Jump to content


  • Posts

  • Joined

  • Last visited

slb's Achievements


Newbie (1/6)



  1. Unfortunately it is not the case, I'm sorry I suppressed myself those lines for the sake of lisibility. But here is the same spam I received minutes ago without any editing : From - Thu Nov 11 18:30:44 2004 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-Path: <simon.barnes[at]reshasa.experttime.com> Delivered-To: online.fr-slb[at]free.fr Received: (qmail 15548 invoked from network); 11 Nov 2004 12:47:15 -0000 Received: from unknown (HELO ( by mrelay2-2.free.fr with SMTP; 11 Nov 2004 12:47:15 -0000 From: "Complimentary Star Wars DVD Trilogy Set Giveaway" <simon.barnes[at]reshasa.experttime.com> To: slb[at]free.fr <slb[at]free.fr> Subject: Complimentary Star Wars DVD Trilogy Set Date: Thu, 11 Nov 2004 19:53:30 -0800 MIME-Version: 1.0 Content-type: text/html; charset="ISO-8859-1" Content-transfer-encoding: 7bit Message-Id: <02756E644268746767306874$4df803ge2[at]reshasa.experttime.com> <html> <head> </head> <body> <p align="center"> <a href="http://muphoph.maninternet.com/starz/?gv=y027sx&g=qno56e6ny&s=loh4426l&k=ll8746ymg&m=p767306874y&qz=pzvn&winner&_m01"> <img border="0" src="http://muphoph.maninternet.com/starz/starzwarz.gif" width="497" height="212"></p> <br> <br> <br> <br> <br> <br> <p align="center"> <a href="http://muphoph.maninternet.com/starz/rd.cgi?gv=y027sx&g=qno56e6ny&s=loh4426l&k=ll8746ymg&m=p767306874y&qz=pzvn&winner&_m01"> <img border="0" src="http://muphoph.maninternet.com/starz/5.gif" width="502" height="59"></p> <img src="http://muphoph.maninternet.com/starz/logogen.img?gv=y027sx&g=qno56e6ny&s=loh4426l&k=ll8746ymg&m=p767306874y&qz=pzvn" border=0> </body> </html> And again, the Parser says: "Parsing HTML part no links found" http://www.spamcop.net/sc?id=z691230887z01...54515519a9bb5fz
  2. Hello all, I'm very surprised the parser was not able to found the links in the body of this spam : Return-Path: <moshe.bird[at]ostujef.todnews.net> Delivered-To: online.fr-slb[at]free.fr Received: (qmail 14413 invoked from network); 10 Nov 2004 11:31:08 -0000 Received: from backend-61-225.verygoodoffer.com (HELO ( by mrelay2-1.free.fr with SMTP; 10 Nov 2004 11:31:08 -0000 From: "Star Wars DVD Trilogy Set Promotions" <moshe.bird[at]ostujef.todnews.net> To: slb[at]free.fr <slb[at]free.fr> Subject: We're giving away a Star Wars DVD Trilogy Set Date: Wed, 10 Nov 2004 18:37:16 -0800 MIME-Version: 1.0 Content-type: text/html; charset="ISO-8859-1" Content-transfer-encoding: 7bit Message-Id: <02756E644268746767306874$4df803ge2[at]ostujef.todnews.net> <html> <head> </head> <body> <p align="center"> <a href="http://pastopu.biggong.com/starz/?vt=k027m&xj=kqk56e6w&j=n4426nl&pm=orv8746g&z=znp7673quj&z=k06874wo&ho=vjuu&winner&_m01"> <img border="0" src="http://pastopu.biggong.com/starz/starzwarz.gif" width="497" height="212"></p> <br> <p align="center"> <a href="http://pastopu.biggong.com/starz/rd.cgi?vt=k027m&xj=kqk56e6w&j=n4426nl&pm=orv8746g&z=znp7673quj&z=k06874wo&ho=vjuu&winner&_m01"> <img border="0" src="http://pastopu.biggong.com/starz/5.gif" width="502" height="59"></p> <img src="http://pastopu.biggong.com/starz/logogen.img?vt=k027m&xj=kqk56e6w&j=n4426nl&pm=orv8746g&z=znp7673quj&z=k06874wo&ho=vjuu" border=0> </body> </html> If I allow images downloading on my MUA, it perfectly fetch them and the links are available ! Could you someone please have a look at this ? Thanks
  3. Hello all, If you look at this spam body extract you will see a lot of useless Anchor html tags : Content-Description: arduous addle0.dew <html>Hello,<BR><br> We sent you an email a while ago, because you now qualify for a new mortgage.<BR> You could get $300,000 for as little as $600 a month!<BR> Ba<A href="http://www.daybreak.org"></A>d cr<A href="http://www.formosa.org"></A>edit is no problem, you can pull cash out or refinance.<BR><BR> Please click on this link for fr<A href="http://www.bookshelf.org"></A>ee consulta<A href="http://www.agribusiness.org"></A>tion by a mortgage broker:<BR> <a href="http://www.riterates.net/?id=m15">Start Saving Here</a> <BR><BR> Best Regards,<BR> Corina Moody <P align=left><FONT face="Verdana, Arial, Helvetica, sans-serif" size=1>For em<A href="http://www.fedders.org"></A>ail re<A href="http://www.bole.org"></A>mov<A href="http://www.baptistery.org"></A>a<A href="http://www.exotica.org"></A>l, g<A href="http://www.flowery.org"></A>o <A href="http://www.riterates.net/book.php">here.</A></FONT></P> That seems clearly targetted against spamcop parser, since the MUA won't show the useless links to the recipient except the "good" one (here www.riterates.net), but SPAMCOP parser is fooled and refuse to report on the motive that there are "Too many links". Obviously a link with no text shouldn't be counted since it will not be displayed to the email recipient. So, could you spamcop guys do a slight modification to your parser and ignore non human viewable readable links ?
  4. Huhu, thanks for the reply and sorry the SNR ! Let's hope it will help another newbie ...
  5. Below you'll find an exemple of text and link content made to elude content filters but also SC link parser in message body. ----08761910132950075070 Content-Type: text/html; Content-Transfer-Encoding: 7Bit <html> <p>30 2mg Xana<input type="hidden" value="">x for $119<br> 30 10mg V<input type="hidden" value="">alium for $119<br> You don't need a prior prescription! Quick Shipping!</p> <br> <p>http://www.cutler.mangs<input type="hidden" value="">sis.c<input type="hidden" value="">om</p> </html> ----08761910132950075070-- Although there is no HREF tag SC could find, the link in the mail is very clear when one read it in html mode and moreover the user could cut and paste the link in his browser: it works ! Would it be possible to first parse the mail with html and then search for URL syntax like "www." or "http://" ? P.S. Of course this one didn't get through cause I edited myself the spam and put the URL in an HREF tag >:-)
  6. Hello everybody, I'm considering registering email accounts for I and my familly but would like to know what is the size limitation of the mailbox ? Sorry if the answer is obvious, but I did not find it in the FAQ nor this forum ...
  7. Just received my account activation e-mail from the forum listmanager, however I noticed there is no 'Date' field in the SMTP header. So far the only buggy MUA I saw doing this kind of stuff are the one used by the spammers ! Could an admin fix this small issue ? Thanks,
  • Create New...