kpbuckeye Posted January 14, 2005 Share Posted January 14, 2005 I have a couple of spams that I can't report. when I report by clicking on link in e-mail it says its taking too long try again later. I do and keep getting same result. I then try to log in and use the unreported spam link and it times out. is something wrong with spamcop? Link to comment Share on other sites More sharing options...
Lori Posted January 18, 2005 Share Posted January 18, 2005 Hello all. Newbie to the forum but have been using SpamCop for some time now. I recently have been having a similar problem as kpbuckeye. Usually the e-mails are those for Cialis. All that is included is the info needed to report to SpamCop as well as something along the lines of: Cialis website address Even though these appear to not contain much info whatsoever and are very short, when I try to report them to SpamCop I get the message that the e-mail either does not include any info or too much info. Any idea on how I get these reported? Any help would be greatly appreciate! Thanks Link to comment Share on other sites More sharing options...
StevenUnderwood Posted January 18, 2005 Share Posted January 18, 2005 IF either (or both) of you could provide a tracking URL (the URL provided in the email will do) that will allow us to see the same thing you are and possibly see something that is a known problem. Link to comment Share on other sites More sharing options...
Lori Posted January 19, 2005 Share Posted January 19, 2005 Alrighty...thanks. Next time I get one like that I'll be sure to post it here for you to see. Thank you!! Link to comment Share on other sites More sharing options...
Wazoo Posted January 19, 2005 Share Posted January 19, 2005 Basically, in general, and all that ..... the SpamCop parser uses external data resources in tryng to pick out the important bits of the data provided in your spam submittal. So one could start at system load issues on the parsing system. Then one could add in various networl/Internet connection issues. Next level is the functionality and response times from those external systems being queried. Then one adds in the work and effort put into the spam itself by the spammer, working to prevent the return flow of complaints and filtering actions of the many / various BLs and filters going up to try to prevent that spew from continuing. While all that is going on world-wide, you submit your spam. Let's pick a spamvertised web-site included in that spam. The parsing engine tries to go get data about that web-site ... flip a coin as to whether the site exists at present, has yet to actually be registered, is totally bogus, was killed a half-hour before by the ISP, is in the process of changing hosts, has DNS (Domain Name Servers) that are (possibly intentionally) flakey, those servers are configured to ignore requests for data coming from certain places, ..... on and on .... some of these situations will let the SpamCop parser requests simply die of old age, which then displays to you one of several different types of error messages .. timeout, sigalarm, can't resolve, ..... That said, here's a number of other recent discussions touching on the various specifics of some of this stuff ..... http://forum.spamcop.net/forums/index.php?showtopic=3472 http://forum.spamcop.net/forums/index.php?showtopic=3386 http://forum.spamcop.net/forums/index.php?showtopic=3182 http://forum.spamcop.net/forums/index.php?showtopic=3029 http://forum.spamcop.net/forums/index.php?showtopic=3222 http://forum.spamcop.net/forums/index.php?showtopic=3230 The basic point to really harp on a bit is that you'll note all the data that has been provided, talked about, etc .... there really isn't anything constructive that can be said without some of the critical data on just what's involved in a particular spam sample. Link to comment Share on other sites More sharing options...
bryn Posted January 19, 2005 Share Posted January 19, 2005 I have 3 spams which i can not report Link to comment Share on other sites More sharing options...
Wazoo Posted January 19, 2005 Share Posted January 19, 2005 You must be joking, right? Link to comment Share on other sites More sharing options...
StevenUnderwood Posted January 19, 2005 Share Posted January 19, 2005 I have 3 spams which i can not report I have successfuly reported at least 116 messages today. Link to comment Share on other sites More sharing options...
mrbungle Posted January 19, 2005 Share Posted January 19, 2005 I am having an issue with one specific UCE I received today. When I try and report it through the web interface, it hangs for a while and then reports: Gateway Timeout The proxy server did not receive a timely response from the upstream server. If I try and resubmit through Unreported spam saved: Report now, I get the same thing. I even tried to submit it again through the web interface, again the same result. The source of the UCE is below. Received: from mail.kemtipp.ru (c-24-18-134-18.client.comcast.net [24.18.134.18]) by fizzy.hottub.org (Postfix) with SMTP id 49C1C45C014 for <>; Wed, 19 Jan 2005 12:00:47 -0800 (PST) Message-ID: <f94a01c4fe63$78ef9065$2389901b[at]Ecd0yubE> From: "Something You Yearn For"[at]hottub.org Date: Wed, 19 Jan 2005 12:00:47 -0800 (PST) To: undisclosed-recipients: ; X-spam-Status: No, hits=3.3 required=5.0 tests=UNDISC_RECIPS,PORN_10,SUPERLONG_LINE,SUBJ_MISSING version=2.20 X-spam-Level: *** <ivf[at]mail.kemtipp.ru> Subject: Spiderman Pharmacy Date: Wed, 19 Jan 2005 15:12:05 -0500 Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_330_3382_15803382.15803382" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 This is a multi-part message in MIME format. ------=_NextPart_330_3382_15803382.15803382 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit http://phhing.bnik.com/rx/a1/yegzr CVS Pharmacy Why is Xenical popular? New York Pharmacy NeoPharmacy http://vbtzb.xiagra.net/rx/a1/FUZ Paris Pharmacy Paracodin Online Why is Xenical popular? Canada Pharmacy http://weh.eavv.net/ph/a1/Re Overseas Pharmacy Try Cialis Hilton Pharmacy Valium Online http://izdltc.xiagra.net/rx/a1/SSl <big data snip by Wazoo> glybnvoiyquhxhztp optuhohggzbyajmznzwbhurbeqid ------=_NextPart_330_3382_15803382.15803382 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: 8bit <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html><head> <META http-equiv="Content-Type content="text/html; charset=iso-8859-1"> <META content="MSHTML 6.00.2800.1264" name=GENERATOR> <style></STYLE> </head> <BODY BGCOLOR=#FFFFFF> <div align='center'><FONT SIZE='2' face=Verdana>Message loading...</FONT></DIV><BR><DIV align=center> <a href="http://ndt.xanex.org/phram/a1/oGAWAf"> <img BORDER=0 SRC="http://www.cndpharmacy.com/images/header_about.jpg"> </A><br><BR><div ALIGN="center"><font FACE="Verdana" SIZE="2">Image not showing? View message <A HREF="http://hayope.hydrocodine.net/phram/a1/jkSqKja">here</A>.</font></div> </DIV><br><br><div ALIGN="center"><font SIZE="1" FACE="verdana"><A HREF="http://nycxl.xiagra.net/z.php">Stop</a> future alerts.</div> <p style="font-size:0px; color:white"> <huge data snip by Wazoo> ceizthsmvolvmwbvqctcttetkjqsefx lihgpaskqdhccjxslqwglazwlsqqxn ivipkijxypecrpalcshj hkctcslbhlmd </span></p></body></html> ------=_NextPart_330_3382_15803382.15803382-- Thanks. pHil Link to comment Share on other sites More sharing options...
Wazoo Posted January 19, 2005 Share Posted January 19, 2005 mrbungle, though I intend on editing your last post a bit (a lor actually) to reduce un-needed content in this case .. you may want to edit out things like your addresses and such ... yes, spammers read the content here. OK, that said, as referneced in previous commentary, here's what's happening with your spam at the moment; SpamCop single-line parser says; Parsing input: http://phhing.bnik.com/rx/a1/yegzr Cannot resolve http://phhing.bnik.com/rx/a1/yegzr Quick SamSpade for Windows data dump; whois -h whois.joker.com bnik.com ... domain: bnik.com status: lock owner: Roelf Van der Brug email: admin[at]taiwanmedialtd.com address: Singel 2 address: Jordaan city: Amsterdam state: -- postal-code: 1015JT country: NL admin-c: admin[at]taiwanmedialtd.com#0 tech-c: admin[at]taiwanmedialtd.com#0 billing-c: admin[at]taiwanmedialtd.com#0 nserver: ns1.dnsm.net 200.139.97.122 nserver: ns2.dnsm.net 200.139.97.123 registrar: JORE-1 created: 2005-01-12 17:16:41 UTC JORE-1 modified: 2005-01-17 12:57:57 UTC JORE-1 expires: 2006-01-12 12:16:40 UTC source: joker.com 01/19/05 15:37:44 Slow traceroute phhing.bnik.com Trace phhing.bnik.com failed, no such host 01/19/05 15:38:13 dns phhing.bnik.com No DNS for this address This scenario is addressed in my last 'long' post .... am dropping this now to get it posted in hopes that you'll be back quickly and take care of your posting of personal details. Link to comment Share on other sites More sharing options...
mrbungle Posted January 19, 2005 Share Posted January 19, 2005 Sorry about that, I edited out the personal info. So does that mean I should just remove this unreported spam, or hold on to it and try it again later? pHil Link to comment Share on other sites More sharing options...
Wazoo Posted January 19, 2005 Share Posted January 19, 2005 Thanks for the edit <g> ... As far as reporting goes, that's your call. you could try again in a bit and see if things clear up a bit amd the timing is such that these things resolve, you could just let this one go on the premise that you're not the only one receiving it and someone else might get their's to parse, or just say to heck with it and move on to the next. There's no need to turn this into an exercise of frustration. One of those previously referenced addition data links offered up will have a new post added .. just received some feedback from both Ellen and Julian and intend to pass some of the data on .. I just don't know which of those items was left hanging with the "waiting for feedback" note from me <g> Link to comment Share on other sites More sharing options...
bryn Posted January 20, 2005 Share Posted January 20, 2005 I have successfuly reported at least 116 messages today. 23315[/snapback] by 3 i mean i can process them on spam cop i keep getting an error got sigalarm, taking too long to process, aborted. Perhaps you can wait a few minutes and reload? Link to comment Share on other sites More sharing options...
StevenUnderwood Posted January 20, 2005 Share Posted January 20, 2005 Ok, Go to the top of this page and click the Search link. Select all forums (just because I am not sure where they are located) and enter sigalarm as teh search. You should get a pageful of information basically saying it seems to be the construct of the individual messages. It looks like Julian has been informed of it, but I can not be sure. Providing a tracking URL with this complaint would normally help us determine a possible problem, but I don't ever recall a specific reason for the sigalarm warning. Link to comment Share on other sites More sharing options...
bryn Posted January 20, 2005 Share Posted January 20, 2005 thanks Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.