Forum Discussion

sbelcap's avatar
New Contributor

Internet browsing scam & Email scam

Anyone know why I receive "Your a lucky Cox internet winner..." takeover ads while browsing?  the open tab must be closed to get rid of the ad.  Also, received this email today - phishing no doubt, but how did they 'get' my Cox email address?

The email is from ""

Dear Customer,

We are forwarding a notice received by Cox Communications which claims that someone using your Cox High Speed Internet service has violated U.S. Copyright law by copying or distributing the copyrighted work listed in the attached complaint.  THIS COMPLAINT IS FROM A THIRD PARTY AND NOT FROM COX COMMUNICATIONS.  We have included a copy of the complaint, which identifies the party making the claim, the title or work they claim was infringed, and the date of the alleged infringement.  

We ask that you review the complaint and, if you believe it is valid, promptly take steps to remove or disable access to the infringing material (typically movies, music, books, or TV shows).  If other parties are using your account, such as through your WiFi connection, you should ask them to disable file-sharing in peer to peer applications such as BitTorrent, or delete the copyrighted works.  

If you disagree with the claims and believe that no one using your Internet service could have been the source of the alleged infringement, please do not contact Cox Communications to resolve this matter.  Cox is simply forwarding the notice to you.  However, if you have WiFi, please make sure your WiFi connection is secured with a strong password to prevent unauthorized use of your Internet service.  In addition, make sure anti-virus software is installed and up to date to help prevent malware infections.  


The material that you share online or make available for sharing is your responsibility.  Cox encourages responsible Internet use, but we do not monitor nor control the information you transmit.  We have a policy, however, consistent with the Digital Millennium Copyright Act, to take steps when we receive notifications of claimed infringement.  We also have a policy of terminating repeat infringers in compliance with the Digital Millennium Copyright Act Safe Harbor for online service providers.  

If we continue to receive infringement claims notices for your account, we may in appropriate circumstances suspend your account, disable your Internet connection, and/or terminate your Internet service.  

To learn more about your responsibilities concerning copyrighted material, please refer to our help article at:

General information & FAQs about DMCA notices:

If you would like to reply to this email, please keep the subject line intact for tracking purposes.  


Cox Customer Safety

--- Original Message ---

[Part 0 (plain text)]

Hash: SHA1

Cox Communications Inc.

Re:  Unauthorized Use of Twentieth Century FOX Film Corporation Property

Notice ID: 30-333245741
Notice Date: 16 Oct 2016 07:31:08 GMT

Dear Sir or Madam:

TWENTIETH CENTURY FOX FILM CORPORATION and its affiliated companies (collectively, "FOX") are the exclusive owners of copyrights in numerous movies and television shows.
You are receiving this notice because an Internet account on your network was identified as having been recently used  to illegally copy and/or distribute (e.g. download, upload) FOX  content.  The specific FOX content involved, the IP address where the infringement occurred, and the date and time of the infringement are documented below.  If the recipient of this notice is an Internet Service Provider, College/University or Business organization that no longer controls the IP address cited in the evidentiary information, please notify Irdeto by contacting  
This unauthorized copying and distribution constitutes copyright infringement under Section 106 of the U.S. Copyright Act.  These are serious offenses which could lead to legal consequences for the account holder.  Also, depending upon the type of service Cox Communications Inc. is providing to this IP address, it may have legal and/or equitable liability if it does not expeditiously remove or disable access to the property listed below, or if it fails to implement a policy that provides for termination of subscribers who are repeat infringers (see, 17 U.S.C. 512).

Although various legal and equitable remedies may be available to FOX as a result of such infringement, FOX believes that the entire Internet community benefits when these matters are resolved cooperatively.  We urge you to take immediate action to effect removal of the detected infringement listed in the below report, including:

(1) Notify the account holder of this infringement

(2) Require the account holder remove the infringing material  

(3) Disable access to the infringing material  

(4) Take appropriate action against the account holder under your Abuse Policy/Terms of Service

If your account holder has questions about this notice, please refer him/her to the website which offers resources to help users ensure that their Internet accounts are not being used to violate copyright laws and provides information on how theft of movies and TV shows damages our economy and costs thousands of Americans their jobs.

Today there are many exciting and innovative sources of authorized movie and television content available to users online.  We encourage you to refer your account holder to the website where they will find an array of legal choices.  

We appreciate your efforts to cooperate in addressing content theft and fostering legal consumption of movies and TV shows.  Please send us a prompt response indicating the actions you have taken to resolve this matter.  Please reference the above noted Notice ID 30-333245741 in all correspondence, which should be directed to:



The undersigned has a good faith belief that use of FOX's property in the manner described herein is not authorized by FOX, its agents or the law.  Also, we hereby state that the information in this notification is accurate and, under penalty of perjury under the laws of the State of California and the United States, that the undersigned is authorized to act on behalf of FOX with respect to this matter.

Please be advised that this letter is not and is not intended to be a complete statement of FOX’s rights in connection with this matter, and nothing contained herein constitutes an express or implied waiver of any rights, remedies, or defenses of FOX, all of which are specifically reserved.  


Patrick O'Connor
Irdeto USA, Inc.
P.O. Box 618 North Hollywood, CA 91603
Phone: 818-508-2328

*pgp public key is available on the key server at

Note: The information transmitted in this Notice is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material.  Any review, reproduction, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited.  If you received this in error, please contact the sender and delete the material from all computers.

This infringement notice contains an XML tag that can be used to automate the processing of this data.  If you would like more information on how to use this tag please contact Irdeto.

Evidentiary Information:
Notice ID: 30-333245741
Asset: Deadpool
Infringing FileName:  deadpool 2016 1080p bluray x264 dts jyk
Timestamp: 16 Oct 2016 07:23:06 GMT GMT
Last Seen Date: 16 Oct 2016 07:23:06 GMT GMT
File Size: 2924473197
IP Address:
Port ID: 40500
Protocol: BitTorrent

- - ---Start ACNS XML
<?xml version="1.0" encoding="UTF-8"?>
<Infringement xmlns="" xmlns:xsi="" xsi:schemaLocation="">
        <Entity>Irdeto USA, Inc</Entity>
        <Contact>Patrick O'Connor</Contact>
        <Address>P.O. Box 640442, San Jose, CA 95164</Address>
        <Entity>Cox Communications Inc.</Entity>
            <FileName>deadpool 2016 1080p bluray x264 dts jyk</FileName>
- - ---End ACNS XML
Version: GnuPG v2.0.22 (MingW32)


1 Reply

Replies have been turned off for this discussion
  • grymwulf's avatar
    Contributor II

    It is trivially easy to figure out information for your connection to determine who you are/where you are coming from.  Take a look at this graphic:

    The notice you got is most likely a result of detected activity associated with your IP address.  The validity of the notice I can't determine, but it is similar to others that Cox is *forced* to pass along to you.  Cox actually had a court case it recently lost (but is appealing) regarding these types of notices.  They do give you some information as to what is triggering it.  This has been covered on several websites:


    There are a couple of guides as to how to avoid these notices, but, since the behavior is questionable, I won't post any direct links to these articles.  Some basic research however can help you avoid this situation.