Broken or Nonexistent Links

Did you receive an insanely stupid spam message? Or yet another spam message with (!!) no URL? Post it here so we can continue to laugh at mentally-challenged spammers.

Re: Broken or Nonexistent Links

Postby spamislame » Tue Jun 30, 2009 3:02 pm

Nodus wrote:Ok, this one's really a winner:


No kidding.

Someone in Japan posted this to their blog as well:

http://blog.livedoor.jp/infomaniac/arch ... 20791.html

Nodus wrote:What software uses this kind of templates? I can't even be sure what they are pushing, but I guess it could be another ED product... :roll:


In fact many of the botnet-supported mailing software including both DarkMailer and WarpSpeedMailer will accept these templates.

Whoever is sending it must have only just purchased / stolen / cracked their copy of this software. I hope they're really disappointed with their conversion ratios.

Just retarded.

SiL
User avatar
spamislame
Site Admin
 
Posts: 5057
Joined: Tue May 09, 2006 9:18 am

Re: Broken or Nonexistent Links

Postby AlphaCentauri » Tue Jun 30, 2009 9:56 pm

lol, it's like spam mad libs!

This one appears to be Dr. Maxman:
http://welcome-hammond.blogspot.com/200 ... ility.html

based on the misspellings of "desire" and "pill."

Unimaginable growth of virility

Are you afraid of the most usual disaster of all men?
Does your energy make it difficult for you to show yourself in delicate sphere?

Boost the stud inside you! Give your masculinity the unlimited charge of fervor and desire!
You can achieve it simply by swallowing one pilule orally! The perfect set of deisire-improving ingredients with decades of real life tests and thousands of testimonials!

Your solution for being a male!


Not that it makes all that much more sense with the words filled in. :lol:
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: Broken or Nonexistent Links

Postby AlphaCentauri » Tue Jun 30, 2009 10:06 pm

spamislame wrote:Someone in Japan posted this to their blog as well:

http://blog.livedoor.jp/infomaniac/arch ... 20791.html


Here, too:
http://southeastdorsetgreenparty.blogsp ... -mast.html

I think our brilliant spammer posted to forums all over before he figured out how to use his spamming software, too.
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: Broken or Nonexistent Links

Postby GHeather_UK » Fri Jul 03, 2009 6:10 pm

"File Not Found:/home/mailer/default/html/./users/superking/emails/Babysitters/hi.txt

Looking for Extreme uncensor Videos of Exploited babysitters?

Check Exploited babysitters now

Tatyana.dminr@

This connect is banned in 32 countries, including usa..u will be shocked.


well well welllmyname is anehmyname is afedmyname is ausnewshumanitiesislammyname is ahtml
no herHow odo heM c ren p ge
PeacewasfinallysignedbetweenGreatBritainandtheUnitedStatesonChristmasEveinThetermsofthetreatycalledfortherestorationoffortsandterritoriesthathadbeencapturedbybothcountriesThefuturesentimentsoftheBritishcolonieshoweverhadbeenmadealittlemorecertainStrongfeelingsofnationalpridehadbeenarousedamongthepeopleAlllikelihoodofaunionbetweentheUnitedStatesandCanadahaddisappearedSeealsoWarofStruggleforSelfGovernment
everything we construct is about. We are here, alive, so why not"



"File not found" missing parameters and no URL... ? (E-mail address munged to protect the probably innocent)
GHeather_UK
Spam Observer
 
Posts: 51
Joined: Fri May 25, 2007 3:49 am

Re: Broken or Nonexistent Links

Postby AlphaCentauri » Fri Jul 03, 2009 6:58 pm

GHeather_UK wrote:E-mail address munged to protect the probably innocent


Probably not innocent. Tatyana's been busy:
http://wadalbasha.blogspot.com/

It looks like the idea is to amass a large number of email addresses of people interested in porn.
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: Broken or Nonexistent Links

Postby GHeather_UK » Fri Jul 03, 2009 7:18 pm

Fair enough, in that case munged to stop any more self manipulating spanners from contacting spammers...

I wonder how efficient such a spamming campaign is. Although I have recently seen a slight rise in URL's being munged to try and get around some of the automatic reporting mechanisms (eg www . spammedurl dot com), generally speaking these had dried up. I'm guessing that if someone is too lazy (or not smart enough) to type an address into a browser in the absence of a clickable link, they're not likely to type out even the shortest of e-mails. Hopefully it's a sign of desperation on the spammer's part.
GHeather_UK
Spam Observer
 
Posts: 51
Joined: Fri May 25, 2007 3:49 am

Re: Broken or Nonexistent Links

Postby Benzyl » Thu Aug 13, 2009 8:04 am

Dear Ally Bank (former GMAC Bank) customer

Blah blah blah

httq://secure.ally.com.gerraswe.com/all ... e@o2.co.uk

i.e gerraswe.com, however it's always a good idea to register that phishing domain before you send mail otherwise it really can't work despite your best obfuscation.

And another - http://secure.ally.com.cstlkk.li/allyWe ... l@o2.co.uk
just as broken but at least they registered it this time.
Last edited by Benzyl on Fri Aug 14, 2009 9:41 am, edited 1 time in total.
Ruffian antics are a wrench in society's gears
User avatar
Benzyl
Spam Muncher
 
Posts: 889
Joined: Wed Jan 03, 2007 10:19 am
Location: North Britain

Re: Broken or Nonexistent Links

Postby spamislame » Thu Aug 13, 2009 10:43 am

Benzyl wrote:Dear Ally Bank (former GMAC Bank) customer


This guy has been spamming the bejesus out of most of my colleagues' inboxes starting in mid-June. At that time he was spamming a link to a ZBot exe file claiming to be a "Crucial Microsoft Update". [See GarWarner] Then on July 1st it claimed to be a link to a video answering the question "Who killed Michael Jackson?". [See GarWarner]

Then each of the following:

July 3rd: Fireworks video download [See GarWarner]
July 5th: a USAA phishing site
July 14th: Comerica bank for three full days of rampant phish spamming.
July 18th - 20th: Ebay
July 22nd - Aug. 9th: Ally bank
Aug. 10th: Bank of America
Aug. 11th: Key bank.

This can't be very successful, especially since - as you mentioned - MOST of this guy's domains are always D.O.A. when the message arrives. (And I check from four geographic locations.)

I've of course been reporting every single one of these but you have to wonder: exactly how much legitimate data is this guy actually able to gather?

Ridiculous.

SiL
User avatar
spamislame
Site Admin
 
Posts: 5057
Joined: Tue May 09, 2006 9:18 am

Yahoo Groups redirection to software piracy - not there

Postby Red Dwarf » Thu Aug 13, 2009 8:20 pm

YahooGroups redirections to non-eistent Software Piracy site

Now it is so easy and convenient to buy software that you don’t even have to leave your home. You can order the desired products online and we will deliver it exactly to your place. It is fast, safe and secure.
 

Just a short click
http://groups.yahoo.com/group/myxuqebihugoc80/message/1


also
http://groups.yahoo.com/group/xetewuxevopeh13/message/1


Redirect to http://vopientoras.com/ only that site is not registered.
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10519
Joined: Tue Jun 27, 2006 2:01 am

Re: Broken or Nonexistent Links

Postby pwillener » Sun Aug 16, 2009 11:30 pm

Got about a gazillion over this weekend, all with the same "link":
Code: Select all
<A href="{spammitlink}" ...
User avatar
pwillener
Spam Investigator
 
Posts: 253
Joined: Wed May 30, 2007 1:51 am
Location: Tokyo, Japan

Re: Broken or Nonexistent Links

Postby Benzyl » Tue Aug 18, 2009 12:21 pm

Alliance and Leicester (regional savings and loan sort of thing) phish which I get in clumps from time to time and which in the last few months has resulted in one that worked for about twelve hours. Todays examples - jutersw.net jutersz.net and berwas.net , did they work? No. Were they registered domains? No. About the only height left for them to scale would be emails saying 'giv me yor muny!!!' with no destination for the remuneration, the stupidity leaves me with few words to describe it. A new one today - geljuz.net , unregistered domain of course.
Ruffian antics are a wrench in society's gears
User avatar
Benzyl
Spam Muncher
 
Posts: 889
Joined: Wed Jan 03, 2007 10:19 am
Location: North Britain

Re: Broken or Nonexistent Links

Postby roberto7888 » Tue Sep 29, 2009 8:57 am

Return-Path: <stateroomsq5@ultrasonic-cleaner.com>
Received: from mwinf2e05.orange.fr (mwinf2e05.orange.fr)
by mwinb7504 (SMTP Server) with LMTP; Tue, 29 Sep 2009 13:59:52 +0200
X-Sieve: Server Sieve 2.2
X-Bcc: xxxxxxxxxxxxxx
Received: from smtp2e.orange.fr (mwinf2e23 [10.232.14.123])
by mwinf2e05.orange.fr (SMTP Server) with ESMTP id 50E6F1C000A3;
Tue, 29 Sep 2009 13:59:52 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2e23.orange.fr (SMTP Server) with ESMTP id 4728720000A7;
Tue, 29 Sep 2009 13:59:52 +0200 (CEST)
Received: from speedtouch.lan (unknown [92.85.120.26])
by mwinf2e23.orange.fr (SMTP Server) with ESMTP id 107F22000094;
Tue, 29 Sep 2009 13:59:35 +0200 (CEST)
X-ME-UUID: 20090929115935676.107F22000094@mwinf2e23.orange.fr
Message-ID: <000d01ca40fc$444577a0$6400a8c0@stateroomsq5>
From: "Amy Mackey" <stateroomsq5@ultrasonic-cleaner.com>
To: <xxxxxxxxxxxxxxxxxxxxxxxx>
Subject: [spam] *** SPAM ***=?koi8-r?B?SWYgeW91IGRvbpJ0IHdhbnQgdG8gc3BlbmQgbXVjaCBtb25leSBvbiBh?=
=?koi8-r?B?IHdhdGNoLg==?=
Date: Tue, 29 Sep 2009 14:59:15 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01CA40FC.444577A0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-me-spamlevel: high
X-me-spamrating: 95.500000
X-me-spamcause: OK, (550)(1000)gggruggvucftvghtrhhoucdtuddrvdekhedrvddtucetggdotefuucfrrhhofhhilhgvmecuoffgnecuuegrihhlohhuthemuceftddtnecuuffokfefucdludehtddmneflfhhkucdlvddttddmnefprghttghhieculddvtddtmd
X-Text-Classification: spam
X-POPFile-Link: http://127.0.0.1:8080/jump_to_message?view=11874


This is a multi-part message in MIME format.

------=_NextPart_000_0007_01CA40FC.444577A0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable





body {
font: 14px/17px "Trebuchet MS", tahoma, arial;
text-align: justify;
}
a {text-decoration:none; color:#009999;}
img{border:none;}
p {
text-align: center;
margin-top: 30px;
font-weight: bold;
font-size: 13px;
}
ul{padding: 15px;}
h1 {
font-size: 20px;
font-weight: normal;
text-align: center;
padding: 9px 0 14px;
}







It=92s a well known fact that Swiss watches are considered to be the best i=
n the world!
They became so popular among the people all over the world due to their qua=
lity, functionality and nice look.

We are glad to offer you the exact copies of famous brands watches that are=
indistinguishable from the original.

Visiting our site you will find such world known brands as: Rolex Sports Mo=
dels, Bvlgari, Cartier, Chanel, Dior, Dolce & Gabbana and many other world-=
known brands.

Search for your bets match right NOW on this site Famous Daytona White Gold=
watch is only $209.00 this week. DON=92T miss your chance today. Only a fe=
w copies have left as for today. Feel yourself stylish and convenient with=
our watches. Impress your colleagues and friends with your new watch!

Besides that, you have a PERFECT OPPORTUNITY to buy exclusive jewelry, bags=
and wallets of famous brands at our site and make a wonderful present to y=
our friends or relatives. We assure you that once you buy something on our =
SITE you will always get the best quality for low price. So hurry up now an=
d make your best choice with us!




Only $209.00 this week!




------=_NextPart_000_0007_01CA40FC.444577A0
Content-Type: text/html;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3DWindows-125=
2">
<META content=3D"MSHTML 6.00.2900.2180" name=3DGENERATOR>
<STYLE>.
</STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<html>
<head>

<title></title>
<style type=3D"text/css">
body {
font: 14px/17px "Trebuchet MS", tahoma, arial;
text-align: justify;
}
a {text-decoration:none; color:#009999;}
img{border:none;}
p {
text-align: center;
margin-top: 30px;
font-weight: bold;
font-size: 13px;
}
ul{padding: 15px;}
h1 {
font-size: 20px;
font-weight: normal;
text-align: center;
padding: 9px 0 14px;
}
</style>
</head>
<body>
<table border=3D"0" align=3D"center" width=3D"50%">
<tr>
<td>

<h1>It=92s a well known fact that Swiss watches are considered to be the be=
st in the world!</h1>
They became so popular among the people all over the world due to their qua=
lity, functionality and nice look.

We are glad to offer you the exact copies of <a href=3D"http://{repredir}">=
famous brands watches</a> that are indistinguishable from the original.<br/=
><br/>

<b>Visiting our site you will find such world known brands as: <span style=3D=
"color:#33FFFF"><a href=3D"http://{repredir}">Rolex Sports Models, Bvlgari,=
Cartier, Chanel, Dior, Dolce & Gabbana and many other world-known brands</=
a></span></b>.<br/><br/>

Search for your bets match right NOW on <a href=3D"http://{repredir}">this =
site</a> Famous Daytona White Gold watch is <b><a href=3D"http://{repredir}=
">only $209.00 this week</a></b>. DON=92T miss your chance today. Only a fe=
w copies have left as for today. Feel yourself stylish and convenient with=
our watches. <br/><br/><center><b><a href=3D"http://{repredir}">Impress yo=
ur colleagues and friends with your new watch!</a></b></center><br/>

<br/>
Besides that, you have a <a href=3D"http://{repredir}">PERFECT OPPORTUNITY<=
/a> to buy exclusive jewelry, bags and wallets of famous brands at our site=
and make a wonderful present to your friends or relatives. We assure you t=
hat once you buy something on our <a href=3D"http://{repredir}">SITE</a> yo=
u will always get the best quality for low price. So hurry up now and make =
your best choice with us!

</td>
</tr>
<tr>
<td align=3D"center"><a href=3D"http://{repredir}"><h1>Only $209.00 this we=
ek!</h1></a></td>
</tr>
</table>
</body>

</html></BODY></HTML>

------=_NextPart_000_0007_01CA40FC.444577A0--
User avatar
roberto7888
Spam Muncher
 
Posts: 842
Joined: Tue Jan 02, 2007 11:04 am

Re: Broken or Nonexistent Links

Postby spamislame » Tue Sep 29, 2009 9:18 am

"{repredir}" = Replica Redirect.

At least they're finally getting that they shouldn't name them after their affiliate program. Of course that still doesn't solve this idiot's problem.

I hope he's complaining to them as well. :) "These sites don't convert. You guys are liars!!" :lol:

SiL
User avatar
spamislame
Site Admin
 
Posts: 5057
Joined: Tue May 09, 2006 9:18 am

Re: Broken or Nonexistent Links

Postby pwillener » Mon Oct 19, 2009 9:54 pm

Are you ready for rep watches line on 2010? It is here %CUSTOM_CREATIVE_DOMAIN

Good luck with your "business"!
User avatar
pwillener
Spam Investigator
 
Posts: 253
Joined: Wed May 30, 2007 1:51 am
Location: Tokyo, Japan

Re: Broken or Nonexistent Links

Postby pwillener » Tue Oct 20, 2009 1:25 am

<html>
<font size=3 color=000000 face=arial>
<b>Hydrocodone, Vicodin, Codeine, Phentermin, Rita1in, K1onopin</b><br>
Buy all HardMeds pills at Wholesale price<br>
Compare our prices with other pharmacies and you will see we save you 70% to 85%<br>
<br><a href=http://yourvicodin.net target=_blank><font color=0000FF size=5><u><b>Buy Direct from wholesaler today!</b></font></u></a></font>
</html>

yourvicodin.net is not even registered. Good luck with your "business", moron!
User avatar
pwillener
Spam Investigator
 
Posts: 253
Joined: Wed May 30, 2007 1:51 am
Location: Tokyo, Japan

PreviousNext

Return to Sloppy, Lazy and Stupid Spammers

Who is online

Users browsing this forum: No registered users and 1 guest