[SC-Help] Re: Spamcop cannot find obfuscated link
Mike Easter
MikeE at ster.invalid
Mon Jul 11 13:59:37 EDT 2005
hercules wrote:
> Hi, I received two more spam, here is one with just the reporting
> id... These spam get through most filters set in its path.
>
>
www.spamcop.net/sc?id=z784756066zb248d3021f32114f0ebfec1afb3eebc3z
I use SpamPal configured with a number of dnsbl/s. That item would have
been tagged as spam because its source IP is in cbl which causes it to
be in spamhaus's xbl or sbl-xbl. It also appears in the/my country list
for Brazil. It also might've triggered other body filters.
SC cannot deobfuscate the url
htt
p://azwhnfmjr.com. %2Ehdvzcetzpixwc17wvs6h.tr
ophemahi.info#vuakvotpb.com
or http://azwhnfmjr.com.
%2Ehdvzcetzpixwc17wvs6h.trophemahi.info#vuakvotpb.com or
http://azwhnfmjr.com.
.hdvzcetzpixwc17wvs6h.trophemahi.info#vuakvotpb.com -- nor can any of my
deobfuscators, online or consoled.
If I manually convert the dotspacedot configuration to just a dot
http://azwhnfmjr.com.hdvzcetzpixwc17wvs6h.trophemahi.info#vuakvotpb.com
it still doesn't resolve; but there is such a thing as the
trophemahi.info domainname.
--
Mike Easter
kibitzer, not SC admin
More information about the SpamCop-Help
mailing list