[SpamCop.net - protecting the internet through technology]

[SC-Help] Re: EXPERTS ONLY on www.wwwatches.info

Reader reader at invalid.invalid
Tue Apr 5 04:28:43 EDT 2005


On Wed, 30 Mar 2005 19:51:26 +0400, Berny wrote:

> 
> "Tim P." <dwvbo91q4001 at sneakemail.com> wrote in message
> news:Xns9628691118E90dwvbo91q4001sneakema at 216.154.195.61...
>> The website www.wwwatches.info is getting the parser the incorrect ip (?)
>> Since this is an EXPERTS ONLY question, I need clarification.
>> The report I would like to send is not going to the proper party, or
>> is it?
>>
>> www.wwwatches.info resolves differently for different viewpoints:
>>
>> SNIP
> 
> ALL af them and probably more, finding the IP by the same route a few
> minutes later will resolve differently again.

At this time I see www.wwwatches.info (66.98.145.18) has a redirect to
http://www.watchwatches.info/wwwatches 

* About to connect() to www.wwwatches.info port 80
*   Trying 66.98.145.18... * connected
* Connected to www.wwwatches.info (66.98.145.18) port 80
> GET / HTTP/1.1
User-Agent: curl/7.12.1 (i586-mandrake-linux-gnu) libcurl/7.12.1 OpenSSL/0.9.7d zlib/1.2.1.1 libidn/0.5.4
Host: www.wwwatches.info
Pragma: no-cache
Accept: */*
< HTTP/1.1 302 Moved Temporarily
< Location: http://www.watchwatches.info/wwwatches
< Connection: close
< Date: Tue, 05 Apr 2005 06:12:03 GMT
< Server: Directi Server 1.1
* Closing connection #0

http://www.watchwatches.info/wwwatches has a 301 Moved Permanently to
http://www.watchwatches.info/wwwatches/ where the spammed site lives
(Same host - Apache can be pedantic about trailing slashes).

* About to connect() to www.watchwatches.info port 80
*   Trying 64.40.101.63... * connected
* Connected to www.watchwatches.info (64.40.101.63) port 80
> GET /wwwatches HTTP/1.1
User-Agent: curl/7.12.1 (i586-mandrake-linux-gnu) libcurl/7.12.1 OpenSSL/0.9.7d zlib/1.2.1.1 libidn/0.5.4
Host: www.watchwatches.info
Pragma: no-cache
Accept: */*
< HTTP/1.1 301 Moved Permanently
< Date: Tue, 05 Apr 2005 06:09:45 GMT
< Server: Apache/2.0.40 (Red Hat Linux)
< Location: http://www.watchwatches.info/wwwatches/
< Content-Length: 327
< Connection: close
< Content-Type: text/html; charset=iso-8859-1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://www.watchwatches.info/wwwatches/">here</a>.</p>
<hr />
<address>Apache/2.0.40 Server at www.watchwatches.info Port 80</address>
</body></html>
* Closing connection #0




More information about the SpamCop-Help mailing list