Is This a Spam Tool

Ye' old general discussion board. Basically, for everything that isn't covered elsewhere. Come here to shoot the breeze, shoot your mouth off, or whatever suits your fancy.
This forum is not for asking programming related questions.

Moderator: General Moderators

Post Reply
User avatar
dstefani
Forum Contributor
Posts: 140
Joined: Sat Jan 11, 2003 9:34 am
Location: Meridian Idaho, USA

Is This a Spam Tool

Post by dstefani »

Code: Select all

<IMG id=3D_x0000_i1025 = height=3D480=20 src=3D"cid:image001.jpg@01C4FA37.2CC108D0"=20 width=3D640>
I have heard about putting 'tracers' in HTML mail that lets the sender know who opened the message. IE:

Code: Select all

<img src= "http://www.spam.com/saveinfo.php?sentTo=you@yourhost.com" width=1 height="1" border="0">
The first code snippet is from a sample HTML mail that a customer whats me to look into replicating. This particular one was sent using PHPlist.
Would you say that the top img tag is like a SPAM tracer?

Thanks,

- dstefani
User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

the top one uses CID, which is the internal referencing of attached images. It is not a tracer... at least that I know of.
magicrobotmonkey
Forum Regular
Posts: 888
Joined: Sun Mar 21, 2004 1:09 pm
Location: Cambridge, MA

Post by magicrobotmonkey »

hey, I've heard of spammers using these image tracer deals to validate email addresses as well. Its why GMail opens emails without displaying external images until told to do so. I'm not sure how they are used though.
timvw
DevNet Master
Posts: 4897
Joined: Mon Jan 19, 2004 11:11 pm
Location: Leuven, Belgium

Post by timvw »

a very simplisitic tracking thingie would look like


table (user_id, email);

send mail to user with <img src="someimage.php?user_id=xxxx">

and then in our someimage.php we mark that the $_GET['user_id'] is reading the e-mail, and we output the image to show in the mail..

now we can spam all those marked user_ids....
magicrobotmonkey
Forum Regular
Posts: 888
Joined: Sun Mar 21, 2004 1:09 pm
Location: Cambridge, MA

Post by magicrobotmonkey »

those bastards!
timvw
DevNet Master
Posts: 4897
Joined: Mon Jan 19, 2004 11:11 pm
Location: Leuven, Belgium

Post by timvw »

luckily mozilla e-mail etc have an option to not load external stuff already a few years.... and i think that even outlook express has that option since win xp sp1....

but then again, i don't know how they handle javascript that generates some extra html ...
Post Reply