[dirkf]

I've been using SpamCop for years (decades?) but lately I've been wondering if they're still relevant.

One example: they seem to have a size limit of 50KB when you report a spam mail via their web form. I've received quite some spam that exceeds that because they use base64 encoding of the body, add non-visible filler content to drown out the actual spam/phishing message, etc.

SpamCop suggests to cut off the message and still process it but then they miss e.g. the link to the phishing website and thus they can't send out a report for that.

Speaking of phishing links: a lot of the phishing mails I receive, link to some account on storage.googleapis.com. I've seen mails with links to the same account for weeks on end before they switch to a different one, implying that these links remain online for a long time. You would think that marking such mails as phishing in GMail (they are already flagged as spam) would get them on some kind of radar but apparently not...

[Anamon]

I've started using phish.report along with SpamCop to specifically report phishing sites separately. They do a hosting lookup and link directly to the abuse contact or form.

Phishers are definitely trying to become cleverer. My "favourite" so far is adding the phishing link only in a QR code in an embedded PNG.