spam from Microsoft

[dlongnecker]

I continue to receive spam from Microsoft.    Cannot get it to stop.   I have reported it to Microsoft executive support 3 times and they spend about 3 weeks saying they can't do anything to stop spam from their servers.  

Now I see when I get the emails and report them via Spamcop they no longer say they are from Microsoft Servers.   Take a look at:

 

https://www.spamcop.net/sc?id=z6783981921z3874a5706b7057f2b6578e022311dddfz

SPAMCOP SAYS:

 

Re: 2603:10a6:20b:175:0:0:0:12 (Administrator of network where email originates)
 To: junk@devnull.spamcop.net (Notes)

Re: 40.107.6.107 (Administrator interested in intermediary handling of spam)
 To: junk@devnull.spamcop.net (Notes)

 

WHOIS ON the IP addresses clearly says they are Microsoft IP's.

Is microsoft now saying to not report spam to them?

How can I stop this spam?

[RobiBue]

interesting:
https://www.abuseipdb.com/check/40.107.6.107

and https://www.abuseipdb.com/whois/40.107.6.107

LOL! I did do a "self-search" of abuseipdb.com with their own tool and they are hosted on
cough cough
cloudflare cough cough
who has a spam problem themselves LOL
I thought I needed to throw that tidbit of information in there 🤣

[petzl]

For Microsoft's next act they will bring out WIN11
I'm going to Chrome sick of continual downgrades from WIN3.11 
 

[dlongnecker]

Last week when I reported these Spams, they actually went to a junk@office365.microsoft.com account.    Now they go to junk@devnull.spamcop.net.    How did Microsoft Manage that?

[Lking]

Of course Microsoft didn't (directly) make the change, SC did. If the spam reports sent to junk{AT}... bounced three times, then the system sets a flag and no more emails are sent to that address. Instead they are sent to the internal SC devnull address for record keeping. OR if Microsoft ask SC not to send anymore reports, a flag is set and the spam reports are sent to the devnull mail box.

There are other reasons that SC chooses not to send spam reports and files them in devnull.

[Hanco]

I’m seeing the same. Reports go to junk@devnull.spamcop.net

What’s the point if that’s the situation now?

[Lking]

Of course all reported spam does feed the SCBL which assist all that use that dynamic list.

What would be the purpose of sending a spam report to an email address that bounces the email? Or sending a report to a host that doesn't want the reports and just drops them on the floor? In either case the report just adds to the clutter on the internet and cost SC clock cycles and bandwidth with known ZERO positive results.

[petzl]

4 hours ago, Lking said:

Of course all reported spam does feed the SCBL which assist all that use that dynamic list.

What would be the purpose of sending a spam report to an email address that bounces the email? Or sending a report to a host that doesn't want the reports and just drops them on the floor? In either case the report just adds to the clutter on the internet and cost SC clock cycles and bandwidth with known ZERO positive results.

The same spammers IP changes in every spam so will miss the algorithm needed to get on the SCBL
Perhaps SpamCop could send reports to US CERT?
https://www.first.org/members/teams/cert-cc 
Pay to ask first

Edited November 8, 2022 by petzl

[RobiBue]

I went ahead and reported my spam directly to abuse@microsoft.com with a note that they should get in touch with SC to correct the bounce issue (the address at SC was changed on November-5-2022 3:51:49 PM -0500)

(of course I also ran it through SC just to feed the SCBL ...)

I also told them that I expect a full investigation of the spam and not just an "unsubscribe" since that causes more spam 99.9% of the time...

let's see what happens 🤪

 

[petzl]

Even getting porn spam from them send my normal reply
Microsoft have hit a new low!
Child porn spammer 
pictures under 18 or made to look under 18
NO PROOF OF AGE available! 
SENT TO MINORS
 

[Hanco]

Tonight I had Microsoft spam, with a link to a Google document for the first redirect.

 

Microsoft won’t get a report

Google won’t get a report from SpamCop 

Google did get a report from me and replied, “If you would like to report suspected spam, Malware, Phishing, or other abuse on Google Cloud, please fill out the form at the following link:   https://support.google.com/code/contact/cloud_platform_report  If you would like to send a legal request to Google, please submit a request through our webform for the fastest response time:   http://support.google.com/legal”

Google, how about you deal with it ?!?!

we are officially f*****

[petzl]

32 minutes ago, Hanco said:

Tonight I had Microsoft spam, with a link to a Google document for the first redirect.

 

Microsoft won’t get a report

Google won’t get a report from SpamCop 

Google did get a report from me and replied, “If you would like to report suspected spam, Malware, Phishing, or other abuse on Google Cloud, please fill out the form at the following link:   https://support.google.com/code/contact/cloud_platform_report  If you would like to send a legal request to Google, please submit a request through our webform for the fastest response time:   http://support.google.com/legal”

Google, how about you deal with it ?!?!

we are officially f*****

They have weaponized Gmail If you have a Gmail account you can report spam as phishing they then shut links to their websites if any.
You can have your email forwarded to Gmail try to leave yours as "unread", but logging into Gmail web email you can report phishing 
Gmail though does electronically read your email, if dubious do report you to the FBI.
Enough hits they will read it manually.

[gnarlymarley]

Be nice if we could get the big companies to realize who is fighting spam. Back when gmail did invites, I was the fifth invite away from Eric Schmidt. So, if we tell our friends about SpamCop (and they tell their friends), maybe we could get google to know about SpamCop.

[Hanco]

9 hours ago, gnarlymarley said:

Be nice if we could get the big companies to realize who is fighting spam. Back when gmail did invites, I was the fifth invite away from Eric Schmidt. So, if we tell our friends about SpamCop (and they tell their friends), maybe we could get google to know about SpamCop.

Oh I do that a lot

[Hanco]

20 hours ago, Hanco said:

Oh I do that a lot

Now then… here’s the latest.

I noticed my spam keeps containing “warriorforum.com” references (not in the email body but in the headers)

So I went to warriorforum.com and it looked like a genuine effort to help affiliates do email marketing well.

Since the spam I’m getting all seems to have that reference I thought maybe I can reach out there as there must be an affiliate who thinks what they do is ok and I’ll just get myself off the list and tell them why I don’t like it. All my spam seems to have warriorforum in it lately, so a new lead on how to stop it all (except the “friend or relative” fraud emails)

I joined and posted the details. I did use an Apple Hide Email ID at this point to get the connection going in case it is not genuine and I just make things worse.

So the forum mod sends me email “post removed” because I posted links and asked the sender to PM me.

So I removed (broke) the links and asked that the sender reply in the forum. Mod sends message “post removed - don’t repost a thread already removed” and I thought, benefit of the doubt, maybe he did not see the changes. I reposted with highlighting that. Reply came swift, not permitted again and I explained I was not “complaining” but want to get off the list. Reply came that I would be banned if I continued. I did reply saying I was trying to be constructive.

Now I am seeing my IP address is flagged in sorbs.net and others.

I really don’t know what to do here. I need to get that flagging resolved I guess, so I’ll start researching that.

Meantime, in March 2019 Amazon sorted out spam that started coming from FoxSearchlight.com. It stopped. An hour ago I received Searchlight.com spam (suggesting I go to a place nowhere near where I live (have not lived there for 7 years so what’s that about?)

And yeah, all the emails originate at Microsoft that is not accepting reports.

Edited November 13, 2022 by Hanco

[Hanco]

Reset my OHC and restarted phone, cleared cache etc. Looks like my IP address is different OR the blacklisted status corrected.

It was these two that had the red checkmark against them. So weird!

 dnsbl.sorbs.net

 dul.dnsbl.sorbs.net

[petzl]

On 11/13/2022 at 4:14 AM, gnarlymarley said:

Be nice if we could get the big companies to realize who is fighting spam. Back when gmail did invites, I was the fifth invite away from Eric Schmidt. So, if we tell our friends about SpamCop (and they tell their friends), maybe we could get google to know about SpamCop.

I believe Microsoft are passing my abuse reports to hacker phishing criminals?
My  last spam from Microsoft was claiming to be from Australian retailer "KOGAN" I have bought from them 2x's but never from the email Addy that Microsoft pound me with!
I use a VPN and send reports directly to Microsoft. My VPN uses Sydney Australia IP's.
However Gmail do not send originating IP's but Microsoft have my email Addy information?
As I have said before SpamCop need to involve CERT to send Microsoft reports to?
Sometimes criminals get unlucky.
I truncated this but here is the SC Track
https://www.spamcop.net/sc?id=z6786399930z3ed0db3486a98ea89686916ec9f6cb89z

Edited November 21, 2022 by petzl

[Appleseed]

On 11/9/2022 at 7:43 AM, Hanco said:

Tonight I had Microsoft spam, with a link to a Google document for the first redirect.

 

Microsoft won’t get a report

Google won’t get a report from SpamCop 

Google did get a report from me and replied, “If you would like to report suspected spam, Malware, Phishing, or other abuse on Google Cloud, please fill out the form at the following link:   https://support.google.com/code/contact/cloud_platform_report  If you would like to send a legal request to Google, please submit a request through our webform for the fastest response time:   http://support.google.com/legal”

Google, how about you deal with it ?!?!

we are officially f*****

It won't get anyreports.

EVERY answer I get is

"Thank you for reporting abuse on Google Cloud Platform.

We are not able to take action on this report since the IP mentioned in the report is not hosted on Google Cloud."

 

I have reported SO many phishing emails to them. They did send those and they did host the phishing site, but they don't care about that. They just say it is not their problem.

Edited November 22, 2022 by Appleseed

[Hanco]

Yeah they’ve given up. It’s a cost to them that they don’t want to spend on. They don’t lose out, so why bother I guess. They have to compete against others who don’t care, I guess. 

Still, the spammer harassing me and others must be fed up for some reason. This one came through, and there doesn’t seem to be any point in sending this, other than to express frustration. I imagine it was sent to the full list of targets he spams. I never asked for the spam. Not very nice!

“Please find a big wooden stick and shove it up your ***. I really hope you die soon, ****ing piece of ****!”

Edit: subject of the email? “Go **** your self”

Edited November 26, 2022 by Hanco
Add subject line of unpleasant spam received

[gnarlymarley]

Good to know you are making a difference! I don't think those emails would bother me. I had most of mine stop and it would just be something else I could report.