058096475123</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-14T13:01:36.474Z</LastModified><ETag>"e83eac3b7e9affd4f63bd276a32c699f"</ETag><Size>60346</Size></Contents><Contents><Key>rkingeasetinnituscps.html</Key><Generation>1572463825778222</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-30T19:30:25.778Z</LastModified><ETag>"b34a4c46d2066c3b1d688f479c972065"</ETag><Size>333</Size></Contents><Contents><Key>sams.png</Key><Generation>1573737028460747</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-14T13:10:28.460Z</LastModified><ETag>"63ee3c7834c0029c6ab1919ed243ae48"</ETag><Size>602355</Size></Contents><Contents><Key>sd45KeftosdfsAdvansfcedSharksfdsTankPreSell.PNG</Key><Generation>1572354265291352</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-29T13:04:25.291Z</LastModified><ETag>"a2b9e880e9bd952cf1f0aec21ed39240"</ETag><Size>545717</Size></Contents><Contents><Key>shadowbox.jpg</Key><Generation>1573842154557224</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-15T18:22:34.557Z</LastModified><ETag>"8a67c08f80d9cbeb7d42e202d544f2ba"</ETag><Size>107202</Size></Contents><Contents><Key>steadlthdattrraction.html</Key><Generation>1573829764000539</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-15T14:56:04.000Z</LastModified><ETag>"defa32fba63bb5cdc2c39956e4a11f54"</ETag><Size>443</Size></Contents><Contents><Key>testers.html</Key><Generation>1571511637989773</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-19T19:00:37.989Z</LastModified><ETag>"00abe041c524a34162bb8c688ea01686"</ETag><Size>2028</Size></Contents><Contents><Key>traxtatrrumpcarreediccare.html</Key><Generation>1573133157907162</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-07T13:25:57.906Z</LastModified><ETag>"28f0393737424563ff5e679fbb75909e"</ETag><Size>329</Size></Contents><Contents><Key>traxtaxMontezuma__5.html</Key><Generation>1572977264197821</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-05T18:07:44.197Z</LastModified><ETag>"914dc077c3e6060d65c785f9602ed3bc"</ETag><Size>327</Size></Contents><Contents><Key>un.PNG</Key><Generation>1572526747671643</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-31T12:59:07.671Z</LastModified><ETag>"1eaa28f15f4b0983b426e2a2edb4d2cd"</ETag><Size>3130</Size></Contents><Contents><Key>un_bejsamsclubv1.html</Key><Generation>1573756613027315</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-14T18:36:53.027Z</LastModified><ETag>"9c953a92a50747dba893e0058c293ea7"</ETag><Size>335</Size></Contents><Contents><Key>uncvs.jpg</Key><Generation>1573650900286112</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-13T13:15:00.285Z</LastModified><ETag>"2313d430017f2257858070f8bfaaaacd"</ETag><Size>5247</Size></Contents><Contents><Key>unsams.jpg</Key><Generation>1573737032059410</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-14T13:10:32.059Z</LastModified><ETag>"2313d430017f2257858070f8bfaaaacd"</ETag><Size>5247</Size></Contents><Contents><Key>unschoice.html</Key><Generation>1571184229065428</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-16T00:03:49.065Z</LastModified><ETag>"f860cde78e66517d141dcb583697cbef"</ETag><Size>331</Size></Contents><Contents><Key>unsub_bejcvsv1.html</Key><Generation>1573759453955603</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-14T19:24:13.955Z</LastModified><ETag>"1278bc3fb0716f98bb4fecd39c95ba2c"</ETag><Size>321</Size></Contents><Contents><Key>unsub_steadlthdattrraction.html</Key><Generation>1573829761105265</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-15T14:56:01.105Z</LastModified><ETag>"f864a1577e742ec8e89703480a080d16"</ETag><Size>429</Size></Contents><Contents><Key>unsubyahya_ShadowBox.html</Key><Generation>1573842707181850</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-15T18:31:47.181Z</LastModified><ETag>"28ee464b7f9c5420bb3b49a497adf954"</ETag><Size>429</Size></Contents><Contents><Key>unsubyahya_montezumasecret15.html</Key><Generation>1573838546091025</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-15T17:22:26.090Z</LastModified><ETag>"4bd98bf052120e24ddbce83ad05858ab"</ETag><Size>429</Size></Contents><Contents><Key>vixia.jpg</Key><Generation>1571506994451771</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-19T17:43:14.451Z</LastModified><ETag>"c22e5c50bf59bc02445e3e69824f010d"</ETag><Size>76770</Size></Contents><Contents><Key>walgreen.png</Key><Generation>1573745760829977</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-14T15:36:00.829Z</LastModified><ETag>"8e2acd90ed8edb5b792f39df4192cccc"</ETag><Size>630499</Size></Contents><Contents><Key>workout_warrior.html</Key><Generation>1572483005654064</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-10-31T00:50:05.653Z</LastModified><ETag>"e9f27e6a3805f5803d9ae5346c58ac9a"</ETag><Size>329</Size></Contents><Contents><Key>yahya_ShadowBox.html</Key><Generation>1573842707289370</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-15T18:31:47.289Z</LastModified><ETag>"a34e667c6da4c80ef8da79b0c5e8db96"</ETag><Size>443</Size></Contents><Contents><Key>yahya_montezumasecret15.html</Key><Generation>1573838546396599</Generation><MetaGeneration>1</MetaGeneration><LastModified>2019-11-15T17:22:26.396Z</LastModified><ETag>"c0e49452e37ec11bc29a205d2828c6a1"</ETag><Size>443</Size></Contents></ListBucketResult>


  2. Oh wow... I recognize a lot of that!

    its comforting to see I’m not the only one who’s fighting these guys.

    Namecheap very quickly acts when SURBL shows the domain blacklisted, but you are right... in general they’ll do nothing otherwise.

    I've caught this jerk using a new domain the day it was created. Even then Namecheap pushed back often, though that improved and now they seem more willing to consider the obvious (how did a bad actor get access to a domain, randomly, the day it was created!)

    For a while I was working closely with SURBL but the volume was so high and it seems I triggered a false positive so back to going thru SC for reporting.

    I don’t know WHY Amazon either thinks this is ok (they claim they don’t think that) or why they cannot stop it happening.


  3. 6 minutes ago, goodnerd said:

    they are now sending out fake Amazon alerts for a $500 gift card

    That’s what I just received too. Isthiswhat you see?

    Authentication-Results: spf=none (sender IP is 3.87.161.210)
     smtp.mailfrom=qzujrUyC.de; hotmail.com; dkim=none (message not signed)
     header.d=none;hotmail.com; dmarc=none action=none header.from=kEPMpuhj.de;
    Received-SPF: None (protection.outlook.com: qzujrUyC.de does not designate
     permitted sender hosts)

    I have also historically followed the redirects. Less so now. They are using VPSVILLE.RU for some hosting I think. A lot (a heck of a lot) of now-dns free redirect services I think also (and never get killed for abuse by either the Russian host nor the dns service)

    3.87.161.210 is the Amazonaws contribution to the crap from these jerks. On this email anyway.


  4. 20 hours ago, goodnerd said:

    tons of lines of hidden text in the message body

    Yes, that’s what the jerks I’m dealing with do. It’s in <style> tagged sections. Not sure why they do that, except when it is a really long SpamCop “truncates” and then the spammer links are removed if they follow the </style> closing tag. So the target spam sites are not reported in that case. I would just delete most of the “style padding text”. Now I forward the whole thing as attachment and it seems to work well.


  5. Most of my spam is from Amazonaws but it has gone down with a determinant attitude to reporting. However I don’t consider the reporting to Amazon useful. It did not have a material effect on volume. Actually, reporting direct to SpamCop has probably been more useful. It SEEMS like most of my spam comes via other third parties with Amazonaws being the driver... Often Hotmail.com (that appears to be quite possible)

     


  6. On 11/6/2019 at 2:01 PM, ScotchJohn said:

     Instead, I have reported, and gone on reporting, Amazon AWS spam to various Amazon mail addresses.

    ...

     I could be persuaded that the volume of spam from Amazon AWS has tailed off.

    Me too:

    abuse@amazonaws.com, ec2-abuse@amazon.com, ipmanagement@amazon.com, abuse@amazon.com 

    I add those to my Amazon reports on SpamCop now. Two get devnulled.

    volume has not tailed off for me. In August it ramped up. 20-30 per day is normal now. Nearly all of them with links (or short URL redirects) to VPSVILLE.RU hosted sites. Nearly all use free “now-dns.com” services too.


  7. Oh I told them! They wanted someone from fraud to call me... I said ok, so long as they’re going to actually do something that is effective. They didn’t call.

    And of course the abuse emails continue to come today from Amazon IPs.

    If this has been answered before, my apologies. Why do we see this:

    /dev/null'ing report for Abuse#amazonaws.com@devnull.spamcop.net
    /dev/null'ing report for ec2-abuse#amazon.com@devnull.spamcop.net


  8. I have reported 14 abuse emails to them today since this morning alone. I’ve just about had enough and canceling prime and avoiding shopping with them at all is increasingly likely what is going to happen.

    I am coming to the same conclusion as you. Totally a waste of time. I don’t know if there is an email client for my Pixel phone and iPhone which allows blocking by IP ranges but that’s what I’d really like to get!!!


  9. Seems like my email abuser has switched to using now-dns.com

    Reports are sent by SpamCop to the host of the subdomains, but that is VPSVILLE.RU which doesn’t seem bothered to act with any level of pace.

    That’s one source. The other..

    Much of the email volume is repetitive and has links to a Google Storage API location... there I can view XML showing all the subject lines and outline content they generate. And ALL of them redirect to “hwManyMore.com” (how many more? Well at least the jerk has a sense of humour I suppose?


  10. On 9/22/2019 at 3:51 PM, forrie said:

    Over the last 3 says I noticed a significant uptick in spamming from another botnet.   Most of it is dating, someone shared their pics, etc. etc.  Anyone else getting affected by this?

    I’ve noticed that when I get the emails for home warranties, incredible nerve problem cures, weight loss keto miracle, loans etc., then I don’t get Ulrika’s pouting pic and how delicious her friends want to be to me. When I do get the dating emails, the others are very few and far between or non-existent. Suggests to me it’s the same group of crazy criminals.

    Edit: Seems like the end of the daily deal junk phase approaches. So probably it is the same group. I do wonder if the “Instant Translator” device they emailed me several times about this weekend would be useful  for a date with the hot Asian beauty I’ll hear about in the next week or so... 


  11. Has this happened before?

    Look at that green “spam submitted” line in the screenshot I attached. Normally spam submitted leads to a higher volume of reports.

    October though? We see a significant amount of spam reported with reports not sent.

    If my experience is anything to go by, there was a major increase from one group of spammers (phishing activity actually, but not the overt fake Apple sites, Amazon, Walmart, Netflix etc login pages)

    And it was mostly email coming from Amazon IP addressees, which I always see SpamCop track but not send reports. Instead, I send the reports directly myself.

    But is that what this month’s driver was? The group behind these daily deals of loan offers, warranty offers, cures for bizarre conditions etc.? They seemed to be quiet, then boom, daily 12-25 emails. Mostly sites with domain names from Namecheap (they said to someone in response to a domain abuse report, that they have a “huge volume” of support requests at the moment)

    It seems like volume is down now (or the jerks behind the flow do not work weekends) and Amazon are “caught up” on the backlog of reports. Maybe the green line will go back below the blue...

    380D0FE1-610F-41B4-B62B-9E95F94BDFDC.jpeg


  12. 7 hours ago, petzl said:

    Then "Forward as Attachment" the spam to your 'submit' SpamCop address

    That’s the problem 😔

    Theres no way in iOS, either in the native Apple email app, nor in the iOS Outlook app, that I know of, to:

    1) Forward an email as an attachment on a new email

    2) To View the email headers/plain text 

     

    To achieve the capability to report email to SpamCop from an iPhone or iPad, a third party email client is needed because Apple and Microsoft Outlook are not the answer, as far as I can see.

    15 hours ago, hmkemerz said:

    Could someone please "open my eyes" and provide me with an instruction (or refer to solutions I did not find yet) about how to make possible  what I tried to describe?

    Look at AltaMail for one possible solution. Not sure about the attach to email, but it allows viewing of the email headers and plain text. No longer free I think, but has interesting features.

    Please come back and let us know how you get on Michael. You won’t be the only one who has this question over time!


  13. 23 hours ago, gnarlymarley said:

    It is interesting that all their networks all point to 

    
    abuse[at]hetzner.de.

    Yes, because.de is a country with very strict privacy rules. Hence they asked a couple of times what they could tell their criminally malicious “customer” about my complaint (before kicking them off their network anyway... and into a Lithuania outfit which seems to have a Russian based parent or at least very similar named company which is now host of most of the targets of the spam in the last 36 hours))


  14. On 9/18/2019 at 3:02 PM, petzl said:

    If enough amazon spam get reported as phishing, which it is. the blocking of amazonaws domain is automatic but takes a lot,

    What do we do to report “as phishing”?

    I’m not sure how to make the report as phishing. I’ve been using SpamCop for a lot of years - only in forum for a few though.


  15. On 8/13/2019 at 11:26 AM, gnarlymarley said:

    If the reports are not helping, at least the reports are feeding the block list.

    There is that. Yes.

    On 8/13/2019 at 11:26 AM, gnarlymarley said:

    One thing you might want to try reporting to their ISP.

    Do you mean, to Hetzner’s own ISP? How would we locate the provider? (Sorry for my ignorance)


  16. On 7/24/2019 at 9:34 PM, HeatherReid43 said:

    hetzner.de 

    They bounce reports asking for a form to be filled in.

    I have a standard reply:

    I’m sorry I don’t have time to fill in your form, but you have the information needed to follow this up* - I’m a European citizen and you’re allowing the processing of my email address in your network. That is not acceptable. Please do NOT share my details or any of my data with your “customer”.

    They have asked me by follow up if they can share the date and time of my reported received spam email. I apologize and say no and it should not be necessary to do that.

    This was repeated several times when “the criminal spammer” was using their services multiple times to host their redirect sites. It ends when I send another report and they simply reply with a curt, “I looked at the website we are hosting and it is a blank page” to which I tell them what PHP files they will see and that they are simply acceptors for parameters and then redirect. Then they reply with, “The website is not hosted by us. Please contact the host xxxxxxxxx” (and the host is a Lithuania based outfit... doesn’t Namecheap have Lithuania links too?)

     

    * footnote: If they want standard format reports, accept munged from SpamCop eh? Smacks of a dodgy ISP really


  17. This may be wrong to mention here but it closely links with the only source of spam I deal with (these jerks) - I noticed SURBL .org was offline a while today. It was in a quiet period for the spamming (at least to me) so maybe they were using their resources for other reasons than spamming? DDOS anyone?

    (Leaving to get some aluminum foil for a new hat now)


  18. 5 hours ago, Lking said:

    You might try    stop-spoofing@amazon.com

    I think the Amazon business divides the IPs. Sometimes EC2 responds, other times IP Management, and other times a more general address. I first noticed the split when SpamCop wanted to report rather than switch @ for # 

     


  19. 2 minutes ago, petzl said:

    clicking every link or any link that often

    Oh absolutely. I try hard NOT to click the links. Ever.

    The Imgur team are good guys. They’ve got really quick at deleting. I send in my submissions in a very recognizable format they know will be a genuine report of ad images.

    Today, this jerk’s domain site hosted by Linode was pulled really quickly (within minutes of me getting their email. The images were also deleted very quickly.

    So quickly did this all happen in fact, that the dense idiot behind this process was sending out emails from the Amazon hosted mail service with “image not found” errors in the body and still linking to the non-existent site.

    Shame Namecheap and Amazon cannot get their acts together. Be more like Imgur and Linode.

×