[Scspamcop] Re: Old news

Giampaolo Tomassoni nobody at devnull.spamcop.net
Mon Sep 15 13:08:13 EDT 2008


"Ellen" <nobody at spamcop.net> ha scritto nel messaggio 
news:gam40u$epa$1 at news.spamcop.net...
> Giampaolo Tomassoni wrote:
>> This phishing:
>>
>> http://www.spamcop.net/sc?id=z2248651308z312a73d9fbbf9b0d9b791ce41fe679e8z
>>
>> does not produce any report just because the second 'Received:' line is 
>> fake and carries a more-than-2-days-old date in the past.
>>
>> Of course, the real received date is the one shown in the first 
>> 'Received:' line, the second one being apparently fake.
>>
>> I still don't get why the SC parser doesn't trust the date shown in the 
>> very first 'Received:' line in the message, and keeps inspecting further. 
>> Can someone explain this to me?
>>
>> Giampaolo
>>
>
>  206.196.19.122 had a trusted mailserver flag from a long long  time ago 
> and as I am not sure whether that is valid any more, I removed it. That 
> solved the date problem.
>
> We'll undoubtedly hear from maximumasp.com if this is their outgoing 
> mailserver  and then we can have a lively discussion about why their users 
> are spamming :-)

Ah, SC was trusting it.

Thank you, Ellen.

Giampaolo


> Ellen
> SpamCop 




More information about the SCspamcop mailing list