Jump to content

Encoded/segmented subjects and bodies are not stripped of emails


EkriirkE

Recommended Posts

Spammers are tracking back who reports them by including the emails that get back to them via spamcop reports in the subject and body, example: 

encoded and segmented subject:  https://www.spamcop.net/sc?id=z6641797254z619187ae372c6cec5509fadaf926d2baz

segmented body: https://www.spamcop.net/sc?id=z6641801254z40077f70be652e542cfe9e7deb51e5faz

My email is still visible.  Note the first example is targeted at me directly for reporting them subject "You make compliant on Spamcorp my.visible.email erville?..." with a confusing body that pieces together a personalized message:

Quote

You make compliant on Spamcorp
Why?
There is Unsubscribe Link
Why?
We lost 0.5usd due to your compliant
But you will receive many email everyday
from now on

 

Edited by EkriirkE
Link to comment
Share on other sites

9 hours ago, EkriirkE said:

Spammers are tracking back who reports them by including the emails that get back to them via spamcop reports in the subject and body, example: 

encoded and segmented subject:  https://www.spamcop.net/sc?id=z6641797254z619187ae372c6cec5509fadaf926d2baz

segmented body: https://www.spamcop.net/sc?id=z6641801254z40077f70be652e542cfe9e7deb51e5faz

My email is still visible.  Note the first example is targeted at me directly for reporting them subject "You make compliant on Spamcorp my.visible.email erville?..." with a confusing body that pieces together a personalized message:

 

Report them again cost them another $5
They have your email address anyhow
Online criminals continue to distribute spam and carry out scams - even with the Chinese government involved. 

Link to comment
Share on other sites

On 7/13/2020 at 12:17 PM, EkriirkE said:

My email is still visible.  Note the first example is targeted at me directly for reporting them subject "You make compliant on Spamcorp my.visible.email erville?..." with a confusing body that pieces together a personalized message:

Most ISPs don't go in and decode the base64.  For those that do or might, I just decode it, strip out my address, and then reencode it.  This might be a good feature to have and there are perl modules that can decode/encode it.

Link to comment
Share on other sites

On 7/13/2020 at 8:37 PM, petzl said:

Report them again cost them another $5
They have your email address anyhow

Obviously, but I'd rather minimize confirmation of receipt

Link to comment
Share on other sites

7 hours ago, EkriirkE said:

Obviously, but I'd rather minimize confirmation of receipt

Not disagreeing 
However the worst I get is being listwashed

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...