[SC-Help] Re: Citibank phishing fools spamcop

[Eric]

"Mike Easter" <MikeE at ster.invalid> wrote in
news:dvf7o5$p2l$1 at news.spamcop.net: 

> I don't know about your source code page view in FF, but the reason
> for devnulling the spoof addy is this:
> 
> Parsing input: citigroup.com
> Host citigroup.com (checking ip) = 192.193.217.120
> host 192.193.217.120 = citibank.com (cached)
> Routing details for 192.193.217.120
> Report routing for 192.193.217.120: pwong at mail.citicorp.com
> pwong at mail.citicorp.com redirects to emailspoof at citigroup.com
> emailspoof at citigroup.com bounces (6 sent : 6 bounces)
> 
> If a redirect addy bounces, then SC is going to devnull it.

I sent a manual report to emailspoof at citigroup.com and got an
autoresponse back in a couple minutes. Perhaps spamcop is misintrepeting
the autoresponse as a bounce? 

> http://www.spamcop.net/sc?id=z899512392z27f4f1df34c194a7a021036571ca6ee
> 7z 
> 
> If you post the tracker only, which is all you need to do, since it
> provides access to the original spam in a better condition than the
> spam you post into .spam, there is no need to post anything to .spam. 
> .spam is only for posting 'junk' such as complete spams, not for
> discussing. No complete spams are allowed in the discussion groups --
> but of course trackers are.  So there is no need to use the group
> .spam at all if you post a tracker.

I will remember that in the future.