Jump to content

Mailchimp, Akamai & SpamCop


csouter
 Share

Recommended Posts

I've just received these 4 spams in the last hour.
They seem to be arriving in pairs.

1. https://www.spamcop.net/sc?id=z6432003135z85b1283f75fe26fc67527132f3879eacz

2. https://www.spamcop.net/sc?id=z6432007009z4a4fd1a767cf2e2257b4392b71349c33z

3. https://www.spamcop.net/sc?id=z6432011457zbe5b0b3621ce9e6e4bf5846e9a7a7999z

4. https://www.spamcop.net/sc?id=z6432011515zfd9beaed8a2c8f9122436b50289c01ddz

It would appear from the parse that the MailChimp abuse address gets the SpamCop "/dev/null treatment." I would have thought that an enormous mail forwarding organisation such as MailChimp ought to be investigating spammers and shutting them down, not ignoring SpamCop reports.

It would also appear that SpamCop reports about the spamvertised Akamai links contined in those spams also get the same treatment, which mystifies me somewhat, considering that even though the reporting address is abuse-spamcop [at] akamai [dot] com, the reports are not sent because the annotation in the original parse states that akamai admins refuse to accept this type of report.  If this is the case, why have a special  "abuse-spamcop" account at all?  WEIRD!

I have a nasty feeling that I'm going to be getting a lot of spams like this, today, because it's quite unusual for me (a) to receive "paired" spams, and (b) to receive more than one spam pointing to the same host on the same day.  (What I mean is that I usually get one copy per day of any given spam type).  And the last time I received multiple copies of the same spam was a run of almost 500 on the same day, sent to one of my Gmail accounts about 5 years ago, just before that huge server takedown in wnich Microsoft and a few other major industry players were involved.

Thoughts, anyone?

Edited by csouter
Slight revision to a comment regarding MailChimp, also revised some formatting.
Link to comment
Share on other sites

Looking at example #1 & #3

Quote
Tracking message source: 198.2.181.90:

Routing details for 198.2.181.90
[refresh/show] Cached whois for 198.2.181.90 : abuse@mailchimp.com
Using abuse net on abuse@mailchimp.com
abuse net mailchimp.com = abuse@mailchimp.com
Using best contacts abuse@mailchimp.com
abuse@mailchimp.com bounces (99 sent : 99 bounces) <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

 

Using abuse#mailchimp.com@devnull.spamcop.net for statistical tracking.

 

You would think for business reasons they would care. But they seem to bounce all (or just SpamCop) email sent to abuse{AT}..
 
As for the links in the body of #1 & #3 seems that akamai.com has set up a special address for spamcop spam reports.
Quote

Re: https://bestkeptphoto.us5.list-manage.com/subsc... (Administrator of network hosting website referenced in spam)

abuse-spamcop@akamai.com

#2 & #4 are the same except there are too many links in the body so only the devnul for the source is recorded

Anyway that is what I see.

Link to comment
Share on other sites

I've noticed that spam I've received that tracks back to a mailchimp account tends to get devnulled. When I see this, I usually manually forward the offending email(s) to abuse[at]mailchimp.com, which commonly results in an autoresponse, and occasionally a follow-up email.

Link to comment
Share on other sites

27 minutes ago, lisati said:

I've noticed that spam I've received that tracks back to a mailchimp account tends to get devnulled. When I see this, I usually manually forward the offending email(s) to abuse[at]mailchimp.com, which commonly results in an autoresponse, and occasionally a follow-up email.

Maichimp seem to act on spam complaints manually sent to them.
Legacy issue where mailchimp have told SpamCop not to send reports, but still make them via spamcop

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...