Jump to content

Email Headers in Body


cloetus

Recommended Posts

Posted

FrankIy have no idea, but I looked at the content and noted a likely suspect:

Here's the raw content:

From vanstory_kepecs8878[at]bkkmail.com Wed Mar 31 18:49:22 2004

Return-Path: <vanstory_kepecs8878[at]bkkmail.com>

Received: from 66.112.235.179 ([199.45.167.185])

by ns1.midasnetworks.com (8.12.8p2/8.12.8) with SMTP id i2VNghfo031201

for <sales[at]lessnetworks.com>; Wed, 31 Mar 2004 17:42:44 -0600 (CST)

(envelope-from vanstory_kepecs8878[at]bkkmail.com)

Received: from 136.173.202.186 by 199.45.167.185; Wed, 31 Mar 2004 05:41:31 -0500

Message-ID: <ITOCFGNJFVIWOJAQFABSTYCBV[at]yahoo.com>

From: "Lavern Calvert" <vanstory_kepecs8878[at]bkkmail.com>

Reply-To: "Lavern Calvert" <vanstory_kepecs8878[at]bkkmail.com>

To: sales[at]lessnetworks.com

Subject: Re: Your Web Site Advertising Order - Invoice Number #4859

Date: Wed, 31 Mar 2004 04:35:31 -0600

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--253236394917003"

X-IP: 28.110.8.0

X-Priority: 3

X-UIDL: >+M"!<%F"!=3X!!=';!!

----253236394917003

Content-Type: text/html;

Content-Transfer-Encoding: 7Bit

<HTML><HEAD><META http-equiv=Content-Type content="text/html; charset=windows-1252">

<STYLE>BODY {FONT-FAMILY: "Arial"}TT {FONT-FAMILY: "Courier New"}BLOCKQUOTE.CITE {PADDING-LEFT: 2.6em; MARGIN: 0px; BORDER-LEFT: 2px solid}

SPAN.TABOOHEADER {DISPLAY: none}</STYLE><META content="MSHTML 6.00.2712.300" name=GENERATOR></HEAD>

<BODY bgColor=#6666CC><SPAN class=EUDORAHEADER><BR></SPAN><SPAN class=EUDORAHEADER><P> </P>

<TABLE borderColor=#000000 cellSpacing=0 cellPadding=0 width=650 align=center bgColor=#ffffff border=3>

<TBODY><TR><TD bgColor=#ccccff><DIV align=center><TABLE cellSpacing=0 cellPadding=0 width="100%" border=0>

<TBODY><TR><TD bgColor=#000000><DIV align=center><B><FONT face="Arial, Helvetica, sans-serif"><font size=1><BR><BR><a href="http://www.emailadvertise.biz"><FONT color=yellow size=10>Click to Email Your Web Site<BR>to 27 MILLION PEOPLE</A><font size=5><BR>

<BR></B><FONT color=yellow size=5<B>=> <font color=red><B><a href="http://www.emailadvertise.biz""><font color=red><U>F-R-E-E TODAY ONLY</A></B></U></U>

<font color=yellow> <=</B><FONT COLOR=yellow size=2><FONT color=yellow size=1><BR><BR>

<FONT color=gray size=1>If You Are a Non-Profit Organization That Aids Low-Income Families. At Our Web Site, Call Us For Details.<BR>

Every Week We Offer A Different Non-Commercial Offer for Specific Non-Profit Causes.

<BR><BR></FONT></FONT></B></DIV></TD></TR></TBODY></TABLE></DIV><P align=center><B><FONT face="Arial, Helvetica, sans-serif"><FONT color=#CCFFFF size=2></FONT></FONT></B></P>

<BLOCKQUOTE><FONT face="Arial, Helvetica, sans-serif" color=#000000 size=3><P align=center>

<font size=1><A HREF="http://www.emailadvertise.biz/remove.html">Cancel Emails From Our Non-Commercial/Non-Profit Email Offers<BR><BR></A>

</BODY></HTML>

----253236394917003--

When I deleted the <SPAN class=EUDORAHEADER><BR></SPAN><SPAN class=EUDORAHEADER> garbage, and spamcop made more progress, but couldn't look up the emailadvertise.biz domain.

I had no trouble finding it, however...

http://www.whois.biz/whois.cgi?TLD=biz&WHO...ch=Submit+Query

Domain Name

EMAILADVERTISE.BIZ

Domain ID

D6324240-BIZ

Sponsoring Registrar

GANDI SARL

Domain Status

ok

Registrant ID

O-814050-GANDI

Registrant Name

Josep Nerildo

Registrant Organization

Josep Nerildo

Registrant Address1

Av das Brazil 59 4A

Registrant City

Rio De Janeiro

Registrant Postal Code

22640-118

Registrant Country

Brazil

Registrant Country Code

BR

Registrant Phone Number

+55.1937276209

Registrant Email

m8890[at]userdns.com

Administrative Contact ID

JN324-GANDI

Administrative Contact Name

Josep Nerildo

Administrative Contact Address1

Av das Brazil 59 4A

Administrative Contact City

Rio De Janeiro

Administrative Contact Postal Code

22640-118

Administrative Contact Country

Brazil

Administrative Contact Country Code

BR

Administrative Contact Phone Number

+55.1937276209

Administrative Contact Email

m8890[at]userdns.com

Billing Contact ID

AR41-GANDI

Billing Contact Name

CONTACT NOT AUTHORITATIVE see http://www.gandi.net/whois

Billing Contact Organization

Gandi SARL

Billing Contact Address1

38 rue Notre-Dame de Nazareth

Billing Contact City

Paris

Billing Contact Postal Code

75003

Billing Contact Country

France

Billing Contact Country Code

FR

Billing Contact Email

support[at]gandi.net

Technical Contact ID

JN324-GANDI

Technical Contact Name

Josep Nerildo

Technical Contact Address1

Av das Brazil 59 4A

Technical Contact City

Rio De Janeiro

Technical Contact Postal Code

22640-118

Technical Contact Country

Brazil

Technical Contact Country Code

BR

Technical Contact Phone Number

+55.1937276209

Technical Contact Email

m8890[at]userdns.com

Name Server

V2.QFFERS.BIZ

Name Server

V1.QFFERS.BIZ

Created by Registrar

GANDI SARL

Last Updated by Registrar

GANDI SARL

Domain Registration Date

Sat Feb 21 20:52:58 GMT 2004

Domain Expiration Date

Sun Feb 20 23:59:59 GMT 2005

Domain Last Updated Date

Fri Mar 19 15:37:20 GMT 2004

 

>>>> Whois database was last updated on: Thu Apr 01 01:04:18 GMT 2004 <<<<

NeuLevel, Inc., the Registry Operator for .BIZ, has collected this information

for the WHOIS database through an ICANN-Accredited Registrar. This information

is provided to you for informational purposes only and is designed to assist

persons in determining contents of a domain name registration record in the

NeuLevel registry database. NeuLevel makes this information available to you

"as is" and does not guarantee its accuracy. By submitting a WHOIS query, you

agree that you will use this data only for lawful purposes and that, under no

circumstances will you use this data: (1) to allow, enable, or otherwise

support the transmission of mass unsolicited, commercial advertising or

solicitations via direct mail, electronic mail, or by telephone; (2) in

contravention of any applicable data and privacy protection acts; or (3) to

enable high volume, automated, electronic processes that apply to the registry

(or its systems). Compilation, repackaging, dissemination, or other use of the

WHOIS database in its entirety, or of a substantial portion thereof, is not

allowed without NeuLevel's prior written permission. NeuLevel reserves the

right to modify or change these conditions at any time without prior or

subsequent notification of any kind. By executing this query, in any manner

whatsoever, you agree to abide by these terms.

NOTE: FAILURE TO LOCATE A RECORD IN THE WHOIS DATABASE IS NOT INDICATIVE

OF THE AVAILABILITY OF A DOMAIN NAME.

Posted

Way too much useless data for a posting in this kind of medium. I went blind trying to find your "Topic Title = Email Headers in Body" headers-in-the-body ....

Sure I saw the "Eudora lines", but ... I was looking for "real" header lines.

That said, I took what you offered and pasted it into the web-based parser, and of course, it failed. On the other hand, there was a link offered that took you to an explanatin page that went into some great detail about the fact that as displayed here, the "long lines" in the header have been really screwed up. Whether that's the way you got them, something that your e-mail client did, or just the way this application kills white-space, I don't have a clue. But I can tell you, that by fixing these "long line screw-ups" . the spam parsed just fine. Complaint addresses for both the open proxy and the spamvertised web site were offered for sending.

So, the question is, where did the formatting get jacked up? You make no mention of the important things, like your e-mail app, how you submit, etc. .. so not even sure where to suggest you go right now for some existing FAQ's. Perhaps http://www.spamcop.net/fom-serve/cache/19.html for a beginning?

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...