[Declude.JunkMail] Un-Obfuscating Subjects

2005-07-08 Thread Dan Geiser

Hello, All,
When reviewing caught spam I usually have a handful of messages with 
subjects that are obfuscated.  I know they aren't really obfuscated but 
instead are using a different encoding.


Does anyone have a web site or tool where I could go and drop in the text, 
e.g...


=?iso-8859-1?B?SG9ybnkgcGlsbHMgLSA3NSUgT0ZG?=

so I can see exactly what the user would be seeing if the e-mail actually 
made it all the way to the e-mail client?


Thanks In Advance,
Dan Geiser
[EMAIL PROTECTED] 



---
E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan)

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Un-Obfuscating Subjects

2005-07-08 Thread David Barker
 Dan,

You can use a base64 decoder
http://www.opinionatedgeek.com/dotnet/tools/Base64Decode/Default.aspx

=?iso-8859-1?B?SG9ybnkgcGlsbHMgLSA3NSUgT0ZG?=  is Horny pills - 75% OFF

Trim the string down to SG9ybnkgcGlsbHMgLSA3NSUgT0ZG

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser
Sent: Friday, July 08, 2005 10:55 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Un-Obfuscating Subjects

Hello, All,
When reviewing caught spam I usually have a handful of messages with
subjects that are obfuscated.  I know they aren't really obfuscated but
instead are using a different encoding.

Does anyone have a web site or tool where I could go and drop in the text,
e.g...

 =?iso-8859-1?B?SG9ybnkgcGlsbHMgLSA3NSUgT0ZG?=

so I can see exactly what the user would be seeing if the e-mail actually
made it all the way to the e-mail client?

Thanks In Advance,
Dan Geiser
[EMAIL PROTECTED] 


---
E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan)

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.


__ NOD32 1.1152 (20050623) Information __

This message was checked by NOD32 antivirus system.
http://www.eset.com


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Un-Obfuscating Subjects

2005-07-08 Thread Markus Gufler
The ?B? in the encoded string tells you that it's a base64 decoded message. 
Googling for decode base64 should help you.

Markus

 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser
 Sent: Friday, July 08, 2005 4:55 PM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] Un-Obfuscating Subjects
 
 Hello, All,
 When reviewing caught spam I usually have a handful of 
 messages with subjects that are obfuscated.  I know they 
 aren't really obfuscated but instead are using a different encoding.
 
 Does anyone have a web site or tool where I could go and drop 
 in the text, e.g...
 
  =?iso-8859-1?B?SG9ybnkgcGlsbHMgLSA3NSUgT0ZG?=
 
 so I can see exactly what the user would be seeing if the 
 e-mail actually made it all the way to the e-mail client?
 
 Thanks In Advance,
 Dan Geiser
 [EMAIL PROTECTED] 
 
 
 ---
 E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan)
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.