Jump to content

bipsen

Members
  • Content Count

    2
  • Joined

  • Last visited

Community Reputation

0 Neutral

About bipsen

  • Rank
    Newbie
  1. bipsen

    URL tracking

    I don't know if you are able to see the report on my submission - an example is located at http://www.spamcop.net/sc?id=z1317977893z8...d92c38b92bcc4az The webpage with techinal details says: Resolving link obfuscation http://MDY5YmVlODA5MDk5ZTEyZDVlMmE5MWQz.ogaldternative.com Host mdy5ymvloda5mdk5zteyzdvlmme5mwqz.ogaldternative.com (checking ip) IP not found ; mdy5ymvloda5mdk5zteyzdvlmme5mwqz.ogaldternative.com discarded as fake. Host mdy5ymvloda5mdk5zteyzdvlmme5mwqz.ogaldternative.com (checking ip) IP not found ; mdy5ymvloda5mdk5zteyzdvlmme5mwqz.ogaldternative.com discarded as fake. Tracking link: http://MDY5YmVlODA5MDk5ZTEyZDVlMmE5MWQz.ogaldternative.com/ [report history] Cannot resolve http://MDY5YmVlODA5MDk5ZTEyZDVlMmE5MWQz.ogaldternative.com/ But if I do a lookup on the hostname (or a * record), I get the IP address Name: ogaldternative.com Address: 121.10.172.22 Aliases: *.ogaldternative.com
  2. bipsen

    URL tracking

    Hi. When submitting spam, spamcop tries to resolve the DNS name from URL's that are included ind the mail. It could be, e.g. http://63GHfw.suspect-domain.com SpamCop tries to resolve 63GHfw.suspect-domain.com - which might end up negative (no A or CNAME record). - But it could be, that the spammer has set up a * record - so that all requests to hosts on suspect-domain.com (except those with a specific record) hits a webserver - where they can track the hostname (in this case 63GHfw), and maybe use that for an index of a valid email of a user who clicked the URL in their mail... I'd like SpamCop to be able to search for this * record - in order to identify a possible web-server, that handles a spamvertized web-page.... Regards /Brian
×