[Scspamcop] Who is the spammer trying to fool here?

Geoffrey Hyde g.hyde at bigNOSPAMpond.net.au
Thu Aug 2 07:44:30 EDT 2007


http://www.spamcop.net/sc?id=z1378597901z9b6651aa237c2053eccf364a8e9744fbz

SpamCop wants to report the traceline right after my ISP's mail server.  It 
apparently doesn't believe that chain testing the next line of this spamitem 
is going to get it a source IP address.

If one were to believe the tracelines and assume that at least the second 
one is properly stamped and valid, maybe it would report [157.8.1.150] 
however I'm not even sure of this traceline to make that kind of assumption 
offhand.

I assume that the Returned Mail item in the body is a clever fake or a 
victim of spammer fraud itself.  Either way there's no use even trying to 
understand where that came from.  I've certainly never heard of an 
X-Received: line anyway.

This tracker has been canceled, as I'm not sure whether to believe SpamCop's 
parse or not.


Cheers ...

Geoffrey Hyde




More information about the SCspamcop mailing list