[SC-Help] Re: Regarding Your Paypal Account

[Mike Easter]

Posting to .spam and .help;  f/ups to .help.  only spam in .spam, no
discussing.  no spam in .help or spamcop, just discussing

Marc Ferrand wrote:
> 1.Did someone get this one ?

I'm sure someone else did, and you did.  I didn't personally.  That
doesn't make any difference.

> 2.Could you confirm it is spam.

It is spam and it is a paypal phish.

> 3.How can I know it by myself ? (There should be some list and/or
> function for that in SpamCop, souldn't ?)

Since I don't generally open my spam, my spam determinations are made
from examining the headers plus the unrendered body, not the appearance
of the rendered phish.  In this case the item is sourced from a
spamsource listed in spamcop and psbl and not a paypal source and shows
standard phish techniques of masking the true link you are going to, to
make it look like a paypal link.

> 4.Is my email enough protected in this mail ?

It appears to me that you have a good address slightly munged in this
newsgroup message From, and it appears that you have left a good address
exposed in the spam you posted Received lines.  Those usernames are
marc.ferrand7 in the Receiveds and NLSmarc.ferrand7 in the From.  That
isn't a good munge for your From.

A better way to post a spam than to use .spam is to use the parser on the
spam and copy the tracker URL.  Then you can just post your message in a
normal group like .help, not post in .spam, and discuss in the .help
group as well.  That also replaces your addy with an 'x'.

Here is the tracker for the spam you posted.

www.spamcop.net/sc?id=z673464024z4ca233e7b1fb19ea15785c91a90fcf44z

-- 
Mike Easter
kibitzer, not SC admin