DaveO8888
-
Posts
15 -
Joined
-
Last visited
Content Type
Profiles
Forums
Events
Posts posted by DaveO8888
-
-
Hello gnarlymarley, I am at war with spam after my most frequently used email addresses were hacked in Yahoo and Microsoft and went to the Dark Web. I have been using SpamCop and adding my mailhosts to reduce the spam in my inbox. However, I am tracking a lot of spam that is not listed in SpamCop's blocklist. For example, 185.253.218.32 not listed in bl.spamcop.net. Most of this spam/spoofs/malware includes forged headers. The images are nearly always posted to Imgur.com. I have requested Imgur remove the images. I have contacted many Hosting companies and many of them are cooperating to remove their customers that violate their terms of service. However, just like cockroaches, the customers find rogue hosters that are not cooperating, including NETH LLC (Ukraine) and many more. Is there any way to request IP spam addresses to be added to the backlist when the server is verified but the spam report cannot be submitted because of the forged headers?
-
I have my email accounts registered with SpamCop. I continue to receive spam from mostly foreign IP hosting addresses. I don't want to remove my mailhosts in SpamCop but after adding them I cannot report spam by either email submission or webform. I get a "Possible Forgery/Nothing to do" message and when I try to report the spam I get a "No Data/Too Much Data" message. If I delete my mailhosts in SpamCop I am again able to report all spam. Is there any way to report spam without deleting mailhosts? Alternatively, does the report generated show the originating host IP's?
SpamCop v 5.4.0 © 2023 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6795733209z8f0052ac2d21f8dea58eb42362b9045dz
Skip to ReportsReceived: from 10.220.180.164 by atlas209.free.mail.ne1.yahoo.com pod-id NONE with HTTPS; Thu, 26 Jan 2023 16:15:05 +0000 Received: from 154.12.170.46 (EHLO 46.170.12.154.in-addr.arpa) by 10.220.180.164 with SMTP; Thu, 26 Jan 2023 16:15:05 +0000 Reply-To: <toko@intellecticious.com> From: =?UTF-8?B?Q8KtacKtdMKtaXrCrWVucyDCrUfCrW/CrWxkIMKtVMKtcsKtdcKtc8KtdMKt?= =?UTF-8?B?IC3CrSBJbsKtdmVzdG/CrXLCrSDCrUfCrXVpZMKtZcKt?= <toko@intellecticious.com> To: <x> Subject: =?UTF-8?B?R2V0IHnCrW/CrXXCrXIgwq1lwq14Y8KtbMKtdXNpdsKtZSDCrUfCrW/CrQ==?= =?UTF-8?B?bGTCrSDCrUluwq1mb8KtcsKtbWHCrXTCrWnCrW9uwq0gS8KtacKtdCDCrUg=?= =?UTF-8?B?wq1lwq1yZcKt?= Message-ID: <vWpT________________________________rify@intellecticious.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0536_01D93179.FB906B50" X-Mailer: Microsoft Outlook 16.0 X-Originating-Ip: [154.12.170.46] Authentication-Results: atlas209.free.mail.ne1.yahoo.com; dkim=pass header.i=@intellecticious.com header.s=default; spf=pass smtp.mailfrom=intellecticious.com; dmarc=pass(p=REJECT) header.from=intellecticious.com; X-Apparently-To: x Thu, 26 Jan 2023 16:15:05 +0000 X-YMailAVSC: sXjT9i43bBvH95iTLm.lTyrWOfXLKtWaYvyt.FOUVmIpdDI aiD0Vd0foJn3pkEjijU4ryBPxn2YWs4amy0t5KMI4kVu.2v7ynrzST34itEP G7QxIXkR3IcZIWY6YQy2iHpRA.gIxH1eVg3fAKCZ5vH9nGdhw6WNhOlQhoy5 GOMExs2LfHGG5W9P3GuvTjFapKhz_mtTWHUmO9mqmsbS_X.GBqCVEyHVB1fJ dlLrYCQD39L.oa1maSlgyLyORufJMOgOCcrkHLl7QRvX8ltOgHsQkrywK8hG WIlsHXPtXu2vUaqpUnBqc6WVlk4DQnQI1ZEq9KJ_nTQpjPssTPcbo2xkiFWt QoO5dIs7UyeOBnzOCpN.ch7lmfuSjcPrwoiuGqW3C2w8VdW53PsE7_GBzOr2 6mJBmZoGQMXPr2MpjfK.kar2ZLi.H7pFh4gzYpQ5xwB4EK9nA5ktnQ7fu6Oo V_8AIORRI8cd2L2bVU0tYi9V5.1nhtxchA1EaAiS96W6UV1BCDQ2m_AjWaq6 CrH1V4omeVNmHVa1B8MexFUs8Cp8hV_pEB2Yy3nvzshoSgoUqJofWBIUnk_n yGMgTdzB8wiSWsukPKlo1aCHKPlHNFrPfqmVZuOx97notnupq4GMIbcdHpd3 kTJctY1Tk1RoQxK55IlDvaxBF6wD9h9oVDy22Q61Dss8XqdLzDOw5QfzX_AU 3yTPviOODoHHUQP2ycCTL5Rl8_qb9FBVoWJiiskLewzPycDDh91oBQOfr0AT 0.Q8sdT_b.jZxjXPCY4b9qZn4m8B1W2gp_x4FLfirzfF7GTnDBBlFmMs_HCW a5QSYj6bC2qurxTnLWutWD8w9Vuj9dQ6UK.2AIL84DKeER_E0lEisuscyKNZ gHdwXchrnPqEmGPwpIGM5DLtmumZl7GoqzJbEIXE0FZgTj4eSyFC5LTdCWJ8 ECJDV QMy53Dfq0ZabUZvhsnQSjVgkNXg78Lz6GWbWfA7ka0BkPOPRBsay36h cgiBY4HF5wl2Im9260YWjnqMnHihNq5F.RS934xda3BPJdMaOYjEUBoLuGF3 Sl_a9gCd.Mx8laPPgNa1p_i_TNg3V9KkdjfBQ2X_8nv4jdTei56YfXalGqO9 uexpyTwmwuPE8L2noJ2oyr2sWHPCgUP0d4fqoFqTDcevqSsc16vqGviEmMoH Q56Xfc0lL6dZgZxJ3gOkP0Aw8HXAqYtIK52wkE5COgzH89gLpZEK7pPUoBSN L.XensoPUayhdJpgjxFMNaSY1aTTylppERca2f8H60vUHzuhaQVZhFA2VATm LuvSNTmcy6YOiS5ODPvNX5pp5qpJdo5hRvmA_06EmtRI5eyKSXtVjj.BMN8p a3vmtBeft4b9Lh8mizNr26zSh.Euv X-YMailISG: 4LYBYR4WLDuTfatnQ1ff952zGaCcpm9F7QOsscONShKS3j8j Hb0SF4UaBDRYHVME7FA.6Amw2e7STXoSwyLL089R0msRSpcHqmmu1zR5FP6M JX4zR37L7cZ4ydQmOqUCMgzAe.IbRPyV7L5uknUfaNaq6oEAkHQpab8cim.h IPDEr01fJY._tnVbobTeW3qz86ZQC0bmC2gOqWG3gURlCazcIwik8gTGrFU_ a2MlyTuVNCmF26_B9bothdjrbcoeXJ2cHv2KhkGm6_sbXXaWX8QvJ4qAs2QY 8QO9.aXUTRuOgW0JDAelzUZ_NAARbr2FnVnv7fCcwkW1pWBGqPU5Eg8QttSR 1yJ10zMhHpGkrkVg9P8JCWm89zcHPmYbpH5YIsRdFLHUzCBmlttDDfaPwFFv EhGwnY1HELgADDbPqycbDIAS7_5kljCNwAmqWXBi6_wwvdQoLMGfun4ZLNNW jHT8r_hvpOm5vFLBZsXfd1HqUWy3D8q0LcPxYtIzsZHhltu211l6l8NyolwM ES_QSrCpN8ciFwL4ccuVW0aT91ajSASZ_cHdYvfnV0gDVtZkL21O3ZOhQtUF PBeS6_reqSTncMEOWq1CY1uFzoHkZfBPoOCl7kY6JfGTNB31J9IGc_43tHEj cJAwLvRItnij4oLXXtomQJB_kYQR2OSbCWfStDlsQc0FiyuOr_7w.iOnNzfk pUpoSCiFXSU7RwVMnx02Oy4j2b9EyPdgqgbh7VyGnYuE1wLD994jGIvQHc1K qp32Te_AkK6uEo80iDNuN.VTjbvkWDDAuoR2csvH6o3CB7vVH.JyuWzv7SoS .43T8wSMFRBoVnBNeX3SMjZHxOU.u8hpTkCpVVeOymaXVQ593zUik_BjwuZW 6yK_5FuiQU2VeE0m46a6IWiYQJ_QGahynOrqU7TFCDXf.cXDvrPsuvcy4vHL 9sVt 8jdmq5_sACAd37fCqBcfs1AYPg2FEX_OARZyaZJ.gT5S7BcT0qzWBgCf vfrDTJWhWJ7._1Wsk3xAea5wKDrQRrVwbXRExaIBvY6e8Hvna0wmXtL1e2dm cClKGLUM3m8h6FNWwXv_9_paxkVTJ6kJFNHrm2awQl5LfnuESIpuXVxCrh6d tw4zHEhdm9.k74Ow9iBKL_DjdsdnuZM8PYH15w8mV9ZPECYslrY.YLnCvdY- List-Unsubscribe: <mailto:unsubscribe@intellecticious.com?body=unsubscribe&subject=unsubscribe-trQfL0w7L0nrZr4tJHrBqBG9DJqAq4z9qJbSMXsRqBsVLXLrLBs-> Thread-Index: AQIXkMu9G8kQOFtf7m7+i9EXKNSH9Q==
Parsing header:0: Received: from 10.220.180.164 by atlas209.free.mail.ne1.yahoo.com pod-id NONE with HTTPS; Thu, 26 Jan 2023 16:15:05 +0000Internal handoff or trivial forgery
1: Received: from 154.12.170.46 (EHLO 46.170.12.154.in-addr.arpa) by 10.220.180.164 with SMTP; Thu, 26 Jan 2023 16:15:05 +0000Hostname verified: 170.chordata.dictionary46-untransmitted.welcominists.com
Possible forgery. Supposed receiving system not associated with any of your mailhostsWill not trust this Received line.
Mailhost configuration problem, identified internal IP as sourceMailhost:
Please correct this situation - register every email address where you receive spamNo source IP address found, cannot proceed.Add/edit your mailhost configuration
Finding full email headers
Submitting spam via email (may work better)
Example: What spam headers should look likeNothing to do.No data / Too much dataYou are most likely submitting a very large email. Please trim some of the unnecessary data (noting where this has been done) from this posting and try again. SpamCop will no longer accept email larger than 50.0K bytes.
Other possibilities: You may have a firewall which prevents HTTP POST commands, you may have linked to the wrong URL or your browser does not handle binary submissions correctly (try a different browser)
-
I submitted the spam to SpamCop Reporting via email submission and I received a link to complete the submission but SpamCop keeps reporting that there is too much data. How do I resolve this error message?
SpamCop v 5.4.0 © 2022 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6776393772z78e10f875ac3a4b6de92c4eb1dd0a85az
Skip to ReportsReceived: from 10.197.35.9 by atlas108.free.mail.bf1.yahoo.com with HTTPS; Mon, 19 Sep 2022 12:55:04 +0000 Return-Path: <> X-Originating-Ip: [45.8.46.152] Received-SPF: pass (domain of w7q6.motoracute.com designates 45.8.46.152 as permitted sender) Authentication-Results: atlas108.free.mail.bf1.yahoo.com; dkim=unknown; spf=pass smtp.mailfrom=w7q6.motoracute.com; dmarc=pass(p=REJECT) header.from=motoracute.com; X-Apparently-To: x; Mon, 19 Sep 2022 12:55:04 +0000 X-YMailAVSC: NM34K2U3bBupN279dNfy3wBF7dSjPCrt9DQZws7wUglp9b2 1YyUCDLuzOUEiNJ72pS6o.gPzIzwN6HBbtWwOZh8iH4nqKPXx8ytEZ2Dl_Vc vmcUTDzeBFoyXjVdmWhghLTEtrbS65s638etz4vs9CM6o5Mb8tV5IN61bETK FX_A2zHE4fv0.o0LO5rG0dYDCbc0bruFcxw9NcYwv026g62WWqH07cgcdMc0 .pulWPBKyV.atEcRPoAketvgpsONst.dX0oVWyoKe8WRIbO4tgc64UdYoZ0f 2I5mpwOczfCpG.B3ylN4pliDeaKCxdE6q_5jdG9qlQqtCh8i4Ptv8KEDxC1r 89.4GRLI8n3B0VSkRoTthBKanJsiNLm8470TLsyRaaAub9271jJCdwkhAjp8 RL_zutOh8C.EZyolL89I04p5iKSHzwRhIuMafhyq8vwTPyQjLQwNpQl7_XPo GUTvzc49HJaOVKOsbHFgTU0YqrSa9l5V034wM54JqC_NDS_F1iYGtUHSRq.S 5oSACX_vz4IiwARm39shvEyicL_HMD7LkhrV6mYzvnCPepUCJAQ44qm.n5pa 9SqeIUd6X_itii6TO18zCadcBUct5oUisxH83.59WMfp_Yn0CRRARrwD_DIn jlMlO8iwM_aEIeM5ZJQKRD_ZxJNWHVqJIgHHHlUewCylIdhzjpPVdTIU6C16 0nRSrsGXxcED9GRFmuEfsEMuRCchPLsMt3bj.QKyP8ItMA9IFKA_cARLPkwm 953BRY4vuYtAmNd7uxFk3rMgugJgVL4gJvWURqaCdRho_0nZ1pM9b4jjM2QE K9oX273YQQFiQYnKGBh_K4OmXE6crjioC4acx9AHU3yNqVDWiKOLF1TSNWjL GF5Dt_mXdehT85t81gvkTrGfFgl9oR18jvV6.o4AJ6kjYKD_InYxmMNUNUNg Tudu6LOIIfxY.R6WKdHJnBE3w752QvSWxAXyHNhNMt2nI55rWoOY.MDJZVV. Q_kAS1yKFhr_BL6F01LUncwLvxbcqsWHCI.mxqDQwOsoCNB4oaNLb5KTLzb. vhGLTmJqdANgcXWMunEg8g2AA8gKXVnZdjztHKUeeJ1jrl7YhhfbYplkXIa3 YWhub7VfahKdKScCPjd0VOTfe6OW1aNzCtSgk.8JAbPQTRDH9AHWPUuBTmK8 i4JzhD_5lK8xFmR_UuV_Z3q5c_xI6JFQ3tJ7TDT3a0jt2G5evny.PF8pkIdz GVZnWImeDb8ozoTyWNjgD7_uvNCVqWEDDIDtbghp0_8G9jNktjj6eSAAxnRz vyMX9d9xGjxda_9Um8Hz5_S19WUgNz_oSXlpNfT4EXmb.ksae795YrZzso3t mpivv X-YMailISG: wctQct4WLDt.RNWMx3HRprTLDk4fCD_cIk2KKQcFYazFg6Ls l6xEStX4rWXQnZznrMxctAFG29FgzOWqA4TuIXRS4zmaBLr9Px0yS3vH13Mz t3IT539b8RtD1cBdMetRI7WXltoTYV2zYj4ztYm3GgSyFPz0oODeka0eZy.A q0Oq7yAyXG1TyZ0XKMxV0JOMTaNrau_8ISDSSrSc0V1IqpcKj5tl4gqI15bV TomP9hm0JCv2MjfYGotfMd9e2tjWVK0wjfK8o8e9_mmzJ83QWJ2bbU1QWiHs tLYEWma92YCleU9YBLMI3U1hk_S1Y5NgEto8ZQY3_qsCuMWOm18isdJtkIdZ 9iGjFqBeSfsH6DYuiSXIM65.jpPZT0RD73lbnVChNFFtO.Q8tO4u9UKwyqAv yqDQG_YLchAsRdC0_2o88ln1n5PIJgNjzhF242LorOOFmnrzq2.scT.KlxS_ RpgHqR582pP4f0Af9_5ZtcwvdbR7230SmJJyXESAn8YBk8sQ8eSrMTzLloZ9 ET8CGCi4cnHnKrbV3wEcDKBWMLmshnL_E88lWN_QZ9tZa39_axxc3vndaG.5 MhQv6x3jpUT0mv1p8panU5r8rWwWcGlp5cWT_kvRZ0Qbxa1lPC8ffhXEMTLY a9v0NDIFuKb.Kgf92KNkzf5uQXiWX80a5K673VGSTfHzdqmA2jcWj0rO4.QX MfQEwYiXlCwcw.t0glRjNuW7WTrC6kj_Wh9cSLfOF1iIIlXqZRL_spn6wncm yhjZ4VOPSjIMRKEUw1p_e2Ze1YMKfBdaCplYg.gwvtPam4taw_KY2TY03V5Y M8PrlGZ05tK434BWekcaiuye8Cgj1r0f1_pTguR9NJzglVU4ViWmyZPoyLeu 6grUb3bHO.C2sR6UxYo.7mu48jVL9YGEhcYBWYMn7_9klA3.9qW2mtc4_V9S oVy6FyJhrz3440qlkJnS831l5apn7JecUo2qt6lZyBSwKdek2QuTq2Ud3Hj0 Lx45sltlYXGfUa8PefsrwfqFDxSESIs1diZL2Oic_FbMrqANerfEwVPNSRzA 5ZkipcZIT9dNuU4taDuinvbdYmVLrbmqnC4KbUiwrxKcVBoM3aqV22isiFql xO3q_3.xlGC2CK.gGuNa5oHzXivK9WhnnTl.QyQ0_4z3lzgoFsty Received: from 45.8.46.152 (EHLO w7q6.motoracute.com) by 10.197.35.9 with SMTP; Mon, 19 Sep 2022 12:55:04 +0000 MIME-Version: 1.0 Subject: Exclusive Offer: First Month FREE on Every Home Warranty. From: SPHW Home Warranty <renter-info.toRbUH0@motoracute.com> Reply-to: <motoracute.com> <reply-lxyMLJOPCLGeOmPwqroopzYgtejZHJmGPSSxjloCnfVidtbjEbkBmvTUkjOMXHEjanCmo dCWpcSAuiVMyaRkaTAqpycfvmuHQ.lxyMLJOPCLGeOmPwqroopzYgtejZHJmGPSSxjloCnfVidtb jEbkBmvTUkjOMXHEjanCmodCWpcSAuiVMyaRkaTAqpycfvmuHQ_HTML-lxyMLJOPCLGeOmPwqroo pzYgtejZHJmGPSSxjloCnfVidtbjEbkBmvTUkjOMXHEjanCmodCWpcSAuiVMyaRkaTAqpycfvmuH Q.lxyMLJOPCLGeOmPwqroopzYgtejZHJmGPSSxjloCnfVidtbjEbkBmvTUkjOMXHEjanCmodCWpc SAuiVMyaRkaTAqpycfvmuHQ@motoracute.com (reply-4154483966-[nn10_11]_HTML-lxyMLJOPCLGeOmPwqroopzYgtejZHJmGPSSxjloCnfV idtbjEbkBmvTUkjOMXHEjanCmodCWpcSAuiVMyaRkaTAqpycfvmuHQ.lxyMLJOPCLGeOmPwqroop zYgtejZHJmGPSSxjloCnfVidtbjEbkBmvTUkjOMXHEjanCmodCWpcSAuiVMyaRkaTAqpycfvmuHQ @motoracute.com)> To: x List-Id: x X-Originating-IP: 45.8.46.152 List-ID: <4154483966.xt.local> X-CSA-Complaints: whitelistcomplaints@eco.de Message-ID: <OuWS_______________________________Time@motoracute.com> List-Unsubscribe: <mailto:leave-lxyMLJOPCLGeOmPwqroopzYgtejZHJmGPSSxjloCnfVidtbjEbkBmvTUkjOMXH EjanCmodCWpcSAuiVMyaRkaTAqpycfvmuHQ@motoracute.com> Content-Type: text/html; charset="us-ascii" Content-Disposition: inline Date: Mon, 19 Sep 2022 14:54:08 +0200 Content-Length: 2010
Parsing header:Received: from 10.197.35.9 by atlas108.free.mail.bf1.yahoo.com with HTTPS; Mon, 19 Sep 2022 12:55:04 +0000host 10.197.35.9 (getting name) no name
10.197.35.9 discardedReceived: from 45.8.46.152 (EHLO w7q6.motoracute.com) by 10.197.35.9 with SMTP; Mon, 19 Sep 2022 12:55:04 +0000host 45.8.46.152 = w7q6.motoracute.com (cached)
w7q6.motoracute.com is 45.8.46.152
Possible spammer: 45.8.46.152
Received line acceptedTracking message source: 45.8.46.152:Routing details for 45.8.46.152
[refresh/show] Cached whois for 45.8.46.152 : abuse@maghost.eu
Using abuse net on abuse@maghost.eu
abuse net maghost.eu = abuse@maghost.eu
Using best contacts abuse@maghost.eu
Message is 3 hours old
45.8.46.152 not listed in cbl.abuseat.org
45.8.46.152 not listed in dnsbl.sorbs.net
45.8.46.152 not listed in accredit.habeas.com
45.8.46.152 not listed in plus.bondedsender.org
45.8.46.152 not listed in iadb.isipp.comFinding links in message bodyParsing HTML part
No html links found, trying text parseResolving link obfuscationhttps://i.imgur.com/m6TVNq4.png
http://skinwatches.com/op/56136_md/7/35073/4353/894/258156#v4bDrLb7zfuKbdy3Tracking link: https://i.imgur.com/m6TVNq4.png[report history]
Host i.imgur.com (checking ip) = 151.101.40.193
Resolves to 151.101.40.193
Routing details for 151.101.40.193
[refresh/show] Cached whois for 151.101.40.193 : abuse@fastly.com
Using abuse net on abuse@fastly.com
abuse net fastly.com = abuse@fastly.com, postmaster@fastly.com
Using best contacts abuse@fastly.com postmaster@fastly.com[report history]
Host skinwatches.com (checking ip) = 172.67.205.81
Resolves to 172.67.205.81
Routing details for 172.67.205.81
[refresh/show] Cached whois for 172.67.205.81 : abuse@cloudflare.com
Using abuse net on abuse@cloudflare.com
abuse net cloudflare.com = abuse@cloudflare.com
Using best contacts abuse@cloudflare.comIf reported today, reports would be sent to:Re: 45.8.46.152 (Administrator of network where email originates)
abuse@maghost.euRe: http://skinwatches.com/op/56136_md/7/35073/4353... (Administrator of network hosting website referenced in spam)
abuse@cloudflare.comRe:
(Administrator of network hosting website referenced in spam)
abuse@fastly.com
postmaster@fastly.comNo data / Too much data
You are most likely submitting a very large email. Please trim some of the unnecessary data (noting where this has been done) from this posting and try again. SpamCop will no longer accept email larger than 50.0K bytes.
Other possibilities: You may have a firewall which prevents HTTP POST commands, you may have linked to the wrong URL or your browser does not handle binary submissions correctly (try a different browser)
-
Hello,
I have submitted many SpamCop reports to ISPs that continue to ignore requests to stop sending spam from their networks yet there is no change in the frequency and volume of spam I am receiving throughout each day regardless of the fact I continue to report the spam to SpamCop. I have also copied the spam headers and email body to Apple Computer's FIRST Team but I am not sure if they even assist with helping to blacklist the offending ISPs. Below is a list of the ISPs that I am receiving malware laced spam every day that continue to ignore SpamCop reporting:
-
Submitted: 9/19/2022, 8:46:48 AM -0400:
Introducing The 3-In-1 Butter Knife That Is Changing The Way We Breakfast
- 7211897008 ( https://i.imgur.com/Oy22Fy0.png ) To: abuse#fastly.com@devnull.spamcop.net
- 7211897007 ( https://i.imgur.com/0HSc411.png ) To: abuse#fastly.com@devnull.spamcop.net
- 7211897005 ( https://i.imgur.com/Oy22Fy0.png ) To: postmaster@fastly.com
- 7211897004 ( https://i.imgur.com/0HSc411.png ) To: postmaster@fastly.com
- 7211897003 ( http://d-allthebest.shop/rd/c57505tSNHK878933zt... ) To: abuse@mwtv.lv
- 7211897002 ( 128.199.74.57 ) To: abuse@digitalocean.com
Submitted: 9/19/2022, 7:53:16 AM -0400:
Congrats! You've received an Ace Hardware reward- 7211897023 ( 185.56.88.171 ) To: contact@buzinessware.com
Submitted: 9/19/2022, 7:52:38 AM -0400:
=?utf-8?Q?This_Let=E2=80=99s_Go_Brandon_Hat_Is_FRE?= =?utf-8?Q?E_Just_Pay_S+H?=- 7211897079 ( 134.122.62.69 ) To: abuse@digitalocean.com
Submitted: 9/19/2022, 7:51:51 AM -0400:
Protect your gutters before it's too late- 7211897131 ( 188.213.31.159 ) To: abuse@firstheberg.com
Submitted: 9/19/2022, 7:50:46 AM -0400:
Camp Lejeune water supply contaminated with toxic chemicals linked to cancer.- 7211897174 ( 128.199.74.57 ) To: abuse@digitalocean.com
Submitted: 9/19/2022, 7:49:33 AM -0400:
You are a winner of a Samsung TV Sweepstakes entry!- 7211897187 ( 85.239.33.190 ) To: abuse@alexhost.com
Submitted: 9/19/2022, 7:49:23 AM -0400:
Do you wish your pet could play by themselves? The genius invention that cha...- 7211897243 ( 116.204.180.37 ) To: abuse@bangmodhosting.com
- 7211897242 ( 116.204.180.37 ) To: abuse@bangmod.co.th
Submitted: 9/19/2022, 7:49:21 AM -0400:
RE: Congratulation! daocampo , You have won an $1000 Shell Gift Card- 7211897269 ( 45.8.46.84 ) To: abuse@maghost.eu
Submitted: 9/19/2022, 7:48:40 AM -0400:
Remove under eye bags within minutes- 7211897208 ( 103.245.166.16 ) To: abuse@bangmodhosting.com
- 7211897207 ( 103.245.166.16 ) To: abuse@bangmod.co.th
Submitted: 9/19/2022, 7:45:26 AM -0400:
CONGRATS! You Can Get $100 Kohl's Rewards- 7211897309 ( 116.204.182.18 ) To: abuse@bangmodhosting.com
- 7211897308 ( 116.204.182.18 ) To: abuse@bangmod.co.th
-
Submitted: 9/19/2022, 8:46:48 AM -0400:
-
Thank you very much. I will report rogue ISPs to CERT.
-
I spend the time to send spam reports to SpamCop but I am not seeing a reduction of spam. I see the same offending ISPs over and over again every day sending the same garbage including malicious links, attachments, and URLs. Does SpamCop really do anything to stop spam or is this reporting a waste of time? I thought that offending ISPs are eventually blacklisted if they continue to allow spam on their networks?
-
I deleted all of my mailhosts and now I am able to send SpamCop reports for all of the spam I am receiving. I hope that many of these rogue ISPs are eventually blacklisted so other law abiding ISPs block them from sending their malware infested links to the rest of the world which really has become a national security matter that we all must take very seriously to help fight. Thank you very much for your help to resolve this issue!
-
I just received this spam that was pretending to b from McAfee. It is an incredibly malicious spam with malicious code built into the subject header which automatically initiated a malicious website URL, but fortunately my anti-malware software, Malwarebytes Premium, blocked the malicious URL. Once again, SpamCop reports "Nothing to do" and so this ISP gets away with sending malicious emails to people. This is really out of control and SpamCop is not helping!
SpamCop v 5.4.0 © 2022 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6774820422z2b1685b52218cea09110e5dd44a83073z
Skip to ReportsReceived: from 127.0.0.1 by atlas-sbc-production.v2-mail-prod1-bf1.omega.yahoo.com with HTTP; Sat, 10 Sep 2022 16:19:34 +0000 Return-Path: <info@schultz.susanmariedesigns.com> X-Originating-Ip: [88.216.97.119] Received-SPF: pass (domain of schultz.susanmariedesigns.com designates 88.216.97.119 as permitted sender) Authentication-Results: atlas-sbc-production.v2-mail-prod1-bf1.omega.yahoo.com; dkim=unknown; spf=pass smtp.mailfrom=schultz.susanmariedesigns.com; dmarc=unknown header.from=schultz.susanmariedesigns.com; X-Apparently-To: x; Sat, 10 Sep 2022 16:19:34 +0000 X-YMailAVSC: 42yHgPk3bBuxC4ebqgdVn5SnPOcnX.tLBi6P5pJS8E_sUtx BuIw4Z_epm.ypzuOA1MD6qGSv.WGGpzoBeen6euc2ZkIT_J3szP9UXgknIJo MlYTySRPhlHNaXMIS1e_I0BaY4LN.lYQKLmFop2P7TbWxvZ3flMd3..KBwI5 WX9qzf9RG1pPfVOVI8tKYDxK6qu0IYe2a_76L1_4AEuxtpaon1VdK6STIy5k kbiUT6JQgWG5R0Vgan5.d576YZqzFeXv6PEedHYDBfPRSCNc48brSiD9mx39 BQqAf_SeJerw9EXarcSF7iKyYur5ThTxQ.IoaDNK_WI31ZmcGh9XnixGSXMN l4HJsfvCgp0mwfDtiLkWeA4.nkKBXBSesUpamUrbJfptzSrXbyJ4FUuKveC4 GrcrudFogLDbPryShJxM2qlQbPrT1uFjtVEnejQcSSjQ0cS6MZa5gjHMsyev Xfs5Hw366yj5Sl1N8vJYe4HrbRVG46CEiajmfrkl17aDjDKPbYyPcTxJr5xn EELIdC9cYcg4rGf0Qx0C1J0KvWI235NUoAK7SHcjj6PCvYLJPYdRodToq4q4 3IegpMypjvedhDBMuH2Vvd0kLUlffqlF_S3BHoyjwtZEDVug3EyWu5enJBc9 NHbaPB_JZSIQhiTT7I_VyfC4.ss.daAy.SS.HpQearModlly2MEkjwwJTBMS XSXfOnBDLKudScfN99mDq2Sq1GTi5.aiy4KmqnoX7vE677IsZ2DLJVTr444h D.24p7wVrBpOlPeibbiHLTmGdyE95LsWc7Rbjdm5cXKpa6vmmUu80EZXG_ne fc7POzMPevuuID41U3..L_OKiUKI1uvxBXWke4dy8wZw7ELTaRENg6QSSND6 0Oi8miNZWMCMG8wp20JK7ebCq2Kv.p8dlehIa3UZxC.LHmcjNu0luzKFM3Ur 8oR3yZvdyGK.ShVGNSHwms635km_poBrI_9JwcRXL4l4hnUq9UV4yiLurvTH joDjzr64W4NuwKq23j94SzdqcPhQtolmX_4CmJ2Im6HXpZqyiYZfLJtetycl TP9m44C0lVBeNNspyVaEtpi_ZV.FHYMR1lhCLmgvDiKDgR88sWpFpKFQ2Zg. dmTHGJYdFaCOGMSXitNim6IXu1kEljWUPhZHA4o1WIMY3lCp8wtrJtYM1XCo EZgEzlZpA2966Eper42d0APnNBsiGeB31CM0m1cMV20w2WCKM7IclKPla5tK YpaV1zH6F4maYQfXPnqZgdv48q8dH8HibEyriX3YRnR1UDC5kH4aNpMppRjJ EIdWNRNagJroZXClsrXvFSw51RTal5YUzC3be9mLVRV4JQX_ZvYTaQVCbux8 J1RamRLs- X-YMailISG: fAdRTKEWLDtxXkCXRHNSzyYNVOwT97QyTKnNsnUynj514QiB _6beXvGEFq0_XCHrVHyh8RIDniOnAChib82FMBLcRelyNr560GM79p1mE3Wc EVg.vBI0jmyKqnuj_QMUbEpC82HomxduwVWD0BOUO9ifoCvyQ8ilOKPei7v5 iYRAZkKCowyhMtVpSHBG6kczSY5EEa6JMBK80cgLHElyvcUXA8liicgeGCqv DOazqdG0qi_7GdWEb1Ek2oHTvmXp1yAOqmBqBQbXov4Q8DYRf2Pj.A9KNLq1 e6LA9hj70z_AAoVuOAefYPNAnp_zLXdFjz573rKm7JYk55JvP.acXRJWeOjB 7H77tN1dfbPHNucG1AMmxuix1oCYmb7iFBPwjj0IEX6I6uKnNIUFBUNw0wvR .0Va3W2zy.sS2xuwPhcKQTWqMrwRRPzfl76O9rtLolzUszT0cOaVa1btXhg6 NtI7DJYQwwCgFMXd_z22lG.akFKz442R1wFv_npj7nYxKe0ywsN9A0npqKJa tfE7b.fCNPb526JIm6QasiFKVnGftrdEBXZNBEUnovtXk6gLEhJUaO5aLLIa J8Drs8jEOkct6i1o4FSWa1qlThGEhI0zT3XpWP1e43y1rqbEW1RYZYTqs1hS HS7ztzC1RHGxHAgoBNqdeuJ5sSTq6k8iYDO9ue0cwe.Goxss5yx07lj5O6P7 kDMUjGAVSQIsT3W.EAs1EnvOZ8CLtaWhWXouSEYRT3N6cmH3Y_T.9uAwgftf Z0CnecST48QbfxMxyLiiLUywXQ336dmtqs5Lh0jV_CZRGkKpUQ3mzGbUC0UL EUdCCv.jDgi8Kqo6JbWDq7ZlRBMyP5yQfosDGLYk5bk5EOfhpK4W1GWakYXo qfRLw2o.EXSujeMUDwWkAREfyry0J1BXa8tESL7M46JjEjLN_hWtUJ4y_1sh jUz6bk3ZQMlNDMTaa4c.nyPfcZBW6cPB5B10u14rcNb8cqoDj1dhfx4QCc2f XolYKKdY80jdE8K_dk8eb8WSAdq8azWqhOhwV0zNKJ1u4BSt.o69qJDZd8rj X6ILfvImF_SNJa_1IWDh6AOWv5HPgcxsVemqvNpz2YqLt_IQAyG0AVOGx16C Received: from 144.160.244.82 (EHLO alpd681.prodigy.net) by 10.194.221.232 with SMTP; Sat, 10 Sep 2022 16:19:34 +0000 X-Header-Overseas: Mail.from.Overseas.source.88.216.97.119 X-Originating-IP: [88.216.97.119] Received: from bscs.org (schultz.susanmariedesigns.com [88.216.97.119]) by alpd681.prodigy.net (Inbound 8.15.2/8.15.2) with ESMTP id 28AGA54O030221 for <x>; Sat, 10 Sep 2022 12:19:34 -0400 Message-Id: <2022___________________0221@alpd681.prodigy.net> Received: from localhost (127.0.0.1) by schultz.susanmariedesigns.com id 8JO1ZrBKfv for <x>; Sat, 10 Sep 2022 12:19:15 -0400 (EDT) (envelope-from <info@schultz.susanmariedesigns.com>) From: "Daveocampo" <info@schultz.susanmariedesigns.com> To: x Date: Sat, 10 Sep 2022 12:19:15 -0400 (EDT) X-MSGID: 687434368Oq694764 Subject: Mc‎Afe‎e su‎bs‎cript‎ion exp‎ired‎! P‎r‎otec‎t yo‎ur‎sel‎f & yo‎‎ur F‎ami‎ly N‎o‎w Reply-To: info@schultz.susanmariedesigns.com Content-Type: text/html; Content-Length: 806
Parsing header:0: Received: from 144.160.244.82 (EHLO alpd681.prodigy.net) by 10.194.221.232 with SMTP; Sat, 10 Sep 2022 16:19:34 +0000Hostname verified: alpd681.prodigy.net
Possible forgery. Supposed receiving system not associated with any of your mailhostsWill not trust this Received line.
Mailhost configuration problem, identified internal IP as sourceMailhost:
Please correct this situation - register every email address where you receive spamNo source IP address found, cannot proceed.Add/edit your mailhost configuration
Finding full email headers
Submitting spam via email (may work better)
Example: What spam headers should look likeNothing to do. -
More spam keep coming into my primary email account. SpamCop still reports "Nothing to do."
SpamCop v 5.4.0 © 2022 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6774813157z008d5d570ef5ef1504270d1a1924a2e2z
Skip to ReportsReceived: from 127.0.0.1 by atlas-production.v2-mail-prod1-gq1.omega.yahoo.com with HTTP; Sat, 10 Sep 2022 15:47:25 +0000 Received: from 188.92.78.107 (EHLO h-homeownersoffers.online) by 10.253.31.116 with SMTP; Sat, 10 Sep 2022 15:47:25 +0000 From: "Japanese Kitchen Secrets" <Huusk@h-homeownersoffers.online> To: <x> Subject: The sharpest kitchen knife Everyone is Talking About Date: Sat, 10 Sep 2022 11:46:02 -0400 Message-ID: <8921_______________________3384@h-homeownersoffers.online> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00FB_01D8C50F.2BE32F40" X-Mailer: Microsoft Outlook 16.0 X-Originating-Ip: [188.92.78.107] Authentication-Results: atlas-production.v2-mail-prod1-gq1.omega.yahoo.com; dkim=pass header.i=@h-homeownersoffers.online header.s=smtp; spf=pass smtp.mailfrom=h-homeownersoffers.online; dmarc=pass(p=NONE) header.from=h-homeownersoffers.online; X-Apparently-To: x Sat, 10 Sep 2022 15:47:26 +0000 X-YMailAVSC: j6rJWZI3bBtDRsUhdDUMYzuMPlSbaZ10VYPiaNv7FeuBIFW EY6Pm3_.syE8gUjt_SFlqi7aKbG.MEih8qCH2y9cx01jymRFBm9v7ESt8BV1 K1aYXyQDdLYd4oIGfIMSVzwGdPEE.AC5Dzy5Zrm3WwZ7AfV9bFVJPsTD6dms s.uJ.uoSQHHOpboqISRxJT2HYkQma2ZizZ7oTTf63JBGyi0ZGHNuj9CRXwNQ FTB2QaNaPeU9dt8UQ_3DYp13fgQuKsCbqpTYIg2LsaPTlEXTfjFXJuLIRp2b DsWncy_no5QqqCjsrd_HUk2Nkm46zmAlitz2IuMCe5wpPd9CNwFLNXCAAom5 pXUPimdk_Yk_EM0DBhZ8Hvt9BoOcIBsI8CZBcFgIIn3TjTiL.82bxKCGvZoz 7XjIxOmkLgHiXPlIH68c_e.8ThGA4ZXgpICIeVCbxk3qnEsQ5iJW5YTbV0qv XNisJuQdcsQmj5jMIO0a0..LniKqnGF3QLJvI68NrJ_XuWJlJcH4gNaAKRec p0TbpKIyGoxNvnz8ru8SepsoDnaA_bWQLhivHOPmtBEV.hzK0aWCrW1z4QLb pfMuuXVMjlR.2msmtZYBJDgBpKNnCL0BdtBVMejJefnufjnFPDQvHDeu1kPC MQyZacFAKL6dS_H2uqidt8uM3hZXW8qJT9RQPrKAl8lHXf8W3FMzHSujtc8u w8sSqPswbqxsd4BGpcRFB1Wl7oKerqV0mNX7lE4ZvSKt4fKGEBL5FSCZWjBY 29r_rNvTBUreDhGO.zf5dBA2qjyI9ILlObonhmWf1tlDNL9L3sTq.bvGp0Tq HOEP5A2HkrXbPdVeowBOmWhEjaE6JPe5Xm6LaC9AAq6.dAqRwRklZyPrNyi5 lv0ALdTLKsjx6kNnl0CLhR8A044pRar8UG3IscxxqW2xPt4oM9qY2GkXSMZE bHCUJ X22.BhdI1aV8Haddh4whca_ihWr81nZ3BZWKa9Ue40qS1KXhf.BkUrO ulyR3DGHEjfkeiTuaDZMf4jYpNFCdknJwfis2AhnUnAovTbc4PFs5VYu.LVf 50zQiyKCD2iywCqpx_DCM5kmgBy3fRSdg61vmffyunqw.sC4IMZXt26Uu_FR 6Pscwr6n_ga9JCVx4AEt5T.RsHtI2Ee3vv5pXQ26kSSzpnHtUWU7pWGPM.l. mx4frBEFb6_bbbpHGSChGwcbGpT_duXAzFYrcTz8QfK2MhO.5zz36UFqy6vS DtkAn7YebTCBcDCD7qPZCaCfKxxv7Yb4g3jbJBoML61trdbcHQcBQgogXtHm .MVDwn8YdgM1mc.IGtmerheMOd6KZGNQqSOWVXpEJNGPqvIatsLPid2kXJTS lFH_9FMPP5M0oZJ3lttMTjIFX_f5eNt4VhPx7M3YVH3.ZrWmPB3D2oxYfL6R .jrLgmExetnUCUO6x.26jSoP.r6Fz9ZQ819G3Omyy5MowBsT.1ycOjdTVEJ9 hCl8Xu9.7nunXCF2NjDyiKjg6LWbbCQmTxYEzv2BBjEZoGGDGAxLfOPZprjG P8yDF9B0xFAey1k0aZcbM0dCYzIlOZczk3ustrUCBs8yaiveO1YVh4Vu7AaO L84htx4QrHt_O6ErpRF3KKgLRo_6uwnyZ6odFsZl7SvDGK.W6_Q-- X-YMailISG: 2cPFdHYWLDup.slhnOr4Wmqq7w3hrxAhenS0hyuD9gJwo1WF 4n8L_b9dJX9zgum6Rs6AYftGAyHd1S5biWx8j_UkA9mlpubkcgxq2HG5_7yf XZh9c1.yuOsb5oICwR92lay3ni8c6a1DZ19SzSpmH8CAVrRECKf8KlDOWRqU tdsF1iruZr7n2vm4h8I8XqGCKssiyJWXsvqIgQASgWZxjh.OnuLEqqFMAequ s4bKaLKXCEZIKr7mSVz9eNTIyIDBscHW1TkDrcdOSys8loxZLhZf3VpBSGv0 JjuHX0OvITdc8gz6JbPre.iz276pHcU_FE8ul5VtrkzVE2LOWwLi0dxROk8z VgWYG.Pd6Y.qNvMFiwkpyXer.YrOtRP9Erqpzs8_y3lv6LMqALVwVc6tp45z 26rimJa_D4d3iF4IMZ.rBTnwPmZEJtkU9C8IP8JuE6HC1HnMIU21tXdLQNqd 3x.NPY.1HqyBQPtf7C1rCoViNww7e4TuaIg7PEv3nMNLb.1bGfBv_Kj_7sCb 9NFoA63AM1vETThRsAAJ_UT0Q47XoZtV9fwQEakI9XLUY7LKRJvLDxt.Bbd2 iE7HjXFxF2tGJEoy6gyT9C3yuLP1I5YuIOm.e4SV6e6bexyp04_NlmXpEqex pknreyDuOhtUBqsg9zhLPNI8qI.R0rOGjT3MGFle6CeJYUOq.ciGnkyMQQSz Kv9fV9C8JSHOVN0yLbXC5HfI9selfP45yCDnDfA8imphhes1QEz1.b0vvye6 j_89iDgSkWnFE_qCKeBZq1lt19Zz_KFDdDwp2WOSgNoiKZ.XYKC15EcNbNBf dwCadMPmyxRltoSO._65dzL0Xm3m8ugCjHlNij6qvlFCtBGBLzBCqO3T7_ZY AyWoXGcrKr.Csl2cqrtiLWmtM36D3Cc.NI6NUm.z2oUQ26nAF1lbWAFVjq8d 8yBn Q9ydaFzncsCU81jvemaWu92ZQaZ3TSzJNbuQR6E1nRz1mFDy6d6XEXM8 CPPQAbxF7R_KcKK43GhptCWOKJGuO3wPOzDB51dy0wRNqBFVjqAi_UAQhD0w jjUZRrngYvtvjzFC6gckEFp3S4y9WzF4DdEE7hmeYGxHgSMgBWmMfBDCvPMr _ZYfcBMsWZ681t75Kgyotdo0SyAdrWdn2HHhE_JCwbCDtJRozRm3OVXPOGdH bpT0zRt7_vtNjdh8cKinEcIyQpi1pLHrqj6nnD6G_KwhbqibwxD5vQI- Thread-Index: AQI0GQlN5g2HoDtIBs8vV4qpNu+xnQ==
Parsing header:0: Received: from 188.92.78.107 (EHLO h-homeownersoffers.online) by 10.253.31.116 with SMTP; Sat, 10 Sep 2022 15:47:25 +0000No unique hostname found for source: 188.92.78.107
Possible forgery. Supposed receiving system not associated with any of your mailhostsWill not trust this Received line.
Mailhost configuration problem, identified internal IP as sourceMailhost:
Please correct this situation - register every email address where you receive spamNo source IP address found, cannot proceed.Add/edit your mailhost configuration
Finding full email headers
Submitting spam via email (may work better)
Example: What spam headers should look likeNothing to do. -
This is the most annoying report I get from SpamCop "Nothing to do." reports are total nonesense when you're getting dozens of spam every day and SpamCop reports "Nothing to do."
SpamCop v 5.4.0 © 2022 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6774802126z1752396a3656c9ef399a20b76d6f76d6z
Skip to ReportsReceived: from 185.56.88.171 (EHLO onlinebusiness.fun) by 10.197.32.75 with SMTP; Sat, 10 Sep 2022 13:52:10 +0000 Received: from 10.197.32.75 by atlas302.free.mail.bf1.yahoo.com with HTTPS; Sat, 10 Sep 2022 13:52:10 +0000 Reply-To: <Reply@onlinebusiness.fun> From: "My Timeshare Expert" <contact@onlinebusiness.fun> To: <x> Subject: See what your Timeshare is worth on the resale market Date: Sat, 10 Sep 2022 09:52:08 -0400 Message-ID: <3965_________________________0936@onlinebusiness.fun> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_008B_01D8C500.DE06A940" X-Mailer: Microsoft Outlook 16.0 X-Originating-Ip: [185.56.88.171] Authentication-Results: atlas302.free.mail.bf1.yahoo.com; dkim=pass header.i=@onlinebusiness.fun header.s=smtp; spf=pass smtp.mailfrom=onlinebusiness.fun; dmarc=pass(p=NONE) header.from=onlinebusiness.fun; X-Apparently-To: x Sat, 10 Sep 2022 13:52:10 +0000 X-YMailAVSC: Wvr4CRw3bBtiiWAl8dNdC8zbP7eATkZgtvNc91WByqN_BVr 8lnyc0eDcoy_cItKW0d8M8v_bG0KBHT3h.pDO4CXyuAo9fkqN6AwQMLptQqv 4oIuMSD_gxDpEFj8lNndxgbrAmJU63lg4LgNhVtPCWp7rttelzWTgdTMwHxL 6bcUETGiv7dZI725sPYFGnLcDtuTDrl1r8FWeZ12wQiYBMvOnqwLrVdDeojV RSp19vJ1muNQVDMVmNSuz0DYOHK2.VcTO262lGFSY33dhUty4ffXq7YQCLPc S8DG1q2VXGu042dsjlLG165xx36k4s._cJt8jQS2gqMbpJsYy.8j2EHu6OVd aUz5vk0s4LlgZWPm8htnen0CPwOHTugZ1KQMeY3AZQ.7z0Oy_UdtfCGLgBUz 8smb4b73HtpakdeuOl6bix4_sALoytV1Yg4tfIdWlVB3zUP.UWhF8wWkS3H9 V6eecAOQJUdeAnsfVutlwGP2Rvtjnwql8YG3aLXQ5u_EoJ1.VLCQIRyMHyXk UMiBSkm5y39v10tMt7ID6zllZP_4.1iPTr72v2bHia_IjnL39WGnAJ3_Vho0 ASPYDgEMqhQV4kT1DmOa9vNUvV1_gU0aikb7T_VXDRznacRZgzqEAamyaVNH rabBW26Jgd7Tp9puCokk8wxumUwU8NjbYA77MRC561abqU7exbHkjw8RPc.t 5jX1Q4VRSRmftqnafjq5aQPdEMNhVlbLfKRA0XEcyH1O2fTJmd97dM.Vmtb0 rX6q4TX9lFHBGqQxew3QR7JlSyaUy9LlrSBd41gJ6_1MqmX80tpDq0DSf6_T 1XEmLq.tmQ3mcNc9IeQDA.3L12bN3o.LgXjRtniiq7kEnKm7Nl6D7ZMbev6T L38vTKDtTEhQ2hE7RmDJML_uDmgtAuKX51eDLF7aPNUxIE7UY.UnnhcJLMCA A6xT_ HEcCW4qWaBISG0CKNBRXhsTqIe1RunO3cFZ6dlT38hS3CYUvCpFDNo_ 1ifANPJWz0UFvthM1praXXaiYIVDQZwfvViSWokLfVc1UI.ZGdG9HNOCgjwa g1Hl_qK7ReU09ustzFWsUaQGnY9V7bUBstevVyauId8TlG1Q_5qBCpmjRxSK TmgjkHBj.C6KeLW23kanbG4WUQxHpI8JZPnTWMvDs_V7botSFX6XvVvhrfm. IsdJttydLfUHTswO_4QYSIWckP.6YzxyA5ZeXwRuhevM3Y38dL.SVW5rBu_y FjJNPyILDBFo81UmJCPVJuL.EAOuJwkFsBMA9TrAxxJe_hV7amNCk_JfVDpP 8A_E0bg-- X-YMailISG: tpz7DBsWLDuYSj.s.fQ9xVwDEXgxoGvIRVuUBvHb2jbZHz3w L1vdJjuDPSTMyZsKzp_Bpl8KDRq4bubtrIL7R8SVj0Y._E8NTRtD2GmQBmji PK9PD6XL0yG2xpXm_SfMMXnxE7hjdTdoHM0S4UH0RWpFA9EL9204vkPt68im fQFUW8WVq4w_CWOPQm4RFGukDAqB3eWlN3DyLClbLAW0UIX_4p1WRBVGQ.E3 NNNsH9p_hrJgs4x0YVguhUV3or60uSA1PkR5GsajxprJO.Ptt.f1DpQAQKll iTIBGuxwzWm2aQf5zAGHpYmj4KYN7S5yfO6o2iHDc_x7kPI6fpA882DF4H__ Ch8DhPJka9u1msFPBdt_EtR.5WeowZI6.Jx_PMlvKdNXN12ymNLxAuyZcl1N HPRCi5M3j4dmQafTDiZnwraNOtxivnQYkv1GX63_B1KKgT_MuF9m5IOWBRnp i4pb7pUFH5FRPAgMpd5i69F_vMDFBkyMlePkwLxXKx7joPbecN8piol2A4J_ s1h1ZPHUNspKs_AaNXdEjatmRlCTot7un8.dPghUl5pldGtTHKPMw3OdKGbx 1X159e8HqmczEmu99hSwUdSidPohle9ohazsQeOGUnvsOiPq0RQe34PzkJ.t omSWSIuStEcSqmZO44bkG3ZpCVvIODYNVnfTr7F6IMTa4VPR2Mu7yH6CG8Di rmGrATVihrxTIztEtBUD7BSvSu.MuTLGIUZQn.x6W5YI0z.LKWtqbLtJCNDG IXj5OsjXy9OyyM5HE.VmwRh1bscLwaEjUCkba3GpRhTdoHQDKmp8aNFrTPia KyWFzDKkXqD4csQjiqh0wyEpdGdRFndrHTwK65MzOeeyucM_y1vw5hFutALf XlNmELP_tOYjuCPIVRYb646DaWPt1uMZ6nVuN7Eg4om9ixXlKZHQa3Nup_xX 4mrJ 1D0it4ldUXBiJuF2M9.3yqtuh7u0zLjmffngX3JU9TOXrfgTpIUqQyHk DutlyalJT7MYJ77xpT3o89tqwPDUa1rGmSN5.5RE.Z04LBcNwTIfCIY0ubgj RzSVTzMo46IzUebVkPMOGpr.DJI66a65x_TwmNDDuJFbyp2N7ut5397HwmMG 4sA1YVsrNSZd4LQ9.ykjC.vfZknNCaMskAs4mNkgumqyTNdRzEXsNh6dEDUc 30r4GmFGxqdiIMJNIojQc4TClPYkSkBvYko3CZwsH0LavRcrWJW6DoZghodM sWY- Thread-Index: AQD7/7enJvmo2XdxKOgXfWJjRhq7SA==
Parsing header:0: Received: from 185.56.88.171 (EHLO onlinebusiness.fun) by 10.197.32.75 with SMTP; Sat, 10 Sep 2022 13:52:10 +0000No unique hostname found for source: 185.56.88.171
Possible forgery. Supposed receiving system not associated with any of your mailhostsWill not trust this Received line.
Mailhost configuration problem, identified internal IP as sourceMailhost:
Please correct this situation - register every email address where you receive spamNo source IP address found, cannot proceed.Add/edit your mailhost configuration
Finding full email headers
Submitting spam via email (may work better)
Example: What spam headers should look likeNothing to do. -
When I am able to find the ISPs, I've contacted some of the ISPs identified in the SpamCop reports and confirmed the reports are being sent to them but they don't care and they don't get blacklisted. One of the biggest offenders is Firstheberg.com which offers Web Hosting, VPS, and Dedicated Servers. A lot of spam is coming from this source. See https://www.firstheberg.com/en/
-
I think it's time for SpamCop to find ways to detect offending ISPs even when sent through network received spam. These spammers must be stopped. They know how to beat SpamCop.
-
Hello petzl, I am using the Microsoft Outlook Desktop Client verson 2021 which connects to the Microsoft Exchange server. I send all my SpamCop reports from Outlook Desktop because I can easily access the full headers to include in the submission.
-
The spam is coming to my registered email address with SpamCop. I did everything perfectly according to instructions when reporting the spam but SpamCop is unable to find the ISPs. What's going on and why?
SpamCop v 5.4.0 © 2022 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6773098090z7c0129a5864c8a827dd01e12bc380a53z
Skip to ReportsReceived: from 127.0.0.1 by atlas-production.v2-mail-prod1-gq1.omega.yahoo.com with HTTP; Thu, 1 Sep 2022 16:02:46 +0000 Received: from 116.204.180.37 (EHLO goodnewoffers.cloud) by 10.253.234.152 with SMTP; Thu, 01 Sep 2022 16:02:46 +0000 Reply-To: <Reply@goodnewoffers.cloud> From: "24Hour Bathroom Remodel" <BathroomRemodel@goodnewoffers.cloud> To: <x> Subject: New look bath in 24 hours Date: Thu, 1 Sep 2022 12:02:46 -0400 Message-ID: <8661_________________________0212@goodnewoffers.cloud> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_016F_01D8BDFC.A79CA9A0" X-Mailer: Microsoft Outlook 16.0 Authentication-Results: atlas-production.v2-mail-prod1-gq1.omega.yahoo.com; dkim=perm_fail header.i=@goodnewoffers.cloud header.s=smtp; spf=none smtp.mailfrom=goodnewoffers.cloud; dmarc=unknown header.from=goodnewoffers.cloud; X-Originating-Ip: [116.204.180.37] X-Apparently-To: x Thu, 1 Sep 2022 16:02:47 +0000 X-YMailISG: OLFTy8QWLDu8dE_0k.7i58tGsoHR4eFgCV2ghAoW51YmI5Ni drQUpl5iN2G9Qm523ju2NtbccRQ31cvVOF8MY1Z094WOj9f2QSGZGtFUeM.w P3ZzDIQK2RpSbBaAwe40glWpdzRm80IK_3DsTj5xYgtnzKBBEMVmlraQPUY4 alCq5hjRSIY3DY3QIiJYsMRGSB1.U9.o5mQazX8Nw7uJ5xzZTlcFd0fYuZq8 XXDxzaxUc0LuViXcbPJRXJb8gOVhvLfn1sPECu9hMlncmKeQ0q56oume9miP jI5ELH39HA2ygc.bZah.hJSQ0Xjl_XEvN.IXirIhHMMpcX2GVUv.s2OuKgQK 2MNH3Omaj5UzHochNaey1Hykv0m1aPmfK4m9rjwJ_8U0FtPBG3dykNAROLmF i.m0bP.VxCiCgDe2WOEyiApwmYq2QgZxGZM.xQLwp94mh7G.UNlRz1_KiW5J ATM0efBqvMogXLMC.UizPew8BYope6cYTjuLyFeY9ZgLLinnLGRUHGEouM8f sCPZIZbK5lCi93L6wA8SX7eB6qZG8cB7RDct3EC4TAdSz.Xeu3AMgL31nbDa G_PoBwIiD0NEt.9tt.qpyHzxoQBei1OZxSHNKpUKiBRBOgNKHDAZiyIrBW11 Xkleqox4Xws_KOyG_Al7eyUA_0BmINuBqgYvL3VwD1CdKoR3THkY39ZFDtLx t3z9Zyi1UkKi.AwpELw.qnQCv8sV0ybNFoP7puvuzxXLarRXEbCb9OC4mseX Qu54rTk_lNRnQBifq_vwB7il3Iv6kjcp8gdydO9YqeWOhQrEmYXXJjbB_2zZ cj_rOrRUUdzyyT5sfUEi2UkOdBE8PjRhwjNxrhxdwnvaTT.p_Cv4qb37cMYM QZZpjJmO5tMGoUceXainKRbAfl_n_FQcjvuVkGPE1KUEj4kzE902cUWyqIU_ ykZS Ru1gVtOqfbKsFRCBst_zsT07qc4fzKbi3xnXx9kO1WT3Kobqhqf4yMn7 tVbeVNPmbiekD5zF_qGAtDHdryeOgW_RfELmrKcwYEjA6Kt_4yKOi._rRPVU hFxoa_Aa_dqY4VyBJdlTMnYWkpSjWVjYtftQMmN444NPD2uWZEtAPgBhJJxv D7AM6EHRsD0liVprn5LO1gYX3w-- X-YMailAVSC: JcwceCM3bBuVP4Kf0mHv6MLvaqkS.K56h.PgxNjMLU79d_j oTfTu7sIsmaQ6glY48AKxl9ACpPtKruvSXsToWhSF8FZiqiiY6NK2MUo2TI5 cmWf0xGeJ9TdY2DDkv1kqMzb1leu5bJRqCbyB._a6bGWFmBPc1ZH2JI2ZQPt qozEeJyv2hihn_O9YNqNOHMPKo9QCg_ORdIkaCWjRuJhYi1.v4_xYw9YGdYC .c2ozCTYWas7XQzvE.EiNDyXqz3oTJ5MUjT3ofCyWLhyjnVMh5D1ngCx9kaG C8VeejLnKl4fE4n6UkrG3zchv.qFvDGEalWz.T46QRpm0g15GMrlhIAe3xDd G6aACXh5JPDNm.Dd7YSUYaUBEyoDqZOegkyamhpPDpu7eE0PcrQaQmpY4IxO fzeLANEFhT5DzFj62M9qjPBOMWomO97sQqY6Xdf21ZtAXtuyfvYCa9uHhFTv mif5bbxaUm62hMH9.slgLz8dqFhtGNhldJjyfVKis8gWt46Uu_b_c8L.pphu 3fxxa6OhAIsf.AJ6ZQMu4wZjFYR1TBmf5.0GLSrTwygg2CPWi22_j_tVG_l2 Hjg6yVexi9OGypQRbqkTqEf6tmkLccJ0w_8sjuNkHCrqXz60QfaHeajmIFlM bkCYc1qDWLEKqkPWnO3DjpAkpQGbCIGNTBlY_XmhnVAq_HhPFfpFlL0YcEXj dyHxzvhT28OiFV.GF9_GQhT0ZBMEa6FwM0Byjl9N3BLPPpVXb9pmd6ZZ8zbt Vs66mXIph9SzQlz5iJBKPF9ghT3q4Ofi9dpGOhs9LeHKbSfWyiipHRY0Fa0l ywRNgFjlRdwAuyhrsstLKYaZd6N_Vy.AeisBBuCHL._ysBZotjCA7YzbyiHP esDbpZyVsM7tCNE1wZTb6o7M6fD4XmTf_f4vi4QRrb4DOjjdfqEdEGFSotvx m8Do9 VCqP03EeNtj2l12ptArE.CjxoSATfnaqg_0vpujhFyGsX318DvvfhhZ vWXz77j1CIF.5lQVIEcJsNYGW5Xig.ovabEHXxf9wdyn2s0kuWXzSA6AYDYO Oy0j8HK0apJe_EtCcpCWyqI_93LRF8YwR2RfO.mClB8A4AkOwnr9yTnsDvFx DY9Phn9HuWcA.zuPi1fFkdalB3e8_HUEj0txLfYUcZq12Bq99yMyNm59IjQb qM40lV0CH8xyO3kT.awTDxch1rSNF8dy7LmrLvH1pdyK6nWlKirJBUIAIwPD 2d94.Z3pKV52J3gX_S_13jmtthgohPSgvo4bk0uN2ekxarjsBDeMsBG5Tm0e EtbHhWSJI6sbb45mSKuHS4pd7f2mif5GX2UtXpds_UIewsZKZfdA- Thread-Index: AQH9dkoQikjSpXrQKOnqPxD1sbwzVQ==
Parsing header:0: Received: from 116.204.180.37 (EHLO goodnewoffers.cloud) by 10.253.234.152 with SMTP; Thu, 01 Sep 2022 16:02:46 +0000No unique hostname found for source: 116.204.180.37
Possible forgery. Supposed receiving system not associated with any of your mailhostsWill not trust this Received line.
Mailhost configuration problem, identified internal IP as sourceMailhost:
Please correct this situation - register every email address where you receive spamNo source IP address found, cannot proceed.Add/edit your mailhost configuration
Finding full email headers
Submitting spam via email (may work better)
Example: What spam headers should look likeNothing to do.
I'm suddenly receiving loads of spam continuously from Microsoft Hotmail/Outlook
in SpamCop Lounge
Posted
Not sure why this has happened to a couple of my accounts but all this junk usually goes to the Junk Mail folder. Now some is making its way into my Inboxes. Very annoying. I am now using MailWasher to report spam. Not sure if this spam will get blacklisted but will continue to send spam reports to SpamCop.