[Scspamcop] Re: Old news

[Ellen]

Giampaolo Tomassoni wrote:
> This phishing:
> 
> http://www.spamcop.net/sc?id=z2248651308z312a73d9fbbf9b0d9b791ce41fe679e8z
> 
> does not produce any report just because the second 'Received:' line is fake 
> and carries a more-than-2-days-old date in the past.
> 
> Of course, the real received date is the one shown in the first 'Received:' 
> line, the second one being apparently fake.
> 
> I still don't get why the SC parser doesn't trust the date shown in the very 
> first 'Received:' line in the message, and keeps inspecting further. Can 
> someone explain this to me?
> 
> Giampaolo
> 

  206.196.19.122 had a trusted mailserver flag from a long long  time 
ago and as I am not sure whether that is valid any more, I removed it. 
That solved the date problem.

We'll undoubtedly hear from maximumasp.com if this is their outgoing 
mailserver  and then we can have a lively discussion about why their 
users are spamming :-)


Ellen
SpamCop