[SC-Help] b0rked link resolution.
DougW
post.please.this.email.is.not.valid at example.com
Tue Oct 4 21:30:01 EDT 2005
-----
Resolving link obfuscation
http:\/zlqnqumon.com%2e<.oyystqwxxgqu%2egealsilau.info#apjwxjfcpe.net
Percent unescape: http:\/zlqnqumon.com.<.oyystqwxxgqu.gealsilau.info#apjwxjfcpe.net
Normalizing slashes: http://zlqnqumon.com.<.oyystqwxxgqu.gealsilau.info#apjwxjfcpe.net
Host zlqnqumon.com. (checking ip) IP not found ; zlqnqumon.com. discarded as fake.
Host zlqnqumon.com. (checking ip) IP not found ; zlqnqumon.com. discarded as fake.
Tracking link: http://zlqnqumon.com.<.oyystqwxxgqu.gealsilau.info#apjwxjfcpe.net
No recent reports, no history available
Cannot resolve http://zlqnqumon.com.<.oyystqwxxgqu.gealsilau.info#apjwxjfcpe.net
-----
Looks like spammy has gotten "cute" to the point of proving rule#3
The question is do you go to the point of trying to lart a b0rked link
and how many problems does that open up.
Not that that matters because SC is still choking on the spamdomain.org#fakedomain.org trick. :/
The following list are domains using the # trick so far this week. Mostly HGH and fake watch spams.
scamelldc.com 221.11.133.63 <- abuse at cnc-noc.net
quiraff.com 58.20.160.17 <- abuse at cnc-noc.net
gealsilau.info 200.108.166.3
gdeltomwi.info 200.108.166.3
gdaeleela.info 200.108.166.3
afinepurchase.com 221.11.134.11 <- support at NameCheap.com; abuse at cnc-noc.net
afineasset.com 221.11.134.11 <- support at NameCheap.com; abuse at cnc-noc.net
agoodbasket.com 221.11.134.11 <- support at NameCheap.com; abuse at cnc-noc.net
alovelypresent.com 221.11.134.11 <- support at NameCheap.com; abuse at cnc-noc.net
greatthingsforever.com 221.11.134.11 <- support at NameCheap.com; abuse at cnc-noc.net
steighke.com 211.233.16.92 <- abuse at your-domains-here.com; security at kidc.net
twattlecneg.com 211.233.16.92 <- abuse at your-domains-here.com; security at kidc.net
unficklegj.com 211.233.16.93 <- abuse at your-domains-here.com; security at kidc.net
uniambicnf.com 211.233.16.93 <- abuse at your-domains-here.com; security at kidc.net
murmurcb.com 211.233.16.93 <- abuse at your-domains-here.com; security at kidc.net
foggerkkej.com 211.233.16.92 <- abuse at your-domains-here.com; security at kidc.net
--
DougW
More information about the SpamCop-Help
mailing list