What does a SpamCop Abuse Reporting Format (ARF) email look like?

Authentic SpamCop reports: 

  • Come from an address
  • Are sent from an server
  • State the issue, whether it be an IP address, website URL, or email address, in both the subject line and early in the body of the message
  • Include the headers and full message being reported
  • Are sent in plain text because HTML appears untranslated 
  • Contain a link to the issue in the SpamCop database where you can add a note, close the issue, or declare it an innocent bystander

Example of a real SpamCop report
From: Some User <> 
Subject: [SpamCop ( id:1234]PC Home Worker

- SpamCop V1.3.3 -
This message is brief for your comfort. Please follow links for details.
Email from / Sun, 11 Aug 2002 00:11:15 -0700

Offending message:
"From Sun, 11 Aug 2002 00:12:26 -0700"
Received: from [] by (3.2) with ESMTP id
MHotMailBF1F590F008F4136E80B3DAB8D1F04170; Sun, 11 Aug 2002 00:11:15 -0700
From: "work at home" 
To: <x>
Subject: PC Home Worker
Sender: "work at home" 
Mime-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Date: Sun, 11 Aug 2002 15:08:26 +0800
Content-Transfer-Encoding: 8bit

Would you like to work at home ?PC Home Worker
process orders from your own home! All you need is a PC,
Email, and a quality printer!
Email with 'more info'' in subject
line for more information

This is a one time mailing. To be removed, reply to with REMOVE in the subject line.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request