RE: strange domain name in phishing email

[<auto62996 () hushmail com>]

Octal with eights in it?? As mentioned, it works works fine with 
IE6 if you remove the final /

-----Original Message-----
From: full-disclosure-bounces () lists grok org uk [mailto:full-
disclosure-bounces () lists grok org uk] On Behalf Of Edward Pearson
Sent: 14 March 2006 13:24
To: full-disclosure () lists grok org uk
Subject: RE: [Full-disclosure] strange domain name in phishing email


IE5 was the last version of IE to support that kind on octal URL. 
In IE6 it has been deprecated.

-----Original Message-----
From: full-disclosure-bounces () lists grok org uk [mailto:full-
disclosure-bounces () lists grok org uk] On Behalf Of Julien GROSJEAN -
 Proxiad
Sent: 14 March 2006 08:45
To: full-disclosure () lists grok org uk; abryson () bytefocus com
Subject: Re: [Full-disclosure] strange domain name in phishing email

I think you try to remove the slash at the end...
What about the logs ?



Alice Bryson a écrit :
> BTW, this kind of ip address would not always work. i try to use 
> http://2887060730/ to access an internal web server  > 
http://172.21.12.250, but failed.  > It said 400 bad request.  > I 
use Windows XP IE 6, web server is Apache on Windows 2003, does  > 
anyone know why?





Concerned about your privacy? Instantly send FREE secure email, no account required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/