[SC-Help] Re: spamcop missing a link, sorta.

[Mike Easter]

DougW wrote:
> Resolving link obfuscation
>
http:\/xkhimtxch.com%2ekwgv5jtht5bcagat65n2oq5gs5n5%2epistledfcn.info#aomxjmg.com

>
http://xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info#aomxjmg.com

So far so good.

> host xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info
> (checking ip) = 222.233.52.45 host 222.233.52.45

That is also correct.  Sometimes.

> Cannot resolve
>
http://xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info#aomxjmg.com

That seems like a funny thing to say, when/since it just got resolved.
Interesting to note that it is trying to resolve the IP with the
#obfuscation in place.

Here is some more funniness:

Feed SC the naked url with and without the #obfuscation:

Parsing input:
http://xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info
host xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info
(checking ip) = 222.187.122.174
Reporting addresses:
abuse at jsinfo.net
abuse at pub.nt.jsinfo.net
ct-abuse at abuse.sprint.net


Parsing input:
http://xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info#aomxjmg.com
host xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info
(checking ip) = 221.11.133.63
host 221.11.133.63 (getting name) no name

Cannot resolve
http://xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info#aomxjmg.com
No valid email addresses found, sorry!

There are several possible reasons for this: <blah blah>


The business about the variable DNS from 222.187.122.174 to
221.11.133.63 isn't exactly SC fault, however.  But I'm not exactly sure
whether the parser is trying to get a DNS on the url with or without the
# obfuscation.  It isn't clear from the verbose.

Here's a different iteration of SC trying to get a notify address with
the obfuscated url.  This time it resolves to the 222 instead of the
221, but there are no addresses.


Parsing input:
http://xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info#aomxjmg.com
host xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info
(checking ip) = 222.233.52.44
host 222.233.52.44 (getting name) no name

Cannot resolve
http://xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info#aomxjmg.com
No valid email addresses found, sorry!


-- 
Mike Easter
kibitzer, not SC admin