Is there a website to report possible fraudlent or spamming websites?

[madbishop]

Hello all-

I'm just getting into the IT Security work and I noticed something already. Our company keeps getting spam from this site: http://www.e-hostzz.net/

I'm not sure if there is a reporting agency where you can report websites sending out spam.

The only other options I can think of right now along with checking with other security people here, is to create rules or filters to block that spam or have people change e-mail addresses, but I believe this does not address the real problem and we could have this pop back up again.

Please advise.

Thanks!

[Maverick811]

You can report spam to SpamCop - http://www.spamcop.net

For your situation, you are on the right track - create filters either at your firewall or your mail server to block all mail from e-hostzz.net. Should eliminate the spam coming from that domain, at least.

Changing the email addresses for your users isn't usually a feasible option - we however, because of policy, changed our entire email addressing scheme about a year and a half ago and my users experienced a huge drop in the amount of spam they received.

[pwaring]

I get junk mail from different domains all the time - the easiest way to stop them is just to add a filter to your incoming mail server to either bounce them (uses more resources, but can help diagnose problems) or delete them (usually by sending them to /dev/null).

These two pages on attrition.org might be useful:
http://www.attrition.org/attrition/warn.html - How they block emails (guidelines etc.)
Who to complain to

You might want to take up some of their policies on blocking email, since many spammers don't conform to RFCs when sending mail, or follow their chain of command for reporting abuse (obviously substituting the correct addresses for the domains you are complaining about).

[golam]

Spam filtering applications are also a good way to go for a medium to large business, or check with your ISP (if you use one) as many ISP's now provide spam filtering.

Some applications to look at are McAfee Spamkiller or iHateSpam

Cheers

Golam

[SirDice]

You can use spamcop as Maverick suggested but you can also take alook at the headers to see where it got posted from. Then use whois to find the ISP responsible for that IP and send them an abuse email containing the headers.

Search around AO, I'm sure there are some tutorials on how to trace spam.

[madbishop]

Just a quick thanks for all your help!

I am forwarding off to our Collaborative Services group.