Jump to content
Sign in to follow this  
efa

hostmaster@nic.or.kr delivery status notification

Recommended Posts

I received a fake email that contain a fake link to a fake site of my bank.

As I use Mozilla I understand this is a trick.

The mail come from netherland, and spamcop correctly identifies the source.

The web site is in Korea and Spamcop say:

Finding links in message body

Parsing text part

error: couldn't parse head

Message body parser requires full, accurate copy of message

More information on this error..

no links found

when the link is perfectly funtional.

It seems to point at:

https://bancopostaonline.poste.it/bpol/banc.../formslogin.asp

but really point at:

http://www.withwith.or.kr/zboard/data/bbs5/formslogin.php

[211.115.110.66]

The mail source indicates that it is

Content-Type: text/html

so there is a bug in finding the link in spamcop parser.

More bad I tried to whois the source, but:

opcenter[at]inempire.com

return with a delivery status notification:

Remote MTA mail.inempire.com: network error

- SMTP protocol diagnostic: 550 5.7.1 Access denied

and:

hostmaster[at]nic.or.kr

return with a delivery status notification:

Remote MTA mail.nic.or.kr: network error

- SMTP protocol diagnostic: 550 5.7.1 Mail from 193.70.192.51 refused by blackhole site blacklist.spambag.org

Please correct this, and notify to hostmaster the fake bank web site in a hurry.

Edited by efa

Share this post


Link to post
Share on other sites

Most likely you did not submit the whole message to the parser but made a mistake during the copying process. Please post a TRACKING URL (as explained in the FAQ) so that we can assist you further.

You might also find a look at the glossary useful.

Share this post


Link to post
Share on other sites
Most likely you did not submit the whole message to the parser but made a mistake during the copying process. Please post a TRACKING URL (as explained in the FAQ) so that we can assist you further.

You might also find a look at the glossary useful.

31859[/snapback]

In the thread:

spamcop link parser bug

I pasted the whole mail source (CTRL-U, CTRL-A, CTRL-C with Mozilla)

Share this post


Link to post
Share on other sites
In the thread:

spamcop link parser bug

I pasted the whole mail source (CTRL-U, CTRL-A, CTRL-C with Mozilla)

31861[/snapback]

Posting the tracking URL would nevertheless be helpful. The FAQ contains a section about how to retrieve the tracking URL from your report history.

Share this post


Link to post
Share on other sites

Took the spam pasted into another Topic here, did all the "correcting" .. submitted it for a Tracking URL, and as usual, in my 'fixing' things, it ran through without a problem. Tracking URL - http://www.spamcop.net/sc?id=z798360193zdd...484eb27b69ead6z

e-mail issues caused by spambag.org have nothing to do with spamcop.net ...

The SpamCop FAQ linked to from the top of this page or a Pinned utem at the entry to this Forum section includes a link to the Glossary which then includes a write-up on the use of a Tracking URL .... I believe the How to use ... SpamCop Forum also contains some giudance on how to post your spam queries here.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×