Last visit was: Sat Jul 05, 2014 1:13 am
It is currently Sat Jul 05, 2014 1:13 am

Utter Nonsense Messages


All times are UTC - 5 hours [ DST ]


 [ 13 posts ] 
Author Message
 PostPosted: Fri Feb 27, 2009 11:03 am   
Site Admin
User avatar

Joined: Tue May 09, 2006 9:18 am
Posts: 5022
How are messages like this one profitable?

Quote:
Subject: venialness dallapiccola poularde remilitaarize

underbrim connection ddoorkeeper inverter

http://cid-2acf68b5c67a2b0d.spaces.live.com/blog/cns!2ACF68B5C67A2B0D!106.entry

underbrim connection ddoorkeeper inverter


Links to: http://sedud.com/

Idiotic. Boggles the mind that anyone would ever knowingly click through these links.

SiL


Top
 Profile  
 PostPosted: Fri Feb 27, 2009 11:03 am   
Site Admin
User avatar

Joined: Tue May 09, 2006 9:18 am
Posts: 5022
Uh... what?

Quote:
Hello, jarrodbernardcameron.

Febraly, Wednesday 25, 2009, 1:59:25 AM, you wrote:

>Hi Kish.
>Here's your picture, see what you got a good
>We have this picture posted on the school forum ho ho ho
>We are waiting for a response ...

The goats, if I tell the Pope, and perhaps he will find you and ...
This is where you have it you who gave the Joker? YES?


--
Best regards,
phredd mailto:[email protected]


Attachment "jenna.zip" detected by Macaffee as "Generic Malware.a!zip" (wow, could you be more vague?)

Idiots, all of them.

SiL


Top
 Profile  
 PostPosted: Fri Feb 27, 2009 11:16 am   
Spammers' Nightmare
User avatar

Joined: Thu Apr 05, 2007 4:10 pm
Posts: 2777
Assuming that was translated, the misspellings make it more incomprehensible. That's lame. :roll:


Top
 Profile  
 PostPosted: Fri Feb 27, 2009 1:08 pm   
Spam Investigator
User avatar

Joined: Wed Feb 04, 2009 3:23 pm
Posts: 342
spamislame wrote:
How are messages like this one profitable?...SiL


I've often asked the same question. :roll:

Hans


Top
 Profile WWW  
 PostPosted: Mon Mar 16, 2009 8:04 pm   
Spammers' Nightmare
User avatar

Joined: Thu Apr 05, 2007 4:10 pm
Posts: 2777
simply idiotic:

subject: If you were born in Los Angles, you better have a huge tool.
body
Quote:
Change your stick from weak to thick.

Hurry to come


Goes to maxman:
ciyohibug.cn


Top
 Profile  
 PostPosted: Thu Sep 17, 2009 9:38 am   
Spammers' Nightmare
User avatar

Joined: Thu Apr 05, 2007 4:10 pm
Posts: 2777
Pill spammer, pretty much nonsense, what a pathetic attempt at spamming.


SUBJECT: Lee P. Brewer


BODY
Code:
---------

What’s the zdr be xq st way to che bx at the lf agi nv ng for a man?

Swallow the zs tab that allows hi mo m dri wj ll hi bp s gi pd r li dkm ke ae a 25-old macho!

We re got the jw tabs you ne vpv e hyz d!

You just place pf your orde hl r – we lxj shi rz p i wi t!
No de amx lays, no ove egb rpayme bl nts and Only ce vvr rti myl fi hgo e rg d goods.
e nq asy and che ub ape ixr r than re prm gularly! Thi ext s i uh s our style akf !

www.bandend.com


Top
 Profile  
 PostPosted: Thu Sep 17, 2009 9:44 am   
Site Admin
User avatar

Joined: Tue May 09, 2006 9:18 am
Posts: 5022
That's actually only "nonsense" if your mail client will inhibit html output, which it appears yours does.

I received the same one to one of my accounts. Via the html output, that message looks like this:

Quote:
What's the best way to cheat the aging for a man?

Swallow the tab that allows him drill his gir like a 25-old macho!

We got the tabs you need!

You just place your order – we ship it!
No delays, no overpayments and Only certified goods.
easy and cheaper than regularly! This is our style!

www.bandend.com


Note that they did misspell "girl".

I don't know how many recipients of email ever turn off html view, but I doubt it's a large enough number for this to be unsuccessful.

SiL


Top
 Profile  
 PostPosted: Fri Oct 16, 2009 6:30 pm   
New member
User avatar

Joined: Thu Sep 17, 2009 6:37 am
Posts: 3
Hi, this is my first post.

I received a couple of these a little while ago, but they are even stranger in that they contain no links, no attachments, just one sentence of nonsense. I see no possible purpose for them at all.

Quote:
Subject: Plus
From: [email protected]

Opposite the unspecified pot dies the ongoing ray.


Quote:
Subject: Together
From: [email protected]

The specialized principal peers inside the knight.


Thats all they say.
Can anyone make sense of this, or work out what they could possibly be hoping to achieve?


Top
 Profile  
 PostPosted: Fri Oct 16, 2009 7:00 pm   
Spammers' Nightmare
User avatar

Joined: Thu Apr 05, 2007 4:10 pm
Posts: 2777
Quote:
... what they could possibly be hoping to achieve?


Probably test runs to try to evade spam filters. Usually that is what I think of seemingly nonsense spam, though don't you think most spam no matter what it is, is pure nonsense?


Top
 Profile  
 PostPosted: Fri Oct 16, 2009 7:31 pm   
You are kiillllling-a my bizinisss!
User avatar

Joined: Thu Mar 01, 2007 3:01 am
Posts: 5915
What is hard for me to understand is how this could poison spam filters if the volume of it isn't a significant percentage of spam. To keep things from getting too slow, spam filters tend to be pretty primitive, looking at single words or short strings and calculating a probability of an email with all those words being valid or spam. One occurrence of vi@gra will have a high spam rating, since it would almost never occur in good email. But you could get a lot of spam with a line in the body, "Men the larger wish it were so" before that would raise the likelihood of spamminess, since the filter is probably looking at the single words "men," "larger," and "wish," which are more common in spam, especially when all three are present in the same email, but which certainly occur in valid emails, too.

Sending out spam with innocuous and otherwise uncommon words would tend to lead to good emails being listed as spam. But with the high volume of spam being analyzed, sending spam with innocent words would likely have little effect on a spam filter's ability to recognize true positive spam.

There is always the possibility it is used for list washing -- given the number of English words, a nonsense sentence could uniquely identify an email address if someone reported the spam (or posted it on the internet).


Top
 Profile  
 PostPosted: Thu Apr 15, 2010 12:59 pm   
Spammers' Nightmare
User avatar

Joined: Thu Apr 05, 2007 4:10 pm
Posts: 2777
A stupid spammer can't get much worse than this utter nonsense:

The sender IP from India 120.61.14.12 is majorly blacklisted, no surprise.

Quote:
Partial Header:
X-Barracuda-Connect: triband-mum-120.61.14.12.mtnl.net.in[120.61.14.12]
...
X-Barracuda-Envelope-From: [email protected]
...
Received: from triband-mum-120.61.14.12.mtnl.net.in (triband-mum-120.61.14.12.mtnl.net.in [120.61.14.12]) by xxxxxxxx with ESMTP id t9SPolBTKf7rb2IH for <xxxxxx>; Wed, 14 Apr 2010 23:05:56 -0500 (CDT)
Received: from [120.61.14.12] by smtp.easydns.com; Thu, 15 Apr 2010 09:28:46 +0530
Delivered-To: xxxxxxx
Subject: abuse...


Body:
Quote:
Need sozme soopmcuyftwaptkre urgently? Purchause, dooviwnlokdabxeyd auggoqond instahsytfll right noqjqkw! Somgiglzftwamuuwre in English, Germaetygmnn, French,
Itailyliadn, aasvennd Spavhynish fouayur IBM PC awhnd Magcintobeytmsh! Cheaquvp prices give yohuu the popcjednssibility toegms sanwve ogttr buy mosqbrre
soxgftwaihzsqbre thagyn yoyxufu canxzn afefxuffowtrd purchaaqsing somyownnftwagtntopre owuytcin auy CD!

Purchajjgsvsing sopjrpvftwakkrevxre yoiu casckplun be sure yobwu get perfectly wozufuywrking soyyivzftwaizodcure, in caynymse yowku amzhklre nojifdgt sayoetisfied,
we ogffer moaxney refund. Quick respofmnse airdpond alcdvice oskqonn hofztgw torfjw instacafuvnll yomkur sotnpftwaonoqre axniecre guabqdvratdejrnteed.

Wovpksjrld Soyekdftwauhkybsre

okqygriginaojivtkl sonauzlzftwajpre olecynly!


Top
 Profile  
 PostPosted: Thu Apr 15, 2010 1:14 pm   
Site Admin
User avatar

Joined: Tue May 09, 2006 9:18 am
Posts: 5022
There was no HTML version?

That's usually a text email client interpreting the html, including the obfuscation text.

It's still stupid. That crap just gets instantly flagged by filters.

SiL


Top
 Profile  
 PostPosted: Thu Apr 15, 2010 2:48 pm   
Spammers' Nightmare
User avatar

Joined: Thu Apr 05, 2007 4:10 pm
Posts: 2777
good question, SiL. That was the entire body, no HTML email best I could tell (no links, etc). Really lame attempt.


Top
 Profile  
 [ 13 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot], Wayback machine and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  


Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Style originally created by Volize © 2003 • Redesigned SkyLine by MartectX © 2008