Jump to content

Phishing for SpamCop


Recommended Posts

No, there is no "webmaster <at> spamcop.net"

There are but a handful of folks that handle that website, none use that address.

No, your account won't be closed in 24 hours

Trust me, if you've screwed up that bad, your account will be closed 'now!' .... Accounts are not closed for non-use. If you've a paid account, then the notices would have been sent advising of that.

Yes, these e-mails are spam.

Thus far, two individuals have posted portions of these spams over in the newsgroups, asking if they were spam. For some reason, neither of these posters actually posted the headers, didn't provide a Tracking URL, one talked of being "almost a charter member of SpamCop" ????? Again, yes, these are spam, report them just like any other spam.

Link to comment
Share on other sites

From: "Ellen" <x>

Newsgroups: spamcop

Subject: Re: Phony SC-Message?

Date: Tue, 7 Jun 2005 08:07:48 -0400

Organization: SpamCop

Message-ID: <d8432a$66b$1[at]news.spamcop.net>

References: <d832a8$j5n$1[at]news.spamcop.net>

NNTP-Posting-Date: Tue, 7 Jun 2005 12:14:03 +0000 (UTC)

Xref: news.spamcop.net spamcop:147437

"Robert Taylor" <x> wrote in message


> Hello Group,


> This evening, this landed in my inbox:


> (quote)

> <html>

> <body>

> <BR><STRONG>Dear Valued Member, </STRONG><BR>

> <BR>According to our site policy you will have to confirm your account by

> the following link or else your account will be suspended within 24 hours

> for security reasons

Yes it is is a phish/forgery mail -- we do not have a webmaster

account/email address, we do not ask you to confirm your account for

security reasons. If someone would send me one of these with complete

headers and body source, pasted into an email to deputies <at>

admin.spamcop.net I would appreciate it. If anyone gets one with a

functioning body url and can copy/paste the webpage that would also be

useful. Has anyone seen one with a functioning phish page?

Legit mail will come from me, Don or Richard about your reporting account

and from Jeff about your filtered email account, if there is an issue with

your account.  We never write in HTML. We  just ask you to respond to us

with more information about a report or ask you to set-up mailhosts or to

explain your process in submitting spam or some such thing. We will never

ask for your password. If for some reason we wanted you to log into your

account, we would ask you to log in as usual to the system and do





P.S. -- folks, please lets not jump on people who receive one of these and

show up here concerned about what is going on. We have many many thousands

members who have never posted in the newsgroups, who have been members for

years and who are rightly alarmed by receiving this. Whilst it may seem

remarkable, there are lots of members who have never had parse problems and

who have never learned to, or needed to learn to, read headers.  So let's

cut them a tiny little bit of slack. Of course if they do it a second time,

why then you can beat them up :-)

As always, but never said said frequently enough, thanks to the regular and

irregular denizens of the groups and forums who offer help day in and day

out. Your knowledge and helpfulness keeps us afloat!

Link to comment
Share on other sites


This topic is now archived and is closed to further replies.

  • Create New...