In the following two examples, both "Return-Path" and "Reply-To"
are found in spammer headers:
Code:
Return-Path: <ginger@snacksy.com>
Received: from mx2.dnsvr.com (mx2.dnsvr.com [207.228.253.52])
by silkroad.com (8.11.1/8.9.1) with ESMTP id gA23D9U11632;
Fri, 1 Nov 2002 22:13:09 -0500
Received: from snacksy.com (unknown [61.180.66.135])
by mx2.dnsvr.com (Postfix) with SMTP
id 90B3F82CDF; Fri, 1 Nov 2002 22:12:56 -0500 (EST)
Reply-To: <ginger@snacksy.com>
Message-ID: <028d70b64c8e$4623c2d3$6eb57cb7@ekwwvr>
From: <ginger@snacksy.com>
To: <spam@silkroad.com>
Subject: Re: Limited Quantities Hurry!-ONLY $29.99
Date: Sat, 02 Nov 2002 12:10:06 -0900
MiME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
Importance: Normal
Code:
Return-Path: <bizman23@raakim.com>
Received: from raakim.com (200-207-152-67.sepaco.com.br [200.207.152.67] (may be forged))
by silkroad.com. (8.11.1/8.9.1) with SMTP id gA23BJU11617;
Fri, 1 Nov 2002 22:11:23 -0500
Date: Fri, 1 Nov 2002 22:11:23 -0500
Reply-To: <bizman23@raakim.com>
Message-ID: <001b83b55ece$6573b0c6$3da63dd0@dplqhj>
From: <bizman23@raakim.com>
To: spam@silkroad.com.
Subject: ENLARGE YOUR PENIS UP TO 3 INCHES.
MiME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2627
Importance: Normal