Jump to content

Getting a lot of 'nothing to do' when trying to report


mrpHil
 Share

Recommended Posts

Recently I have been getting a lot of UCE that when I cut-n-paste the original message into the reporting web UI just returns a 'nothing to do'

 

Example of recent original below. I bolded the part that looks like it should be sending a report.

 

https://www.spamcop.net/sc?id=z6572443596z451dd1d5510142e9b441eb428a9fcceez

 

Moderator~~ Sorry I missed this before.  I started to just mung the poster's email.  Then I started on all the other emails and links.  Spammers do crawl through this forum (who would have though?) an search engines do base ranking on number of links, among other things and we would not want to  help them out.

This is why a Tracking URL is the preferred way to reference received spam

Link to comment
Share on other sites

3 hours ago, mrpHil said:

Recently I have been getting a lot of UCE that when I cut-n-paste the original message into the reporting web UI just returns a 'nothing to do'

Works here. Please edit and replace your email address with a X spammer have BOT's that scrape for email addresses.
https://www.spamcop.net/sc?id=z6572443596z451dd1d5510142e9b441eb428a9fcceez

Link to comment
Share on other sites

2 hours ago, mrpHil said:

So not sure what you mean by 'replace your e-mail address'.

I think he is asking you to replace your email address' in your original forum post above with the letter X.  You have delyani [at] gmail [dot] com strewn all over in the source of the email that you copy an pasted in the post.  I counted at least 10 references to your email.  BOTS will scrape this forum looking for email addresses and you could end up receiving more spam .

Edited: It's also recommended or a good practice to not dump the source headers and body of the spam email in your post on the forums. Most of the helpful folks on here just want to see the "tracking url" where they can see the source email in its entirety. Use Petzl's reply post as an example. He posted the Tracking URL.

Edited by nhraj700
Link to comment
Share on other sites

2 hours ago, nhraj700 said:

There might only be a two hour window to allow an edit to the post from what I found in another posted question on this website.

That edit button could also be based on either time signed up or amount of posts.  I have the edit button for some posts of mine in this forum going back to before June 8th.  I suspect a forum admin might be able to do it if you no longer have edit access when you are logged in.

Link to comment
Share on other sites

Sorry I missed this before.  I started to just mung the poster's email.  Then I started on all the other emails and links.  Spammers do crawl through this forum (who would have though?) an search engines do base ranking on number of links, among other things and we would not want to  help them out.

This is why a Tracking URL is the preferred way to reference received spam

Link to comment
Share on other sites

7 hours ago, mrpHil said:

works for me?
54.245.58.76 : abuseXamazonawsXcom
amazon "abuse" refuse to take SpamCop abuse reports and don't seem to act on reports sent to them
Gmail always have them sorted to their spam folder,
Easy from their web mail to "open original" they tell you the source
SPF:    NEUTRAL with IP  35.161.175.37
Just Select Forward to abuseXamazonawsXcom (have it in your Gmail address book)
copy & paste "IP  35.161.175.37" into body of forwarded message push enter
copy original to clipboard  then paste into body then click send

Report spam as phishing then delete

Edited by petzl
Link to comment
Share on other sites

  • 2 weeks later...
1 hour ago, mrpHil said:

It has been almost a week and here's another one

https://www.spamcop.net/sc?id=z6576958476ze4833e750c6875584190cb7a3360f1baz

SpamCop is not recording IP source: 3.225.164.112: as spam source?
Works for me though?
https://www.spamcop.net/sc?id=z6576968740z4efc2f268a1201ccf6eea4e5b6be0785z

Use Gmail Webmail to log it as "phishing" spam
Gmail don't advertise but block domains if enough report them as "phishing"
Would be a Amazon problem when they cannot contact paying Amazon buyers.

Edited by petzl
Link to comment
Share on other sites

  • 3 weeks later...
5 hours ago, mrpHil said:

SpamCop should be putting the IP in statistics is not sending reports to "Devnull"?
Reports disabled for abuseXamazonawsXcom
You need to consider in Gmail mark as Phishing Then forward headers and text body to 
stop-spoofingXamazon.com abuseXamazonaws.com, abuseXamazon.com, ec2-abuseXamazon.com, ipmanagementXamazon.com phishing-reportXus-cert.gov

 

Notes at top
Criminal phishing, bogus reply address, bogus unsubscribe, DDoS
IP address

Full headers text body

 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...