UnrealIRCd Forums

4,15 i15 $+ $r(a,z) $+ 4r15 $+ $r(a,z) $+ 4c 4. 4i15 $+ $r(a,z) $+ 4z15 $+ $r(a,z) $+ 4m15 $+ $r(a,z) $+ 4i15 $+ $r(a,z) $+ 4r . c15 $+ $r(a,z) $+ 4o15 $+ $r(a,z) $+ 4m
4,15 i15 $+ $r(a,z) $+ 4r15 $+ $r(a,z) $+ 4c 4. 4A15 $+ $r(a,z) $+ 4n15 $+ $r(a,z) $+ 4k15 $+ $r(a,z) $+ 4a15 $+ $r(a,z) $+ 4r15 $+ $r(a,z) $+ 4a . 4c15 $+ $r(a,z) $+ 4o15 $+ $r(a,z) $+ 4m
4,15 i15 $+ $r(a,z) $+ 4r15 $+ $r(a,z) $+ 4c 4. A15 $+ $r(a,z) $+ 4n15 $+ $r(a,z) $+ 4t15 $+ $r(a,z) $+ 4a15 $+ $r(a,z) $+ 4l15 $+ $r(a,z) $+ 4y15 $+ $r(a,z) $+ 4a .15 $+ $r(a,z) $+ 4c15 $+ $r(a,z) $+ 4o15 $+ $r(a,z) $+ 4m
4,15 i15 $+ $r(a,z) $+ 4r15 $+ $r(a,z) $+ 4c 4. 4S15 $+ $r(a,z) $+ 4h15 $+ $r(a,z) $+ 4o15 $+ $r(a,z) $+ 4w15 $+ $r(a,z) $+ 4t15 $+ $r(a,z) $+ 4v15 4.15 $+ $r(a,z) $+ 4c15 $+ $r(a,z) $+ 4o15 $+ $r(a,z) $+ 4m

add to spamfilter?

Umm?

Well lol, i didn´t get what he wanted until i used his code with //echo in mIRC ... it´s an irc address in some colored way.
Do it yourself to see it, i can´t paste it with the colors.

Greetings
Christian 'cg' Gayer

Well I don't run mIRC so that was why I was asking. But anyway, does it actually display all those $r's in the channel? Or does it show the text it evaluates to?

codemastr wrote:Well I don't run mIRC so that was why I was asking. But anyway, does it actually display all those $r's in the channel? Or does it show the text it evaluates to?

Well, if you just copy/paste it as it is, mIRC won't evaluate ID's at all .

Sending it to //echo seems to simply remove the $r's. There's no definition of it in mIRC's helpfile, so I'm assuming it must have been a custom alias/identifier on the originator's client.

As to what it appears as (taking the top one): There's a bit of color: the background is gray, and the letters are red (but the code tag prevents me from showing this :/ ) .

No, $r is $rand. For whatever reason, mIRC treats $r as an alias for that. Since the background and text color is gray, those characters are hidden. Basically, it seems to be an IRC version of the email spam technique.
You hide stuff in the same color as the background color to trick spam filters. To the naked eye, it looks like spam, but to the spam filter it doesn't. Anyway, should be rather easy to block
i[a-z]r[a-z]c[a-z].[a-z]i[a-z]z[a-z]m[a-z]i[a-z]r[a-z].[a-z]c[a-z]o[a-z]m

Something like that should do the trick.

codemastr wrote:No, $r is $rand. For whatever reason, mIRC treats $r as an alias for that.

Hm... never knew that . Apparently, it's completely undocumented .

codemastr wrote:Since the background and text color is gray, those characters are hidden. Basically, it seems to be an IRC version of the email spam technique.
You hide stuff in the same color as the background color to trick spam filters. To the naked eye, it looks like spam, but to the spam filter it doesn't. Anyway, should be rather easy to block
i[a-z]r[a-z]c[a-z].[a-z]i[a-z]z[a-z]m[a-z]i[a-z]r[a-z].[a-z]c[a-z]o[a-z]m

Something like that should do the trick.

Interesting... maybe if support to match color codes in spamfilters was added - this technique could be blocked entirely... . Just getting that ^C character into the conf file would be tricky (but not so with /spamfilter ).

Echoed in mIRC, i got:
BUT you only see (due to colors):
The $r's are intentional, as they fill the spaces in the result with a random char to make the user think it is actually doing something important.

there is an example of it