I received a phishing e-mail that contained this URL:
http://z0kr.com%2F%40@%E2%80%8Bz0kr.imonation.fr%E2%80%8B

%E2%80%8B = ZERO-WIDTH SPACE
Spamcop chokes on it and cannot decode the URL correctly.
I cannot imagine a innocuous use of this character in a URL. There are
probably many other dangerous Unicode characters.

Well, it can be triggered by bugs but even here it is toxic:
https://stackoverflow.com/questions/63187010/e2808b-appears-in-url-net-core

PS: is this the right place to submit spam samples?

MA

Reply via email to