Spam Headers

General discussion about PopTray. You love it? You hate it? Talk about it here.

Moderators: KY Dave, jojobear99, Rdsok

Post Reply
User avatar
KY Dave
Not the Developer
Posts: 1599
Joined: Thu Mar 14, 2002 7:29 pm
Location: Burkesville, KY. U.S.A.
Contact:

Spam Headers

Post by KY Dave » Sun Dec 18, 2005 2:09 pm

For a few weeks now, I have been receiving a few email that K9 is marking as [SPAM], but PopTray is NOT.
Below, I have posted two headers from some of the email.
X-Message-Status: n:0
X-SID-PRA: LifeInsuranceSalesman <bhygtf@yahoo.ca>
X-SID-Result: TempError
X-Message-Info: JGTYoYF78jFZ5CzG9ghOm+DmcKisDxmoV8FGtBwYVmY=
Received: from yahoo.ca ([195.49.142.82]) by bay0-mc2-f19.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211);
Sat, 17 Dec 2005 23:14:16 -0800
Received: (qmail 66607 invoked by uid 15503); Sat, 17 Dec 2005 22:21:17 -0800
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding;
b=1x0WJW7DQDq31X86c9FS319_fyRexq3zslexqJwP0_WJWjc9FSFslex0WjC_pI319FSF0W7_5bUhA5bu7531x0Wjc_V6cvo_HUHu7DqjcV6CP0Wjcv8E97dwp2Y9F_0WjCP_cvObuNANatMzslER2YleXkD864ANa;
Message-ID: <20051217220332.15624.qmail@web33452.mail.mud.yahoo.com>
Received: from [195.49.142.82] by web33452.mail.scd.yahoo.com via HTTP; Sat, 17 Dec 2005 22:21:17 -0800
Date: Sat, 17 Dec 2005 22:21:17 -0800
From: LifeInsuranceSalesman <bhygtf@yahoo.ca>
Subject: ages40-8O areSavinBIG!
R: <-*->9dNF6]Ri$s3zd[S0,sz<-*->
To: <**********@hotmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_023A_01C603AB.0B108200"
Content-Transfer-Encoding: 8bit
Return-Path: bhygtf@yahoo.ca
X-OriginalArrivalTime: 18 Dec 2005 07:14:16.0538 (UTC) FILETIME=[A808EBA0:01C603A2]
Subject: [Spam][96.1%][DNSBL] (No Subject)
The interesting part in this header is, there are two SUBJECTS in the header,
but only one is shown in PopTray for the email.
From: "Promotions - Activ8 Ltd" <bulk@bulk.outblaze.com>
To: *********@mail.com
CC:
Subject: [Spam][98.6%] The 10 Mistakes Most Men Make With Women
Date: 17 Dec 2005 00:53:20 -0000
Return-Path: <ete-bounce-280-kydave=mail.com@dm1.outblaze.com>
Delivered-To: **********:mail.com@mail.com
Received: (qmail 15000 invoked by uid 0); 17 Dec 2005 01:51:25 -0000
X-Ob-Received: from unknown (192.168.9.68) by mta1-6.us4.outblaze.com; 17 Dec 2005 01:51:25 -0000
Received: from log1.us4.outblaze.com (log1.us4.outblaze.com [205.158.62.165]) by spf0.us4.outblaze.com (Postfix) with SMTP id 7A74A5AEF7 for <*********@mail.com>; Sat, 17 Dec 2005 01:51:25 +0000 (GMT)
Received: (qmail 6361 invoked by uid 1001); 17 Dec 2005 00:53:20 -0000
Message-Id: <20051217005320.6359.qmail@log1.us4.outblaze.com>
Mime-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Complaints-To: abuse@outblaze.com
X-FreePOPs-Domain: mail.com
X-FreePOPs-Folder: INBOX
This one, there is only one SUBJECT,
but PopTray still can't find the K9 spam marker in the HEADER or SUBJECT.

Are these a new 'trick' email header being used by spammers?

The bottom email has the [SPAM] marker in the PREVIEW SUBJECT.
Neither of the email has the [SPAM] marker in the SUBJECT in the main window,
both have it in the HEADER, but PopTray identifies neither as spam,
even though I have my RULE checking the HEADER and SUBJECT
for the spam marker.
KY Dave

Family Blog
You can STOP SPAM using PopFile and PopTray.

Post Reply

Who is online

Users browsing this forum: Bing [Bot] and 10 guests