[SpamCop.net - protecting the internet through technology]

[SC-Help] SC missing some links.

DougW post.please.this.email.is.not.valid at example.com
Wed Sep 7 21:35:12 EDT 2005


Modification on the same old theme of busting up a
url with <lf> codes and other oddball obfuscation
like using %2E for "." and a # to misdirect folks.
Interesting is the http:\/ and http:/\ obfuscation
attempt.  IE works on that type of malformed url
but firefox refuses the http:/\

Samples:
(the breaks are from the embedded control codes)

http:/
\hplgapdkuv.net%2Ezvxsieqvb%2Eulle
ladt.info#hxswpeeyo.com

ht
tp:\
/hhcwovbgzrr.com%2Eoejaswgkodze%2Eune
tretu.info#jktzsejas.net

h
ttp:\
/njlccdbt.com%2Euyghfhikn01%38%2Ewa
tchzn8w73by2mai1.com#hwgpdknm.com

h
ttp:\
/sngkhpbydzji.net%2Ekyhdx%30%31%38%2Ewtch4z
now62bymai1.com#sgotbfudh.com

-----

Unedited spam available here:
http://www.revbeergoggles.com/spammers/watchspam/

Loads more available on request.  Postmaster or Abuse at .sig

-- 
DougW
Head kook and bottle washer, revbeergoggles.com 




More information about the SpamCop-Help mailing list