Lking

If you know the correct/a better abuse address for this IP then the "Routing/Routing Address Issues" sub forum would be the correct place to post the results of your research. I thought your post was questioning that fact that the spam Report went to @devnull.spamcop.net

From the parser output you linked APNIC is an " Internet that serves the entire Asia Pacific community. " Guessing they would get more spam reports that they would bother to process. I APNIC is not going to fix the problem, why should spamcop wast the bandwidth or clutter the web with a report that will be put in the bit bucket. To directly answer you question, this is not an error it is a decision not to sent a report. Do note that your submitted spam does feed the SCBL (Using ... for statistical tracking.)

Question: Do you have your browser set to block "pop up windows? That may be the problem. Please notice the dotted line under SC ?? if you move your cursor over SC, JMHO, SCBL or TANSTAAFL the small pop up window should appear.

Congratulations to you too! And thanks for letting us know about any success.

You did mouse over SC and see the little popup window with "SpamCop"? If there are other commonly used, relevant abbreviations/acronyms let me know in this thread and I will add them to the list.

If you logoff SC and then go to the Tracking URL you will see that your email address is replaced with "x"

"Dear" Color me confused : ) The confusion is that we (you and I) are talking about two different things. You (and I) use SC to parse the spam email header to identify the source and supporting ISPs of the spam and the spamvertised links in the body of the email. I understand that you /*then*/ use the information from SC to manually expand where the spam report is sent. In addition to the basic results from SC, I also send all 'raw' spam to government databases, US and Australian (spam@uce.gov & Report@submit.spam.acma.gov.au), for archival and whatever use. When a quick visual scan of spam reveals that the name of an established company (Amazon, UPS, American Express...) is used to bate the spam receivers, I also send the raw spam to those companies as a "FYI some spamming a**hole is using your 'good' name to defraud people." In my example above: I noticed the From: Amazon displayed in the "Correspondents" column in Thunderbird so I single that spam out for special handling. Depending on the time of day and other factors, I also take a quick look at the body of some spam scanning for besmirched company names. {It is another discussion, whether or not these corporations have a 'good name'. I am sure they think so and have the resources to defend it.} I have chosen this less time intensive processing because of the volume of spam sent to the several domains I use (232 spam yesterday). In addition to the domain I have had sense 1996, I also manage domains for two non-proffets. I receive all email to these domains unfiltered (note To: bigknow{at}xxxx.com above). For me I "Do not have the time" to do the hard work that @RobiBue does.We each do what we can do. As an aside I am confused by the thinking(?) of spammers. Looking at the "odd" mailboxes spam is sent to. Instead of dropping mis addressed email on the floor, I receive and report it. So I see these odd mailboxes. I can see guessing 'Bob@', 'John@' or "testemail@". I do not understand "f***you@", "A**hole@", "whore@". Who thinks someone would open an email addressed to "whore@"?

Please provide a Tracking URL so that others can see how 'SpamCop does not handle' you submission.

The attached spam is forwarded without change. MY email, Subject: [blah...] spam Report, From: XXX is not what ACMA is referring to. The Attached email "Subject: [Norton AntiSpam]TEXT ALERT: Winner, Winner John, is it you? >> Check Now" "From: Amazon <reply@leneif.info>" is not changed, as required.

NO I am not. That would result in a spam Report, from SC going to amazon. I am suggesting something like this header from MY email: with an amazon related spam attached; in this case Note when I "Submit" the spam I BCC the email to SC to hide my private 16 char reporting account from Amazon. Also note: Yes the FROM: is an obvious fake, but the sender is using the well known retailer's name to get "bigknow" to open the email.. I do the same for others common spam FROM UPS, American Express and others.

I stand corrected. What I meant to say was that I add amazon[dot]com to the list of addresses when I submit said spam. So the copy of the spam comes from me not SC. I do get the obligatory auto-response "Thank you"

I don't see a suggestion to also send reports/forward spam to stop-spoofing[AT}amazon.com I add that address to all spam that I quickly identify as relating to Amazon or often amazon.uk

Welcome to the forum. Short answer: No Longer answer: Finding links in the body of spam email is the lowest priority for the parser, after identifying the source and sending spam reports. With those priorities it is a mater of allocation of assets i.e. CPU cycles. And there is a cascading impact. If a link is found in the tail end of a large spam, the spam report also becomes larger than 50Kb to include the link; even more cycles and outgoing bandwidth. The CPU cycles and bandwidth all cost money, which makes it a return on investments. Although Cisco, the current owner, may have deep pockets, the 50Kb limit was established back in the dark ages when SpamCop was privately owned.

When you submit a spam, at the bottom of the screen you should see something like the following. By clicking on the checked boxes you can deselect a report and not sent a spam report to anyone of the suggested recepents.

Yes Bob, welcome! As RobiBue suggested a Tracking URL would be helpful. It is quite possible that your spammer is clever enough to hide your email address in the spam AND dumb enough to send you more spam because you reported them to SpamCop. Not being a spammer I don't see how "asking" to be reported by sending more spam to a know reporter fits into a business model. But then I am not a dumb spammer; see Rule #3 "Spammer Rules." What RobiBue suggest is quite possible. Another possibility is that your email has made its way onto a list being passed/sold around among spammers and so your volume of spam is currently on the rise. I is also possible that your email ISP has somehow changed their spam filtering and as a result you are seeing more spam that slips through to your inbox. Be assured by things will change again. In the meantime, help the internet community by reporting all the spam you have time to report. Your good karma will be rewarded.

Useful discussion. Please be careful to NOT include active "malicious" links in your post. Some suggestions for breaking links would be to replace periods "." in the URL with a coma ',' or '{DOT}' include spaces to break[ ]-[ ]up the URL as in http: // spamcop . net When you do include a URL double check your post to make sure the system did not out smart you and generate a live link. THANKS

Maybe include the link that redirects to them. We can always be hopeful.

Grrrrrrr! Maybe if you include a note to Amazon along with the spam Report about the redirect.

Can you provide a Tracking URL which can be found at the top of the submit screen: There are/have been issues using OUTLOOK. Take a look at your sent email. You should be able to look at the attached email and see if contains the complete header which should look something like the header in the spam linked to above.

Are you forwarding the spam as an attachment to your email? What email application(s) are you using to submit spam to SpamCop?

Nice (Art101 too).

I merged two related topic. Hopping to avoid repeating guidance one thread into another.

See my longer post at the top of thread. There are other reasons to use SpamCop: Normally SpamCop correctly does the work of finding abuse addresses, and reporting to SpamCop feeds the SCBL.

The current refresh (just now) shows - as you suggest It is a dynamic system.