[SpamCop.net - protecting the internet through technology]

[SpamCop-List] Re: question about "couldn't parse head" errors

Mike Easter MikeE at ster.invalid
Fri Aug 5 20:31:46 EDT 2005


D.F. Manno wrote:

> Finding links in message body

The header is screwed up.  Bad folding in the last 2 Received lines and
an illegal/misconfigured fieldname at the very top.  A fieldname has to
have no spaces in it and end with a colon space followed by the field
value.  There's also a badly folded Xline X-SpamDetect

www.spamcop.net/sc?id=z791795156zc8e77dc2b32beb027fbc940c99a2a9afz

If I take that spam and remove the topline and unfold the bad part of
the last 2 Received lines & the Xline and submit it to a non-mailhosted
parser, I get

http://www.spamcop.net/sc?id=z793519061ze835d9f81189e66bed6c5f338d91b2e7z

Resolving link obfuscation
http://uqquuc.goodcapsules.info/?sctulexwntvyujcmmnzpofpujnh

which finds the same source, and also finds the body URL, but fails to
resolve it.  And the spam is too old.  But the problem of 'couldn't
parse head' is solved - what I parsed also looks like your second
tracker.

> Is the problem with the script, with Eudora, or something else?

Figure out where those wraps and that top line are coming from.  The 2nd
tracker you posted didn't have any of the above mentioned condtions.

-- 
Mike Easter
kibitzer, not SC admin



More information about the SpamCop-List mailing list