[Scspamcop] Re: Link obfuscation error

Mike Easter MikeE at ster.invalid
Mon Sep 15 08:14:48 EDT 2008


Ian Smith wrote:
> The following should unescape to:
>
> http://casiofirstbest.com/
>
> instead of http://casiofirst/

It looks to me like the URL was written wrong(ly) and there is an EOL (OD
OA) right before 'best.com'

Where is the tracker so we can see the original spam?

> Resolving link obfuscation
>     http://%63%61%73%69%6F%66%69%72%73%74%0D%0Abest.com/441/

<that might wrap for a newsmessage>

> Cannot resolve http://casiofirst/

If I put your % escaped link derived from your newsmessage source into
some other link deobfuscator such as the one at NetDemon, I get the
casiofirst result, not the casiofirstbest result.


--
Mike Easter
kibitzer, not SC admin



More information about the SCspamcop mailing list