Lking Posted September 12, 2013 Posted September 12, 2013 In response to a Spamcop report I received: Subject: Spamcop report id:6003049207 To: 6003049207[at]reports.spamcop.net Hello SpamCop user, Please use the unsubscribed link if you no longer wish to receive our emails -- Please use the link below to review the report in question: http://www.spamcop.net/mcgi?action=showhis...;val=6003049207 I'm fairly sure the original spam was sent to a non-mailbox, like I'm going to unsubscribe. http://www.spamcop.net/sc?id=z5562820290ze...eeb6532a7ae211z
Farelf Posted September 12, 2013 Posted September 12, 2013 I would suggest they know exactly what they are doing and the "unsubscribe" ploy is just another step in their scrіpt, certainly with no benefit to yourself but with some cheap address harvesting/verification potential for them when it comes to kidding along "normal" recipients. Looks like an affiliate/sharecropping program with obscured tracking built into the HTML of the spam - no way do they intend to comply with accepted marketing standards, no way that they even could, not with that sort of dynamic in play. Pretty sophisticated for spammers - no doubt reflecting the pre-eminence of the United States in the higher education participation tables (Universitas 21 Rankings)
Lking Posted September 12, 2013 Author Posted September 12, 2013 I would suggest they know exactly what they are doing Good point. It is a step above the majority of the spam or the 419 stuff.
Lking Posted September 12, 2013 Author Posted September 12, 2013 Got another one this morning, http://www.spamcop.net/sc?id=z5563101900z3...e5b7be3be78fa4z Farelf you are right, quite sophisticated. I ran their html through a validator and found only 1 error, they left an alt="" off of an img tag. If it weren't for all the tracking in the links, and the fact the spam was sent to a non-mailbox...
petzl Posted September 13, 2013 Posted September 13, 2013 Got another one this morning, http://www.spamcop.net/sc?id=z5563101900z3...e5b7be3be78fa4z Farelf you are right, quite sophisticated. I ran their html through a validator and found only 1 error, they left an alt="" off of an img tag. If it weren't for all the tracking in the links, and the fact the spam was sent to a non-mailbox... 69.169.42.121 should not be whitelisted? X-Greylist: from auto-whitelisted by SQLgrey-1.8.0 spammer is forging certificates? The IP is not a email server
Recommended Posts
Archived
This topic is now archived and is closed to further replies.