Jump to content


  • Content Count

  • Joined

  • Last visited

Community Reputation

0 Neutral

About moltar

  • Rank
  1. moltar

    New Spamcop Phishing

    Admin edit: Moved this 'new' Post' from the Reporting Help Forum and merged it into this existing E-mail Account Forum Topic/Discussion. PM sent to advise of this action. Replaced my domain with mydomain.com. The email is fwded from spamcop to my other account. Received: from m6b.mxes.net ([unix socket]) by m6b.mxes.net (Cyrus v2.3.12) with LMTPA; Sat, 29 May 2010 21:51:00 -0400 X-Sieve: CMU Sieve 2.3 Return-Path: <helpdesk[at]spamcop.net> Received: from by m6b.mxes.net (bayesd) with LMTP id 1275184260-83382-10 for <rf_mydomain.com[at]ms6.mxes.net>; Sat, 29 May 2010 21:51:00 -0400 (EDT) Received: from local_scanner.mxes.net (mxout-01.mxes.net []) by mxout-01.mxes.net (Postfix) with ESMTP id D4BE98A110 for <rf[at]mydomain.com>; Sat, 29 May 2010 21:50:59 -0400 (EDT) Received: from c60.cesmail.net (c60.cesmail.net []) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by mxin.mxes.net (Postfix) with ESMTPS id 5455B8A10A for <rf[at]mydomain.com>; Sat, 29 May 2010 21:50:59 -0400 (EDT) Received: from unknown (HELO filter7.cesmail.net) ([]) by c60.cesmail.net with SMTP; 29 May 2010 21:50:54 -0400 Received: (qmail 21502 invoked by uid 1010); 30 May 2010 01:50:58 -0000 Cc: recipient list not shown:; Delivered-To: spamcop-net-moltar[at]spamcop.net Received: (qmail 21405 invoked from network); 30 May 2010 01:50:48 -0000 Received: from unknown ( by filter7.cesmail.net with QMQP; 30 May 2010 01:50:48 -0000 Received: from avas104.indosat.net.id ( by mxin1.cesmail.net with SMTP; 30 May 2010 01:52:49 -0000 X-IronPort-Anti-spam-Filtered: true X-IronPort-Anti-spam-Result: AoUOAK9gAUzKmzKE/2dsb2JhbACDFkOBfox3ixiBRogvpCqCeoNOiQIOgRiBSQgFgS9rBINGiU4Bgxw X-IronPort-AV: E=Sophos;i="4.53,325,1272819600"; d="scan'208";a="38903006" Received: from sumatera.indosat.net.id (HELO ms1.indosat.net.id) ([]) by avas114.indosat.net.id with ESMTP; 30 May 2010 08:50:36 +0700 Received: from banda ( by ms1.indosat.net.id (7.3.104) id 4BDFAC190039A3B4; Sun, 30 May 2010 08:39:39 +0700 Message-ID: <31284045.391721275183579719.JavaMail.defaultUser[at]defaultHost> Date: Sun, 30 May 2010 08:39:39 +0700 (WIT) From: "helpdesk[at]spamcop.net" <helpdesk[at]spamcop.net> Reply-To: customer_centre11[at]live.com Subject: Your Account Update MIME-Version: 1.0 Content-Type: text/plain;charset="UTF-8" Content-Transfer-Encoding: 7bit X-SpamCop-Checked: X-Virus-Scanned: ClamAV, Sophos X-spam-Score: 1.6 X-spam-Check: Enabled,6.0,13.0,1,1,42,1,0,0,1,1,0,0,0,[spam], X-spam-Status: No, score=1.6 threshold=6.0,13.0 X-spam-Sys-BayesResult: Unsure, 0.627370 X-spam-Report: Content analysis details: -0.0 SPF_PASS SPF: sender matches SPF record 1.6 MISSING_HEADERS Missing To: header X-spam-Scoring: 1,6 X-Originating-IP: X-Envelope-To: <rf[at]mydomain.com> X-EsetId: 43E7BC27AF5D190911AB Dear spamcop Customer There is an on going changes/upgrading in your E-mail Account,please send us your E-mail ID and password to enter into our database operating system for upgrading in other to avoid your account be close
  2. I don't see anything relating to my problem at that link. I think maybe I am misunderstood. I will try to explain again. Occasionally a good email gets caught by a filter. That's ok. It happens. I use the old school reporting tool (http://www.spamcop.net/reportheld?action=heldlog). When I see a good email, I check the checkbox and select "Forward (and whitelist sender)" option and I am good to go. Under normal circumstances the email arrives in my mailbox within a minute. But these two times the emails did not arrive! They were said to be forwarded (and i pasted the actual message with an actual ID). Maybe you can track it down by that id?
  3. Well, I still didn't get these emails mentioned above! So they are lost! They weren't super important. But this happened again today! And this time it was an important one!!! What's going on? Just back tracked the report: Queued message 201194 for release and sender for whitelisting.
  4. I forwarded and whitelisted 3 email messages this morning. One hour later and I still haven't received them. Nor have I received the report yet. Btw I was using the old school reporting tool, not the one thru webmail. http://www.spamcop.net/reportheld?action=heldlog Also I did get other emails from other sources in the meantime.
  5. moltar

    Feds: Notorious Seattle spammer indicted

    I don't see any drop in the amount of spam. If anything there was an increase! http://www.spamcop.net/spamgraph.shtml?spamstats
  6. moltar

    Feds: Notorious Seattle spammer indicted

    http://news.yahoo.com/s/ap/20070531/ap_on_hi_te/spam_arrest It'd be truly interesting to see the decrease...
  7. In the past two days I was getting an increased amount spam past the SpamCop's filters. Overnight I got 33 spam emails in my inbox. Usually it's 3 or 4 only. Is there an increased amount of spam overall or spamcop isn't working up to par?
  8. moltar

    Form to email spammers

    I was wondering what characters they use to pass by the validation and inject the nasty code into sendmail? There is a discussion about this on WebmasterWorld, but the guy that knows the solution won't tell. Supposedly there are some really obscrue tricks that are used.
  9. The benefit of SpamSpan is that if a user does not have JS enabled, then he or she is still able to see the email address. When most (if not all) JS based obfuscators rely on JS support.
  10. For all of you who own websites and want to publish email addresses openly, there is a small and free java scri_pt code that you can use. More information at www.spamspan.com.
  11. moltar

    White list by subject?

    Ok, thanks. I see that it says the "Sender:" headers are checked. Good.
  12. I am subscribed to a mailing list and many messages get caught by the spam filter. Since the sender is always different, I can't whitelist all the emails people send the message from. The mailing list has a unique string in the subject. Is there a way to make a rule so that if a message contains that string, the message should be white listed? Mailing list also has "Sender:" header with the email address of the mailing list itself. I tried whitelisting it, but haven't tried if it works yet. Does it?
  13. moltar

    [Resolved] Spamcop certified?

    Ok I see that the IPs are different now. They are both mine though. I can only set one HELO string per server. If there are many domains hosted, it's impossible to know which one is which. Maybe I should remove it all together? As for IP difference. Why is this causing a problem? What should I do? I've never experienced anything like that.
  14. moltar

    [Resolved] Spamcop certified?

    Here is a test that I did. I created a test[at] email account. Logged in into the webmail (to make sure that all the headers are original). Sent a test mail to my spamcop.net email account. Here is the lightly edited email I received: X-AntiVirus: Checked by Dr.Web [version: 4.33, engine:, virus records: 95116, updated: 6.11.2005] Return-Path: <test[at]clientdomain.ca> Delivered-To: spamcop-net-moltar[at]nospamcop.net Received: (qmail 28510 invoked from network); 7 Dec 2005 18:36:55 -0000 X-spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on blade2.cesmail.net X-spam-Level: X-spam-Status: hits=0.6 tests=NO_REAL_NAME version=3.1.0 Received: from unknown ( by blade2.cesmail.net with QMQP; 7 Dec 2005 18:36:55 -0000 Received: from ns1.terrahost.ca (HELO hunox.ca) ( by mailgate.cesmail.net with SMTP; 7 Dec 2005 18:36:55 -0000 Received: (qmail 973 invoked from network); 7 Dec 2005 13:36:54 -0500 Received: from localhost ( by localhost with SMTP; 7 Dec 2005 13:36:54 -0500 Received: from CPE000c41490566-CM014170123447.cpe.net.cable.rogers.com (CPE000c41490566-CM014170123447.cpe.net.cable.rogers.com [72.139.xx.xxx]) by webmail.clientdomain.ca (Horde MIME library) with HTTP; Wed, 7 Dec 2005 13:36:54 -0500 Message-ID: <20051207133654.f7fttwjke54ckcww[at]webmail.clientdomain.ca> Date: Wed, 7 Dec 2005 13:36:54 -0500 From: test[at]clientdomain.ca To: moltar[at]nospamcop.net Subject: test MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 7bit User-Agent: Internet Messaging Program (IMP) H3 (4.0.3) X-SpamCop-Checked: 72.139.xx.xxx test
  15. moltar

    [Resolved] Spamcop certified?

    Haha what a joke... Who's gonna pay that?