[SpamCop-List] Re: question about "couldn't parse head" errors
Mike Easter
MikeE at ster.invalid
Fri Aug 5 20:31:46 EDT 2005
D.F. Manno wrote:
> Finding links in message body
The header is screwed up. Bad folding in the last 2 Received lines and
an illegal/misconfigured fieldname at the very top. A fieldname has to
have no spaces in it and end with a colon space followed by the field
value. There's also a badly folded Xline X-SpamDetect
www.spamcop.net/sc?id=z791795156zc8e77dc2b32beb027fbc940c99a2a9afz
If I take that spam and remove the topline and unfold the bad part of
the last 2 Received lines & the Xline and submit it to a non-mailhosted
parser, I get
http://www.spamcop.net/sc?id=z793519061ze835d9f81189e66bed6c5f338d91b2e7z
Resolving link obfuscation
http://uqquuc.goodcapsules.info/?sctulexwntvyujcmmnzpofpujnh
which finds the same source, and also finds the body URL, but fails to
resolve it. And the spam is too old. But the problem of 'couldn't
parse head' is solved - what I parsed also looks like your second
tracker.
> Is the problem with the script, with Eudora, or something else?
Figure out where those wraps and that top line are coming from. The 2nd
tracker you posted didn't have any of the above mentioned condtions.
--
Mike Easter
kibitzer, not SC admin
More information about the SpamCop-List
mailing list