[Full-Disclosure] Phishing scam - Obfuscated url help please

Matthias Benkmann msbREMOVE-THIS at winterdrache.de
Fri Jan 23 10:34:34 GMT 2004


On Fri, 23 Jan 2004 11:38:22 +1100 "Zach Forsyth"
<Zach.Forsyth at kiandra.com> wrote:

> Hi there,
> 
> Just wondering if someone could help me work out where this url actually
> points.

An easy way to de-obfuscate this is to give your browser this URL. Works
at least with Mozilla, but I think other browsers support the javascript:
pseudo-protocol, too. 

javascript:alert(decodeURI('<obfuscated-URL-here>'))




Full-Disclosure is hosted and sponsored by Secunia.