Re: spamcop missing a link, sorta.
"Mike Easter" <[email protected]>
| Newsgroups | gmane.mail.spam.spamcop.help,gmane.spam.detected |
|---|---|
| Organization | SpamCop |
| Message-ID | <[email protected]> |
DougW wrote: > Resolving link obfuscation > http:\/xkhimtxch.com%2ekwgv5jtht5bcagat65n2oq5gs5n5%2epistledfcn.info#aomxjmg.com > http://xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info#aomxjmg.com So far so good. > host xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info > (checking ip) = 222.233.52.45 host 222.233.52.45 That is also correct. Sometimes. > Cannot resolve > http://xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info#aomxjmg.com That seems like a funny thing to say, when/since it just got resolved. Interesting to note that it is trying to resolve the IP with the #obfuscation in place. Here is some more funniness: Feed SC the naked url with and without the #obfuscation: Parsing input: http://xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info host xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info (checking ip) = 222.187.122.174 Reporting addresses: [email protected] [email protected] [email protected] Parsing input: http://xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info#aomxjmg.com host xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info (checking ip) = 221.11.133.63 host 221.11.133.63 (getting name) no name Cannot resolve http://xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info#aomxjmg.com No valid email addresses found, sorry! There are several possible reasons for this: <blah blah> The business about the variable DNS from 222.187.122.174 to 221.11.133.63 isn't exactly SC fault, however. But I'm not exactly sure whether the parser is trying to get a DNS on the url with or without the # obfuscation. It isn't clear from the verbose. Here's a different iteration of SC trying to get a notify address with the obfuscated url. This time it resolves to the 222 instead of the 221, but there are no addresses. Parsing input: http://xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info#aomxjmg.com host xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info (checking ip) = 222.233.52.44 host 222.233.52.44 (getting name) no name Cannot resolve http://xkhimtxch.com.kwgv5jtht5bcagat65n2oq5gs5n5.pistledfcn.info#aomxjmg.com No valid email addresses found, sorry! -- Mike Easter kibitzer, not SC admin