Jump to content

parser issue reporting spam


TumbleWeed
 Share

Recommended Posts

​Sorry if I'm off topic here. I really tried hard but I don't really know where else to post this (english is not my mothertongue).

I recently noticed that for some time now I keep getting spam with links referring to some web-page similar to this:

https://www.google.de/url?sa=t&url=http%3A%2F%2F%67%65%6C%64%2D%74%72%61%64%65%2E%72%75%2F&usg=AFQjCNEpKAOYITvBF85BzdcaI6XfmBvNaA

​Spamcop keeps parsing this as referring to google and of course google doesn't want to get to know about it as it is a web-site from .ru

​While recently all spam referring to .ru web-pages stop quite quickly after reporting them a few times, this one seems to be increasing in numbers so I guess it makes sense dealing with this issue somehow.

​Can anybody give me some idea how to approach this please?

Link to comment
Share on other sites

Hi TumbleWeed, Welcome.

Reporting the websites spamvertised (spam advertised) in spam is SpamCop's third priority. Another organization, www.knujOn.com (No Junk spelled backwards) is primarily interested in the links in the spam. Personally I report all my spam to both spamcop,net and knujOn.com

Link to comment
Share on other sites

  • 4 weeks later...

Yes! You are right!
If you got spam/SCAM with a spamvertised link like this:


http://www,kredit-schnell,ruXXX
as the real spamvertised page, financial spam/scam/ponzi, looks like a german source:

it gives:
ISP does not wish to receive reports regarding https://www,google,de/url?sa=t&hs=asd&url=http%3A%2F%2Fwww,kredit-schnell,ru%2F&usg=AFQjCNHfAkohqqvmpzippQ7U1AioLXx-jA - no date available
Host www.google.de (checking ip) = 209.85.147.94
Routing details for 209.85.147.94
[refresh/show] Cached whois for 209.85.147.94 : network-abuse[at]AT google.com
Using abuse net on network-abuse[at]AT google.com
abuse net google.com = abuse[at]AT google.com
Using best contacts abuse[at]AT google.com ...


GOOGLE here is used for masking the real webpage that is spamvertised, successfully!
www.kredit-schnell.ru
is hosted in China, and the complaint resistent spam-House there is:

Parsing input: www.kredit-schnell.ru

Host www.kredit-schnell.ru (checking ip) = 220.164.140.186
Routing details for 220.164.140.186
[refresh/show] Cached whois for 220.164.140.186 : anti-spam[at]ns.chinanet.cn.net
abuse net chinanet.cn.net = abuse[at]12321.cn, spam[at]ccert.edu.cn, anti-spam[at]ns.chinanet.cn.net, cncert[at]cert.org.cn
Using last resort contacts spam[at]ccert.edu.cn abuse[at]12321.cn anti-spam[at]ns.chinanet.cn.net cncert[at]cert.org.cn

Statistics:
220.164.140.186 not listed in bl.spamcop.net
More Information..
220.164.140.186 not listed in cbl.abuseat.org
220.164.140.186 not listed in dnsbl.sorbs.net


Reporting addresses:
abuse%5Bat%5D12321.cn
spam%5Bat%5Dccert.edu.cn
anti-spam%5Bat%5Dns.chinanet.cn.net
cncert%5Bat%5Dcert.org.cn


So they do not get a spam report or get less of them!
The behaviour of this may be changed in future?

Edited by Lking
Edited to break links
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...