[SpamCop-List] Re: "WE ALLOW BULK MAIL AND SPAMMING FROM OUR SERVERS".

[Mike Easter]

Bud wrote:
> Is this a 'joe job'? I SC reported it anyway.
www.spamcop.net/sc?id=z793574772z0006b918178cc7e9c57af762ca0b4b09z

As a separate issue from the joejob that Steven has described, I'm
puzzled about how you submitted the spam to the parser.

There are a number of these same items in sightings, and those items
show the whole spam.  Yours does not.

The whole original spam is an html item in the structure of header
content saying multipart alternative and the body showing two parts
separated by the designated mime boundary delimitors, one being
plaintext and the other part being text/html.

As a minor additional factor, the plaintext and html rendered portion
are the same and show the website repeated six times separately above
what your plaintext version shows.

The report you submitted, which was only for the spamsource, which is
fine, doesn't report the website, which is fine, because the parser
doesn't find the website because of the discrepancy between the headers
and the body you submitted.

That is, the headers say multipart alternative, which is what the
original would have been, but what you submitted was a modified
plaintext version/portion.

Just to add another level of confusion, sightings does show more than
one version of the same joejob in the last 2 days, but none of them look
like the version you submitted to the parser and none of them show a
discrepancy between the header content type and the body like yours.


-- 
Mike Easter
kibitzer, not SC admin