Jump to content
Outernaut

spam Showing Up With Old Dates/Times

Recommended Posts

Posted (edited)

On a busy email address, spam comes in but occasionally with older dates/times. It's sometimes rejected by SC due to it's age. 

This is a example: https://www.spamcop.net/sc?id=z6706167000zcd603f42bf470b11f07d5489c8829d4dz (rejected saying it was to large (not! Rejected because it appears old?)

Today is March 14, 2021. 
There are several emails dating back to March 10, 2021 and the spam showing the date of March 10, 2021 was not delivered until today. The spam seems to have been backdated or held until today, but with March 10 date.

How is this even possible?

TIA

~o~

Edited by Outernaut
tipo :)

Share this post


Link to post
Share on other sites
4 hours ago, Outernaut said:

This is a example: https://www.spamcop.net/sc?id=z6706167000zcd603f42bf470b11f07d5489c8829d4dz (rejected saying it was to large (not! Rejected because it appears old?)

Hmmm, the example says it is only 5 hours old and came in on 14 Mar 2021.  I tried refreshing a couple of times.  I wonder if it says it is old when you first go to report it?

Tracking message source: 99.79.57.23:
Routing details for 99.79.57.23
[refresh/show] Cached whois for 99.79.57.23 : abuse@amazonaws.com
Using abuse net on abuse@amazonaws.com
abuse net amazonaws.com = abuse@amazonaws.com
Using best contacts abuse@amazonaws.com
Reports disabled for abuse@amazonaws.com
Using abuse#amazonaws.com@devnull.spamcop.net for statistical tracking.
Message is 5 hours old

How an email might possibly be old is for instance, the 10.0.153.220 server could have held it internally for a few days.  SpamCop goes off the date on the Received line where it picks up the spammers IP.  This means if your ISP hold an email for four days, SpamCop would call it old, even though it may have just barely arrived.

Share this post


Link to post
Share on other sites
1 hour ago, gnarlymarley said:

Hmmm, the example says it is only 5 hours old and came in on 14 Mar 2021.  I tried refreshing a couple of times.  I wonder if it says it is old when you first go to report it?


Tracking message source: 99.79.57.23:
Routing details for 99.79.57.23
[refresh/show] Cached whois for 99.79.57.23 : abuse@amazonaws.com
Using abuse net on abuse@amazonaws.com
abuse net amazonaws.com = abuse@amazonaws.com
Using best contacts abuse@amazonaws.com
Reports disabled for abuse@amazonaws.com
Using abuse#amazonaws.com@devnull.spamcop.net for statistical tracking.
Message is 5 hours old

How an email might possibly be old is for instance, the 10.0.153.220 server could have held it internally for a few days.  SpamCop goes off the date on the Received line where it picks up the spammers IP.  This means if your ISP hold an email for four days, SpamCop would call it old, even though it may have just barely arrived.

Thanks, I understand - I think :)  My email client (Thunderbird) shows the spam date being March 10 and the garbage comes in after March 14 (today). My emails including the trash from scumbags is listed by most recent.  Tomorrow, I know I will see several new legit email, and some unread (spam) will have day-before-yesterdays date. Let's blame the email client :)

If I understand the Spamcop announcement (News: (Last Modified: 3/11/2021, 12:51:03 PM -0800) new announcement at Spamcop.net > login > Reporting GUI is abandoning us, just a week after my ISP threw customers into the cesspool by dropping their use of SBLs and telling customers to start using the webmail GUI to create filters, ISPs not being allowed. It is a very sad day. R.I.P. Internet. I am addressing this in a separate Topic.

~o~

p.s. If I don't get to say so before we are blocked from adding spammers, my sincere thanks to you and all the others here that volunteer your time, experience, and patience to help everyone battle the festering sores of the Internet.

Share this post


Link to post
Share on other sites
13 hours ago, Outernaut said:

This is a example: https://www.spamcop.net/sc?id=z6706167000zcd603f42bf470b11f07d5489c8829d4dz (rejected saying it was to large (not! Rejected because it appears old?)

I went back and looked at this example and I do see why your email client has an old date.  So the email client might be displaying an old date, but the spammer has added their old date.  Stuff like this is all reportable, but maybe the spammer is banking your ISP has an issue and you don't report all the spam.

Received: by cmsmtp; Sun, 14 Mar 2021 14:02:22 -0600

Date added by spammer:

Date: Thu, 11 Mar 2021 02:42:49 +0100

P.S. Thank you for your help too!

Share this post


Link to post
Share on other sites
4 hours ago, Outernaut said:

It looks like your spammer has an old date in their spam but the email is being sent today.

Your ISP received: Mon, 15 Mar 2021 15:43:46 -0600
Spammer trick Date: Thu, 11 Mar 2021 02:42:49 +0100

Seems the spammer is trying to trick you into thinking it is old, when it is new.  Looking at the Received headers, I don't understand why the spammer would do this.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×