Andrew Spear wrote:

> There is no way a harvester to getting your email via CFMAIL as it is
> parsed on the server and never returned to the browser.  The only way
> would be if they obtained access to your server and were able to look at
> your source code.  Can you post the URL to the page that you're worried
> about?

Here's my test code.  I've already shut down the email address used.
But, this was the ONLY place that address was EVER posted - and I got
SPAM less than 18 hours after putting in on a test page.

<cfmail
   to="[EMAIL PROTECTED]"
   from="Some Spammer"
   subject="SPAM HARVESTER ALERT"
   type="html"
   server="MyServerInfoHere">

address = #cgi.remote_addr#<br>
host = #cgi.remote_host#<br>
referer = #cgi.http_referer#<br>
agent = #cgi.http_user_agent#<br>
page = #cgi.script_name#<br>
</cfmail>

Here's the information from the email that came to me when the page was hit:

address = 64.243.28.77
host = 64.243.28.77
referer =
agent = Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; T312461; .NET
CLR 1.0.3705; .NET CLR 1.1.4322)
page = /myEmailList.cfm

I got SPAM just a few hours AFTER getting the alert email.

Here's the WHOIS information for the above:

Trying whois -h whois.arin.net 64.243.28.77

OrgName:    SAVVIS Communications Corporation OrgID:      SAVV
Address:    1 SAVVIS Parkway
City:       Town and Country
StateProv:  MO
PostalCode: 63017
Country:    US

NetRange:   64.240.0.0 </t/refer?a=64.240.0.0> - 64.243.255.255
</t/refer?a=64.243.255.255> CIDR:       64.240.0.0/14
</t/refer?a=64.240.0.0/14> NetName:    SAVVIS8
NetHandle:  NET-64-240-0-0-1
Parent:     NET-64-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.SAVVIS.NET </t/refer?a=NS1.SAVVIS.NET>
NameServer: NS2.SAVVIS.NET </t/refer?a=NS2.SAVVIS.NET>
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    2000-02-01
Updated:    2002-07-15

TechHandle: ZS36-ARIN
TechName:   SAVVIS Communications TechPhone:  +1-888-638-6771
TechEmail:  [EMAIL PROTECTED] </t/[EMAIL PROTECTED]>
OrgTechHandle: ZS36-ARIN
OrgTechName:   SAVVIS Communications OrgTechPhone:  +1-888-638-6771
OrgTechEmail:  [EMAIL PROTECTED] </t/[EMAIL PROTECTED]>



--
Les Mizzell
-------------------------
“Mihi placent, O Pincerna!
  Virent ova! Viret perna!
  Dapem posthac non arcebo.
  Gratum tibi me praebebo.”
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to