4 Fixed title.
| link

malicious links Malicious Links that respondRespond to browsersBrowsers but not curl or wget

    Tweeted twitter.com/#!/StackSecurity/status/334761861079760896
3 Add spaces back to break malicious URLs.
source | link

There are some emails with links to people's cracked websites with a malware download

Like this kind of email: fake DHL pack station email

... the links often take the form of:

http:// www.mandyhank.com /sbfdiqr.php?get_info=ss00_323
http:// sasfamily.com /fpxlcaj.php?get_info=ss00_323
http:// tfdesignsandpcrepair.com /dinwnle.php?get_info=ss00_323

And, until the site is taken down or fixed, going there with a browser will download a zip file containing an exe trojan.

But trying to wget or curl it gets:

Not Found
The requested URL was not found on this server.

I've tried to use the same user-agent string from my browser in curl. How can I get a copy of the landing page HTML so I can follow it the rest of the way? I doubt it's a JS thing, my browser runs with JS disabled.

There are some emails with links to people's cracked websites with a malware download

Like this kind of email: fake DHL pack station email

... the links often take the form of:

http://www.mandyhank.com/sbfdiqr.php?get_info=ss00_323
http://sasfamily.com/fpxlcaj.php?get_info=ss00_323
http://tfdesignsandpcrepair.com/dinwnle.php?get_info=ss00_323

And, until the site is taken down or fixed, going there with a browser will download a zip file containing an exe trojan.

But trying to wget or curl it gets:

Not Found
The requested URL was not found on this server.

I've tried to use the same user-agent string from my browser in curl. How can I get a copy of the landing page HTML so I can follow it the rest of the way? I doubt it's a JS thing, my browser runs with JS disabled.

There are some emails with links to people's cracked websites with a malware download

Like this kind of email: fake DHL pack station email

... the links often take the form of:

http:// www.mandyhank.com /sbfdiqr.php?get_info=ss00_323
http:// sasfamily.com /fpxlcaj.php?get_info=ss00_323
http:// tfdesignsandpcrepair.com /dinwnle.php?get_info=ss00_323

And, until the site is taken down or fixed, going there with a browser will download a zip file containing an exe trojan.

But trying to wget or curl it gets:

Not Found
The requested URL was not found on this server.

I've tried to use the same user-agent string from my browser in curl. How can I get a copy of the landing page HTML so I can follow it the rest of the way? I doubt it's a JS thing, my browser runs with JS disabled.

2 Fix URLs.
source | link

There are some emails with links to people's cracked websites with a malware download

Like this kind of email: fake DHL pack station email

... the links often take the form of:

http:// www.mandyhank.com /sbfdiqr.php?get_info=ss00_323
http:// sasfamily.com /fpxlcaj.php?get_info=ss00_323
http:// tfdesignsandpcrepair.com /dinwnle.php?get_info=ss00_323

And, until the site is taken down or fixed, going there with a browser will download a zip file containing an exe trojan.

But trying to wget or curl it gets:

Not Found
The requested URL was not found on this server.

I've tried to use the same user-agent string from my browser in curl. How can I get a copy of the landing page HTML so I can follow it the rest of the way? I doubt it's a JS thing, my browser runs with JS disabled.

There are some emails with links to people's cracked websites with a malware download

Like this kind of email: fake DHL pack station email

... the links often take the form of:

http:// www.mandyhank.com /sbfdiqr.php?get_info=ss00_323
http:// sasfamily.com /fpxlcaj.php?get_info=ss00_323
http:// tfdesignsandpcrepair.com /dinwnle.php?get_info=ss00_323

And, until the site is taken down or fixed, going there with a browser will download a zip file containing an exe trojan.

But trying to wget or curl it gets:

Not Found
The requested URL was not found on this server.

I've tried to use the same user-agent string from my browser in curl. How can I get a copy of the landing page HTML so I can follow it the rest of the way? I doubt it's a JS thing, my browser runs with JS disabled.

There are some emails with links to people's cracked websites with a malware download

Like this kind of email: fake DHL pack station email

... the links often take the form of:

http://www.mandyhank.com/sbfdiqr.php?get_info=ss00_323
http://sasfamily.com/fpxlcaj.php?get_info=ss00_323
http://tfdesignsandpcrepair.com/dinwnle.php?get_info=ss00_323

And, until the site is taken down or fixed, going there with a browser will download a zip file containing an exe trojan.

But trying to wget or curl it gets:

Not Found
The requested URL was not found on this server.

I've tried to use the same user-agent string from my browser in curl. How can I get a copy of the landing page HTML so I can follow it the rest of the way? I doubt it's a JS thing, my browser runs with JS disabled.

1
source | link