ramack 0 Posted December 1, 2017 Newbie here on the forum and to SpamCop. I have received several emails from a company that I believe is fake and phishing in regards to a position with the company. I ran the header and email through SpamCop which produces results indicating potential spam, but I would like a little help with the output before I report it. What can I post that would be of value or helpful? Thanks, Share this post Link to post Share on other sites
Dave_L 0 Posted December 1, 2017 Please post the Tracking URL, which appears near the top of the page of the Spamcop output. That will let us see the email headers, as well as the full text of the email. Share this post Link to post Share on other sites
ramack 0 Posted December 1, 2017 Thanks Dave, The URL is https://www.spamcop.net/sc?id=z6426365971z1a1a3fd12781aab8a6ae9e64b3161dcez I'm pretty sure it's bogus, but I want to make sure I'm interpreting the result correctly. Thanks, Share this post Link to post Share on other sites
Lking 0 Posted December 1, 2017 So are they: Airways Express Co., U.S.A. Airways Express, U.S.A. Airways Express (USA) Co., LTD. Every company I've worked for was vary picky about their name. The address looks like it is for rent. 466 Lexington Avenue, New York, NY 10017, U.S.A Share this post Link to post Share on other sites
ramack 0 Posted December 1, 2017 LKing, You are correct. The building is also a office complex. So the company should have a suite number too. I've call the NY Dept. of State for business registration information. Nothing found. Even had a phone interview with an HR rep out of Zurich. The whole thing isn't adding up. A few days ago, I did some digging around for the domain owner. Looks to be hosted by a company in the Ukraine, ha. At least two people are going to great effort and detail for this scam. Needs to be shut down. Share this post Link to post Share on other sites
Lking 0 Posted December 1, 2017 When I look at the Google street image above I see "Bistro Caters" When I then google "Bistro Caters nyc" their address is (Surprise surprise) 466 Lexington Ave #A. Just as you suggest. Share this post Link to post Share on other sites
ramack 0 Posted December 2, 2017 So then this would be "report" worthy? Thanks, Share this post Link to post Share on other sites
ramack 0 Posted December 4, 2017 Quick update. Prior to my OP here, I had been in contact with the hosting company in the Ukraine. This morning the company and I have been conversing via email about the potential fraud. As a result, they determined that it was best to block the site until the user could provide more information. So as of now, emails from that domain name have been blocked as well. Thanks for everyone's input. Share this post Link to post Share on other sites