Follow

What does a SpamCop Abuse Reporting Format (ARF) email look like?

Authentic SpamCop reports: 

  • Come from an address ####@reports.spamcop.net
  • Are sent from an ironport.com server
  • State the issue, whether it be an IP address, website URL, or email address, in both the subject line and early in the body of the message
  • Include the headers and full message being reported
  • Are sent in plain text because HTML appears untranslated 
  • Contain a link to the issue in the SpamCop database where you can add a note, close the issue, or declare it an innocent bystander

Example of a real SpamCop report
From: Some User <[email protected]
To: [email protected] 
Subject: [SpamCop (1.2.3.4) id:1234]PC Home Worker

- SpamCop V1.3.3 -
This message is brief for your comfort. Please follow links for details.

http://spamcop.net/w3m?i=z1234z14ad22c721b0b0e5fcd4f3d0b8555992z
Email from 61.171.141.31 / Sun, 11 Aug 2002 00:11:15 -0700

Offending message:
"From [email protected] Sun, 11 Aug 2002 00:12:26 -0700"
Received: from [61.171.141.31] by hotmail.com (3.2) with ESMTP id
MHotMailBF1F590F008F4136E80B3DAB8D1F04170; Sun, 11 Aug 2002 00:11:15 -0700
From: "work at home" 
To: <x>
Subject: PC Home Worker
Sender: "work at home" 
Mime-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Date: Sun, 11 Aug 2002 15:08:26 +0800
Content-Transfer-Encoding: 8bit

Would you like to work at home ?PC Home Worker
process orders from your own home! All you need is a PC,
Email, and a quality printer!
Email [email protected] with 'more info'' in subject
line for more information

This is a one time mailing. To be removed, reply to
[email protected] with REMOVE in the subject line.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request