[Scspamcop] And this - if you like (Was: Link obfuscation error)

[Giampaolo Tomassoni]

"Ian Smith" <news0807REMOVECAPS at orrery.e4ward.com> ha scritto nel messaggio 
news:galhbc$bkj$1 at news.spamcop.net...
> The following should unescape to:
>
> http://casiofirstbest.com/
>
> instead of http://casiofirst/
>
> <<
> Resolving link obfuscation
>    http://%63%61%73%69%6F%66%69%72%73%74%0D%0Abest.com/441/
>    Percent unescape: http://casiofirst
>    host casiofirst (getting name) no name
>    casiofirst is not a hostname
>    casiofirst is not a hostname
> Tracking link: http://casiofirst/
> No recent reports, no history available
> casiofirst is not a hostname
> Cannot resolve http://casiofirst/
> >>

http://www.spamcop.net/sc?id=z2251032143z49f43781f81993714f960033166fbf0dz

Phishing site is:

ftp://dqwadsdsa:qwerqwer@ftp.smtp.ru/ehayISAPIdllSignInruhttwwwehaycomtrksidmconfirm-ebry11Page-Type-existing1Email-isCheck1-out-migarate-visitor-SignIn11.aspx

Giampaolo

>
> regards, Ian
>