Ask HN: Does reporting spam/phishing help at all?

2 martin_a 2 8/7/2025, 6:11:38 PM
Hey! So, I received a spam mail and I found it funny because it uses an .xlsx.svg file, so I took a look at it.

It's an order page but obviously you have to enter your mail address and password to unlock the order details.

Well, that's not really what it does, but there's some script loaded from jsdelivr.net and a .ge domain that receives the payload that gets sent there.

Now I'm wondering if I should take the time to report the repository/script to jsdelivr and contact the NIC of the .ge domain to get it taken offline. Maybe that's just a waste of time.

Did anybody of you have any luck with reporting things like these?

(Maybe I should rather send requests with fake data to that endpoint and see what it does and open a cold one in that time... :-D)

Comments (2)

Bender · 2h ago
In the past I reported massive amounts of spam to SpamCop [1] but it only helps the businesses that utilize data from SpamCop. Some do this transparently in the background so it's hard to say how effective it is. I used SpamCop, UceProtect, SpamHaus on my servers so it helped me. I also accepted the fact that by reporting them with full headers also increased the spam sent to me but I was OK with that.

[1] - https://www.spamcop.net/

martin_a · 2h ago
Thanks, I will look into that!