Resending [Phishing net and international characters]

Denis Beauchemin Denis.Beauchemin at USHERBROOKE.CA
Fri Aug 26 18:37:10 IST 2005

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Hello Julian,

Someone told me that our phishing net believes ALL accented characters 
are bad, as seen here:
<a href=""><font color="red"><b>MailScanner 
soup&ccedil;onne le lien "" d'&ecirc;tre une tentative de 
fraude de la part de</b></font> www.&eacute;.com</a><br>

The source of the message was:
<a href="">www.&eacute;.com</a>

I know there are many vulnerabilities with IDN, but they will probably 
get mainstream soon.  I found this article about Netscape 7 that dates 
back July 2003:

So, is this a bug in MS or a desing decision?

Thanks again!

PS: I sent this message 2 hours ago and I still haven't seen it back...

  °v°   Denis Beauchemin, analyste
 /(_)\  Université de Sherbrooke, S.T.I.
  ^ ^   T: 819.821.8000x2252 F: 819.821.8045

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki ( and
the archives (

Support MailScanner development - buy the book off the website!

    [ Part 2, "S/MIME Cryptographic Signature"  ]
    [ Application/X-PKCS7-SIGNATURE  4.4KB. ]
    [ Unable to print this part. ]

More information about the MailScanner mailing list