Jump to content

Reporting problem


Recommended Posts

I have a couple of spams that I can't report. when I report by clicking on link in e-mail it says its taking too long try again later. I do and keep getting same result. I then try to log in and use the unreported spam link and it times out. is something wrong with spamcop?

Link to comment
Share on other sites

Hello all. Newbie to the forum but have been using SpamCop for some time now. I recently have been having a similar problem as kpbuckeye. Usually the e-mails are those for Cialis. All that is included is the info needed to report to SpamCop as well as something along the lines of:


website address

Even though these appear to not contain much info whatsoever and are very short, when I try to report them to SpamCop I get the message that the e-mail either does not include any info or too much info. Any idea on how I get these reported? Any help would be greatly appreciate! Thanks

Link to comment
Share on other sites

Basically, in general, and all that ..... the SpamCop parser uses external data resources in tryng to pick out the important bits of the data provided in your spam submittal. So one could start at system load issues on the parsing system. Then one could add in various networl/Internet connection issues. Next level is the functionality and response times from those external systems being queried. Then one adds in the work and effort put into the spam itself by the spammer, working to prevent the return flow of complaints and filtering actions of the many / various BLs and filters going up to try to prevent that spew from continuing.

While all that is going on world-wide, you submit your spam. Let's pick a spamvertised web-site included in that spam. The parsing engine tries to go get data about that web-site ... flip a coin as to whether the site exists at present, has yet to actually be registered, is totally bogus, was killed a half-hour before by the ISP, is in the process of changing hosts, has DNS (Domain Name Servers) that are (possibly intentionally) flakey, those servers are configured to ignore requests for data coming from certain places, ..... on and on .... some of these situations will let the SpamCop parser requests simply die of old age, which then displays to you one of several different types of error messages .. timeout, sigalarm, can't resolve, .....

That said, here's a number of other recent discussions touching on the various specifics of some of this stuff .....







The basic point to really harp on a bit is that you'll note all the data that has been provided, talked about, etc .... there really isn't anything constructive that can be said without some of the critical data on just what's involved in a particular spam sample.

Link to comment
Share on other sites

I am having an issue with one specific UCE I received today. When I try and report it through the web interface, it hangs for a while and then reports:

Gateway Timeout

The proxy server did not receive a timely response from the upstream server.

If I try and resubmit through Unreported spam saved: Report now, I get the same thing. I even tried to submit it again through the web interface, again the same result. The source of the UCE is below.

Received: from mail.kemtipp.ru (c-24-18-134-18.client.comcast.net [])

by fizzy.hottub.org (Postfix) with SMTP id 49C1C45C014

for <>; Wed, 19 Jan 2005 12:00:47 -0800 (PST)

Message-ID: <f94a01c4fe63$78ef9065$2389901b[at]Ecd0yubE>

From: "Something You Yearn For"[at]hottub.org

Date: Wed, 19 Jan 2005 12:00:47 -0800 (PST)

To: undisclosed-recipients: ;

X-spam-Status: No, hits=3.3 required=5.0 tests=UNDISC_RECIPS,PORN_10,SUPERLONG_LINE,SUBJ_MISSING version=2.20

X-spam-Level: ***


Subject: Spiderman Pharmacy

Date: Wed, 19 Jan 2005 15:12:05 -0500

Mime-Version: 1.0

Content-Type: multipart/alternative;


X-Priority: 3 (Normal)

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2800.1158

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165

This is a multi-part message in MIME format.


Content-Type: text/plain;


Content-Transfer-Encoding: 8bit


CVS Pharmacy

Why is Xenical popular?

New York Pharmacy



Paris Pharmacy

Paracodin Online

Why is Xenical popular?

Canada Pharmacy


Overseas Pharmacy

Try Cialis

Hilton Pharmacy

Valium Online


<big data snip by Wazoo>

glybnvoiyquhxhztp optuhohggzbyajmznzwbhurbeqid


Content-Type: text/html;


Content-Transfer-Encoding: 8bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">


<META http-equiv="Content-Type content="text/html; charset=iso-8859-1">

<META content="MSHTML 6.00.2800.1264" name=GENERATOR>




<div align='center'><FONT SIZE='2' face=Verdana>Message loading...</FONT></DIV><BR><DIV align=center>

<a href="http://ndt.xanex.org/phram/a1/oGAWAf">

<img BORDER=0 SRC="http://www.cndpharmacy.com/images/header_about.jpg">

</A><br><BR><div ALIGN="center"><font FACE="Verdana" SIZE="2">Image not showing? View message <A HREF="http://hayope.hydrocodine.net/phram/a1/jkSqKja">here</A>.</font></div>

</DIV><br><br><div ALIGN="center"><font SIZE="1" FACE="verdana"><A HREF="http://nycxl.xiagra.net/z.php">Stop</a> future alerts.</div> <p style="font-size:0px; color:white">

<huge data snip by Wazoo>

ceizthsmvolvmwbvqctcttetkjqsefx lihgpaskqdhccjxslqwglazwlsqqxn ivipkijxypecrpalcshj hkctcslbhlmd





Link to comment
Share on other sites

mrbungle, though I intend on editing your last post a bit (a lor actually) to reduce un-needed content in this case .. you may want to edit out things like your addresses and such ... yes, spammers read the content here.

OK, that said, as referneced in previous commentary, here's what's happening with your spam at the moment;

SpamCop single-line parser says;

Parsing input: http://phhing.bnik.com/rx/a1/yegzr

Cannot resolve http://phhing.bnik.com/rx/a1/yegzr

Quick SamSpade for Windows data dump;

whois -h whois.joker.com bnik.com ...

domain: bnik.com

status: lock

owner: Roelf Van der Brug

email: admin[at]taiwanmedialtd.com

address: Singel 2

address: Jordaan

city: Amsterdam

state: --

postal-code: 1015JT

country: NL

admin-c: admin[at]taiwanmedialtd.com#0

tech-c: admin[at]taiwanmedialtd.com#0

billing-c: admin[at]taiwanmedialtd.com#0

nserver: ns1.dnsm.net

nserver: ns2.dnsm.net

registrar: JORE-1

created: 2005-01-12 17:16:41 UTC JORE-1

modified: 2005-01-17 12:57:57 UTC JORE-1

expires: 2006-01-12 12:16:40 UTC

source: joker.com

01/19/05 15:37:44 Slow traceroute phhing.bnik.com

Trace phhing.bnik.com failed, no such host

01/19/05 15:38:13 dns phhing.bnik.com

No DNS for this address

This scenario is addressed in my last 'long' post ....

am dropping this now to get it posted in hopes that you'll be back quickly and take care of your posting of personal details.

Link to comment
Share on other sites

Thanks for the edit <g> ...

As far as reporting goes, that's your call. you could try again in a bit and see if things clear up a bit amd the timing is such that these things resolve, you could just let this one go on the premise that you're not the only one receiving it and someone else might get their's to parse, or just say to heck with it and move on to the next. There's no need to turn this into an exercise of frustration.

One of those previously referenced addition data links offered up will have a new post added .. just received some feedback from both Ellen and Julian and intend to pass some of the data on .. I just don't know which of those items was left hanging with the "waiting for feedback" note from me <g>

Link to comment
Share on other sites

I have successfuly reported at least 116 messages today.  :lol:


by 3 i mean i can process them on spam cop i keep getting an error

got sigalarm, taking too long to process, aborted.

Perhaps you can wait a few minutes and reload?

Link to comment
Share on other sites

Ok, Go to the top of this page and click the Search link. Select all forums (just because I am not sure where they are located) and enter sigalarm as teh search. You should get a pageful of information basically saying it seems to be the construct of the individual messages. It looks like Julian has been informed of it, but I can not be sure. Providing a tracking URL with this complaint would normally help us determine a possible problem, but I don't ever recall a specific reason for the sigalarm warning.

Link to comment
Share on other sites


This topic is now archived and is closed to further replies.

  • Create New...