"Can't parse date of spam for age detection"

[Neil Parks]

Please look at

http://www.spamcop.net/sc?id=z5458084753z8...fefa396f939e37z

Parsing header:

0: Received: from ri1.zoner.com ([217.198.113.91]) by inMail24.com (IceWarp 9.1.5-7) with SMTP id NOI33752; Mon, 28 Jan x 14:58:52 +0100

Hostname verified: ri1.zoner.com

inmail24 received mail from inmail24 ( 217.198.113.91 )

1: Received: from ri1.zoner.com (localhost [127.0.0.1]) by ri1.zoner.com (Postfix) with ESMTP id 9C15B38004861; Mon, 28 Jan x 14:58:39 x (CET)

Internal handoff at inmail24

2: Received: from a1modem (178-191-148-197.adsl.highway.telekom.at [178.191.148.197]) by ri1.zoner.com (Postfix) with ESMTP id 6CBD510003141; Mon, 28 Jan x 14:58:38 x (CET)

Hostname verified: 178-191-148-197.adsl.highway.telekom.at

inmail24 received mail from sending system 178.191.148.197

Can't parse date of spam for age detection: Mon, 28 Jan x 14:58:38 x

Please notice that the letter x has been inserted into the dates in the Received records.

This is how the same Received records appear in the original spam as I received it:

Received: from ri1.zoner.com ([217.198.113.91])

by inMail24.com (IceWarp 9.1.5-7) with SMTP id NOI33752;

Mon, 28 Jan 2013 14:58:52 +0100

Received: from ri1.zoner.com (localhost [127.0.0.1])

by ri1.zoner.com (Postfix) with ESMTP id 9C15B38004861;

Mon, 28 Jan 2013 14:58:39 +0100 (CET)

Received: from a1modem (178-191-148-197.adsl.highway.telekom.at [178.191.148.197])

by ri1.zoner.com (Postfix) with ESMTP id 6CBD510003141;

Mon, 28 Jan 2013 14:58:38 +0100 (CET)

The original spam also contained this Cc record:

Cc: <peakspeed19[at]inmail24.com>, <peter_ho[at]inmail24.com>;,

Mon[at]ri1.zoner.com, 28[at]ri1.zoner.com, Jan[at]ri1.zoner.com,

2013[at]ri1.zoner.com, "14:58:39"[at]ri1.zoner.com, +0100[at]ri1.zoner.com

Notice that the apparent addresses in the "n1.zoner.com" domain are actually components of the date and time!

To test whether this Cc record was affecting the Spamcop process, I resubmitted the spam with that one record--and ONLY that one record--removed.

The result can be found in:

http://www.spamcop.net/sc?id=z5458098409z5...f75cd686396f64z

This second submission was processed and reported successfully.

[turetzsr]

Hi, Neil,

...Sorry to hear of your problem. Smarter people than I may happen by here with some help but if that doesn't happen in a timely enough manner for you, I would suggest that you contact the SpamCop deputies directly at e-mail address deputies[at]admin.spamcop.net.

...Good luck and thank you for reporting spam.

[Neil Parks]

I may have inadvertently posted this to the wrong forum:

http://forum.spamcop.net/forums/index.php?showtopic=13113

[Farelf]

Merged to this location now Neil.