Jump to content

kae

Members
  • Content Count

    84
  • Joined

  • Last visited

Everything posted by kae

  1. I got these informational messages during the parsing phase of reporting an email as spam. I cancelled the report and then a few minutes later enetered the information again and got the same message. I did a search for getGrid and saw something about slowness, but I'm wondering what to do when I get this message. My question is: Should I go ahead and hit the "Send spam Report(s) Now" button or do I need to do something else. Here's the Tracking URL: http://www.spamcop.net/sc?id=z777574494z55...c930e7dbeecf9dz I pulled up the tracking URL and it seemed like when I looked at it there was no getGrid message and it seemed to have parsed fine, so I hit the Send spam Reports button on the trackin URL page. I'm not sure why I got the getGrid message unless it was just a freak occurance, but it happened twice. Anyway, my question is do I go ahead and hit the send reports button or is there some other action that I should do? Here is what I saw in the reports section, well at least the text, the report was a lot prettier: [color="green"]Parsing header:[/color] [color="red"]Cannot open database connection in getGrid[/color] Received: (qmail 29237 invoked from network); 22 Jun 2005 10:31:10 -0000 Ignored Received: from unknown (HELO c60.cesmail.net) (192.168.1.105) by blade3.cesmail.net with SMTP; 22 Jun 2005 10:31:10 -0000 192.168.1.105 found host 192.168.1.105 (getting name) no name host 192.168.1.105 = Computer2-ATM3-1.2.gw.psu.edu (old cache) 192.168.1.105 discarded Received: from mailgate.cesmail.net (216.154.195.36) by c60.cesmail.net with ESMTP; 22 Jun 2005 06:31:04 -0400 216.154.195.36 found host 216.154.195.36 = mailgate.cesmail.net (cached) mailgate.cesmail.net is 216.154.195.36 Possible spammer: 216.154.195.36 Received line accepted Relay trusted (216.154.195.36 cesmail.net mailgate.cesmail.net) Received: from mail.xnet.com [198.147.221.67] by mailgate.cesmail.net with POP3 (fetchmail-6.2.1) for x (single-drop); Wed, 22 Jun 2005 06:31:03 -0400 (EDT) 198.147.221.67 found Checking POP client chain: Chain test:mailgate.cesmail.net =? 216.154.195.36 ips are close enough 216.154.195.36 is close to an MX (216.154.195.53) for cesmail.net 216.154.195.36 is mx mailgate.cesmail.net and 216.154.195.36 have close IP addresses - chain verified POP hack, restarting chain. Received: by earth1-b1.xnet.com (Postfix, from userid 56) id 4BDF31625; Wed, 22 Jun 2005 05:16:19 -0500 (CDT) Ignored Received: from inferno1.xnet.com (inferno1.xnet.com [198.147.221.81]) by earth1-a2.xnet.com (Postfix) with ESMTP id 4FFF51625; Wed, 22 Jun 2005 05:16:18 -0500 (CDT) 198.147.221.81 found host 198.147.221.81 = inferno1.xnet.com (cached) inferno1.xnet.com is 198.147.221.81 Possible spammer: 198.147.221.81 ips are close enough 198.147.221.81 is close to an MX (198.147.221.71) for xnet.com 198.147.221.81 is mx Received line accepted Received: from inferno1 (localhost.localdomain [127.0.0.1]) by inferno1.xnet.com (Postfix) with SMTP id 4272E101BB7; Wed, 22 Jun 2005 05:16:18 -0500 (CDT) 127.0.0.1 found host 127.0.0.1 = localhost (cached) localhost is 127.0.0.1 198.147.221.81 not listed in dnsbl.njabl.org 198.147.221.81 not listed in cbl.abuseat.org 198.147.221.81 not listed in dnsbl.sorbs.net 198.147.221.81 is not an MX for earth1-a2.xnet.com ips are close enough 198.147.221.81 is close to an MX (198.147.221.71) for xnet.com 127.0.0.1 discarded Received: from earth1.xnet.com ([198.147.221.71]) by inferno1 ([198.147.221.81]) with SMTP (gateway) id A053DF3A3C6; Wed, 22 Jun 2005 05:16:18 -0500 Masking IP-based 'by' clause. Received: from earth1.xnet.com ([198.147.221.71]) by inferno1 with SMTP (gateway) id A053DF3A3C6; Wed, 22 Jun 2005 05:16:18 -0500 198.147.221.71 found host 198.147.221.71 = earth1.xnet.com (cached) earth1.xnet.com is 198.147.221.71 198.147.221.81 not listed in dnsbl.njabl.org 198.147.221.81 not listed in cbl.abuseat.org 198.147.221.81 not listed in dnsbl.sorbs.net 198.147.221.81 is not an MX for earth1-a2.xnet.com ips are close enough 198.147.221.81 is close to an MX (198.147.221.71) for xnet.com Possible spammer: 198.147.221.71 inferno1 is not a hostname Chain test:inferno1 =? inferno1.xnet.com inferno1 and inferno1.xnet.com have same hostname - chain verified Possible relay: 198.147.221.81 198.147.221.81 not listed in relays.ordb.org. 198.147.221.81 has already been sent to relay testers Received line accepted Received: from 198.147.221.71 (unknown [219.254.177.219]) by earth1-a1.xnet.com (Postfix) with SMTP id AFE591625; Wed, 22 Jun 2005 05:16:02 -0500 (CDT) 219.254.177.219 found host 219.254.177.219 (getting name) no name 198.147.221.71 not listed in dnsbl.njabl.org 198.147.221.71 not listed in cbl.abuseat.org 198.147.221.71 not listed in dnsbl.sorbs.net 198.147.221.71 is an MX for xnet.com Possible spammer: 219.254.177.219 host earth1-a1.xnet.com (checking ip) ip not found ; earth1-a1.xnet.com discarded as fake. Chain test:earth1-a1.xnet.com =? earth1.xnet.com host earth1.xnet.com (checking ip) = 198.147.221.71 198.147.221.71 is an MX for xnet.com 198.147.221.71 is mx earth1-a1.xnet.com and earth1.xnet.com have close IP addresses - chain verified Possible relay: 198.147.221.71 198.147.221.71 not listed in relays.ordb.org. 198.147.221.71 has already been sent to relay testers Received line accepted Received: from dns61alex4all.com ([133.177.249.128]) by vip8-js3.ezdell77[at]gmail.com with Microsoft SMTPSVC(5.0.2195.6824); Wed, 22 Jun 2005 04:11:51 -0700 133.177.249.128 found host 133.177.249.128 (getting name) no name 219.254.177.219 not listed in dnsbl.njabl.org 219.254.177.219 listed in cbl.abuseat.org ( 127.0.0.2 ) Open proxies untrusted as relays Tracking message source: 219.254.177.219: Routing details for 219.254.177.219 [refresh/show] Cached whois for 219.254.177.219 : nospam[at]hanaro.com ip-adm[at]hanaro.com Using abuse net on nospam[at]hanaro.com abuse net hanaro.com = abuse[at]hanaro.com Using best contacts abuse[at]hanaro.com Message is 5 hours old 219.254.177.219 not listed in dnsbl.njabl.org 219.254.177.219 not listed in dnsbl.njabl.org 219.254.177.219 listed in cbl.abuseat.org ( 127.0.0.2 ) 219.254.177.219 is an open proxy 219.254.177.219 not listed in accredit.habeas.com 219.254.177.219 not listed in plus.bondedsender.org 219.254.177.219 not listed in iadb.isipp.com Finding links in message body Parsing text part no links found Please make sure this email IS spam: From: "New Nu Body" <ezdell77[at]gmail.com> () want to make 1500.00 to 3500.00 per day just for returning phone calls? If you have a telephone and can return calls then you are qualified
  2. My guess at what happened is that at some point in time the parser was unable to get my MailHost information from where ever the parser gets it (maybe that's the getGrid stuff) and the parser just parsed the email as though I didn't have any MailHost information (i.e. all received lines are suspect). Anyway, what I posted in the Code section of the first post was the text shown on the webpage from the parsed output that comes from hitting the "Process spam" button on the "Report spam" webpage. What I copied into the code section came off of the webpage report which was a lot prettier than the cut and paste job I did. I tried to colorize the getGrid error message, but wasn't too successful about getting the spacing and stuff, so it didn't look like the webpage at all. I am sorry about that. Maybe I should have posted the html source.... Anyway... The main mailhost that the spammers seem to know about and use has (what I think is a) complicated mail handling system. There are about six received lines of mail handlers. All of my mailhosts (including the one this email came through) have been added via the "Add New Host" on the MailHosts tab in the Report spam webpage, so the information is there and since I've never seen a problem with it before nor since the problem I had this morning, it seems like a freak occurance. This morning, I did cancel the first report I submitted that had the getGrid error and went ahead and read the rest of my email and came back and submitted it again a minute or two later. The second time it had the same getGrid error, but when I looked at the Tracking URL at the top of the page (opened new webpage and looked) it had parsed correctly using the correct MailHost information. On the bottom of the new webpage with the correct parse it showed that I could submit the information so I did from the new page.
  3. I think I posted the tracking URL (was it the wrong URL)? I hope I got the right one. It was what I got when the grid issue happened, but if you look at the tracking URL, it doesn't show the problem. When you bring up the tracking URL, does it go through the parser again? I konw when I look at what I've reported I can send it through the parser again, but I don't know if the tracking URL sends it through again or not. This grid thing seems like just some temporary intermittent access problem. I tried to put the same information through the parser again by putting the headers and body text into the reporting tool, but it didn't come up with the same error; even though I got it twice in a row the last time. So, I just cancelled the additional report. The grid problem is probably just what Wazoo said it was. I doubt that it has anything to do with the parser. I would expect that the only place you're going to find this getGrid problem reported is if it's logged into some programs stderr or stdout and saved on the spamcop servers. I was a little afraid that those quick reports that I always do from the Held Mail might have failed, but I looked through my spam reports and didn't see the grid problem reported, so I'm guessing that they're okay. I think this getGrid thing is different than the nomaster problem. Have I said how annoying it is when the spammers start using your own spamcop.net email address to send their spam out? All you get is the blasted return message from the postmaster. Some at least give you the satisfaction of putting the headers in so you can send the abuse administrators a message of your own. Oh, so annoying, but I digress. I'll keep my eyes open for more getGrid problems.
  4. Okay, I'll keep an eye on it. Thanks!
  5. Got this today. It looks like the spammers are putting in bogus http addresses, but linking their images in the SRC attribute. The silly thing about this is that you get a visable ad, but it's a useless ad because the link doen't exist. The only thing that exists is the picture in the SRC statement. I wish there was a way that the parser could find the existing SRC information. <HTML> <HEAD></HEAD> <BODY><DIV><FONTSIZE=2></FONT><STRONG></STRONG> <font></font><FONT></FONT><font></font> <A href="http://qxwauxjcie.org&ytut6l9hapo4tz65ky9%2Eorbletmcagi%2Ecom/"> <FONT SIZE=2></FONT><FONT></FONT><font></font><IMG SRC="cid:yvenurt_qtmzzg_efrqz" border="0" ALT=""></A> </DIV><p><FONT SIZE=1></FONT> <FONT size=1><FONT SIZE=2></FONT> a complaining tone, and they all quarrel so dreadfully one cant<br> <FONT SIZE=1></FONT><FONT></FONT>time I was dressing; and gave me, I was conscious, a sneaking and<BR>first time of what a desolate wilderness that inn stood hidden in;2<FONT SIZE=1></FONT><font></font> </FONT></p> </BODY> </HTML> Of course this could be some spammer using someone else's images. Don't you think they would want to know about it? It's just a thought. Probably a bad one.
  6. I have Outlook 2002 and I've tried that method of dragging the spam emails over to a new message and dropping them (they become attachments), but when I looked at what actually gets sent I found out that the headers are very truncated and the Received lines are removed. About the only ones left are From, Date, To, and Subject and there isn't enough information to process the attachments for the spamalizer. I have Outlook 2003 on my laptop, but I don't use that for email (at least yet). I'll have to try it out on there and see how that one works. Thanks turetzsr, for the pointer to that thread.
  7. Thanks for taking the time to look at it. Also thanks for the tracking URL information. That rfc pointer that explains cid and mid helped a lot (Thanks!), so it was a gif file embedded in the email message, which I saw when I tried to send it as an attached forwarded message. I guess a question that comes up is this: By using Outlook it seems like I'm not able to actually gather all the information that is needed for spamcop. (I guess I'm referencing the "Converted to text/html by SpamCop (outlook/eudora hack)" comment that you made. Now I'm wondering if I need to pull email using a different Mailer since Outlook does so much munging. Maybe I should be using a different mailer to report spam. Okay, I just found all this in the FAQ. I guess I need to RTFM or RTFF (for FAQ), except I think I need to study the FAQ or at least look deeper. My next question was going to be which mailer should I try to use, but that's probably in the FAQ. I just have to find it. Anyway, Thanks for the help! Point taken. I'll study the FAQ for more detail. Thanks!
  8. You're right about there being an attached image on this message. I finally saw the gif file when I sent it as an attachment. Still don't know if that IMG SRC does anything or if the attached gif image just shows up. I'm not an HTML jockey. Anyway, I've been trying to figure out sending a report via email, but I've not had any luck yet. I'm using Outlook 2002, which means that I have to jump through hoops to even see the "real" headers (not to mention trying to see the real message). This is what I got when I tried to forward (as an attachment) one of the emails. Is there really anyway to report spam via the Spamcop's Email reporting feature using an Outlook product? It seems like even when I forward the email as an attachment, Outlook removes the important header information. Here's what I got for header information when I tried to forward a spam message to SpamCop as an attachment. If you can find an "message/rfc822" attachment, you can see that it looks like some real headers, but all the Received headers are gone. The only Receiced headers in the message are the ones from my email, not the forwarded one. I guess my question is this: Does anyone know if there is a way to use spamcop's email reporting feature with Outlook 2002 or am I stuck using the web reporting feature? Also, since I think some of the spam contains images that I can't seem to report directly does that disqualify it from getting reported? Anyway, here is the message that was bounced back from me trying to report a forward via attachment spam email message to spamcop's email reporting. I tried to cover my personal information, but I know I left some SpamCop encountered errors while saving spam for processing: SpamCop could not find your spam message in this email: Return-Path: <XXXXX> Received: from sc-smtp1.eq.ironport.com (sc-smtp1.eq.ironport.com [192.168.18.81]) by sc-app5.eq.ironport.com (Postfix) with ESMTP id 624142F926 for <XXXXX[at]spam.spamcop.net>; Sat, 14 May 2005 22:01:21 -0700 (PDT) Received: from quake1.xnet.com (198.147.221.67) by sc-smtp1.eq.ironport.com with ESMTP; 14 May 2005 22:01:20 -0700 Received: from P450 (typhoon.xnet.com [198.147.221.66]) by quake1.xnet.com (Postfix) with ESMTP id E66DE7A4D for <XXXXX[at]spam.spamcop.net>; Sun, 15 May 2005 00:01:19 -0500 (CDT) From: "XXXXX" <XXXXX> To: <XXXXX[at]spam.spamcop.net> Subject: Re: earthbound Sodium Liothyronine Date: Sun, 15 May 2005 00:01:19 -0500 Message-ID: <001301c5590b$21a2b1f0$640a0a0a[at]P450> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0014_01C558E1.38CCA9F0" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.6626 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527 This is a multi-part message in MIME format. ------=_NextPart_000_0014_01C558E1.38CCA9F0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0015_01C558E1.38CCA9F0" ------=_NextPart_001_0015_01C558E1.38CCA9F0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit ------=_NextPart_001_0015_01C558E1.38CCA9F0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html> <head> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"> <meta name=3DGenerator content=3D"Microsoft Word 10 (filtered)"> <style> <!-- /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:12.0pt; font-family:"Times New Roman";} a:link, span.MsoHyperlink {color:blue; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {color:purple; text-decoration:underline;} span.EmailStyle17 {font-family:Arial; color:windowtext;} [at]page Section1 {size:8.5in 11.0in; margin:.2in .2in .2in .2in;} div.Section1 {page:Section1;} --> </style> </head> <body lang=3DEN-US link=3Dblue vlink=3Dpurple> <div class=3DSection1> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'> </span></font></p> </div> </body> </html> ------=_NextPart_001_0015_01C558E1.38CCA9F0-- ------=_NextPart_000_0014_01C558E1.38CCA9F0 Content-Type: message/rfc822 Content-Transfer-Encoding: 7bit Content-Disposition: attachment From: "Jerrold Ferris" <Sxpvhbb[at]apcoa.com> To: "Barry_grant" <barry_grant[at]xnet.com> Subject: Re: earthbound Sodium Liothyronine Date: Fri, 13 May 2005 18:34:35 -0500 Message-ID: <4239415275.64513[at]apcoa.com> MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_NextPart_000_000E_01C558E1.38CCA9F0" X-Mailer: Microsoft Outlook, Build 10.0.6626 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527 X-NAS-Language: English X-NAS-Bayes: #0: 1.62632E-150; #1: 1 X-NAS-Classification: 0 X-NAS-MessageID: 115 X-NAS-Validation: {2C7A8CD0-78FA-427F-BF86-AE333A20DC52} X-IronPort-AV: i="3.93,108,1115006400"; d="gif'147?scan'147,208,217,147"; a="226593314:sNHT89254660" X-Original-To: XXXXX X-AntiVirus: checked by Vexira MailArmor (host inferno1.xnet.com) X-spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on blade2.cesmail.net X-spam-Level: *** X-spam-Status: hits=3.5 tests=HTML_IMAGE_ONLY_08,HTML_MESSAGE,MPART_ALT_DIFF version=3.0.2 X-SpamCop-Checked: 192.168.1.105 216.154.195.36 198.147.221.67 198.147.221.81 127.0.0.1 198.147.221.71 198.147.221.81 82.233.54.157 111.9.21.142 This is a multi-part message in MIME format. ------=_NextPart_000_000E_01C558E1.38CCA9F0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_000F_01C558E1.38CCA9F0" ------=_NextPart_001_000F_01C558E1.38CCA9F0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit a complaining tone, and they all quarrel so dreadfully one cant time I was dressing; and gave me, I was conscious, a sneaking and first time of what a desolate wilderness that inn stood hidden in;2 ------=_NextPart_001_000F_01C558E1.38CCA9F0 Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable <HTML><HEAD> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3DWindows-1252"> </HEAD> <BODY><DIV><FONT = SIZE=3D2></FONT><STRONG></STRONG><font></font><FONT></FONT> <font></font><a = href=3D"http://qxwauxjcie.org&ytut6l9hapo4tz65ky9%2Eorbletmcagi%2Ecom/"> <FONT SIZE=3D2></FONT><FONT></FONT><font></font><IMG = SRC=3D"cid:yvenurt_qtmzzg_efrqz" border=3D"0" ALT=3D""></a> </DIV><p><FONT SIZE=3D1></FONT> <FONT size=3D1><FONT SIZE=3D2></FONT> a complaining tone, and they all quarrel so dreadfully one cant<br> = <FONT SIZE=3D1></FONT><FONT></FONT>time I was dressing; and gave me, I = was conscious, a sneaking and<BR>first time of what a desolate = wilderness that inn stood hidden in;2<FONT SIZE=3D1></FONT><font></font> </FONT></p> </BODY> </HTML> ------=_NextPart_001_000F_01C558E1.38CCA9F0-- ------=_NextPart_000_000E_01C558E1.38CCA9F0 Content-Type: image/gif; name="Jshxj.GIF" Content-Transfer-Encoding: base64 Content-ID: <yvenurt_qtmzzg_efrqz> R0lGODlhXAEQAfcAAAAAAIAAAACAAICAAAAAgIAAgACAgMDAwMDcwKbK8AAAACEhKSEpISExQikp KSkpMTExMTFCYzFSezFahDk5QjlSezljjEJCQkJCUkJjjEpKUkprhFJS91JrnFpaWlpzpVpzrVpz tVp7nFp7tVqEtVqMrWN7pWOErWOMtWOUvWOUxmtrc2t7tWuErWuEtWuEvWuMpWuMtWuMvWuUvWuU 1mucvWucxmuc1mul72ut53Nzc3OMtXOMvXOUvXOUxnOUznOcxnOc3nOlznOl1nOl3nOl53Ol73Ol 93Ot3nOt53Ot73Ot93Ot/3O173uc3nulznul3nul53ul93utznut3nut73ut93u173u194RCEISE hISc1oSt3oSt54St74St94S13oS154S174S194S1/4S994xKEIyMjIyt1oy13oy154y174y194y1 /5RKEJRSEJRSGJRaGJS13pS155S93pS955S975xSEJxSGJxSKZxaEJxjGJxzGJy175y996VaIaVj GKVrGKW1561zEK2157VjCLVjELVzGLVzObVzUrV7GLV7UrV7WrWEObWMMbW1vb1rCMZzCMZ7EMaU GM57Ic6EEM6EGM6MEM6UEM6UGNaMANaMGNaUENaUGNaUIdacCNacGNacKdacMdatUta9nNbW1tbn /9bv/96MEN6MGN6UEN6cCN6cEN6cGN6cId6lSt61rd69WuetGOe1KefOvefWzu+1GO+1Ke/Oe+/O te/e1u/e3u/3/+////etEPe1CPe1EPe1Kfe9CPe9EPfOMffOc/fWnPfWpffWrffea/felPfe1vfn pffv5/fv7/f37/f39/f/tff///8AAP+1CP+1EP+9CP+9EP+9GP+9If+9Kf/GCP/GEP/GGP/GIf/G Kf/GOf/OOf/OQv/OSv/WSv/WUv/We//eWv/eY//ea//ec//nlP/nrf/vhP/vjP/vzv/33v/39//3 ////7///9//////78KCgpICAgP8AAAD/AP//AAAA//8A/wD//////ywAAAAAXAEQAQAI/wDrCRxI sKDBgwgTKlzIsKHDhxAjSpxIsaLFixgzatzIsaPHjyBDihxJsqTJkyhTqlzJsqXLlzBjypxJs6bN mzhz6tzJs6fPn0CDCnXIr2hRgUaPIkzKj2BSp1AHPpVqlGrTpkiHat3KNWtBrF4Ngq0HtqzUqGSj jjVL9urYrnDj4nybFq3dumzreqUb9mvWq3IDC57JtK/eu1jzrjXslG7is4MjS07p2G/bx2qrQt5r 9SvfyaBDm6x81zDmxZDf8v0surXrjaQZ91W8WS9q1K9z68ZY+LLSg71nW1WtGWnx3ciTK1/OvLnz 59CjS59Ovbr169iza9/Ovbv37+DDi/8fTz60AIHnP6Znvl79wfbpBcgnOL+g/Pr17rdHvz+h/oH3 0Qefffj9p9B++sVHH3/nJTifgQIeiB9C/UUEoUUVwpWhRhUOiB6B9i2YH4AgMuThiBGSGOKHKlK4 oogsotiijAhuuN6GMlJ0I0Y4btVfgCwqyKCADQI5444qImmQkij2aKOITMbYI4wxHjljjkwK+WKQ Rgp5oZEwKvgggAVOOOVQCCYZpJRV5ggllVpmmGWbS/r3Jp3wnVljl1Wm2aKHHa6IpJdq4pnkoCQq eaZQfjY5YoMM1memi1jeSaOkYDp6oJ2FuunphO9t2ambeYKqJZWaahpnpD/yOWp+EC7/GlSjYj5K J3+3pnqpgX6e6uCmlMLKa52hcnrlmlcCSmSmpLKp6quiVtossTpJIxGtf2Zr6ZLYaossjWEW66y0 P1ppKKpkinrinNQqiiyi58LJZpSRJTikt8KSmed7pfa5rLnrUtilpFD+N/CkBAZob7r6yjuqnAg/ C+690a5b5onlvSRrSBtn7DFKHbv38cgkl2zyySinrPLKLLfs8sswxyzzzDRnzMHNOOes88489+zz z0AHLfTQRBdt9NFIJ6300kw37bTQCnEgl9Q1v0S1VlcjlDVXW1etUtdAgU2Q2EKR7XVJZvOUdto/ sX12SG7ntPbUb7MUN05zx3V33Rzt/21T3nD5zXdGgtMEeFeFD25R4jIdzrXiKDEek+MUSUNEEkpg 0cQSR0gBhRjWkiQ55BGNbvVCptdDRBBQlJHEGGOQUYYVTSjBhuikm5R6S5RP9IQQUYjBxhivj8HE GmMokUMvIu0uG2Cl+dbYVNGrBMD12A8EgEDb19P95BJ9D1PvEW0xQxc/OAFFEk1YscYXdsTeBg6n wM3RaodBX1tewrHmEPbiA2BDxOe9gnSPgC4RHAEBeD3tZe8gAnRgAxlCPoj8AAUqeMIPhkAFKiBh C11gwxrYUIYqGMEPIHGeafpXGszs7zDhI8gBZciQBRqQezPxGwNxaJAA9pCGBdQeBf9RhxEQxIAH LwDCD7ZAhTSAgQpDiIIXqvC6I9jhIyqEoQvTghuxWOYvG5mhEBdiwyCK0XsTXMnetlfGG44RiDz0 IRGjhhEMiGAHLkCBEIaAhj7UQQ1hoAIUhtCFKxQhCMzrSBZtsxnaLOWL/LPIGYOokDKK8YwI1B1E 2GjACFLykzyMIxwTUkGIUMACPIDBCJ4wBTrwwhSEmAMXngCFH9yABjDwyCIdyciwTIUpuPHfANMo x0ruUJRmHF9E0gjBUILyk5PMZEFKCRENTGAHL2CBDQQhhycMoQZCAII4aQCER+jyI/rDCzAZ48K1 rBMj0awhQi4pQd6Fj5lwPGYnH4j/Rn6Sco4ZOUMFTuCCE5yABDJQAQpS0AMfzEAGO8AiOvO3Qhji BS2qyUg8yThPZI4ycjF8pkil+caPHoSaESlFAzKwAxiUoAUF3UELWoCCHaxAohOFCv4oKhyL+lSe YyxmQqRJT0qSdCQK9OgzherMkv6Tjh3xQAQk0IEPxMAFJjDBCUKwgRSCJKM7lV5tuAgciniyn0d1 alBD6c+UrPGscMXn99ra1qfatSNauAAEHuCABTDgAjqwX+5wt8wcAhRxgyXsJg0L1cAlFqmPayxi HytYrB02spTFqWUli9nMKrKzJ6WbZ8+5FZT6ZJGjRe1JTNsT1WbWtWi7bGlHS9rN/5LyabjNrW53 y9ve+va3wO0tZ2dL276B1iCwBWlxN5JcyA7XtsvFSHObJ1voRndxx52maK97kelWVmvb5W5FvOvV 5w6FvJBDb23Bm5LQfVa82CXuXU9Cj/XCVyLqfe98HVLfhNR3Hu9QhjlwYQ5zGAMeA+kvc+873uyO jSPPwEUwgHGNClcYGxW2RSzK6zEGzlWpCQTqTaipYIPUlx70mMcxgkGNa1ijwtbgBoytUY1rBIPD 6olYm8rFqo7EFZ8d/egkQ8zRZv5QhnXlnj/PGlrzQkQeswDGMCxsjSpvYxvWwIYvqlENVsRDsx5x V6LQdSpPVUSOTDWyU4dsT2Pyk/+uzEwzmk36YCc/ZBbCcLGFK+yNb3wDG9Wgxi9QYQhdgJkjvVoQ xr6VK3g6M62gLOpcgazJoYp0pKNE4JzVWuf9MkTB9GDHL/bMDW8QgxzjGEc2qvELX0gCEoVoxKE3 IidFk7nRPn60iJFZ1Es7t6NEVTM0j6zUo7I2IcUAxou78Q1xoMMd5yiHN6oBjE9UQhKRoAQfSqwR 1dZ6XDzO10feTOd9kjuZvq70UINN7GG7sdh2rsfomDHqbhADHeuIRjvKEQxtrOISm7CEJhQBiFrM mkPBEjOZQ/aQjVYyyJikdGzJCORMLpDJSn4zxjvNXovcosLhUEc6koEOYrCCE5j/uMQlWqGHP+wC x4imlIPKbOaaO9rdDzcymyF9cDe2sdzpxrSnOY4Q9xpEGvQYBShsAQ5yhEMWqdjEJjKBCVUM4g6I oK7ICpVoQUXrzEBMc7vD7lGe21fn7y63nIXd5KFDBBmvEAUoOtEJTmSiE5gAxSHM8IdlcFu/Yc5W oHjcKI0uOcljX6tRJa5YCP6YmJ6kaz2RDGnW/j3BjghFKzzhCVdwYhJvcEMeaCGQyy+YY5MavL1u dCHxsM3saqzuQUxfD3rkIg56CMQesgAHPCTCGSc2es8ZPMQij1j2EoEGKRbBCFg042vEn0h+jRvv tkUfvw4eyPSHf/2Onxf5Qdn+/9vETzjwh637ECG/dM1vffQ7RP3dZf9p3f/+7AsE/t2mf0Pw3+Dq z1//8ic3qBNcBFiABniACJiACqg0ANiADviAEJhYCziBFFiBFniBGNgzAag2EYhc9idv4dWBIChf 3veBAMh/FHFsO4GCMsOC2Od/rSWCRBd+G7iCMqh9H+iC/XeDOph+NXh0ofMM9gAP78AOxnCE5lAM xaAMzPAO74Bg9SB863eDI2hdHogR9jCE73AMxoALuKCEShgLuGAM7AAP9lAPvAB4ItiDD6GCCaGF x+CFsTCHxUCHYkgKubAMz3B2EZg4sKd1bvcQcEgKsQCGc0iHdYgLpEAKtZCF1P/Hg2bVQ0lGVIfH ePf3gwUhD/VgD1uIC4f4iaCYiHh4hqf3MR6meH/4XQ0XQUxFaZvWVNoFgwghD0PIDp4YC6+Qi+OA i7n4iXUYC6QAhfnXEQVgEAVwjMhYjMVojPWgjMl4jM34jMxoVpXIcz+HbqdTWD/nQxZHdpyGg7KI EJx4DLyYi+ZojrsIiqNQC9BQihuxjAQBj/F4EMo4jwMhj804j/j4P94Ii2NnSeCjjWn3YUIHb4FY hRTxDMuAC+YIDuBwjuc4Duc4CqTgDO6oEfu4jwKBj8sojx5ZEB+pkYWFc5bmjRGXisO4TJp2bgWJ jenmhgbxDLnAi8EAkTY5kaT/8HIp+Y7T2JMb+ZP3aI9BGZQiuVgkGWSoWHbQNxEsaUanaG6ThniX GI4GEQ/wgAyjkIuuEAw1eZMQOQr3UAoXmREZ+YzweJZDCZRqqZZoyZTEBHQSdG69FntMaZBw6Y/G hokEYQ/NcAxZGQyu4ApeKQq5SJivMApnIJY7iZE+CZJp+ZH3KI2PeREOV5JHdpJ0GVKVqWtp943g eJALMYS5kJWvEJheaZOIqZjlR4yN6ZiQuZZtuZFmKUmcmXOXCYsoOYWb9HjCFpX7VHygqRD28AxY qZWniZphOZYYkZEKUY9pmY/PGZtrOUD9GHSXJmmeqYoNF5DB+YbP8A4MeZyA/wmRi5Cci0mWremY QgmdsDmd7klxcSaVald2lqid/KhMVFkQ8fCd4WmTgbmVgWmYr4AIOamcFzGbZsmR6tme+kiP2cGG 9ZefBPEMzwAPxkCaopChpbmVXCmY5rgIiUAL7XiefZiDFrGfCkkKo0CaXAmYqQCg5sgIMkqKJAqB ELp/ejkQWTiEtaCicUeY/7mVhimj90B6jyiDNwqcJQgR7bijz9CjpOmVzFekfGijJmoRw5mF8NCj sbCi5DmltGCRatiBSWp+o2MP8bCjnJgLpCCji/Cmb8oIjBiFaXika3iljkWFZRpve4qjeoqnkwWJ JNh2gYqkgGqC+tenSxqLef8qqFbIqIV6p4OKXBlYqZZ6qZiaqUUjocf3p5MKqYhKf4pKqKT6qVZq qp8ZqWR6qKjqgKN6hd3JgZ76qDNIqw/4qqAKqxlhOZijOZzjOaADiIbaqgiJEavTOsUjO7RjO/Z5 qrY6lRrxO8EzPMVzPMmzPNwXHk+Jbrk5pufHqQdhPuijPuzjPvAjP/RTpXaRGL/RFmJRHNRDFQkR r5cxPcB0HJIYn/UZaT6Hn9RZEzCZEBeUQRvUQR8UQiNUQifkrV/US/K6rr7kGY/USBTrRcbnkml1 jWy2lP/6j9U4Tx9bqrlaEUaERErERE4ERVJERWNgRXZaVhXLGbLhsBdlsQ3/W7M3C1RiJ2S8NnnK VUORF2fVqWlDK7K1ShF2hEd6xEd+BEiCREiGhEgGahld1E4Ty1Of0a5aZBztKky3mZ38yq1s5VbU yW6cuXaK548BmxCnlEqr1EqvFEuzVEu3lEs1SrUQ67CaQa9b9K5j1bczm68llbH6hJ12U7ZI6W5o a5dHm6oZYU3YpE3c5E3gJE5AQE7mdLdqgVG9kVE46xtaa7GeG1b3ubPf2GvyCXPrlrivuFRFq6tG axECRVAGhVAKxVAOBVEvuxSey1NYG7MWFUzAO1Y6e5fstnNk+z8Vl2lxaXFBm2RruxAqxVIuBVMn IFM0ZVO7CxzutEXdyz/e/8u9WnscpMu6tZm4Jjm2P1u8zMtpGct20LqoGiFVVGVVWKVVXMWwy8Gb F5u+Gcex7Du4JrW45Ra9DpFXe9VXfxVY+uuqw1SNURlAcuWz/yu/jkusJ7idAJujf0OFxWqbjBWr Njir3weuG0zCZcPBJ+yoJSzCOoGrIwPDFzyyLTysz/rBN5zBxCrDsLuqOxyCPnzDPEzDt5qDmnrE SJzESpyAHtzETvzEUBwdSzzFVFzFVnw0JhzFNpPFWkweZjPEXWx/YBzGz5pFCsqeZOwcX8ya9tiR P9GtaQx+ZqyebuwR/BtSlCfBEnfHHrzGFIGMCwqUzujGHQmNP2nIhtxum//5wBPUukSbttbZgH4s EZI5nXV8lnUMnYicye1rusA2kOd7tnfpwC4cmYD8nJrMlg7KntIpwEcpT9sYyoo7ypLMqZWMxqnM yvF4yrGpkY58T6D8yr/MMnDceD38EKeMypc8mYLMzPnayLQsuM07zc8cwcXcHWaLVpC3xyEbiIvU y6osyJncymgHthAHv0HXjQ0xDeNRuEKryPD8yo2Lw8uZyJrMydA4zqhMbJ5cko8czHRmduw8EAMt EAWtIweTIjt2MRBjKmYyc63XTNmszrj5uhZMz0EBZ/tazZT3m/kkVxtt0AQxDQV90NcSLgr9Kebi MBNjZrLCSb0ZeQNs0bH/i9HOcc0WYdI6XQ8D3dMkLdJAzdNf5y8tjS/igio0Z3OOh740LcrZOcnU gdM5TdAGwc49LdQifdVXjS4Acyz74h+F1yRg0jF1RVLW7HgaJ59QPThbXRBazdMk/dNCbdVYzdVE TS+tIiHJcitk3VRmjc4BbWdjDBp0XdVZXddUTdcmbXOsNyxD7SQ7xtcjGctqRcBgu9aKs9hB/dMl TdVBvSUKpyvjotLeQi9KDZV5HMEd/dEXV3lcPDMH7dOx7dn8cjF3bTAMLTAOvWi4BtjcWdMVcctA IdWDQ9zc982BHBLPm5utndaUqK/GLV6YvZzJPW401M8c3ZL/jLFPPN0O/5HM+2zKRFnIu1yUn2zO 192ZsjzMTezdDCHc0XjG9yybzfyelobd6Z3artzJ0azDF92cyZgQidyW4FzdaC3LFJdzBLzINgzc Ah7gzRnOBR7f5v1D+O3R/Ixx7N3H4ArelizhzEzOD3fh1em+8Uziifraya3Pulzf9gzL/Z2Ulf26 KC6qKg6SEC6bE47JuAzPKK5PaLXab8THHF7KOLHcdRnH6mrTzRHdSm7Tg/3kMWjkUg4e7l3lMRw1 V7zlXN7lU4zlYB7mYj7mZF7mZn7maJ7mar7mbG4TXvtTX/Ud9EoZD0G+XRtJ0PHmC/EboQuzfr4c Jt1FdN4QbFHoMjsdev+uEHz+5qyR6JOx2FnL543U54WOr2Jl6b1k6GSl6ItO6ZPuSG7hGZKuFHZe FqTuruxK6lVh6qyOP4DB6vbaGYH7Gprd54dutZAUsbn+PJLuS4CLUbruF6CeGmHFrhXbu6F+67qu 6cFLVrjO7MQbGjs9r997Fq0eG7gO7OyUGsRr7Dab7Tp17Nzu5977S4J+G+OOs+Aus6l+6nvRu7RO 24oe7PrjP8yO7d2e7pUBuPdeVsN+6Lsu6A8L78+u78E+7vy+P3guGm1ts+qet82u7Lse8Q+/uRS/ 7i8k8Vmb7jT78Oiu8QZ/swVfUcpR2Lx7510r6iff7rzLtSc/Pd8e6bz/JPIo/+tipUWdDvNYa+e2 0esU7+vVXq/R3hqavRKOvhNHP+8lkfQyyPQ34fRXOxJQ3+ZUX/VWf/VYn/Vav/Vc3/Ve//VgH/Zi P/ZkX/Zmf/buF6+UThx3LrFuP/D3yrXBca/2Thyi3ujvBLrwGvfDIb7fSz2qPvd8P774Svjvmvd0 f/dvbxyMr/ed3rnB0fgUwffu6rdyv/eNwb1un/iOH/iRf/iZf/mYzvl03+6Aj/ioP/imv7eqPxyn 706H/06c3/kPC/eiz/qyT/m2ThSwXvlvn/O+b+uG7/uLX/m77/e13/aW3/jDL/ywL/msv/neLvnU H/zPf/Oh2/x4H/rE/2/808/8kc79x7/nyL4a39/z1c/94N/yoT/+ir/+xU/8qi797L/8vk7/8m/3 7e8YLJ/+2l//AFFPID9+AwsKNJiwHkGEChk2RPgw4kGJEC1erAgxo8ODGAsS7GgR5MiHJEEqnGjQ 5MWUJSmGRJlSZkaXKxeO1AizIc2XMXnmjMnxZtChO1/a3OgSaNGfN5HCVMpSqkyPVYt6xMnS5Emn JFV6/ZpV68eeV6lOBNtV7NaONs3mdFtT7FmmOpVGNRp3K1G8QtVy/du37lTCG+n6xUo0qGC0cw1L vVvWqMi0gScX5vrY8szKdBlHZZjU7dvDgkGPftxUM+G3bXUO3kk1Nf9UyUudHp4qMatoymPR4rZK U7bu2lY59746FyXg2X5VS2b+unVx1rYzvyb+26zh5761r0be9Sx36RWve1/uuvZ50rbTX04OeDxj zsTVI77dfrv06pTT7o3vv5DkW+wosJ57Krz8AsOuPNrCuq4yAKfDz7j09MpLwbr0Qg1DChmEMLv+ IJMPQJ7Me9C9DQ+kjawEVTyRv+YyZCuvBlGECzYSYSSwKfhUApHGFnGczkUWlQNvRCWXZLJJJvlz Mkopp6SySitzg/JKLbfkskvIvAQzTDHHJLNMEtlCM00112SzTTffhDNOOeeks04778QzT+X607NP P/8ENFBBByW00DYwzUQ0UUUXZbRRRx+FNFJJJ6W0UksvxTRTTTfltFNPPwU1VFFHJbVUU09FNVVV PQ0IADsTmUgDRsdbWtFKEnNEAoRbBqinVtdkwCISzTMOUdokLKnGgLgWGPQ= ------=_NextPart_000_000E_01C558E1.38CCA9F0-- ------=_NextPart_000_0014_01C558E1.38CCA9F0-- The email which triggered this auto-response had the following headers: Return-Path: <XXXXX> Received: from sc-smtp1.eq.ironport.com (sc-smtp1.eq.ironport.com [192.168.18.81]) by sc-app5.eq.ironport.com (Postfix) with ESMTP id 624142F926 for <XXXXX[at]spam.spamcop.net>; Sat, 14 May 2005 22:01:21 -0700 (PDT) Received: from quake1.xnet.com (198.147.221.67) by sc-smtp1.eq.ironport.com with ESMTP; 14 May 2005 22:01:20 -0700 Received: from P450 (typhoon.xnet.com [198.147.221.66]) by quake1.xnet.com (Postfix) with ESMTP id E66DE7A4D for <XXXXX[at]spam.spamcop.net>; Sun, 15 May 2005 00:01:19 -0500 (CDT) From: "XXXXX" <XXXXX> To: <XXXXX[at]spam.spamcop.net> Subject: Re: earthbound Sodium Liothyronine Date: Sun, 15 May 2005 00:01:19 -0500 Message-ID: <001301c5590b$21a2b1f0$640a0a0a[at]P450> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0014_01C558E1.38CCA9F0" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.6626 Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
  9. Thanks for moving this to a better place. As I was hitting the Post key, I realized that it wasn't even a good feature request. Thanks for the FAQ link too. That was an interesting FAQ pointer. Sorry about not saving the tracking URL. The email didn't have any attachments (except the html body). Unfortunately, I can't find the URL or report id for the one I was talking about, but I knew if I waited long enough, I'd get another one. I didn't have to wait long. I got another one a little while ago. It's the regular Pharmica spam (ie. buy some drugs from us). I'm not sure which tracking URL is good to post with but here is the two report ids and their parsed links that were saved. Report ID: 1425154873 Parsed Report Report ID: 1425154874 Parsed Report I don't know what kind of link that "IMG SRC=" attribute is pointing to. Seems like the "cid:oifmhzs_krpuyq_vsbni" gets you a pharmacy advertisement, but I don't recognise the "cid:..." or what it means. Anyway, Thanks! If anyone knows anything about the cid: stuff, I'd be interested. I'll go search for it and see if somethings been posted about it before.
×