New spammer URL trick?

[studog]

http://www.spamcop.net/sc?id=z935029294z22...81bfef6cc2c8b1z

It's new to me anyway; perhaps the parser could be changed to look at specific

header lines for URLS?

...Stu

[turetzsr]

Hi, Stu,

...This all looks okay to me -- I see nothing odd in the "To" header line (or any other header lines, for that matter). What are you saying that you think the parser should do differently?

[studog]

...This all looks okay to me -- I see nothing odd in the "To" header line (or any other header lines, for that matter).

42573[/snapback]

"To: smtp2.sentex.ca"]http://rolexsubmarinersite.infoO_EMAIL[at]smtp2.sentex.ca"

There's a URL right there in the To: line. The parser doesn't see it, because I think the parser doesn't check the headers for URLs.

What are you saying that you think the parser should do differently?

42573[/snapback]

Perhaps the parser could check specific header lines for embedded URLs? No one has an email address of "http://..."[at]example.com for instance.

...Stu

[studog]

"To: http://rolexsubmarinersite.infoO_EMAIL[at]smtp2.sentex.ca"

42574[/snapback]

Hm, perhaps this is Outlook specific; the display of this email shows

To: "http://rolexsubmari"[at]smtp2.sentex.ca

including the "s. A slightly shorter URL would display in its entirety.

...Stu

[turetzsr]

"To: smtp2.sentex.ca"]http://rolexsubmarinersite.infoO_EMAIL[at]smtp2.sentex.ca"<snip>

42574[/snapback]

...Ah, okay, that isn't what I see in the parse ... I see "To: x" (which IIUC means the parser thought it might be an e-mail address it should munge).

Perhaps the parser could check specific header lines for embedded URLs? No one has an email address of "http://..."[at]example.com for instance.

42574[/snapback]

...But IIUC, the parser relies on RFC-compliant URL for finding links and this doesn't look RFC-compliant (is it?).

[Wazoo]

More generically ... the parser is looking for 'clickable' links .... garbage in the To: line is not clickable in any e-mail client I've played with ...

And yes, the munging of the To: line in the Tracking URL display is standard operation.

[lcusdtech]

Can you even click on the URL when it's displayed as the To: address? I guess that might depend on how/with what you are viewing the e-mail with. And I would add that you would have to be really dumb to click on a link in a To: field, right.