Forum Discussion

Lotys's avatar
Lotys
New Contributor
8 years ago

Phishing scam

I received this email  tonight and I have read articles about it and wanted to bring it to Cox's attention on my end.  Please be aware this is fake. I have x'd out my IP address that was put in the email given by Cox.

Dear Customer, 
 
 
 
We are forwarding a notice received by Cox Communications which claims that 
someone using your Cox High Speed Internet service has violated U.S. Copyright 
law by copying or distributing the copyrighted work listed in the attached 
complaint.  THIS COMPLAINT IS FROM A THIRD PARTY AND NOT FROM COX 
COMMUNICATIONS.  We have included a copy of the complaint, which identifies the 
party making the claim, the title or work they claim was infringed, and the date 
of the alleged infringement.  
 
 
 
We ask that you review the complaint and, if you believe it is valid, promptly 
take steps to remove or disable access to the infringing material (typically 
movies, music, books, or TV shows).  If other parties are using your account, 
such as through your WiFi connection, you should ask them to disable 
file-sharing in peer to peer applications such as BitTorrent, or delete the 
copyrighted works.  
 
 
 
If you disagree with the claims and believe that no one using your Internet 
service could have been the source of the alleged infringement, please do not 
contact Cox Communications to resolve this matter.  Cox is simply forwarding the 
notice to you.  However, if you have WiFi, please make sure your WiFi connection 
is secured with a strong password to prevent unauthorized use of your Internet 
service.  In addition, make sure anti-virus software is installed and up to date 
to help prevent malware infections.  
 
 
 
PLEASE NOTE:  THE ATTACHED NOTICE MAY CONTAIN A SETTLEMENT DEMAND FOR MONEY OR 
OTHER TYPE OF OFFER FOR YOU TO CONSIDER.  YOU MAY WANT TO CONSULT WITH AN 
ATTORNEY REGARDING YOUR RIGHTS AND RESPONSIBILITIES BEFORE CLICKING ON ANY LINK 
OR VISITING A WEBSITE LISTED IN THE NOTICE.  
 
 
 
The material that you share online or make available for sharing is your 
responsibility.  Cox encourages responsible Internet use, but we do not monitor 
nor control the information you transmit.  We have a policy, however, consistent 
with the Digital Millennium Copyright Act, to take steps when we receive 
notifications of claimed infringement.  We also have a policy of terminating 
repeat infringers in compliance with the Digital Millennium Copyright Act Safe 
Harbor for online service providers.  
 
 
 
If we continue to receive infringement claims notices for your account, we may 
in appropriate circumstances suspend your account, disable your Internet 
connection, and/or terminate your Internet service.  
 
 
 
To learn more about your responsibilities concerning copyrighted material, 
please refer to our help article at:  
 
http://www.cox.com/PeerToPeerNetworks 
 
 
 
General information & FAQs about DMCA notices:  
 
 
 
http://www.respectcopyrights.org/ 
 
 
 
http://www.riaa.com/toolsforparents.php?content_selector=resources-music-copyrig ht-notices 
 
 
 
If you would like to reply to this email, please keep the subject line intact 
for tracking purposes.  
 
 
 
Sincerely, 
 
 
 
Cox Customer Safety 
 
 
 
--- Original Message --- 
 
 
[Part 0:0 (plain text)] 
 
-----BEGIN PGP SIGNED MESSAGE----- 
Hash: SHA1 
 
Dear abuse@cox.net 
 
We are writing this message on behalf of Warner Bros. Entertainment Inc.. 
 
We have received information that an individual has utilized the 
below-referenced IP address at the noted date and time to offer 
downloads of copyrighted material. 
 
The title in question is: War Dogs 
 
The distribution of unauthorized copies of copyrighted television 
programs constitutes copyright infringement under the Copyright Act, 
Title 17 United States Code Section 106(3).  This conduct may also 
violate the laws of other countries, international law, and/or treaty 
obligations. 
 
Since you own this IP address (xxx.xx.xxx.xx), 
we request that you immediately do the following: 
 
  1) Contact the subscriber who has engaged in the conduct described 
  above and take steps to prevent the subscriber from further downloading 
  or uploading Warner Bros. Entertainment Inc. content without authorization; 
and 
 
  2) Take appropriate action against the account holder under your Abuse 
  Policy/Terms of Service Agreement. 
 
On behalf of Warner Bros. Entertainment Inc., owner of the exclusive rights 
in the copyrighted material at issue in this notice, we hereby state that 
we have a good faith belief that use of the material in the manner 
complained of is not authorized by Warner Bros. Entertainment Inc., 
its respective agents, or the law. 
 
Also, we hereby state, under penalty of perjury, that we are authorized 
to act on behalf of the owner of the exclusive rights being infringed 
as set forth in this notification. 
 
We appreciate your assistance and thank you for your cooperation in this 
matter. Your prompt response is requested. 
 
Any further enquiries can be directed to p2p@copyright.ip-echelon.com 
Please include this message with your enquiry to ensure a swift response. 
 
Respectfully, 
 
Adrian Leatherland 
CEO 
IP-Echelon 
Email: p2p@copyright.ip-echelon.com 
Address: 6715 Hollywood Blvd, Los Angeles, 90028, United States 
 
- ------------- Infringement Details ---------------------------------- 
Title:        War Dogs 
Timestamp:    2017-01-01T02:02:48Z 
IP Address:   xxx.xx.xxx.xx 
Port:         12024 
Type:         BitTorrent 
Torrent Hash: 509b3a352defa36a00c91e5913f8512cd73cfbc2 
Filename:     War Dogs (2016) [YTS.AG] 
Filesize:     838 MB 
- --------------------------------------------------------------------- 
 
 
<?xml version="1.0" encoding="UTF-8"?> 
<Infringement xmlns="http://www.acns.net/ACNS" 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:schemaLocation="http://www.acns.net/ACNS 
http://www.acns.net/v1.2/ACNS2v1_2.xsd"> 
  <Case> 
    <ID>94fb420bd2f6ef7506f1</ID> 
    <Status>Open</Status> 
    <Severity>Normal</Severity> 
  </Case> 
  <Complainant> 
    <Entity>Warner Bros. Entertainment Inc.</Entity> 
    <Contact>IP-Echelon - Compliance</Contact> 
    <Address>6715 Hollywood Blvd 
Los Angeles CA 90028 
United States of America</Address> 
    <Phone>+1 (310) 606 2747</Phone> 
    <Email>p2p@copyright.ip-echelon.com</Email> 
  </Complainant> 
  <Service_Provider> 
    <Entity>Cox Communications</Entity> 
    <Email>abuse@cox.net</Email> 
  </Service_Provider> 
  <Source> 
    <TimeStamp>2017-01-01T02:02:48Z</TimeStamp> 
    <IP_Address>xxx.xx.xxx.xx</IP_Address> 
    <Port>12024</Port> 
    <Type>BitTorrent</Type> 
    <SubType BaseType="P2P" Protocol="BITTORRENT"/> 
    <Number_Files>1</Number_Files> 
  </Source> 
  <Content> 
    <Item> 
      <TimeStamp>2017-01-01T02:02:48Z</TimeStamp> 
      <Title>War Dogs</Title> 
      <FileName>War Dogs (2016) [YTS.AG]</FileName> 
      <FileSize>879325226</FileSize> 
      <Hash Type="SHA1">509b3a352defa36a00c91e5913f8512cd73cfbc2</Hash> 
    </Item> 
  </Content> 
</Infringement> 
-----BEGIN PGP SIGNATURE----- 
Version: GnuPG v1 
 
iQEcBAEBAgAGBQJYaGNJAAoJEN5LM3Etqs/W1FwH/1yLehQ5bmdhl9JD5cOJP7yq 
/wPWqksFxiwTHQ6h1uke0sv26j6NFR6M+Xx8J7fU+BOFdmD1sK+JIP8rH68SDf8v 
zo4lgsZBhRNz0Piqub4poBB3W8J7xt3hcZU4EU1WlezqoNN7JUjY0qtz5F7vaI5Z 
kIHxTVzdZzIRjRUVmNKJzupKerQCUnFftB9Jw00g5NNXrKqijBeQw8ei1ZEgcJE8 
71ealSCaellShYaI4ar2YwOinrTpTNxChEDLec5LIKLeV4fTiL2/IrbYRCq+W/JK 
yRaudu2c7NBaMpJsojMYge/RV//qTeCCVBhe8pWnivEFuVuEy9UYltjZ3h1t78k= 
=HF5A 
-----END PGP SIGNATURE----- 
 
 
[Part 0:1 (xml application)] Not displayed 

6 Replies

Replies have been turned off for this discussion
  • Tecknowhelp's avatar
    Tecknowhelp
    Valued Contributor II

    Doesn't look fake to me. Looks like someone on your network was caught downloading War Dogs on Bittorrent a couple hours ago. Is anyone new on your network doing anything unusual? If not, i would suggest changing your wifi password.  If so, I would suggest they use something not so trackable as Bittorrent. The cops pretty much own it now and only let it run so they can squeeze people for money.  If you want to know for sure, call Cox and ask for Cox Security, and give them the ticket number in the email's subject line and they can confirm if it's a legit warning. Everything about it looks legit though.

    PS. If you are network knowledgeable, run a netstat from your router and look to see who is using port 12024, and that will show you your culprit.

  • Bruce's avatar
    Bruce
    Honored Contributor III

    I'm sure the third party had made a mistake.  The OP would never violate copyright laws because he or she knows Hollywood would lose money.  However, you can prevent these "phishing scam" emails by subscribing to a VPN.  You know....to hide your IP address and stop involving you in the mistakes.

  • Hi Lotys,

    The email is legit. As Tecknowhelp suggested, it would be wise to reset your network password. Check each of your devices for file-sharing software, peer-to-peer applications, and malware.


  • Tecknowhelp's avatar
    Tecknowhelp
    Valued Contributor II

    Hollywood can go suckle eggs. 

    This is our world now... the world of the electron and the
    switch, the beauty of the baud.

    Just don't be stupid.

  • yak's avatar
    yak
    Contributor III

    Whenever i see an email addressed to "Dear Customer" i am suspicious.  99% are spam. 

  • Tecknowhelp's avatar
    Tecknowhelp
    Valued Contributor II

    Hmm, actually digging a bit deeper, I still think it IS a legit warning from Cox, but possibly not a legit complaint TO Cox. Someone is sending fake reports to Cox, pretending to be ip-echelon, and Cox is falling for it. 

    From what I can tell, their valid email is COMPLIANCE@IP-ECHELON.COM and NOT  p2p@copyright.ip-echelon.com. It's a copycat email. On top of that, the PGP signature is incorrect. Here are the confirmed ones. 

    Also see this blog for some more info, including mention of a thread on here. What made me fall for it is the first part from Cox IS legit and official. Cox still thinks you have been warned, even though the warning to them was fake. 

    Come on Cox. Get your poop together. You used to be better then this. 

    PS. Is cr@p really more offensive then poop? What 5th grader designed this forum?