What Say Ye?

[mgolden]

Here's the headers I received from a scammer's email relating to an item I have posted on Craigslist.

Will Spamcop send a spam report to Craigslist, which is an innocent party, or will it correctly send the report to the mail server being used to relay [211.11.172.146]?

Return-Path: <bounce-anon-munged=spamcop.net[at]craigslist.org>

Delivered-To: spamcop-net-munged[at]spamcop.net

Received: (qmail 15878 invoked from network); 10 Apr 2011 15:39:59 -0000

X-spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on blade5

X-spam-Level:

X-spam-Status: hits=0.1 tests=TW_ZJ version=3.2.4

Received: from unknown (192.168.1.86)

by blade5.cesmail.net with QMQP; 10 Apr 2011 15:39:59 -0000

Received: from mxo3p.craigslist.org (208.82.236.168)

by mxin2.cesmail.net with SMTP; 10 Apr 2011 15:45:44 -0000

Received: from tnkv.tnk-tanaka.co.jp (mail.tnk-tanaka.co.jp [211.11.172.146])

by mxi8p.craigslist.org (Postfix) with ESMTP id 7DF7A74A29

for <sale-zjd2z-2313205499[at]craigslist.org>; Sun, 10 Apr 2011 08:03:17 -0700 (PDT)

Received: from localhost ([90.183.45.18]) by tnkv.tnk-tanaka.co.jp

(Post.Office MTA v3.9.0 release 20041101

ID# 6003-011U100L2S100V39B) with ESMTP id jp

for <sale-zjd2z-2313205499[at]craigslist.org>;

Mon, 11 Apr 2011 00:03:32 +0900

From: carter <carterworkx951566[at]gmail.com>

Subject: i like... interested

Message-Id: <20110410150317.7DF7A74A29[at]mxi8p.craigslist.org>

Date: Sun, 10 Apr 2011 08:03:17 -0700 (PDT)

To: undisclosed-recipients:;

X-SpamCop-Checked: 208.82.236.168 211.11.172.146 90.183.45.18

[Farelf]

I don't know - why don't you submit it and see? You need to have "Show technical details" checked if pasting into the webform submission or "Show technical data" selected under the "Show Technical Details during reporting" item of the "Report Handling Options" link under your "Preferences" tab of your member's (reporter's) page.

Here's how it parses with no mailhosts set.

http://www.spamcop.net/sc?id=z4973638038zc...21a5c78e3a555fz

I am fairly sure that parsing would not drop down that far with mailhosts in place but whether it implicates Craigslist or not remains to be seen - probably only you can tell us for certain.