[ILUG] Ignorant question on spam

[Philip Reynolds]

2008/9/10 Kae Verens <kae at verens.com>:
> case2:
> http://www.paypal.com:a-long-string-to-maybe-fool-you@www.attacker.com/
> this is a more insidious attack, in that most non-techy people don't realise
> that the server being sent to here is www.attacker.com and doesn't go near
> www.paypal.com at all. most techies might catch it, but it might fool them
> at first glance.

Sneakier again might be usnig the long version of the IP address which
most browsers will accept also.

Online ip2long converter here for examples:
http://www.tools4noobs.com/online_php_functions/ip2long/

Throw this into your case 2 above, and you now have a string that
would fool a good deal of people.

   http://www.paypal.com:a-long-string-to-maybe-fool-you@1074721852/

Phil.