C2H5OH

Spamcop sends notifications to bitliseren@gmail.com RIPE reports abuse contact for '194.27.36.0 - 194.27.37.255' is 'abuse@ulakbim.gov.tr

Receiving repeated spam from 198.46.190.149. ARIN suggests reportabuse@racknerd.com Spamcop is using abuse@colocrossing

I'm seeing; Abuse contact for '164.100.138.0 - 164.100.138.255' is 'rajeev.sharma@hp.gov.in' HTH

Interesting. Thanks gnarley. I just checked again; From "whois.apnic.net", today I'm seeing three reporting addresses; Abuse contact for '60.32.0.0 - 60.47.255.255' is 'hostmaster@nic.ad.jp' Email address for spam or abuse complaints : abuse@ocn.ad.jp Email address for spam or abuse complaints : super@plala.or.jp

Thanks petzl !

Spamcop is using "super@plala.or.jp"

Spamcop was going to use fbsoft01@yahoo.com, which seems likely to be the spammer's account.

Spamcop is using cached whois for 146.19.143.126 : noc@baxet.ru

Thanks for that, I couldn't recall whether SC sanitised the message body too. I suppose I must have been lucky up 'til now; the scum have not used my domain name in their messages...

Received today a couple of UCE/spam - identical content apart from the sender's name. Typical content is, Hi, My name is Tom Roberts and I am a website designer specialist. I'm looking at your current website: www.xxxx.com and I'm wondering if you've thought about updating? - Goes on to explain the services on offer. I do not want to update my site - especially as I'm assuming the next request will be to forward my site's FTP details to the "helpful" website designer specialist. My concern is that Spamcop did not blank my website address. It's the same domain as my email address, and Spamcop is usually good at recognising that string and x-ing it. I've reported the UCEs via Spamcop, but had to manually deselect sending reports to my website hosting company. I'd post a report id here, but won't because the message body includes the plain text domain name.... Should I expect Spamcop to anonymise my domain name if it appears in the body of the spammer's email?

Okay, so yesterday's spam duly arrived. This time it parsed and reported normally. https://www.spamcop.net/sc?id=z6689197903z2d490751dc72f6177eeed2ee9a0a1629z Let's see what today brings...

https://www.spamcop.net/sc?id=z6689032327z78567ccc8eaf15598cc4e69ae8ef9d36z For the past few weeks I've been receiving a couple of spams a day to my Hotmail account. All have a "PDF" payload attachment (usually with a nonsense name) and all come from garbagename(AT)hotmail.com. I've reported them all, with spamcop sending reports to danorm(AT)hotmail.com. Today's second arrival followed exactly the same format, except that spamcop wouldn't report it (to danorm or anyone else). Tracking link above shows the result of my attempt. Doubtlessly tomorrow I'll have another couple to report, so I'll discover whether this was a one-off, or the new-normal. Has anyone else here suddenly been receiving spam from garbage hotmail accounts lately?

Abuse contact for '193.142.146.0 - 193.142.146.255' is 'abuse[at]makut.investments' spamcop is using abuse[at]hostslick.de

For information; Firefox now warns whenever I try to go to forum pages. "Websites prove their identity via certificates. Firefox does not trust this site because it uses a certificate that is not valid for forum.spamcop.net. The certificate is only valid for the following names: cloudfront.net, *.cloudfront.net Error code: SSL_ERROR_BAD_CERT_DOMAIN" - Clicking through the warnings and proceeding regardless will open the forum pages.

These are becoming a pain. As received, this spam won't parse; http://www.spamcop.net/sc?id=z5091666720z9...51babf12dce25az " Unable to process message. IPv6 addresses are not supported. No source IP address found, cannot proceed." But if I delete the apparently spurious ([::ffff:109.233.120.42]) from the 4th "Received" line the message will parse. See http://www.spamcop.net/sc?id=z5091669646zd...8bda9fc6d512c7z Note, I did not send the tampered report, this spam simply went unreported.