Jump to content

spam Showing Up With Old Dates/Times


Outernaut

Recommended Posts

On a busy email address, spam comes in but occasionally with older dates/times. It's sometimes rejected by SC due to it's age. 

This is a example: https://www.spamcop.net/sc?id=z6706167000zcd603f42bf470b11f07d5489c8829d4dz (rejected saying it was to large (not! Rejected because it appears old?)

Today is March 14, 2021. 
There are several emails dating back to March 10, 2021 and the spam showing the date of March 10, 2021 was not delivered until today. The spam seems to have been backdated or held until today, but with March 10 date.

How is this even possible?

TIA

~o~

Edited by Outernaut
tipo :)
Link to comment
Share on other sites

4 hours ago, Outernaut said:

This is a example: https://www.spamcop.net/sc?id=z6706167000zcd603f42bf470b11f07d5489c8829d4dz (rejected saying it was to large (not! Rejected because it appears old?)

Hmmm, the example says it is only 5 hours old and came in on 14 Mar 2021.  I tried refreshing a couple of times.  I wonder if it says it is old when you first go to report it?

Tracking message source: 99.79.57.23:
Routing details for 99.79.57.23
[refresh/show] Cached whois for 99.79.57.23 : abuse@amazonaws.com
Using abuse net on abuse@amazonaws.com
abuse net amazonaws.com = abuse@amazonaws.com
Using best contacts abuse@amazonaws.com
Reports disabled for abuse@amazonaws.com
Using abuse#amazonaws.com@devnull.spamcop.net for statistical tracking.
Message is 5 hours old

How an email might possibly be old is for instance, the 10.0.153.220 server could have held it internally for a few days.  SpamCop goes off the date on the Received line where it picks up the spammers IP.  This means if your ISP hold an email for four days, SpamCop would call it old, even though it may have just barely arrived.

Link to comment
Share on other sites

1 hour ago, gnarlymarley said:

Hmmm, the example says it is only 5 hours old and came in on 14 Mar 2021.  I tried refreshing a couple of times.  I wonder if it says it is old when you first go to report it?


Tracking message source: 99.79.57.23:
Routing details for 99.79.57.23
[refresh/show] Cached whois for 99.79.57.23 : abuse@amazonaws.com
Using abuse net on abuse@amazonaws.com
abuse net amazonaws.com = abuse@amazonaws.com
Using best contacts abuse@amazonaws.com
Reports disabled for abuse@amazonaws.com
Using abuse#amazonaws.com@devnull.spamcop.net for statistical tracking.
Message is 5 hours old

How an email might possibly be old is for instance, the 10.0.153.220 server could have held it internally for a few days.  SpamCop goes off the date on the Received line where it picks up the spammers IP.  This means if your ISP hold an email for four days, SpamCop would call it old, even though it may have just barely arrived.

Thanks, I understand - I think :)  My email client (Thunderbird) shows the spam date being March 10 and the garbage comes in after March 14 (today). My emails including the trash from scumbags is listed by most recent.  Tomorrow, I know I will see several new legit email, and some unread (spam) will have day-before-yesterdays date. Let's blame the email client :)

If I understand the Spamcop announcement (News: (Last Modified: 3/11/2021, 12:51:03 PM -0800) new announcement at Spamcop.net > login > Reporting GUI is abandoning us, just a week after my ISP threw customers into the cesspool by dropping their use of SBLs and telling customers to start using the webmail GUI to create filters, ISPs not being allowed. It is a very sad day. R.I.P. Internet. I am addressing this in a separate Topic.

~o~

p.s. If I don't get to say so before we are blocked from adding spammers, my sincere thanks to you and all the others here that volunteer your time, experience, and patience to help everyone battle the festering sores of the Internet.

Link to comment
Share on other sites

13 hours ago, Outernaut said:

This is a example: https://www.spamcop.net/sc?id=z6706167000zcd603f42bf470b11f07d5489c8829d4dz (rejected saying it was to large (not! Rejected because it appears old?)

I went back and looked at this example and I do see why your email client has an old date.  So the email client might be displaying an old date, but the spammer has added their old date.  Stuff like this is all reportable, but maybe the spammer is banking your ISP has an issue and you don't report all the spam.

Received: by cmsmtp; Sun, 14 Mar 2021 14:02:22 -0600

Date added by spammer:

Date: Thu, 11 Mar 2021 02:42:49 +0100

P.S. Thank you for your help too!

Link to comment
Share on other sites

4 hours ago, Outernaut said:

It looks like your spammer has an old date in their spam but the email is being sent today.

Your ISP received: Mon, 15 Mar 2021 15:43:46 -0600
Spammer trick Date: Thu, 11 Mar 2021 02:42:49 +0100

Seems the spammer is trying to trick you into thinking it is old, when it is new.  Looking at the Received headers, I don't understand why the spammer would do this.

Link to comment
Share on other sites

  • 7 months later...
On 3/16/2021 at 3:56 AM, gnarlymarley said:

It looks like your spammer has an old date in their spam but the email is being sent today.

Your ISP received: Mon, 15 Mar 2021 15:43:46 -0600
Spammer trick Date: Thu, 11 Mar 2021 02:42:49 +0100

Seems the spammer is trying to trick you into thinking it is old, when it is new.  Looking at the Received headers, I don't understand why the spammer would do this.

because even spammers know that spamcop discards old emails, so they don't allow you to report spam.

it also happens to me even dated 2020 !!

Link to comment
Share on other sites

orry, this email is too old to file a spam report. You must report spam within 2 days of receipt. This mail was received on Sat, 19 Dec 2020 06:12:22 -0800

https://storage.googleapis.com/kor31/link.html#c20244KBsTY16201171pSDd22OoN27162ZAPm1326
https://storage.googleapis.com/kor31/link.html#u20244Cvmsi16201171ytTU22IfR27162hZoY1326

If reported today, reports would be sent to:

Re: 195.154.56.105 (Administrator of IP block - statistics only)

abuse@online.net

Re: https://storage.googleapis.com/kor31/link.html#... (Administrator of network hosting website referenced in spam)

google-abuse-bounces-reports@devnull.spamcop.net

Re: https://storage.googleapis.com/kor31/link.html#... (Administrator of network hosting website referenced in spam)

google-abuse-bounces-reports@devnull.spamcop.net

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...