[SpamCop-List] Re: Seemingly same spam, same date and time, etc.
nttp.sc.s at bigsleep.org
Thu Jul 21 07:05:37 EDT 2005
On 19 Jul 2005 J G entered spamcop and left
news:dbkdkv$cpe$1 at news.spamcop.net:
> Good object lesson here...
Yes, the date header is forged, look at the last part of the first Received
Tue, 19 Jul 2005 21:27:46 -0400
Tue, 19 Jul 2005 21:27:56 -0400
Obviously they are not the same message since the source IP is different,
but they probably look the same when just viewing the message list. Also in
the same header the ESMTP id is different. That header is added by cox.net,
and is proof this was two seperate connections.
Interesting bit of forgery after that, cox should be blowing those off.
BTW, if you want, you can leave out the Mozilla headers, the X-Mozilla-
Status2 and everything above that is added by Thunderbird. When I forward
mail those headers are not there. When you use copy-paste with CTRL-A of
course it selects all, so you would have to learn to do a "click, End,
Shift+click" (Ctrl+Shift+End doesn't work here) - which may be more trouble
than you want to go through.
More information about the SpamCop-List