Detected mail headers in body error?

olawton · August 2, 2004

I'm regularly getting spam messages that when I report to spamcop I get:-

"Finding links in message body

Detected mail headers in body. Aborting link detection"

Example HTML body:-

<STYLE>BODY {FONT-FAMILY: "Arial"}TT {FONT-FAMILY: "Courier New"}BLOCKQUOTE.CITE {PADDING-LEFT: 2.6em; MARGIN: 0px; BORDER-LEFT: 0px solid}

SPAN.TABOOHEADER {DISPLAY: none}</STYLE><META content="MSHTML 6.00.2712.300" name=GENERATOR></HEAD>

<TR><TD bgColor=#000000><DIV align=center> <a href="http://www.broadcastingtoday.biz">Press to Email Your Web Site to 28 MILLION PEOPLE</A>

=> <a href="http://www.broadcastingtoday.biz"">F-R-E-E Today Only</A>

<=

If You Are a Non-Profit Organization That Aids Low-Income Families. At Our Web Site, Call Us For Details.

Every Week We Show A Different Non-Commercial Special for Specific Non-Profit Causes.

</DIV></TD></TR></TABLE></DIV>

<A HREF="http://www.broadcastingtoday.biz/unsub.html">Unsubscribe From Our Non Primary Purpose Non-Commercial/Non-Profit Exempt From S.877 Code List </A> </TABLE>

</BODY></HTML>

StevenUnderwood · August 2, 2004

Usually, the problem lies in this part of the body:

>

If you are using Eudora as your mail client, you will need to use the 2 part webmail submit form. Please see this link for more details.

If you are not using Eudora, another spammer has either picked up this practice (which I thought was fixed once before) or something similiar. I have not seen this problem in about a year. You should forward a tracking URL (copy/paste from the page with the error) to the deputies<at>spamcop.net and mention EUDORAHEADER in the message somewhere.

Wazoo · August 2, 2004

And a further note ... the next time something like this occurs, please just post the Tracking URL such that any analysis needed can be done on the whole spam as submitted and parsed. You posted a large portion of a spam body, but have to point out that the parser's handling of the body parse is also steered by contents in the spam header, so a complete analysis has to have both data parts available to see where the problem might actually start.

olawton · August 3, 2004

Thanks for the help,

I'm not using Eudora and I do use the 2 part submission form

I posted the exact HTML body as received in the spam, no headers were included

The mistake is in Spamcop parsing, if I remove the two parts "" the parser doesn't complain, looks like it just looks for the words eudora or eudoraheader, as I can't imagine an email header containing a "span class"

Next time it happens I'll forward the tracking URL - sorry

Thanks

Usually, the problem lies in this part of the body:
If you are using Eudora as your mail client, you will need to use the 2 part webmail submit form. Please see this link for more details.

If you are not using Eudora, another spammer has either picked up this practice (which I thought was fixed once before) or something similiar. I have not seen this problem in about a year. You should forward a tracking URL (copy/paste from the page with the error) to the deputies<at>spamcop.net and mention EUDORAHEADER in the message somewhere.

14455[/snapback]

StevenUnderwood · August 3, 2004

Eudora handles things their own way (why they need the separate form)

is used throughout the "View Source" of the headers in Eudora if "Microsoft viewing" is enabled. (yes, the headers are encased in the html headers as well) I can post a sample if you want.

olawton · August 5, 2004

I've just had another one, the appears twice in the message body.

I'll email spamcop deputies

Sign In

Detected mail headers in body error?

Recommended Posts

olawton

Link to comment

Share on other sites

StevenUnderwood

Link to comment

Share on other sites

Wazoo

Link to comment

Share on other sites

olawton

Link to comment

Share on other sites

StevenUnderwood

Link to comment

Share on other sites

olawton

Link to comment

Share on other sites

Archived

Browse

Activity