Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Wo archive tread sia. Meɖekuku bia biabia yeye ne ehia kpeɖeŋu.

Certain emails appear with non-standard fonts in headers

  • 1 ŋuɖoɖo
  • 1 masɔmasɔ sia le esi
  • 1 view
  • Nuɖoɖo mlɔetɔ Zenos

Aimhere
Aimhere
more options

Lately, I've been receiving a few "spam" emails where the text of the message headers ("From" and "Subject", in particular) appears in a non-standard font (e.g. different from all other plaintext in Thunderbird). I didn't think such a thing was even possible within email headers.

Looking at the message source (Ctrl-U), it appears the "From" and "Subject" headers are being encoded in UTF-8.

Is this some kind of attempt by the sender to bypass or trick anti-spam filters?

Note: attached pic has the text highlighted in yellow.

Lately, I've been receiving a few "spam" emails where the text of the message headers ("From" and "Subject", in particular) appears in a non-standard font (e.g. different from all other plaintext in Thunderbird). I didn't think such a thing was even possible within email headers. Looking at the message source (Ctrl-U), it appears the "From" and "Subject" headers are being encoded in UTF-8. Is this some kind of attempt by the sender to bypass or trick anti-spam filters? Note: attached pic has the text highlighted in yellow.
Screen ƒe photowo kpe ɖe eŋu

All Replies (1)

Zenos
Zenos
more options

Yes, UTF-8 can be used in subject lines, and yes, it can make some spam filtering harder work.

The legitimate intention is to allow non-Latin character sets to be used in subject lines and addresses. One minor form of abuse (IMHO) is using it to insert icons into subject lines. This is a typical example, from a travel company who use it to insert a calendar icon into the subject line.

Subject: =?UTF-8?B?8J+ThSBDaHJpcywgaXMgaXQgdGltZSBmb3IgeW91ciBuZXh0IHRyaXA/?=

As a side effect, it's now non-trivial to tell what the message is about, at least when looking at the source.

Zenos trɔe