[SpamCop-List] Re: is go.com really that clueless?
Mike Easter
MikeE at ster.invalid
Tue Jun 7 07:43:12 EDT 2005
Robert Blair wrote:
> "Mike Easter"
>> You haven't proven your point yet by posting partial headers.
>
> While I did not post all the headers I did post all the receive
> headers but here is what you want.
>
> http://www.spamcop.net/sc?id=z772255444z234e8e5c69ac56da441f2a1e9f7155
> dbz
It is definitely more 'fun' and more informative to look at the whole
item. Those Received headers are 'boring' but the key to the truth..
When we look at the tracker we get to see just what a spam generated
from go.com's webmailer looks like.
Altho' anything of this can be forged by the spammer, when it all 'fits
together' then it is likely real.
headerlines
X-Mailer: GoMail 3.0.1
bodytrailer
Check-out GO.com
GO get your free GO E-Mail account with expanded storage of 6 MB!
http://mail.go.com
We also get to see the go.com From and Return-Path which is surely the
account at go joymoorejo and altho' the tracker only provides an
obfuscated msgid, it also corresponds 6380__rejo at WMAILWEBA04 <where I
replaced a lot of tracker 'blanks' with two, your original has the real
thing, which go could've looked up> and we also get to see that go.com
does *not* put in an X-line indicating the IP of the person connecting
to their webmailer, also giving another clue to go.com's cluelessness.
Since these kinds of things can sometimes lead to further correspondence
with a provider like go, all of this information is fodder for some
subjects in that correspondence.
Also, if/when you re-communicate with the provider's abuse contact, you
want to include some of these addresses from the arin registration:
whois -h whois.arin.net 199.181.134.41 ...
OrgName: Disney Worldwide Services, Inc.
AbuseEmail: ms_support at help.go.com
NOCEmail: servicedesk at ticket.disneyonline.com
TechEmail: noc at dig.com
OrgTechEmail: michael.jenkins at disney.com
So, when you are writing back and including the inane response to a
legitimate notify, you are also including all of those people who get to
look at the stupidity of their abuse desk's response. They also get to
see what other criticisms you have about the missing X-line for the IP
That is a deficiency of a webmailer which should be fixed IMO.
Now, see? Isn't that more fun than just looking at Received lines?
--
Mike Easter
kibitzer, not SC admin
More information about the SpamCop-List
mailing list