[SpamCop.net - protecting the internet through technology]

[SC-Help] Re: Spamcop cannot find obfuscated link

Mike Easter MikeE at ster.invalid
Mon Jul 11 13:59:37 EDT 2005


hercules wrote:
> Hi, I received two more spam, here is one with just the reporting
> id... These spam get through most filters set in its path.
>
>
www.spamcop.net/sc?id=z784756066zb248d3021f32114f0ebfec1afb3eebc3z

I use SpamPal configured with a number of dnsbl/s.  That item would have
been tagged as spam because its source IP is in cbl which causes it to
be in spamhaus's xbl or sbl-xbl.  It also appears in the/my country list
for Brazil.   It also might've triggered other body filters.

SC cannot deobfuscate the url

htt
p://azwhnfmjr.com. %2Ehdvzcetzpixwc17wvs6h.tr
ophemahi.info#vuakvotpb.com

or http://azwhnfmjr.com.
%2Ehdvzcetzpixwc17wvs6h.trophemahi.info#vuakvotpb.com or
http://azwhnfmjr.com.
.hdvzcetzpixwc17wvs6h.trophemahi.info#vuakvotpb.com -- nor can any of my
deobfuscators, online or consoled.

If I manually convert the dotspacedot configuration to just a dot
http://azwhnfmjr.com.hdvzcetzpixwc17wvs6h.trophemahi.info#vuakvotpb.com

it still doesn't resolve;  but there is such a thing as the
trophemahi.info domainname.



-- 
Mike Easter
kibitzer, not SC admin




More information about the SpamCop-Help mailing list