Jump to content

non-functional parsing

Ozana

By Ozana
in SpamCop Reporting Help

Recommended Posts

Ozana Newbie

Ozana

Posted
Posted

I can't report this spam (without body can be reported) 

Received: from 193-109-128-190.ukrcom.kherson.ua ([193.109.128.190])
	by mail.atlascon.cz with ESMTP
	for x;
	Thu, 23 Nov 2017 10:34:13 +0100
Return-Path: best_medications1@kherson.ua
From: Drugs Drugstore <best_medications1@kherson.ua>
To: x
Subject: HIGH-QUALITY MEDS for the LOWEST PRICE, Tarah240 .
Date: Thu, 23 Nov 2017 12:34:15 +0300
MIME-Version: 1.0
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

 

Link to comment
Share on other sites
Lking What Life?

Lking

Posted
Posted

I removed the To: and Received: email address and the link the spammer was trying to get people to follow.  Would not want them to be available.

Did you get a Tracking URL so the rest of us can see what the parser did?  If not could you provide a screen shot or the error message the parser ended with.

6 hours ago, Ozana said:

Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; = charset=3Dus-ascii">

What appears to be the blank line before "<html>" should be the end of the email header and the beginning of the email body.  However, if the spammer's email system is incorrectly configured the SC parser does no recognize the boundary.

Link to comment
Share on other sites
Ozana Newbie

Ozana

Posted
  • Author
Posted

https://www.spamcop.net/sc?id=z6425622194z34bd7c6ce472399528efd937cbbfa816z

SpamCop v 4.8.6 © 2017 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6425623494z108de8fc82bbda0cff5a46fc5d4989c2z

Report History:

Submitted: 27. 11. 2017 11:14:43 +0100:
V I A G R A For the Best Price! $}0.44/pill.
No reports filed

Link to comment
Share on other sites
Lking What Life?

Lking

Posted
Posted

Ozana the two example in your last post have a different problem. There is an issue with the parser that has been reported by others.  Do a search for the tag "submit"  There are several threads related to the parser not completing and providing the submit button so the spam can be reported.

I understand that this problem is being worked with two tickets open for sometime.

Link to comment
Share on other sites
emanmb Advanced Member

emanmb

Posted
Posted

I just ran into this same issue today for the first time.  One spam went thru fine, then next one not.  Resubmitted and same results.  Report page ends with "Parsing HTML part" as per below.

"Parsing header:
0: Received: from 144.160.152.215 (EHLO flpd576.prodigy.net) (144.160.152.215) by mta1119.sbc.mail.bf1.yahoo.com with SMTP; Wed, 29 Nov 2017 12:25:47 +0000

Hostname verified: flpd576.prodigy.net
Gmail/Postini received mail from YahooMain ( 144.160.152.215 )
 

1: Received: from mongelli.ge.ieiit.cnr.it (mongelli.ge.ieiit.cnr.it [150.145.1.42]) by flpd576.prodigy.net (8.14.4 IN altR5 TLS/8.14.4) with ESMTP id vATCPiMp130102 for <x>; Wed, 29 Nov 2017 04:25:46 -0800

Hostname verified: mongelli.ge.ieiit.cnr.it
YahooMain received mail from sending system 150.145.1.42
 

Tracking message source: 150.145.1.42:

Routing details for 150.145.1.42
[refresh/show] Cached whois for 150.145.1.42 : muselli@ice.ge.cnr.it
Using last resort contacts muselli@ice.ge.cnr.it
Message is 16 hours old
150.145.1.42 listed in cbl.abuseat.org ( 1 )
150.145.1.42 is an open proxy
150.145.1.42 not listed in accredit.habeas.com
150.145.1.42 not listed in plus.bondedsender.org
150.145.1.42 not listed in iadb.isipp.com

Finding links in message body

Parsing HTML part"

Link to comment
Share on other sites
lisati Advanced Member

lisati

Posted
Posted
17 hours ago, Lking said:

This is a known problem with the parser. It has been reported here sense October.  A patch/updated version was expected momentarily... then.  I have no additional insight.

^^^This.

 

Link to comment
Share on other sites
Lking What Life?

Lking

Posted
Posted
31 minutes ago, lisati said:

^^^This.

Good point.

Quote
Resolving link obfuscation

http://BESTAM.RU/uns/AA8rvu/nYD99pwtt/KfYHd/25R2gsfouh/TYS5q2c'>Отписаться
http://BESTAM.RU/goto/5368784777/267060/aHR0cDovL2tsaWNrYmlsbGluZy5ydS9wdWJsaWMvNjQ4NTU5OTg1MTI2NDkyMg

When the results from the parser stops without giving the reporter an option to "Submit" the spam. "This" is a, what is becoming long term, known problem. The only solution I am aware of is to:

  1. using Tracking URLs report all other spam in your queue, leaving only those where the parser choked.
  2. return to your reporting account, and "Remove all unreported spam" as shown in kolor's last post above.
Link to comment
Share on other sites
petzl T-shirt wearing out

petzl

Posted
Posted
14 hours ago, kolor said:

What this means .I copy all and put to website form .this all what I'm doing.

just click the TAB MAILHOST  all will become clear (just put your email address in the box SpamCop will send you email/s which you simply click a confirm/verify link)

Link to comment
Share on other sites
petzl T-shirt wearing out

petzl

Posted
Posted
10 hours ago, kolor said:

Sorry I still don't understand.I configure my account correct .My English is bad .Look screenshot and please said me what is wrong.

 

http://ibb.co/ccTccw

just click the TAB MAILHOST  all will become clear (THEN just put your email address in the box SpamCop will send you email/s which you simply click a confirm/verify link)

DQOzUMHVQAADGyc.jpg

Link to comment
Share on other sites
Lking What Life?

Lking

Posted
Posted

Has nothing changed in the processing of your email in 3 years?  Has your ISP moved the location, name(s) of the servers used to process/deliver your email?

If nothing has changed then your good.  You can follow the advice and look to see.

Link to comment
Share on other sites
Lking What Life?

Lking

Posted
Posted

kolor going back to your first three post in this thread (and others), there is a current problem with the parser which caused the results screen to stop be for displaying the option to send reports.

Go to the top of this thread, click on the tag "Submit" and see several other post/thread.  This is a know problem, that is being worked on.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

Go to topic listing
×
×
  • Create New...