[Scspamcop] Re: Old news
Giampaolo Tomassoni
nobody at devnull.spamcop.net
Mon Sep 15 13:08:13 EDT 2008
"Ellen" <nobody at spamcop.net> ha scritto nel messaggio
news:gam40u$epa$1 at news.spamcop.net...
> Giampaolo Tomassoni wrote:
>> This phishing:
>>
>> http://www.spamcop.net/sc?id=z2248651308z312a73d9fbbf9b0d9b791ce41fe679e8z
>>
>> does not produce any report just because the second 'Received:' line is
>> fake and carries a more-than-2-days-old date in the past.
>>
>> Of course, the real received date is the one shown in the first
>> 'Received:' line, the second one being apparently fake.
>>
>> I still don't get why the SC parser doesn't trust the date shown in the
>> very first 'Received:' line in the message, and keeps inspecting further.
>> Can someone explain this to me?
>>
>> Giampaolo
>>
>
> 206.196.19.122 had a trusted mailserver flag from a long long time ago
> and as I am not sure whether that is valid any more, I removed it. That
> solved the date problem.
>
> We'll undoubtedly hear from maximumasp.com if this is their outgoing
> mailserver and then we can have a lively discussion about why their users
> are spamming :-)
Ah, SC was trusting it.
Thank you, Ellen.
Giampaolo
> Ellen
> SpamCop
More information about the SCspamcop
mailing list