[SURBL-Discuss] Spammer or not: cyberpolice.ru

[Joe Wein]

"David Hooton" <david.hooton at gmail.com> wrote:
> Received: from mx2.mailsecurity.net.au (mx2.mailsecurity.net.au
[67.18.110.234])
> by corp.mailsecurity.net.au (8.12.11/3.0.0) with ESMTP id i81It2vK027557
> for <xxx at xxx.xxx.au>; Thu, 2 Sep 2004 04:55:10 +1000
> Received: from 67.18.110.234 ([61.145.73.222])
> by mx2.mailsecurity.net.au (2.52a) with SMTP id i81IrkFI002376
> for <xxx at xxx.xxx.au>; Thu, 2 Sep 2004 04:53:49 +1000

     inetnum:      61.145.73.208 - 61.145.73.223
     netname:      SANSHUI-JLB-LTD
     country:      CN
     descr:	      SANSHUI JIANLIBAO CO.,LTD

> X-Message-Info: HGKVBW2ciaONIbIZry4u281+RKcvq898uozZX

This means the remaining Received lines are bogus.

Hmm... Why would a Russian spammer have to use a Chinese spam server?


> ----6546910835501891
> Content-Type: text/plain;
> Content-Transfer-Encoding: quoted-printable
>
> Best forum about mailing and spam
> Get involved today!
> http://www.cyberpolice-MUNGED.ru

This text smells like a Joe job to me. It's too short and too boring.

Joe
-- 
http://www.joewein.de/sw/spam.htm