[SC-Help] Re: Resolving link obfuscation

[Mike Easter]

Greg Grotyohann wrote:

> Why can't SpamCop always resolve links for spam related web-sites.

The 'why' isn't disclosed by SC's programmer, so the rest of us guess
based on the observed varieties of behavior toward the deobfuscated
link.

In this case SC finds and deobfuscates.  Each time we use this tracker
[removing your 'members' subdomain and replacing with www for the
general public]

http://www.spamcop.net/sc?id=z829056778zf56d92241e0f9639248f3c6b0c6d27cfz

> I can get to the web-site with no problem.

In the course of fooling with your tracker for pasting in here, I
'happened' to run the parse twice.

The first time the parser made no effort to resolve the link, the 2nd
time the parser resolved the link correctly and derived a notify address

Tracking link: http://www.bright-3.com/signs.asp
Resolves to 220.247.158.29

If reported today, reports would be sent to:
<snip source reporting>
Re: http://www.bright-3.com/signs.asp (Administrator of network hosting
website referenced in spam)
abuse at sparqnet.net
abuse at e-power.com.tw
postmaster at e-power.com.tw

There is a longer discussion in the forum about why one result one time
and a different another
http://forum.spamcop.net/forums/index.php?showtopic=4085  SpamCop
reporting of spamvertized URLs, Viewpoint(s)

I might also add that it is not of great value to report a spamvertiser
to the unresponsive spamhaused ePower .tw provider.

For ePower spamhaus has 4 listings, 3 /32 single IPs and a /24


-- 
Mike Easter
kibitzer, not SC admin