Sample Forged Spam From PSI

Items highlighted in red are forgeries.

Path: cpk-news-hub1.bbnplanet.com!news.bbnplanet.com!news-peer.sprintlink.net!
	news-peer-east.sprintlink.net!news.sprintlink.net!Sprint!
	psinntp!pubxfer.news.psi.net!newsfeed.usi.net!news.marketing.com!
	nntp.usa.nss.net
From: Cindy Q. <cindy@benisik.tr>
Newsgroups: alt.homosexual
Subject: --       Live Hidden Bathroom and Changing room Cameras!!!!
Date: Tue, 24 Mar 1998 12:40:35 PST
Organization: Adult Sensations
Lines: 13
Message-ID: <03241998124035cindy@benisik.tr>
NNTP-Posting-Host: 38.254.16.227
X-Poster: UncleSpam News ver. 2.03
content-length: 281

This is for that guy that wanted the LIVE CAM SITE....


Click here http://www.1stadultsex.com

Only if you want to see LIVE DRESSING ROOM and BATHROOM CAMS!!!! With NO plugins and 

 They offer FREE MEMBER PASSWORD!!!!

Cindy


IGINZWXOMPKISMFXNWWVGPJOMPLEGQKCHJAIQKTV

Of special interest is the random text appended to the end in an attempt to fool spam-detectors, and the use of the "X-Poster: UncleSpam News ver. 2.03" line to make it trivially easy to detect spam. Most interesting of all is the Path: forgery which requires access to an insecure news server (PSI in this case.)