Jump to content


  • Content Count

  • Joined

  • Last visited

Community Reputation

0 Neutral

About Cornholio

  • Rank
  1. Hi, I'm getting this message, and am not sure why. The message is definitely spam. I get: Resolving link obfuscation http://ticklefootsies.com/ Host ticklefootsies.com (checking ip) IP not found ; ticklefootsies.com discarded as fake. Tracking link: http://ticklefootsies.com/ [report history] ISP does not wish to receive report regarding http://ticklefootsies.com/ Cannot resolve http://ticklefootsies.com/ I'm not sure why it's not getting the IP address either. If I do a whois on it, I get an IP. Here's my tracking URL: http://www.spamcop.net/sc?id=z2824830509z4...8bdbf43bf212d0z
  2. Cornholio

    (new?) spammer trick

    Recently I've been getting a lot of spams that have URLs which the spammers have managed to hide from the spamcop parser via injecting a lot of FONT tags within the URL. Check http://www.spamcop.net/sc?id=z1952790933z5...2f09bd2aef7e0ez for an example of this. Hopefully it would be an easy fix to modify the parser to ignore FONT tags while doing a text search for URLs.
  3. Cornholio

    Disguised URL using google

  4. Cornholio

    URL not parsing

    I've found that simply refreshing the page (one or more times) works also.
  5. Lately I've been seeing a lot of this in my reports: I refuse to bother spam[at]apnic.net.. Using spam#apnic.net.[at]devnull.spamcop.net for statistical tracking. I refuse to bother abuse[at]apnic.net.. Using abuse#apnic.net.[at]devnull.spamcop.net for statistical tracking. What is the reason for this? Here's a tracking URL where this behavior can be seen: http://www.spamcop.net/sc?id=z1480579171zb...544f7aee1704a2z
  6. Cornholio

    Disguised URL using google

    In order to give Google an idea of the magnitude of what they are doing, I would encourage everyone to forward all of their spams which have a google redirect to abuse[at]google.com. I'm sure if enough people do this, they'll disable the redirect feature soon enough. I personally get at least 10 of these a day and am sick of it!
  7. Cornholio

    Disguised URL using google

    I completely agree with this. Google should be ashamed of themselves for the service they are providing to spammers (auto-redirect while hiding their site's address from spam-reporting tools). I, personally, forward each and every one of these spam emails I get with google redirects to abuse[at]google.com. So what if they refuse spamcop reports... that's not gonna stop me!
  8. Cornholio

    won't let me report spammed site

    Heheh. Thanks. Let me know what they say.
  9. Cornholio

    won't let me report spammed site

    No... I never reported. There was never the option to do so. A reporting address was resolved the very first time, but it wouldn't let me report.
  10. Cornholio

    won't let me report spammed site

    Yes, I'm familiar with rotating DNS, etc. However in this case, that is not the problem. Spamcop is finding IP addresses for the site and reporting addresses, it just will not let me send the report! Maybe the issue is that since the email sender's admin has indicated that the spam will cease, Spamcop assumes that this applies to the spammed site as well (even though the two are unrelated)?
  11. Cornholio

    won't let me report spammed site

    Notice the "if reported today" part... it only says that for spams you can't report (including previously reported spams, but that is not the case here). I get the exact same thing and no "report now" button.
  12. I'm having a problem with a spam I forwarded. Spamcop says that the email sender's ISP has reported that the spam will cease (which is all good) but it also won't let me report the spammed site (which is a different ISP). Here's the link: http://www.spamcop.net/sc?id=z1422147826z5...3d90d84c397966z I understand not sending reports to the email sender's ISP, but why won't it let me report the spammed site (notewarm.com)?
  13. Cornholio

    Different reporting address every time?

    Well... The spammer uses spaces in his URLs, so the parser doesn't report him. I've been doing it manually. It sounds like this spammer has beaten the system and is untouchable and I'm just wasting my time.
  14. We share the same spammer apparently! Check out this thread: http://forum.spamcop.net/forums/index.php?showtopic=8076
  15. Cornholio

    Different reporting address every time?

    I have no idea what a 'double zombie botnet' is... The website name he uses changes every couple days to a week. His latest is ShowRx.com. In all cases, however, he always uses ajaxmx.com as his DNS. This is registered with XIN Net. I have probably sent them 30 emails and yet they have done nothing. Apparently XIN Net is either a spammer's paradise or he works for the company or something. I was also wondering something... In cases like this where the spammer uses a rotating DNS, why does spamcop only pick one of the IPs (apparently at random) and report that? Why not report them all at the same time? This would save me refreshing the page over and over again (20-30 times as the same IP will come up many times) trying to get all the unique IPs.