Spam sent to a recent spamcop reporting address

http://www.spamcop.net/sc?id=z1767967977zfe1fb38ca3f70fdac10beaa29da6bc15z

It's an item showing a spam that was sent to a recent reporting address, 
and thus arrived in my inbox.

Is it a fluke? Did spammy get lucky? SC wanted to send new reports to 
the SpamCop admin (Don), but I canceled it.

I have the spam item for which SC generated the reporting address here:

http://www.spamcop.net/sc?id=z1695081165ze418aeafdde8b97a2c755383d37224edz

The report ID was sent specifically to netadmin@ns.ksc.co.th

I am assuming that reportID and reporting address are related, otherwise 

Sofa King Tyred of Lar Ting wrote:
> http://www.spamcop.net/sc?id=z1767967977zfe1fb38ca3f70fdac10beaa29da6bc15z
> 
> It's an item showing a spam that was sent to a recent reporting address, 
> and thus arrived in my inbox.
> 
> Is it a fluke? Did spammy get lucky? SC wanted to send new reports to 
> the SpamCop admin (Don), but I canceled it.
> 
> I have the spam item for which SC generated the reporting address here:
> 
> http://www.spamcop.net/sc?id=z1695081165ze418aeafdde8b97a2c755383d37224edz
> 
> The report ID was sent specifically to netadmin@ns.ksc.co.th
> 
> I am assuming that reportID and reporting address are related, otherwise 
> it's a total fluke and you can ignore all of this :)

Internally the report number is linked back to the reporter (i.e. you in 
this case) so that if a report recipient needs to ask you for more info 
they can write to <report number> @ reports.spamcop.net and the system 
will forward that piece of mail to you.

Don has already turned off the reporting address netadmin@ns.ksc.co.th


Ellen

"Sofa King Tyred of Lar Ting" <nobody@devnull.spamcop.net> wrote
in 
message news:ft2l4u$3a2$1@news.spamcop.net...
> http://www.spamcop.net/sc?id=z1767967977zfe1fb38ca3f70fdac10beaa29da6bc15z
>
> It's an item showing a spam that was sent to a recent reporting 
> address, and thus arrived in my inbox.
>
> Is it a fluke? Did spammy get lucky? SC wanted to send new reports 
> to the SpamCop admin (Don), but I canceled it.

This situation is not unknown.  The 'Report' would have gone to Don 
for action to be taken against the SpamCop.net user due to "bad 
reporting" ....

> I am assuming that reportID and reporting address are related, 
> otherwise it's a total fluke and you can ignore all of this :)

FAQ Entry: Getting a Tracking URL from a Report ID
http://forum.spamcop.net/forums/index.php?showtopic=4498

This FAQ entry specifically notes the link ... however, this fact is 
also referenced in many other places where Reporting Process is 
described as part of the /How to contact the SpamCop.net Reporter/ 
phase/section/mode/whatever ....

"Sofa King Tyred of Lar Ting" <nobody@devnull.spamcop.net> wrote
in 
message news:ft2l4u$3a2$1@news.spamcop.net...
> http://www.spamcop.net/sc?id=z1767967977zfe1fb38ca3f70fdac10beaa29da6bc15z
>
> I am assuming that reportID and reporting address are related, 
> otherwise it's a total fluke and you can ignore all of this :)

An even better FAQ entry that I forgot to paste into my last;

ReportID
http://forum.spamcop.net/scwik/ReportID

Wazoo wrote:
> "Sofa King Tyred of Lar Ting" <nobody@devnull.spamcop.net>
wrote in 
> message news:ft2l4u$3a2$1@news.spamcop.net...
>>
http://www.spamcop.net/sc?id=z1767967977zfe1fb38ca3f70fdac10beaa29da6bc15z
>>
>> It's an item showing a spam that was sent to a recent reporting 
>> address, and thus arrived in my inbox.
>>
>> Is it a fluke? Did spammy get lucky? SC wanted to send new reports 
>> to the SpamCop admin (Don), but I canceled it.
> 
> This situation is not unknown.  The 'Report' would have gone to Don 
> for action to be taken against the SpamCop.net user due to "bad 
> reporting" ....

Did you look at the spam item above? It is a *spam* that was sent to a 
reporting address. The real name in quotes next to the address is not 
the one I use as my friendly name on SC.

It implies that somehow the spammer got a reporting address, possibly 
through a report that SC sends out. Given Ellen's response, it appears 
that Don already knew about this problem.

This is not addressed in any FAQs that I could see.

In the future, is it best to let SC send the reports to SC admin? The 
admin should see it's a question of a spam (not a legit response to a 
reporting address), and probably track down the "leaky" address that