Raul Thanks.
i have seen that text on many many occasions, but almost always in a different `wrapper` ie web site, `news org` etc. Presume their game is trawl fishing. They do seem to elude the big anti-spam machines though. Their software seems to trawl through ones address book repeatedly in small(ish) chunks. greg ~krsnadas.org -- from: Raul Miller [email protected] to: [email protected] date: 10 August 2012 06:46 subject: Re: [Jprogramming] (no subject) On Thu, Aug 9, 2012 at 5:22 PM, Zack Brannigan <[email protected]> wrote: > http://w..p.org/wp-content/plugins/test.php?freedom225.jpg For what it's worth, I had wget pull down this file. It went something like this (the proxy was fiddler): $ http_proxy=http://localhost:8888 wget 'http://watchmenhop.org/wp-content/plugins/test.php?freedom225.jpg' --2012-08-10 09:32:29-- http://watchmenhop.org/wp-content/plugins/test.php?freedom225.jpg Resolving watchmenhop.org (watchmenhop.org)... 50.63.50.1 Connecting to watchmenhop.org (watchmenhop.org)|50.63.50.1|:80... connected. HTTP request sent, awaiting response... 302 Found Location: http://alljobnews.ru/?w=kfh0795 [following] --2012-08-10 09:32:29-- http://alljobnews.ru/?w=kfh0795 Resolving alljobnews.ru (alljobnews.ru)... 50.7.247.2 Connecting to alljobnews.ru (alljobnews.ru)|50.7.247.2|:80... connected. HTTP request sent, awaiting response... 302 Found Location: http://jobsearchnews.net/weeknews/lastnews.php?i=kfh0795 [following] --2012-08-10 09:32:30-- http://jobsearchnews.net/weeknews/lastnews.php?i=kfh0795 Resolving jobsearchnews.net (jobsearchnews.net)... 205.209.142.221 Connecting to jobsearchnews.net (jobsearchnews.net)|205.209.142.221|:80... connected. HTTP request sent, awaiting response... 302 Found Location: http://jobsearchnews.net/weeknews/lastnews.html [following] --2012-08-10 09:32:32-- http://jobsearchnews.net/weeknews/lastnews.html Connecting to jobsearchnews.net (jobsearchnews.net)|205.209.142.221|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 60016 (59K) [text/html] If I had used a different client (something other than wget) I might have gotten something different, but I wasn't interested enough to see what that might have been. Still... if I were wanting to promote a job search site, I do not think I would have used this tactic. Also, looking text file that was fetched, I am somewhat dubious that that's a legit job search site. (Followups, if any, should probably go to chat forum. I only responded here because the original message was sent here.) FYI, =-- Raul -- from: Zack Brannigan [email protected] via forums.jsoftware.com reply-to: [email protected] to: ... date: 9 August 2012 14:22 subject: [Jprogramming] (no subject) http://watchmenhop.org/wp-content/plugins/test.php?freedom225.jpg ---------------------------------------------------------------------- For information about J forums see http://www.jsoftware.com/forums.htm
