[SpamCop.net - protecting the internet through technology]

[SC-Help] Is this for real?

BMW rwcs at spamcop.net
Tue Jun 14 19:16:08 EDT 2005


This seems screwy to me BUT no attempt is made to steal my personal 
info. . . AND yet my account is still working!

Help me read this header it looks like emc.emc.com.tw then received this 
  from spamcop.net (192.168.33.104) (an unroutable LAN address), then 
emc.emc.com.tw. (192.168.10.1) (another unroutable LAN address) sent it 
to emclog.emc.com.tw, then emclog.emc.com.tw (192.72.220.9) sent it to 
blade5.cesmail.net (the spamcop mail server). . . I did read this right, 
RIGHT?

Received today:
======================================================
Return-Path: <webmaster at spamcop.net>
Delivered-To: spamcop-net-rwcs at spamcop.net
Received: (qmail 15232 invoked from network); 14 Jun 2005 21:12:03 -0000
Received: from unknown (192.168.1.101)
   by blade5.cesmail.net with QMQP; 14 Jun 2005 21:12:03 -0000
Received: from emclog.emc.com.tw (192.72.220.9)
   by mailgate.cesmail.net with SMTP; 14 Jun 2005 21:12:02 -0000
Received: from emc.emc.com.tw (emc [192.168.10.1])
	by emclog.emc.com.tw (8.12.10/8.12.10) with ESMTP id j5EL7sDT021684
	for <rwcs at spamcop.net>; Wed, 15 Jun 2005 05:07:54 +0800 (CST)
Received: from spamcop.net ([192.168.33.104])
	by emc.emc.com.tw (8.11.6/8.11.4) with ESMTP id j5EL9Qg14912
	for <rwcs at spamcop.net>; Wed, 15 Jun 2005 05:09:27 +0800 (CST)
Message-Id: <200506142109.j5EL9Qg14912 at emc.emc.com.tw>
From: webmaster at spamcop.net
To: rwcs at spamcop.net
Subject: Your Account is Suspended For Security Reasons
Date: Wed, 15 Jun 2005 05:11:29 +0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_0010_7FD6A9D5.79AB7BCC"
X-Priority: 3
X-MSMail-Priority: Normal
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on blade5
X-Spam-Level: *
X-Spam-Status: hits=1.9 tests=HTML_20_30,HTML_MESSAGE,MISSING_MIMEOLE,
	NO_REAL_NAME,PRIORITY_NO_NAME version=3.0.2
X-SpamCop-Checked:

This is a multi-part message in MIME format.

------=_NextPart_000_0010_7FD6A9D5.79AB7BCC
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

------------------  Virus Warning Message (on emc)

Found virus WORM_MYTOB.EJ in file account-report.doc 
                                                   .pif (in 
account-report.zip)
The uncleanable file is deleted.

---------------------------------------------------------

------=_NextPart_000_0010_7FD6A9D5.79AB7BCC
Content-Type: text/html;
	charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit


<html>
<body>
<BR><STRONG>Dear user rwcs, </STRONG><BR>
<BR>It has come to our attention that your Spamcop User Profile ( x ) 
records are out of date. For further details see the attached document.<BR>
<BR>Thank you for using Spamcop!
<BR>The Spamcop Support Team <BR>
<BR><BR><BR><BR><BR>
<BR>+++ Attachment: No Virus (Clean)
<BR>+++ Spamcop Antivirus - www.spamcop.net
</body>
</html>



------=_NextPart_000_0010_7FD6A9D5.79AB7BCC
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit


------------------  Virus Warning Message (on emc)

account-report.zip is removed from here because it contains a virus.

---------------------------------------------------------
------=_NextPart_000_0010_7FD6A9D5.79AB7BCC--
===========================================================


More information about the SpamCop-Help mailing list