I've got the anti-tracking / anti-webbeacon part of my email app running. This for instance


<img src=3D"https://ci4.googleusercontent.com/proxy/mlXqRUdfFlxpW3sA_nkOO=
IEHe05EcsILcCVQS6hm1Koa6BMm256oRAy8HCZDNwBYgvjPs9UytFVESHPrB82aagSUsJCCI54x=
BkpoMzNUiC7nh2zPCHApbHO_QVOoONI=3Ds0-d-e1-ft#http://img.ed4.net/financialti=
mesc/images/2013/Responsive/ft-logo-480.png" style=3D"width:80%;max-width:4=
40px;max-height:40px;color:#091523;font-size:22pt;border:0 none" alt=3D"FIN=
ANCIAL TIMES" title=3D"FINANCIAL TIMES" class=3D"CToWUd"/>

gets stripped back to

http://img.ed4.net/financialtimesc/images/2013/Responsive/ft-logo-480.png

to fetch the image. I'd like to know what the gibberish means though. I've tried base64 & uu but is not them. Anyone have an idea how to decode it?



Roy Lambert

On 6/14/2017 9:02 AM, Roy Lambert wrote:
> to fetch the image. I'd like to know what the gibberish means though. I've tried base64 & uu but is not them. Anyone have an idea how to decode it?

Not translation but looks like more ways to track you

https://wordtothewise.com/2013/12/gmail-deploys-image-proxy-servers/

and

http://www.zettasphere.com/google-gmail-change-breaks-email-open-tracking/


Raul

Raul


Yup I guessed that. In my case its interesting that it comes from ft.com is delivered to nlh.co.uk so I guess my ISP or FT must have contracted out their email system.

I also think I know why the amount of spam I get to the nlh.co.uk domain has increased - the FT, a "reputable" newspaper is passing info along. My favourite is c15 redirects before the image was delivered

I've love to know what's in the garbage though

Roy Lambert

On 6/14/2017 9:58 AM, Roy Lambert wrote:
> I've love to know what's in the garbage though

Good luck - however to me that data simply looks like bunch of base64
encoded hash values so there might not be any "content" for you to decode.

Raul