[SpamCop.net - protecting the internet through technology]

[SC-Help] b0rked link resolution.

DougW post.please.this.email.is.not.valid at example.com
Tue Oct 4 21:30:01 EDT 2005


-----
Resolving link obfuscation
   http:\/zlqnqumon.com%2e<.oyystqwxxgqu%2egealsilau.info#apjwxjfcpe.net
   Percent unescape: http:\/zlqnqumon.com.<.oyystqwxxgqu.gealsilau.info#apjwxjfcpe.net
   Normalizing slashes: http://zlqnqumon.com.<.oyystqwxxgqu.gealsilau.info#apjwxjfcpe.net
   Host zlqnqumon.com. (checking ip) IP not found ; zlqnqumon.com. discarded as fake.
   Host zlqnqumon.com. (checking ip) IP not found ; zlqnqumon.com. discarded as fake.

Tracking link: http://zlqnqumon.com.<.oyystqwxxgqu.gealsilau.info#apjwxjfcpe.net
No recent reports, no history available

Cannot resolve http://zlqnqumon.com.<.oyystqwxxgqu.gealsilau.info#apjwxjfcpe.net
-----

Looks like spammy has gotten "cute" to the point of proving rule#3
The question is do you go to the point of trying to lart a b0rked link
and how many problems does that open up.

Not that that matters because SC is still choking on the spamdomain.org#fakedomain.org trick. :/

The following list are domains using the # trick so far this week.  Mostly HGH and fake watch spams.

scamelldc.com      221.11.133.63 <- abuse at cnc-noc.net

quiraff.com        58.20.160.17   <- abuse at cnc-noc.net
gealsilau.info     200.108.166.3
gdeltomwi.info     200.108.166.3
gdaeleela.info     200.108.166.3
afinepurchase.com  221.11.134.11  <- support at NameCheap.com; abuse at cnc-noc.net
afineasset.com     221.11.134.11  <- support at NameCheap.com; abuse at cnc-noc.net
agoodbasket.com    221.11.134.11  <- support at NameCheap.com; abuse at cnc-noc.net
alovelypresent.com 221.11.134.11  <- support at NameCheap.com; abuse at cnc-noc.net
greatthingsforever.com  221.11.134.11 <- support at NameCheap.com; abuse at cnc-noc.net
steighke.com       211.233.16.92  <- abuse at your-domains-here.com; security at kidc.net
twattlecneg.com    211.233.16.92  <- abuse at your-domains-here.com; security at kidc.net
unficklegj.com     211.233.16.93  <- abuse at your-domains-here.com; security at kidc.net
uniambicnf.com     211.233.16.93  <- abuse at your-domains-here.com; security at kidc.net
murmurcb.com       211.233.16.93  <- abuse at your-domains-here.com; security at kidc.net
foggerkkej.com     211.233.16.92  <- abuse at your-domains-here.com; security at kidc.net

-- 
DougW





More information about the SpamCop-Help mailing list