mrmaxx Posted May 2, 2006 Share Posted May 2, 2006 Tracking URL: http://www.spamcop.net/sc?id=z933057970z9f...8f23648bb19169z Spamvertised URL: http://0xd8db5834/photogallery/albums/user...ages/.phone.php SpamCop does not recognize this as a valid URL. I was able to decode it using a hex2dec convertor on the web. The hex part decodes to 216.219.88.52. This should go to abuse[at]hostdepartment.com or abuse[at]worldispnetwork.com Thanks. Link to comment Share on other sites More sharing options...
Wazoo Posted May 2, 2006 Share Posted May 2, 2006 Wierd .... sibject matter was fresh in my mind, so went looking for the previous/existing Topic to merge this post into ... couldn't find it .... However, .... [spamCop-List] Spamcop misses HEX obfuscated link is one thread starter, basically ends up with agreement that this is a fact. [spamCop-List] FYI - "Cannot resolve http://0xd8daf761 - gets into how to decode hes, why the leading sequence is 0x, the oddity that the single-line entry in the paste-your-spam-in-the-box window does decode a hex URL (I've pointed out hunfreds of times over the years that the single-line parse tool is a different branch of code than the whole-spam parse tool, only common at the 'joined' entry window) ... [spamCop-List] Cannot resolve hex address - specifies a PayPal phish Bottom line, lots of talk about it, it is a fact, amd as usual, that's about as far as it goes. I'll do my usual now that it's been brought up here and actually bring it to someone's attention .. not that it'll get solved immediately .... Link to comment Share on other sites More sharing options...
mrmaxx Posted May 2, 2006 Author Share Posted May 2, 2006 (snip) Bottom line, lots of talk about it, it is a fact, amd as usual, that's about as far as it goes. I'll do my usual now that it's been brought up here and actually bring it to someone's attention .. not that it'll get solved immediately .... 42499[/snapback] That's cool with me. I didn't even realize the SC would decode it if it were pasted into the box by itself. Maybe if we bug Julian, et al enough the code for the one-off decoding will be integrated into the code for parsing whole emails. Thanks, Wazoo... Link to comment Share on other sites More sharing options...
Wazoo Posted May 2, 2006 Share Posted May 2, 2006 From: "WazoO" To: deputies Subject: URLs encoded as hex Date: Tue, 2 May 2006 13:15:16 -0500 This has been brought up a number of times in the spamcop newsgroup. As usual, lots of extraneous discussion, but no action taken. User brought the issue up in the Forum, so now I'm asking. Is this at least being looked at? http://forum.spamcop.net/forums/index.php?showtopic=6285 Tracking URL of a sample; http://www.spamcop.net/sc?id=z933057970z9f...8f23648bb19169z Sample of URL in question; http://0xd8db5834/photogallery/albums/user...ages/.phone.php Hell, while I'm at it, how about someone 'official' (as RW's Forum response has been severely challenged) toss a post into the mix in the spamcop newsgroup at; Subject: Re: Wondering about how SpamCop works two or more users] Date: Mon, 1 May 2006 00:58:05 -0700 Message-ID: <e34f23$lqk$1[at]news.spamcop.net> Actual thread starts earlier, but .....Mike Easter challenges me on lack of cites, but I can't post e-mail contents from you folks just to make myself look good ... so I keep getting beat upon .. never mind the growing consensus that no one in charge is paying any attention. Why so many of these folks continue to carry on but don't actually ask is beyond me. Link to comment Share on other sites More sharing options...
Wazoo Posted May 2, 2006 Share Posted May 2, 2006 From: "Maxx Excaliber" <mrmaxx[at]spamcop.net> Newsgroups: spamcop.routing Subject: Hex URL confuses SC Date: Tue, 2 May 2006 16:26:27 +0000 (UTC) Organization: The Lumber Cartel (TINLC) Lines: 12Message-ID: <e3817j$2fj$1[at]news.spamcop.net> Should have been posted into the spamcop or spamcop.help newsgroup .... spamcop.routing deals with where reports should end up ... this is a parsing issue ... actually, it might have been better for you to have brought one of the existing threads back up to date, but that's actually a hard call .. the "list" function has already caused breakage in ethreads ..... Replied to that posting, crossposted and set follow-ups to the spamcop newsgroup. Link to comment Share on other sites More sharing options...
mrmaxx Posted May 2, 2006 Author Share Posted May 2, 2006 Should have been posted into the spamcop or spamcop.help newsgroup .... spamcop.routing deals with where reports should end up ... this is a parsing issue ... actually, it might have been better for you to have brought one of the existing threads back up to date, but that's actually a hard call .. the "list" function has already caused breakage in ethreads ..... Replied to that posting, crossposted and set follow-ups to the spamcop newsgroup. 42504[/snapback] Kewl. Works for me. Link to comment Share on other sites More sharing options...
StevenUnderwood Posted May 3, 2006 Share Posted May 3, 2006 That's cool with me. I didn't even realize the SC would decode it if it were pasted into the box by itself. Maybe if we bug Julian, et al enough the code for the one-off decoding will be integrated into the code for parsing whole emails. 42501[/snapback] I don't think that would be a good thing in hte long run. The reason for the difference is that the whole email parse generates reports so tries to be a bit more careful in what it finds. More reports on questionable links will cause more incorrect reports and spamcop reports being weighed less because of it. Link to comment Share on other sites More sharing options...
Wazoo Posted May 4, 2006 Share Posted May 4, 2006 From: "SpamCop/Ellen" To: "WazoO" Subject: Re: URLs encoded as hex Date: Thu, 4 May 2006 07:51:00 -0400 the hex-encoding in the url issue has been added to the bugs list Ellen SpamCop Please include all correspondence with replies Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.