NO message body Spams

[UnknownVT]

I occassionally receive Spams that contain NO body -

but they are still spam as the spam message is in the HEADER only.

SpamCop quite rightly notifies -

No body provided, check format of submission

However one cannot continue,

and therefore one cannot report this type of spam -

below is an example with my e-mail address munged -

the spam "message" is in the Header -

Subject: Hwa Go With Winners, Get CSBI Immediately chlfkd

----------------------------------------------------------------------------------------------

Received: from filter.access4less.net (unverified [192.168.24.53])

by access4less.net (Joe 1) with ESMTP id 16177473

for <myEmail[at]xxxxx.xxx>; Thu, 26 Aug 2004 07:30:02 -0400

Return-Path: <pwsvsymb[at]downforfive.com>

Received-SPF: none (No spf record for (downforfive.com) ) client-ip=194.165.114.146; envelope-from=<pwsvsymb[at]downforfive.com>;

Received: from downforfive.com (unverified [194.165.114.146])

by filter.access4less.net (Joe 1) with ESMTP id 10337133

for <myEmail[at]xxxx.xxx>; Thu, 26 Aug 2004 07:29:56 -0400

Return-Path: <pwsvsymb[at]downforfive.com>

Return-path: <pwsvsymb[at]downforfive.com>

From: Hwa Ariza <pwsvsymb[at]downforfive.com>

To: <myEmail[at]xxxxx.xxx>

Subject: Hwa Go With Winners, Get CSBI Immediately chlfkd

Date: Thu, 26 Aug 2004 04:40:43 -0700

Reply-To: <pwsvsymb[at]downforfive.com>

MIME-Version: 1.0

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: plain

Message-ID: <1093519796_307917[at]mail1>

X-Avast: Message is clean

X-IP-stats: No info recorded yet

X-Rcpt-To: <myEmail[at]xxxx.xxx>

X-IP-stats: Incoming Outgoing Last 0, First 42, in=5466332, out=8, spam=0

X-External-IP: 192.168.24.53

Status: U

X-UIDL: 1093519802.1124_2665869.almail1

-----------------------------------------------------------------------------------------------

Comments, please?

Thanks,

--

Vincent

http://UnknownVincent.cjb.net/

http://UnknownVT.cjb.net/

[Wazoo]

In the future, please post a Tracking URL instead of the spam. From the parsing engine point of view, not only does the technical construction and detail content drive the results, but there are also decisions that have to be made .... in this case, the choices include, a spam with no body, a clueless user that only copied in the headers, a user in a hurry that pasted in headers but forgot to paste in the body, some part of the spam lost during handling and/or transfer ... all based on the model of an RFC compliant e-mail. If you are absolutely sure that the lack of a body isn't because you aren't looking at it properly, then the past suggestion has been to simply add a line in the body area "no body in spam" and then process.

[flagginator]

I had the same question.

I think the no body spams are a setup. I think it's a challenge and response thing. The spammer is testing the waters to see what happens with their no body spams. They are setting us up for some kind of major "kill". I have no idea what that might amount too, but I believe it's a very devious manuveur and not a mistake on the spammers part. The SUBJECT LINE's alone are the tip-off that these no body spams are indeed spam.

Details at 11 (10 Central).

[Wazoo]

Not sure what the setup might be about, as this has been going on for years. More likely scenarios are some "really great" spammy software that didn't come with "really great" instructions ... spammy testing a list of addresses, relays, proxies, whatever to verify that the list / bandwidth is acceptable .... broken server along the way .. things like that

[flagginator]

<snip>More likely scenarios are <snip> ... spammy testing a list of addresses, relays, proxies, whatever to verify that the list / bandwidth is acceptable ....<snip>

15838[/snapback]

That's basically what I'm talking about

[turetzsr]

I occassionally receive Spams that contain NO body -

but they are still spam as the spam message is in the HEADER only.

SpamCop quite rightly notifies -

No body provided, check format of submission

However one cannot continue,

and therefore one cannot report this type of spam -

<snip>

Comments, please?

15834[/snapback]

...Done already, on several occasions. At the top (near right-hand side) of most of the pages in these fora is a link labeled "Search". Doing a search for "empty body" finds, among others:

• "Not able to report"
  
• Disembodied?
  
• spam with no message in the body
  

...HTH!

[UnknownVT]

the past suggestion has been to simply add a line in the body area "no body in spam" and then process.

Thank you for the suggestion.

Also many thanks to turetzsr for the reference links.

--

Vincent

http://UnknownVincent.cjb.net/

http://UnknownVT.cjb.net/

[turetzsr]

Hi, Vincent!

<snip>

Also many thanks to turetzsr for the reference links.

<snip>

15855[/snapback]

...Glad I could be of help.

...For future reference, please refer to me as "Steve T" -- see my sig. "turetzsr" is just my user id. <g>

[cdhollis]

I have also run into several of these messages that do not contain a body. The entire message is usually sent in the Subject such as the one I recently reported here:

http://www.spamcop.net/sc?id=z3401129503z5...d5effe910caa26z

I did not make any mistakes in my submission simple because I forward all my submissions as attachments to avoid all problems associated with cutting and pasting.

I think it would be nice if SpamCop would at least offer the option to confirm that there was no body in the original message or consider the method in which the message was submitted and go from there.

Chris

Okahoma City