Jump to content

Recommended Posts

Posted

The spam is coming to my registered email address with SpamCop.  I did everything perfectly according to instructions when reporting the spam but SpamCop is unable to find the ISPs.  What's going on and why?

SpamCop v 5.4.0 © 2022 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6773098090z7c0129a5864c8a827dd01e12bc380a53z
Skip to Reports

Received: from 127.0.0.1
 by atlas-production.v2-mail-prod1-gq1.omega.yahoo.com with HTTP; Thu, 1 Sep 2022 16:02:46 +0000
Received: from 116.204.180.37 (EHLO goodnewoffers.cloud)
 by 10.253.234.152 with SMTP;
 Thu, 01 Sep 2022 16:02:46 +0000
Reply-To: <Reply@goodnewoffers.cloud>
From: "24Hour Bathroom Remodel" <BathroomRemodel@goodnewoffers.cloud>
To: <x>
Subject: New look bath in 24 hours
Date: Thu, 1 Sep 2022 12:02:46 -0400
Message-ID: <8661_________________________0212@goodnewoffers.cloud>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_016F_01D8BDFC.A79CA9A0"
X-Mailer: Microsoft Outlook 16.0
Authentication-Results: atlas-production.v2-mail-prod1-gq1.omega.yahoo.com;
 dkim=perm_fail header.i=@goodnewoffers.cloud header.s=smtp;
 spf=none smtp.mailfrom=goodnewoffers.cloud;
 dmarc=unknown header.from=goodnewoffers.cloud;
X-Originating-Ip: [116.204.180.37]
X-Apparently-To: x Thu, 1 Sep 2022 16:02:47 +0000
X-YMailISG: OLFTy8QWLDu8dE_0k.7i58tGsoHR4eFgCV2ghAoW51YmI5Ni
 drQUpl5iN2G9Qm523ju2NtbccRQ31cvVOF8MY1Z094WOj9f2QSGZGtFUeM.w
 P3ZzDIQK2RpSbBaAwe40glWpdzRm80IK_3DsTj5xYgtnzKBBEMVmlraQPUY4
 alCq5hjRSIY3DY3QIiJYsMRGSB1.U9.o5mQazX8Nw7uJ5xzZTlcFd0fYuZq8
 XXDxzaxUc0LuViXcbPJRXJb8gOVhvLfn1sPECu9hMlncmKeQ0q56oume9miP
 jI5ELH39HA2ygc.bZah.hJSQ0Xjl_XEvN.IXirIhHMMpcX2GVUv.s2OuKgQK
 2MNH3Omaj5UzHochNaey1Hykv0m1aPmfK4m9rjwJ_8U0FtPBG3dykNAROLmF
 i.m0bP.VxCiCgDe2WOEyiApwmYq2QgZxGZM.xQLwp94mh7G.UNlRz1_KiW5J
 ATM0efBqvMogXLMC.UizPew8BYope6cYTjuLyFeY9ZgLLinnLGRUHGEouM8f
 sCPZIZbK5lCi93L6wA8SX7eB6qZG8cB7RDct3EC4TAdSz.Xeu3AMgL31nbDa
 G_PoBwIiD0NEt.9tt.qpyHzxoQBei1OZxSHNKpUKiBRBOgNKHDAZiyIrBW11
 Xkleqox4Xws_KOyG_Al7eyUA_0BmINuBqgYvL3VwD1CdKoR3THkY39ZFDtLx
 t3z9Zyi1UkKi.AwpELw.qnQCv8sV0ybNFoP7puvuzxXLarRXEbCb9OC4mseX
 Qu54rTk_lNRnQBifq_vwB7il3Iv6kjcp8gdydO9YqeWOhQrEmYXXJjbB_2zZ
 cj_rOrRUUdzyyT5sfUEi2UkOdBE8PjRhwjNxrhxdwnvaTT.p_Cv4qb37cMYM
 QZZpjJmO5tMGoUceXainKRbAfl_n_FQcjvuVkGPE1KUEj4kzE902cUWyqIU_
 ykZS
	Ru1gVtOqfbKsFRCBst_zsT07qc4fzKbi3xnXx9kO1WT3Kobqhqf4yMn7
 tVbeVNPmbiekD5zF_qGAtDHdryeOgW_RfELmrKcwYEjA6Kt_4yKOi._rRPVU
 hFxoa_Aa_dqY4VyBJdlTMnYWkpSjWVjYtftQMmN444NPD2uWZEtAPgBhJJxv
 D7AM6EHRsD0liVprn5LO1gYX3w--
X-YMailAVSC: JcwceCM3bBuVP4Kf0mHv6MLvaqkS.K56h.PgxNjMLU79d_j
 oTfTu7sIsmaQ6glY48AKxl9ACpPtKruvSXsToWhSF8FZiqiiY6NK2MUo2TI5
 cmWf0xGeJ9TdY2DDkv1kqMzb1leu5bJRqCbyB._a6bGWFmBPc1ZH2JI2ZQPt
 qozEeJyv2hihn_O9YNqNOHMPKo9QCg_ORdIkaCWjRuJhYi1.v4_xYw9YGdYC
 .c2ozCTYWas7XQzvE.EiNDyXqz3oTJ5MUjT3ofCyWLhyjnVMh5D1ngCx9kaG
 C8VeejLnKl4fE4n6UkrG3zchv.qFvDGEalWz.T46QRpm0g15GMrlhIAe3xDd
 G6aACXh5JPDNm.Dd7YSUYaUBEyoDqZOegkyamhpPDpu7eE0PcrQaQmpY4IxO
 fzeLANEFhT5DzFj62M9qjPBOMWomO97sQqY6Xdf21ZtAXtuyfvYCa9uHhFTv
 mif5bbxaUm62hMH9.slgLz8dqFhtGNhldJjyfVKis8gWt46Uu_b_c8L.pphu
 3fxxa6OhAIsf.AJ6ZQMu4wZjFYR1TBmf5.0GLSrTwygg2CPWi22_j_tVG_l2
 Hjg6yVexi9OGypQRbqkTqEf6tmkLccJ0w_8sjuNkHCrqXz60QfaHeajmIFlM
 bkCYc1qDWLEKqkPWnO3DjpAkpQGbCIGNTBlY_XmhnVAq_HhPFfpFlL0YcEXj
 dyHxzvhT28OiFV.GF9_GQhT0ZBMEa6FwM0Byjl9N3BLPPpVXb9pmd6ZZ8zbt
 Vs66mXIph9SzQlz5iJBKPF9ghT3q4Ofi9dpGOhs9LeHKbSfWyiipHRY0Fa0l
 ywRNgFjlRdwAuyhrsstLKYaZd6N_Vy.AeisBBuCHL._ysBZotjCA7YzbyiHP
 esDbpZyVsM7tCNE1wZTb6o7M6fD4XmTf_f4vi4QRrb4DOjjdfqEdEGFSotvx
 m8Do9
	VCqP03EeNtj2l12ptArE.CjxoSATfnaqg_0vpujhFyGsX318DvvfhhZ
 vWXz77j1CIF.5lQVIEcJsNYGW5Xig.ovabEHXxf9wdyn2s0kuWXzSA6AYDYO
 Oy0j8HK0apJe_EtCcpCWyqI_93LRF8YwR2RfO.mClB8A4AkOwnr9yTnsDvFx
 DY9Phn9HuWcA.zuPi1fFkdalB3e8_HUEj0txLfYUcZq12Bq99yMyNm59IjQb
 qM40lV0CH8xyO3kT.awTDxch1rSNF8dy7LmrLvH1pdyK6nWlKirJBUIAIwPD
 2d94.Z3pKV52J3gX_S_13jmtthgohPSgvo4bk0uN2ekxarjsBDeMsBG5Tm0e
 EtbHhWSJI6sbb45mSKuHS4pd7f2mif5GX2UtXpds_UIewsZKZfdA-
Thread-Index: AQH9dkoQikjSpXrQKOnqPxD1sbwzVQ==

View entire message

Parsing header:
0: Received: from 116.204.180.37 (EHLO goodnewoffers.cloud) by 10.253.234.152 with SMTP; Thu, 01 Sep 2022 16:02:46 +0000

No unique hostname found for source: 116.204.180.37

Possible forgery. Supposed receiving system not associated with any of your mailhosts

Will not trust this Received line.

Mailhost configuration problem, identified internal IP as source

Mailhost:
Please correct this situation - register every email address where you receive spam

No source IP address found, cannot proceed.

Add/edit your mailhost configuration
Finding full email headers
Submitting spam via email (may work better)
Example: What spam headers should look like

Nothing to do.
Posted

Hello petzl, I am using the Microsoft Outlook Desktop Client verson 2021 which connects to the Microsoft Exchange server.  I send all my SpamCop reports from Outlook Desktop because I can easily access the full headers to include in the submission. 

Posted
1 hour ago, DaveO8888 said:

Hello petzl, I am using the Microsoft Outlook Desktop Client verson 2021 which connects to the Microsoft Exchange server.  I send all my SpamCop reports from Outlook Desktop because I can easily access the full headers to include in the submission. 

Looking at https://www.spamcop.net/sc?id=z6773098090z7c0129a5864c8a827dd01e12bc380a53z
Received: from 116.204.180.37 (EHLO goodnewoffers.cloud)
 by 10.253.234.152 with SMTP;
 Thu, 01 Sep 2022 16:02:46 +0000 
 10.253.234.152   is not a routeable IP address. SpamCop falls over with network received spam.

Posted

I think it's time for SpamCop to find ways to detect offending ISPs even when sent through network received spam.  These spammers must be stopped.  They know how to beat SpamCop.

Posted
Looks like 10.253.234.152 might not be part of your mailhosts. When I see something like this, I can turn off mailhosts and then submit it (which it usually will submit) and go back and turn mailhosts back on.
Posted

When I am able to find the ISPs, I've contacted some of the ISPs identified in the SpamCop reports and confirmed the reports are being sent to them but they don't care and they don't get blacklisted.  One of the biggest offenders is Firstheberg.com which offers Web Hosting, VPS, and Dedicated Servers.  A lot of spam is coming from this source. See https://www.firstheberg.com/en/ 

Posted

This is the most annoying report I get from SpamCop "Nothing to do." reports are total nonesense when you're getting dozens of spam every day and SpamCop reports "Nothing to do."

SpamCop v 5.4.0 © 2022 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6774802126z1752396a3656c9ef399a20b76d6f76d6z
Skip to Reports

Received: from 185.56.88.171 (EHLO onlinebusiness.fun)
 by 10.197.32.75 with SMTP;
 Sat, 10 Sep 2022 13:52:10 +0000
Received: from 10.197.32.75
 by atlas302.free.mail.bf1.yahoo.com with HTTPS; Sat, 10 Sep 2022 13:52:10 +0000
Reply-To: <Reply@onlinebusiness.fun>
From: "My Timeshare Expert" <contact@onlinebusiness.fun>
To: <x>
Subject: See what your Timeshare is worth on the resale market
Date: Sat, 10 Sep 2022 09:52:08 -0400
Message-ID: <3965_________________________0936@onlinebusiness.fun>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_008B_01D8C500.DE06A940"
X-Mailer: Microsoft Outlook 16.0
X-Originating-Ip: [185.56.88.171]
Authentication-Results: atlas302.free.mail.bf1.yahoo.com;
 dkim=pass header.i=@onlinebusiness.fun header.s=smtp;
 spf=pass smtp.mailfrom=onlinebusiness.fun;
 dmarc=pass(p=NONE) header.from=onlinebusiness.fun;
X-Apparently-To: x Sat, 10 Sep 2022 13:52:10 +0000
X-YMailAVSC: Wvr4CRw3bBtiiWAl8dNdC8zbP7eATkZgtvNc91WByqN_BVr
 8lnyc0eDcoy_cItKW0d8M8v_bG0KBHT3h.pDO4CXyuAo9fkqN6AwQMLptQqv
 4oIuMSD_gxDpEFj8lNndxgbrAmJU63lg4LgNhVtPCWp7rttelzWTgdTMwHxL
 6bcUETGiv7dZI725sPYFGnLcDtuTDrl1r8FWeZ12wQiYBMvOnqwLrVdDeojV
 RSp19vJ1muNQVDMVmNSuz0DYOHK2.VcTO262lGFSY33dhUty4ffXq7YQCLPc
 S8DG1q2VXGu042dsjlLG165xx36k4s._cJt8jQS2gqMbpJsYy.8j2EHu6OVd
 aUz5vk0s4LlgZWPm8htnen0CPwOHTugZ1KQMeY3AZQ.7z0Oy_UdtfCGLgBUz
 8smb4b73HtpakdeuOl6bix4_sALoytV1Yg4tfIdWlVB3zUP.UWhF8wWkS3H9
 V6eecAOQJUdeAnsfVutlwGP2Rvtjnwql8YG3aLXQ5u_EoJ1.VLCQIRyMHyXk
 UMiBSkm5y39v10tMt7ID6zllZP_4.1iPTr72v2bHia_IjnL39WGnAJ3_Vho0
 ASPYDgEMqhQV4kT1DmOa9vNUvV1_gU0aikb7T_VXDRznacRZgzqEAamyaVNH
 rabBW26Jgd7Tp9puCokk8wxumUwU8NjbYA77MRC561abqU7exbHkjw8RPc.t
 5jX1Q4VRSRmftqnafjq5aQPdEMNhVlbLfKRA0XEcyH1O2fTJmd97dM.Vmtb0
 rX6q4TX9lFHBGqQxew3QR7JlSyaUy9LlrSBd41gJ6_1MqmX80tpDq0DSf6_T
 1XEmLq.tmQ3mcNc9IeQDA.3L12bN3o.LgXjRtniiq7kEnKm7Nl6D7ZMbev6T
 L38vTKDtTEhQ2hE7RmDJML_uDmgtAuKX51eDLF7aPNUxIE7UY.UnnhcJLMCA
 A6xT_
	HEcCW4qWaBISG0CKNBRXhsTqIe1RunO3cFZ6dlT38hS3CYUvCpFDNo_
 1ifANPJWz0UFvthM1praXXaiYIVDQZwfvViSWokLfVc1UI.ZGdG9HNOCgjwa
 g1Hl_qK7ReU09ustzFWsUaQGnY9V7bUBstevVyauId8TlG1Q_5qBCpmjRxSK
 TmgjkHBj.C6KeLW23kanbG4WUQxHpI8JZPnTWMvDs_V7botSFX6XvVvhrfm.
 IsdJttydLfUHTswO_4QYSIWckP.6YzxyA5ZeXwRuhevM3Y38dL.SVW5rBu_y
 FjJNPyILDBFo81UmJCPVJuL.EAOuJwkFsBMA9TrAxxJe_hV7amNCk_JfVDpP
 8A_E0bg--
X-YMailISG: tpz7DBsWLDuYSj.s.fQ9xVwDEXgxoGvIRVuUBvHb2jbZHz3w
 L1vdJjuDPSTMyZsKzp_Bpl8KDRq4bubtrIL7R8SVj0Y._E8NTRtD2GmQBmji
 PK9PD6XL0yG2xpXm_SfMMXnxE7hjdTdoHM0S4UH0RWpFA9EL9204vkPt68im
 fQFUW8WVq4w_CWOPQm4RFGukDAqB3eWlN3DyLClbLAW0UIX_4p1WRBVGQ.E3
 NNNsH9p_hrJgs4x0YVguhUV3or60uSA1PkR5GsajxprJO.Ptt.f1DpQAQKll
 iTIBGuxwzWm2aQf5zAGHpYmj4KYN7S5yfO6o2iHDc_x7kPI6fpA882DF4H__
 Ch8DhPJka9u1msFPBdt_EtR.5WeowZI6.Jx_PMlvKdNXN12ymNLxAuyZcl1N
 HPRCi5M3j4dmQafTDiZnwraNOtxivnQYkv1GX63_B1KKgT_MuF9m5IOWBRnp
 i4pb7pUFH5FRPAgMpd5i69F_vMDFBkyMlePkwLxXKx7joPbecN8piol2A4J_
 s1h1ZPHUNspKs_AaNXdEjatmRlCTot7un8.dPghUl5pldGtTHKPMw3OdKGbx
 1X159e8HqmczEmu99hSwUdSidPohle9ohazsQeOGUnvsOiPq0RQe34PzkJ.t
 omSWSIuStEcSqmZO44bkG3ZpCVvIODYNVnfTr7F6IMTa4VPR2Mu7yH6CG8Di
 rmGrATVihrxTIztEtBUD7BSvSu.MuTLGIUZQn.x6W5YI0z.LKWtqbLtJCNDG
 IXj5OsjXy9OyyM5HE.VmwRh1bscLwaEjUCkba3GpRhTdoHQDKmp8aNFrTPia
 KyWFzDKkXqD4csQjiqh0wyEpdGdRFndrHTwK65MzOeeyucM_y1vw5hFutALf
 XlNmELP_tOYjuCPIVRYb646DaWPt1uMZ6nVuN7Eg4om9ixXlKZHQa3Nup_xX
 4mrJ
	1D0it4ldUXBiJuF2M9.3yqtuh7u0zLjmffngX3JU9TOXrfgTpIUqQyHk
 DutlyalJT7MYJ77xpT3o89tqwPDUa1rGmSN5.5RE.Z04LBcNwTIfCIY0ubgj
 RzSVTzMo46IzUebVkPMOGpr.DJI66a65x_TwmNDDuJFbyp2N7ut5397HwmMG
 4sA1YVsrNSZd4LQ9.ykjC.vfZknNCaMskAs4mNkgumqyTNdRzEXsNh6dEDUc
 30r4GmFGxqdiIMJNIojQc4TClPYkSkBvYko3CZwsH0LavRcrWJW6DoZghodM
 sWY-
Thread-Index: AQD7/7enJvmo2XdxKOgXfWJjRhq7SA==

View entire message

Parsing header:
0: Received: from 185.56.88.171 (EHLO onlinebusiness.fun) by 10.197.32.75 with SMTP; Sat, 10 Sep 2022 13:52:10 +0000

No unique hostname found for source: 185.56.88.171

Possible forgery. Supposed receiving system not associated with any of your mailhosts

Will not trust this Received line.

Mailhost configuration problem, identified internal IP as source

Mailhost:
Please correct this situation - register every email address where you receive spam

No source IP address found, cannot proceed.

Add/edit your mailhost configuration
Finding full email headers
Submitting spam via email (may work better)
Example: What spam headers should look like

Nothing to do.
Posted

More spam keep coming into my primary email account.  SpamCop still reports "Nothing to do."

SpamCop v 5.4.0 © 2022 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6774813157z008d5d570ef5ef1504270d1a1924a2e2z
Skip to Reports

Received: from 127.0.0.1
 by atlas-production.v2-mail-prod1-gq1.omega.yahoo.com with HTTP; Sat, 10 Sep 2022 15:47:25 +0000
Received: from 188.92.78.107 (EHLO h-homeownersoffers.online)
 by 10.253.31.116 with SMTP;
 Sat, 10 Sep 2022 15:47:25 +0000
From: "Japanese Kitchen Secrets" <Huusk@h-homeownersoffers.online>
To: <x>
Subject: The sharpest kitchen knife Everyone is Talking About
Date: Sat, 10 Sep 2022 11:46:02 -0400
Message-ID: <8921_______________________3384@h-homeownersoffers.online>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_00FB_01D8C50F.2BE32F40"
X-Mailer: Microsoft Outlook 16.0
X-Originating-Ip: [188.92.78.107]
Authentication-Results: atlas-production.v2-mail-prod1-gq1.omega.yahoo.com;
 dkim=pass header.i=@h-homeownersoffers.online header.s=smtp;
 spf=pass smtp.mailfrom=h-homeownersoffers.online;
 dmarc=pass(p=NONE) header.from=h-homeownersoffers.online;
X-Apparently-To: x Sat, 10 Sep 2022 15:47:26 +0000
X-YMailAVSC: j6rJWZI3bBtDRsUhdDUMYzuMPlSbaZ10VYPiaNv7FeuBIFW
 EY6Pm3_.syE8gUjt_SFlqi7aKbG.MEih8qCH2y9cx01jymRFBm9v7ESt8BV1
 K1aYXyQDdLYd4oIGfIMSVzwGdPEE.AC5Dzy5Zrm3WwZ7AfV9bFVJPsTD6dms
 s.uJ.uoSQHHOpboqISRxJT2HYkQma2ZizZ7oTTf63JBGyi0ZGHNuj9CRXwNQ
 FTB2QaNaPeU9dt8UQ_3DYp13fgQuKsCbqpTYIg2LsaPTlEXTfjFXJuLIRp2b
 DsWncy_no5QqqCjsrd_HUk2Nkm46zmAlitz2IuMCe5wpPd9CNwFLNXCAAom5
 pXUPimdk_Yk_EM0DBhZ8Hvt9BoOcIBsI8CZBcFgIIn3TjTiL.82bxKCGvZoz
 7XjIxOmkLgHiXPlIH68c_e.8ThGA4ZXgpICIeVCbxk3qnEsQ5iJW5YTbV0qv
 XNisJuQdcsQmj5jMIO0a0..LniKqnGF3QLJvI68NrJ_XuWJlJcH4gNaAKRec
 p0TbpKIyGoxNvnz8ru8SepsoDnaA_bWQLhivHOPmtBEV.hzK0aWCrW1z4QLb
 pfMuuXVMjlR.2msmtZYBJDgBpKNnCL0BdtBVMejJefnufjnFPDQvHDeu1kPC
 MQyZacFAKL6dS_H2uqidt8uM3hZXW8qJT9RQPrKAl8lHXf8W3FMzHSujtc8u
 w8sSqPswbqxsd4BGpcRFB1Wl7oKerqV0mNX7lE4ZvSKt4fKGEBL5FSCZWjBY
 29r_rNvTBUreDhGO.zf5dBA2qjyI9ILlObonhmWf1tlDNL9L3sTq.bvGp0Tq
 HOEP5A2HkrXbPdVeowBOmWhEjaE6JPe5Xm6LaC9AAq6.dAqRwRklZyPrNyi5
 lv0ALdTLKsjx6kNnl0CLhR8A044pRar8UG3IscxxqW2xPt4oM9qY2GkXSMZE
 bHCUJ
	X22.BhdI1aV8Haddh4whca_ihWr81nZ3BZWKa9Ue40qS1KXhf.BkUrO
 ulyR3DGHEjfkeiTuaDZMf4jYpNFCdknJwfis2AhnUnAovTbc4PFs5VYu.LVf
 50zQiyKCD2iywCqpx_DCM5kmgBy3fRSdg61vmffyunqw.sC4IMZXt26Uu_FR
 6Pscwr6n_ga9JCVx4AEt5T.RsHtI2Ee3vv5pXQ26kSSzpnHtUWU7pWGPM.l.
 mx4frBEFb6_bbbpHGSChGwcbGpT_duXAzFYrcTz8QfK2MhO.5zz36UFqy6vS
 DtkAn7YebTCBcDCD7qPZCaCfKxxv7Yb4g3jbJBoML61trdbcHQcBQgogXtHm
 .MVDwn8YdgM1mc.IGtmerheMOd6KZGNQqSOWVXpEJNGPqvIatsLPid2kXJTS
 lFH_9FMPP5M0oZJ3lttMTjIFX_f5eNt4VhPx7M3YVH3.ZrWmPB3D2oxYfL6R
 .jrLgmExetnUCUO6x.26jSoP.r6Fz9ZQ819G3Omyy5MowBsT.1ycOjdTVEJ9
 hCl8Xu9.7nunXCF2NjDyiKjg6LWbbCQmTxYEzv2BBjEZoGGDGAxLfOPZprjG
 P8yDF9B0xFAey1k0aZcbM0dCYzIlOZczk3ustrUCBs8yaiveO1YVh4Vu7AaO
 L84htx4QrHt_O6ErpRF3KKgLRo_6uwnyZ6odFsZl7SvDGK.W6_Q--
X-YMailISG: 2cPFdHYWLDup.slhnOr4Wmqq7w3hrxAhenS0hyuD9gJwo1WF
 4n8L_b9dJX9zgum6Rs6AYftGAyHd1S5biWx8j_UkA9mlpubkcgxq2HG5_7yf
 XZh9c1.yuOsb5oICwR92lay3ni8c6a1DZ19SzSpmH8CAVrRECKf8KlDOWRqU
 tdsF1iruZr7n2vm4h8I8XqGCKssiyJWXsvqIgQASgWZxjh.OnuLEqqFMAequ
 s4bKaLKXCEZIKr7mSVz9eNTIyIDBscHW1TkDrcdOSys8loxZLhZf3VpBSGv0
 JjuHX0OvITdc8gz6JbPre.iz276pHcU_FE8ul5VtrkzVE2LOWwLi0dxROk8z
 VgWYG.Pd6Y.qNvMFiwkpyXer.YrOtRP9Erqpzs8_y3lv6LMqALVwVc6tp45z
 26rimJa_D4d3iF4IMZ.rBTnwPmZEJtkU9C8IP8JuE6HC1HnMIU21tXdLQNqd
 3x.NPY.1HqyBQPtf7C1rCoViNww7e4TuaIg7PEv3nMNLb.1bGfBv_Kj_7sCb
 9NFoA63AM1vETThRsAAJ_UT0Q47XoZtV9fwQEakI9XLUY7LKRJvLDxt.Bbd2
 iE7HjXFxF2tGJEoy6gyT9C3yuLP1I5YuIOm.e4SV6e6bexyp04_NlmXpEqex
 pknreyDuOhtUBqsg9zhLPNI8qI.R0rOGjT3MGFle6CeJYUOq.ciGnkyMQQSz
 Kv9fV9C8JSHOVN0yLbXC5HfI9selfP45yCDnDfA8imphhes1QEz1.b0vvye6
 j_89iDgSkWnFE_qCKeBZq1lt19Zz_KFDdDwp2WOSgNoiKZ.XYKC15EcNbNBf
 dwCadMPmyxRltoSO._65dzL0Xm3m8ugCjHlNij6qvlFCtBGBLzBCqO3T7_ZY
 AyWoXGcrKr.Csl2cqrtiLWmtM36D3Cc.NI6NUm.z2oUQ26nAF1lbWAFVjq8d
 8yBn
	Q9ydaFzncsCU81jvemaWu92ZQaZ3TSzJNbuQR6E1nRz1mFDy6d6XEXM8
 CPPQAbxF7R_KcKK43GhptCWOKJGuO3wPOzDB51dy0wRNqBFVjqAi_UAQhD0w
 jjUZRrngYvtvjzFC6gckEFp3S4y9WzF4DdEE7hmeYGxHgSMgBWmMfBDCvPMr
 _ZYfcBMsWZ681t75Kgyotdo0SyAdrWdn2HHhE_JCwbCDtJRozRm3OVXPOGdH
 bpT0zRt7_vtNjdh8cKinEcIyQpi1pLHrqj6nnD6G_KwhbqibwxD5vQI-
Thread-Index: AQI0GQlN5g2HoDtIBs8vV4qpNu+xnQ==

View entire message

Parsing header:
0: Received: from 188.92.78.107 (EHLO h-homeownersoffers.online) by 10.253.31.116 with SMTP; Sat, 10 Sep 2022 15:47:25 +0000

No unique hostname found for source: 188.92.78.107

Possible forgery. Supposed receiving system not associated with any of your mailhosts

Will not trust this Received line.

Mailhost configuration problem, identified internal IP as source

Mailhost:
Please correct this situation - register every email address where you receive spam

No source IP address found, cannot proceed.

Add/edit your mailhost configuration
Finding full email headers
Submitting spam via email (may work better)
Example: What spam headers should look like

Nothing to do.
Posted

I just received this spam that was pretending to b from McAfee.  It is an incredibly malicious spam with malicious code built into the subject header which automatically initiated a malicious website URL, but fortunately my anti-malware software, Malwarebytes Premium, blocked the malicious URL.  Once again, SpamCop reports "Nothing to do" and so this ISP gets away with sending malicious emails to people.  This is really out of control and SpamCop is not helping!

SpamCop v 5.4.0 © 2022 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6774820422z2b1685b52218cea09110e5dd44a83073z
Skip to Reports

Received: from 127.0.0.1
 by atlas-sbc-production.v2-mail-prod1-bf1.omega.yahoo.com with HTTP; Sat, 10 Sep 2022 16:19:34 +0000
Return-Path: <info@schultz.susanmariedesigns.com>
X-Originating-Ip: [88.216.97.119]
Received-SPF: pass (domain of schultz.susanmariedesigns.com designates 88.216.97.119 as permitted sender)
Authentication-Results: atlas-sbc-production.v2-mail-prod1-bf1.omega.yahoo.com;
 dkim=unknown;
 spf=pass smtp.mailfrom=schultz.susanmariedesigns.com;
 dmarc=unknown header.from=schultz.susanmariedesigns.com;
X-Apparently-To: x; Sat, 10 Sep 2022 16:19:34 +0000
X-YMailAVSC: 42yHgPk3bBuxC4ebqgdVn5SnPOcnX.tLBi6P5pJS8E_sUtx
 BuIw4Z_epm.ypzuOA1MD6qGSv.WGGpzoBeen6euc2ZkIT_J3szP9UXgknIJo
 MlYTySRPhlHNaXMIS1e_I0BaY4LN.lYQKLmFop2P7TbWxvZ3flMd3..KBwI5
 WX9qzf9RG1pPfVOVI8tKYDxK6qu0IYe2a_76L1_4AEuxtpaon1VdK6STIy5k
 kbiUT6JQgWG5R0Vgan5.d576YZqzFeXv6PEedHYDBfPRSCNc48brSiD9mx39
 BQqAf_SeJerw9EXarcSF7iKyYur5ThTxQ.IoaDNK_WI31ZmcGh9XnixGSXMN
 l4HJsfvCgp0mwfDtiLkWeA4.nkKBXBSesUpamUrbJfptzSrXbyJ4FUuKveC4
 GrcrudFogLDbPryShJxM2qlQbPrT1uFjtVEnejQcSSjQ0cS6MZa5gjHMsyev
 Xfs5Hw366yj5Sl1N8vJYe4HrbRVG46CEiajmfrkl17aDjDKPbYyPcTxJr5xn
 EELIdC9cYcg4rGf0Qx0C1J0KvWI235NUoAK7SHcjj6PCvYLJPYdRodToq4q4
 3IegpMypjvedhDBMuH2Vvd0kLUlffqlF_S3BHoyjwtZEDVug3EyWu5enJBc9
 NHbaPB_JZSIQhiTT7I_VyfC4.ss.daAy.SS.HpQearModlly2MEkjwwJTBMS
 XSXfOnBDLKudScfN99mDq2Sq1GTi5.aiy4KmqnoX7vE677IsZ2DLJVTr444h
 D.24p7wVrBpOlPeibbiHLTmGdyE95LsWc7Rbjdm5cXKpa6vmmUu80EZXG_ne
 fc7POzMPevuuID41U3..L_OKiUKI1uvxBXWke4dy8wZw7ELTaRENg6QSSND6
 0Oi8miNZWMCMG8wp20JK7ebCq2Kv.p8dlehIa3UZxC.LHmcjNu0luzKFM3Ur
 8oR3yZvdyGK.ShVGNSHwms635km_poBrI_9JwcRXL4l4hnUq9UV4yiLurvTH
 joDjzr64W4NuwKq23j94SzdqcPhQtolmX_4CmJ2Im6HXpZqyiYZfLJtetycl
 TP9m44C0lVBeNNspyVaEtpi_ZV.FHYMR1lhCLmgvDiKDgR88sWpFpKFQ2Zg.
 dmTHGJYdFaCOGMSXitNim6IXu1kEljWUPhZHA4o1WIMY3lCp8wtrJtYM1XCo
 EZgEzlZpA2966Eper42d0APnNBsiGeB31CM0m1cMV20w2WCKM7IclKPla5tK
 YpaV1zH6F4maYQfXPnqZgdv48q8dH8HibEyriX3YRnR1UDC5kH4aNpMppRjJ
 EIdWNRNagJroZXClsrXvFSw51RTal5YUzC3be9mLVRV4JQX_ZvYTaQVCbux8
 J1RamRLs-
X-YMailISG: fAdRTKEWLDtxXkCXRHNSzyYNVOwT97QyTKnNsnUynj514QiB
 _6beXvGEFq0_XCHrVHyh8RIDniOnAChib82FMBLcRelyNr560GM79p1mE3Wc
 EVg.vBI0jmyKqnuj_QMUbEpC82HomxduwVWD0BOUO9ifoCvyQ8ilOKPei7v5
 iYRAZkKCowyhMtVpSHBG6kczSY5EEa6JMBK80cgLHElyvcUXA8liicgeGCqv
 DOazqdG0qi_7GdWEb1Ek2oHTvmXp1yAOqmBqBQbXov4Q8DYRf2Pj.A9KNLq1
 e6LA9hj70z_AAoVuOAefYPNAnp_zLXdFjz573rKm7JYk55JvP.acXRJWeOjB
 7H77tN1dfbPHNucG1AMmxuix1oCYmb7iFBPwjj0IEX6I6uKnNIUFBUNw0wvR
 .0Va3W2zy.sS2xuwPhcKQTWqMrwRRPzfl76O9rtLolzUszT0cOaVa1btXhg6
 NtI7DJYQwwCgFMXd_z22lG.akFKz442R1wFv_npj7nYxKe0ywsN9A0npqKJa
 tfE7b.fCNPb526JIm6QasiFKVnGftrdEBXZNBEUnovtXk6gLEhJUaO5aLLIa
 J8Drs8jEOkct6i1o4FSWa1qlThGEhI0zT3XpWP1e43y1rqbEW1RYZYTqs1hS
 HS7ztzC1RHGxHAgoBNqdeuJ5sSTq6k8iYDO9ue0cwe.Goxss5yx07lj5O6P7
 kDMUjGAVSQIsT3W.EAs1EnvOZ8CLtaWhWXouSEYRT3N6cmH3Y_T.9uAwgftf
 Z0CnecST48QbfxMxyLiiLUywXQ336dmtqs5Lh0jV_CZRGkKpUQ3mzGbUC0UL
 EUdCCv.jDgi8Kqo6JbWDq7ZlRBMyP5yQfosDGLYk5bk5EOfhpK4W1GWakYXo
 qfRLw2o.EXSujeMUDwWkAREfyry0J1BXa8tESL7M46JjEjLN_hWtUJ4y_1sh
 jUz6bk3ZQMlNDMTaa4c.nyPfcZBW6cPB5B10u14rcNb8cqoDj1dhfx4QCc2f
 XolYKKdY80jdE8K_dk8eb8WSAdq8azWqhOhwV0zNKJ1u4BSt.o69qJDZd8rj
 X6ILfvImF_SNJa_1IWDh6AOWv5HPgcxsVemqvNpz2YqLt_IQAyG0AVOGx16C
Received: from 144.160.244.82 (EHLO alpd681.prodigy.net)
 by 10.194.221.232 with SMTP;
 Sat, 10 Sep 2022 16:19:34 +0000
X-Header-Overseas: Mail.from.Overseas.source.88.216.97.119
X-Originating-IP: [88.216.97.119]
Received: from bscs.org (schultz.susanmariedesigns.com [88.216.97.119])
	by alpd681.prodigy.net (Inbound 8.15.2/8.15.2) with ESMTP id 28AGA54O030221
	for <x>; Sat, 10 Sep 2022 12:19:34 -0400
Message-Id: <2022___________________0221@alpd681.prodigy.net>
Received: from localhost (127.0.0.1) by schultz.susanmariedesigns.com id 8JO1ZrBKfv for <x>; Sat, 10 Sep 2022 12:19:15 -0400 (EDT) (envelope-from <info@schultz.susanmariedesigns.com>)
From: "Daveocampo" <info@schultz.susanmariedesigns.com>
To: x
Date: Sat, 10 Sep 2022 12:19:15 -0400 (EDT)
X-MSGID: 687434368Oq694764
Subject: Mc‎Afe‎e su‎bs‎cript‎ion exp‎ired‎! P‎r‎otec‎t yo‎ur‎sel‎f & yo‎‎ur F‎ami‎ly N‎o‎w
Reply-To: info@schultz.susanmariedesigns.com
Content-Type: text/html;
Content-Length: 806

View entire message

Parsing header:
0: Received: from 144.160.244.82 (EHLO alpd681.prodigy.net) by 10.194.221.232 with SMTP; Sat, 10 Sep 2022 16:19:34 +0000

Hostname verified: alpd681.prodigy.net

Possible forgery. Supposed receiving system not associated with any of your mailhosts

Will not trust this Received line.

Mailhost configuration problem, identified internal IP as source

Mailhost:
Please correct this situation - register every email address where you receive spam

No source IP address found, cannot proceed.

Add/edit your mailhost configuration
Finding full email headers
Submitting spam via email (may work better)
Example: What spam headers should look like

Nothing to do.

 

Posted (edited)

@DaveO8888, have you tried turning off your mailhosts like Gnarlymarley suggests? it seems that therein lies your problem. Worth a try...

Edited by RobiBue
Posted

I deleted all of my mailhosts and now I am able to send SpamCop reports for all of the spam I am receiving.  I hope that many of these rogue ISPs are eventually blacklisted so other law abiding ISPs block them from sending their malware infested links to the rest of the world which really has become a national security matter that we all must take very seriously to help fight. Thank you very much for your help to resolve this issue!

  • 1 month later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...