Stupid URLs

Did you receive an insanely stupid spam message? Or yet another spam message with (!!) no URL? Post it here so we can continue to laugh at mentally-challenged spammers.

Stupid URLs

Postby meep » Fri Mar 04, 2011 1:28 pm

This URL is very stupid, has an @ sign in it. I do know that people who are new to the internet often insert an @ when they are trying to say a domain name, they will often mix it up with an email address: user@domain.com

:roll:
URL in this spam: www .sasha@wa-p.by.ru/Wsz4YDc6UG.html

Sender IP: X-SOURCE-IP: [82.71.204.27]

sample:
________________________________________
From: ВКонтакте.ру [admin@vkontakte.ru]
Sent: Saturday, February 05, 2011 8:40 AM
To: xxxxxxxx
Subject: life of viagra

boundary="----------A9A1442D26B7E"

------------A9A1442D26B7E

<p>
<a href="hxxp://www.sasha@wa-p.by.ru/Wsz4YDc6UG.html">natural herbs used as viagra</a></p>

------------A9A1442D26B7E--
User avatar
meep
Spammers' Nightmare
 
Posts: 2777
Joined: Thu Apr 05, 2007 4:10 pm

Re: Stupid URLs

Postby Nodus » Fri Mar 04, 2011 2:59 pm

Using @ in a URL is usually for logging in a site requiring authentication, in the form username:password@www.domain.com, and that's what FireFox tried to do in this case, too:

You are about to log into the site "wa-p.by.ru" with the username "www%2Esasha", but the website does not require authentication. This may be an attempt to trick you.

It's obviously a spammer mistake. wa-p.by.ru/Wsz4YDc6UG.html redirects to tabletshealthmedsplus.com, which is a Canadian Neighbor Pharmacy site.
Arf, she said
User avatar
Nodus
Spammer Obliterator
 
Posts: 2285
Joined: Fri Jun 15, 2007 7:05 pm

Re: Stupid URLs

Postby meep » Fri Mar 04, 2011 3:42 pm

Yea, that is right, a URL for FTP contains an @ as in ftp://user:password@domain.com

I forgot to mention that specifically in my earlier post. Thanks, Nodus.
User avatar
meep
Spammers' Nightmare
 
Posts: 2777
Joined: Thu Apr 05, 2007 4:10 pm

Re: Stupid URLs

Postby Volksjaeger » Mon Apr 04, 2011 5:45 am

I still smile when I see this one.
tabletnastyspillsrx.at
:lol:
Verloren ist nur, wer sich selbst aufgibt!
User avatar
Volksjaeger
Spam Muncher
 
Posts: 787
Joined: Thu Dec 25, 2008 8:39 pm

Re: Stupid URLs

Postby NotBuyingIt » Mon Apr 04, 2011 11:04 am

Volksjaeger wrote:I still smile when I see this one.
tabletnastyspillsrx.at
:lol:
OK, then, for more fun, you might use the service http://wheregoes.com/ to view the current destinations of the unsavory redirection URL
    hXXp://www.ela.region-rabka.pl/go.friend.php
The destinations alternate with a short time interval.

By the way, I have a slightly redacted specimen of malware-generated email that promotes the tabletnastyspillsrx.at online pharmacy scam; I have a few simple questions about the authenticity of its message headers. It was transmitted through the Comcast network in the northeastern USA. Would anyone on InBoxRevenge be familiar with Comcast headers and be willing to take a look?
NotBuyingIt
Spammer Killing Machine
 
Posts: 612
Joined: Sun Jun 13, 2010 5:22 pm

Re: Stupid URLs

Postby Red Dwarf » Mon Apr 04, 2011 7:10 pm

NotBuyingIt wrote:OK, then, for more fun, you might use the service http://wheregoes.com/ to view the current destinations of the unsavory redirection URL
    hXXp://www.ela.region-rabka.pl/go.friend.php
The destinations alternate with a short time interval.

>www.ela.region-rabka.pl/go.friend.php - - (80.53.55.74)
redirects to sites

drugstorechain.at/index.php?product=11
medsrxtablets.at/index.php?product=19
pharmacydrugstorechains.at/index.php?product=14
tabletnastyspillsrx.at/index.php?product=13

Registered on NIC.AT by Russian registrants

The last 2 digits vary from 11 to 99
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: Stupid URLs

Postby Nodus » Tue Apr 19, 2011 12:44 pm

quick-slimer.ru

Somehow I suspect they have forgotten another 'm' from there... :)
Arf, she said
User avatar
Nodus
Spammer Obliterator
 
Posts: 2285
Joined: Fri Jun 15, 2007 7:05 pm

Re: Stupid URLs

Postby Nodus » Wed Jul 27, 2011 11:47 am

idiotreturn.com (Greenline Pharmacy)

"So, you didn't get it the first time you were ripped off, did you..."
Arf, she said
User avatar
Nodus
Spammer Obliterator
 
Posts: 2285
Joined: Fri Jun 15, 2007 7:05 pm

Re: Stupid URLs

Postby Red Dwarf » Thu Aug 11, 2011 11:12 pm

What dickhead ViaGrow spammer tries to sell penile enlargement meds on a domain name like burstdick.com ?

The same one who also uses the uninspiring domain minispenis.com I suppose.
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: Stupid URLs

Postby Nodus » Fri Dec 02, 2011 11:22 am

talibandietpharm.be

What kind of images does that bring to your mind? Surely not those of any legitimate Canadian pharmacy (Canadian Health&Care Mall).

:roll:
Arf, she said
User avatar
Nodus
Spammer Obliterator
 
Posts: 2285
Joined: Fri Jun 15, 2007 7:05 pm

Re: Stupid URLs

Postby Red Dwarf » Tue Dec 13, 2011 3:52 pm

http://steve-gasque-this-site-serves-malware-courtesy-steve-gasque-8515woodhaven-bethesda-steve-is-pornhost-greenguy-steve-gasque-is-phoney-remax-agent-launders-money-via-mortgage-fraud.justupp.com

The one-day-wonder

Domain Name: JUSTUPP.COM
Registrar: CENTER OF UKRAINIAN INTERNET NAMES
CLIENT HOLD
Creation Date: 16-Oct-2011
Modification Date: 16-Oct-2011

Domain servers in listed order:
ns1.tenten10.ru
ns2.tenten10.ru
ns3.monday-thuesday.ro

Registrant:
Svetlana Poltavceva poltavtzeva.svetlana@yandex.ru
ul. Leninskaya 17 43
Yubileynyy, 141090
RUSSIAN FEDERATION
+7.4956548754
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: Stupid URLs

Postby AlphaCentauri » Tue Dec 13, 2011 5:18 pm

Red Dwarf wrote:Registrant:
Svetlana Poltavceva poltavtzeva.svetlana@yandex.ru
ul. Leninskaya 17 43
Yubileynyy, 141090
RUSSIAN FEDERATION
+7.4956548754


I've seen that before:
http://spamtrackers.eu/wiki/index.php/H ... #Targets_2
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: Stupid URLs

Postby Red Dwarf » Tue Dec 13, 2011 10:51 pm

Domaintools reports:

Current Domains 3,450

Email Search:
Svetlana Poltavceva poltavtzeva.svetlana@yandex.ru
is associated with about 3,429 domains

Déjà vu alright!
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: Stupid URLs

Postby spamislame » Thu Dec 15, 2011 11:31 am

Red Dwarf wrote:http://steve-gasque-this-site-serves-malware-courtesy-steve-gasque-8515woodhaven-bethesda-steve-is-pornhost-greenguy-steve-gasque-is-phoney-remax-agent-launders-money-via-mortgage-fraud.justupp.com

The one-day-wonder

That's certainly interesting though, at least to me.

Someone has a vendetta against GreenGuy, who is actually VERY well known on porn spamming forums - and porn industry forums, notably gfy.com.

I wasn't aware of the mortgage fraud angle. I might just go on a little hunt to see i that bears out.

What was the topic of the spam that featured this url?

Interesting.

SiL
User avatar
spamislame
Site Admin
 
Posts: 5057
Joined: Tue May 09, 2006 9:18 am

Re: Stupid URLs

Postby Red Dwarf » Thu Dec 15, 2011 3:33 pm

spamislame wrote:What was the topic of the spam that featured this url?

Interesting.


I can't help you there, I just spotted it in a passive DNS listing and yes, it did catch my eye !
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am


Return to Sloppy, Lazy and Stupid Spammers

Who is online

Users browsing this forum: No registered users and 1 guest

cron