Jump to content

Polyakov diploma spams obfuscations


moulty

Recommended Posts

The following does not get detected - returned as "could not find your spam" in the attachment.

Received: from vmx1.spamcop.net (vmx1.spamcop.net [204.15.82.27])

by sc-app5.soma.ironport.com (Postfix) with ESMTP id 39CE42F96D

for <submit.key[at]spam.spamcop.net>; Mon, 13 Feb 2006

05:07:28 -0800 (PST)

Received: from my localhost (myIP)

by vmx1.spamcop.net with ESMTP; 13 Feb 2006 05:06:24 -0800

Received: from mySMTPhost ([mySMTP_IP])

by myDomain (sccrmhc14) with SMTP

id <20060213130615014002dfrge>; Mon, 13 Feb 2006 13:06:15 +0000

Received: from [myIP] by mySMTP;

Mon, 13 Feb 2006 12:59:28 +0000

From: myEmail

To: submit.key[at]spam.spamcop.net

Subject: FW: sims fictitious

Date: Mon, 13 Feb 2006 12:59:28 +0000

Message-Id:

<021320061259.18439.43F082B000098C56000048072200751150979B049A0103[at]myDomain>

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="NextPart_Webmail_9m3u9jl4l_18439_1139835568_0"

--NextPart_Webmail_9m3u9jl4l_18439_1139835568_0

Content-Type: text/plain

Content-Transfer-Encoding: 8bit

-------------- Forwarded Message: --------------

From: "Reed Christopher" <uqysiatyys[at]shylock.net>

To: "Rbbsfo" <uqysiatyys[at]shylock.net>

Subject: sims fictitious

Date: Mon, 13 Feb 2006 12:35:20 +0000

--NextPart_Webmail_9m3u9jl4l_18439_1139835568_0

Content-Type: message/rfc822

From: "Reed Christopher" <uqysiatyys[at]shylock.net>

To: "Rbbsfo" <uqysiatyys[at]shylock.net>

Subject: sims fictitious

Date: Mon, 13 Feb 2006 12:35:20 +0000

Content-Type: Multipart/mixed;

boundary="NextPart_Webmail_9m3u9jl4l_18439_1139835568_1"

--NextPart_Webmail_9m3u9jl4l_18439_1139835568_1

Content-Type: text/html; charset="us-ascii"

[spam email message body elided by Jeff G.]

--NextPart_Webmail_9m3u9jl4l_18439_1139835568_1--

--NextPart_Webmail_9m3u9jl4l_18439_1139835568_0--

The email which triggered this auto-response had the following headers:

Return-Path: <myEmail>

Received: from vmx1.spamcop.net (vmx1.spamcop.net [204.15.82.27])

by sc-app5.soma.ironport.com (Postfix) with ESMTP id 39CE42F96D

for <submit.key[at]spam.spamcop.net>; Mon, 13 Feb 2006

05:07:28 -0800 (PST)

Received: from mySMTP (SMTP_IP)

by vmx1.spamcop.net with ESMTP; 13 Feb 2006 05:06:24 -0800

Received: from mySMTP ([SMTP_IP])

by myDomain (sccrmhc14) with SMTP

id <20060213130615014002dfrge>; Mon, 13 Feb 2006 13:06:15 +0000

Received: from [myIP] by mySMTP;

Mon, 13 Feb 2006 12:59:28 +0000

From: myEmail

To: submit.key[at]spam.spamcop.net

Subject: FW: sims fictitious

Date: Mon, 13 Feb 2006 12:59:28 +0000

Message-Id:

<021320061259.18439.43F082B000098C56000048072200751150979B049A0103[at]myDomain>

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="NextPart_Webmail_9m3u9jl4l_18439_1139835568_0"

Edit: 2006/02/13 10:10 EST -0500 Jeff G. elided the spam email message body.

Link to comment
Share on other sites

The problem is that you did not forward your spam email message AS ATTACHMENT to your Confidential Submit Address so that the Parser could see the Headers in the full, unmodified, complete, raw message. Please see How to "Forward as Attachment" and/or How do I get my email program to reveal the full, unmodified email? for details.

Also, what made you think that posting a spam email message body here was ok?

Thanks!

Link to comment
Share on other sites

The problem is that you did not forward your spam email message AS ATTACHMENT to your Confidential Submit Address so that the Parser could see the Headers in the full, unmodified, complete, raw message.  [...]

40398[/snapback]

I submit a couple dozen spams more or less every day; I've never forwarded one to Spamcop except as an attachment, and that (I think) was my point: the fact that Spamcop isn't seeing it, in the case of the latest spams from the particular spammer in question.

Thanks!

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...