?
Solved

encoded url's in spam email

Posted on 2004-10-18
9
Medium Priority
?
167 Views
Last Modified: 2013-12-04
Anyone know of an app to decrypt url's like this one
http://%32%31%36%2E%32%30%37%2E%36%30%2E%33%36:%38%37/%73%74/%69%6E%64%65%78%2E%68%74%6D
I know these "phishing" emails all seem to point to some url and then port 87, i would like to decrypt this url to find the port 87 part.
Thanks.
0
Comment
Question by:TuscolaCounty
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
9 Comments
 
LVL 17

Expert Comment

by:Lobo042399
ID: 12338577
216.207.60.36:38/st/index.htm

Open your Character Map (Start>Programs>Accesories>System Tools). Select a Unicode font (look for any that has the big "O" icon.) Hitting on any of the regular letters and numbers will display their Unicode code.

Good Vibes!

Lobo
0
 
LVL 49

Accepted Solution

by:
sunray_2003 earned 750 total points
ID: 12338581
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 12338592
The above software , you can just open the software after installing.

Then go to Tasks --> URL decoder
paste the url that you have in the email and press OK and it should give you the result..
0
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

 

Author Comment

by:TuscolaCounty
ID: 12338640
Which version of the software? Workstation?
And the character map thing, I am not able to find how to decode using that.
0
 

Author Comment

by:TuscolaCounty
ID: 12338647
wait, wrong software, i downloaded netdemon, will try. tnx
0
 

Author Comment

by:TuscolaCounty
ID: 12338670
ok, netdemon has decoded the url, here is it's findings: But it doesn't tell me which part of the coded url is the port 87 part.

http://%32%31%36%2E%32%30%37%2E%36%30%2E%33%36:%38%37/%73%74/%69%6E%64%65%78%2E%68%74%6D

--- Decoded all hex characters: (note: this result may not be a valid URL)

http://216.207.60.36:87/st/index.htm

--- Broken down URL components:

 Protocol:  http
     Host:  216.207.60.36
     Port:  0
     Path:  /st/
     File:  index.htm

--- Decoded URL:

http://216.207.60.36:0/st/index.htm

--- resolving IP [216.207.60.36], please wait...

 216-207-60-36.gssmail.com [216.207.60.36]
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 12338690
TuscolaCounty,

Why do you want to know about port 87 and where did you find it
0
 

Author Comment

by:TuscolaCounty
ID: 12338992
We receive "phishing" emails (spam of sort) and are trying to block them through our email server anti-spam filter. They are quite hard to block because there is reallyno unique body text, url, from address or anything else. The one thing they all seem to have in common is that whatever url they are pointing at is set to use port 87.
See above analisys from netdemon.
I have figured a way to block them though, set up a rule to block any email containing body text http://%
And it catches the encoded urls.
Giving the points to sunray 2003 for the link to netdemon.
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 12339011
Glad i was able to assist
0

Featured Post

Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Have you created a query with information for a calendar? ... and then, abra-cadabra, the calendar is done?! I am going to show you how to make that happen. Visualize your data!  ... really see it To use the code to create a calendar from a q…
Suggested Courses
Course of the Month11 days, 9 hours left to enroll

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question