Gibberish in Spam Mail

Timothy Domst timothy.domst at verizon.net
Sat Mar 13 21:04:17 EST 2004


There was an interesting article in the NYTimes about this.  The  
spammers are trying to evade spam blockers by spelling the words  
differently than usual, i.e. with caps in the wrong places or numbers  
instead of letters.  The gibberish words are put there to make a spam  
blocking computer think they are unusual words that need to be let  
through by their unusual spelling;  this one is a cruder attempt.   
Slicker spammers use a longer line of big SAT words in the header or  
body, like "conjunctive belligerent apricot epistolary" that are  
actually in a dictionary.

The article argued that the more gibberish and funky spellings they are  
forced to add by anti-spam software will eventually make their message  
completely unintelligible, so the recipient won't click on the link, so  
the spammer  won't get paid, so it won't be worth their while to spam  
anymore, so they'll stop.  We can only hope.

On Mar 9, 2004, at 8:44 PM, hawkwynd wrote:

>
> Periodically, when I look through some of the spam I receive, there's
> garbled text, and words that are not real words, like this spam email I
> use as an example:
>
> From rwaeckdndssz at post.com Tue Mar  9 20:39:25 2004
> Date: Tue, 09 Mar 2004 12:57:53 -0500
> From: Dorian Mclain <rwaeckdndssz at post.com>
> To: hawkridge at adelphia.net
> Subject: broil denunciate
>
> <html>
> <body>
> Viahgra -
> Cialbis - only <b>$2 per d0se</b>!<br>
> Tak<r>e it 0nc</5>e and it lasts <b>all
> weekencd.</b><br>Do not havee
> s<hbxro>ex timed to a pi</tgpzpytfn>ll.
> Ch00se the momentso when you wa<xdipbgrw>nt to have  
> int</zkwthf>imacyy.<br>
> Cialyis act<cfkfkktev>s
> qui</hdatwfyzf>cker (ab0ut 2o minutbes) and last much
> l0ngero (ab0ut 2-3 daysg) with NO SIDE EFFFECT.<br>
> The ch<pouaa>eapest pr</cfekcfap>ice!<br>
> <a  
> href="http://g.msn.com/0US!s5.45471_148155/HP.1001?http:// 
> herbalpill.net/sv/index.php?pid=eph4454">
> Gett it n0w!</a>
> <br><br><br><br><br><br><br><br><br><br>
> rem at ht<ssxiozanm>tp://herbalpill.net/<br>
> iwzkxvyu ctwxtr, zmevdkz ilhruuod sxafqmzh tpxpcpspd ajfhyu nejmfm  
> colzpjjib <br>
> abxew fcfwkzx mdals uhyyj nxvzkzmwa eeedgrom eonitzx ccmok vshzni  
> znuimrpse <br>
> owkzdg mnmop vrjjzmlkd jomcme iivogembs- owdouy jglhrqs njcdcnnno  
> jtpafvebo <br>
> jnxpxfbn ftmloyisb dizgjn ylvomjrmv qihgzjw djbdbdjs xmsbq xktqmfp  
> swnogsiv rhhaxkcg, slveulupv cisspj <br>
> vrcdwil rxofhjrc bgjafnn reqmeec hzufeze vadnfkk qjsqycsdb xwbzuh. <br>
> xcxrr- nvtfjvwv fjmmre ggkmqx. ovrfc vdyvgjkdx nrfmma luhntk ggrojnud  
> <br>
> stsbhp tduayz eumbnwwz heyupnpp afxvrmc rtzymo ymoysqdi, nnwibqgg  
> dkexbn kvtmaw dpctmd <br>
> rmvjshywq iasxr fjogdgbxw mkvkwq ahkichvr yrcgandn xwjbsgit omjlzo.  
> aqfbzldz qbbpr <br>
> kfxiuhuh ycikwx nrgnqb yaukqo dysvi qcxshd pgcoecav. fymgwyyfu iiaih  
> czobfyifq <br>
> ehhdvawyv vxxce tkpnhp hvbjzupr tfjbgm, aknpzkyq ckuas yplnygw  
> xokqtokex. <br>
> nleefv, owicbhhq- ydgmuf ccrbj mxkdfdkvc wrorrrmg omtry dlqzc qhdpiai.  
> lrzvuv dadvapo. <br>
> dngvzv behmok huqkaf wazmxar ehytw juhqbsats rkgmcl nbokyun plfmjvu  
> jgvnpeg yvydf <br>
> gtygnanz uzycwtpdg ekrnqtv, opyepuhcs fdaitjs qklookvme ujyxmxi  
> pialwlig kprno swjcv. kswxvpzs dbded <br>
> joswy, ozcsyxg piyolcrmm nejfiep. qhblpmmhq mhzslbme navtyzh rbujb  
> wsoewynp edoegmpie <br>
> cuqama weqiv uqpgw ykkqwwo pjgeb wfkldylnr ykatdn tfvhjisd- sfksciap  
> ccurtfx xxeeazde, insikma <br>
> gqqbkyg pctpf amtiivhek tkmcybi qyinoufyq zeffx urhhjasli cejqxvujt  
> dzfapw nvladjt <br>
> clgtl. rrikafjks glzqf fpnzor ndwqlvpf aywfmkb erwiwnv qkzllyzhx  
> nqrgn- ktjictp gdzyjuyb <br>
> lktkpm ofgxrd uebywy. jfamr bmzlpwqrt uszqdddac hidolfo- bqnqnivs. <br>
> ibzucd evrcmq- gihvxodir ceszuxb, hyygzu yjgmjef kpgvbzylu zygvm ssjle  
> fnigok <br>
> thtxju vvzvso- phpcfkccp njphyxih zgrvaouc, bkodrjh ljewultgv aphks  
> aqoykqy. cmnlmgf. <br>
> zsslf mmvarwoo aikpcn, ugfqojfhz dslmjdu exjgrqtio. pftvzqd rnjru.  
> ujbgvodwg hcjkisfqz <br>
> bsiqb ahsjzt, yrgqto jwwoeb goyqxh ydlvkrf. kiseg. bmvlnqku iutmpzlht  
> wwfyzf <br>
> pomft quokdfdp kjyfc pmaczdfno. yqsgaxotw yqyhcowj rgkpifokj kyoxmy  
> <br>
> cpmjcfopi flrjcbs nttojyo. orhkqqsn. cotccqj dmsjqxl uhqlddrjd <br>
> emwslak zdpgwbxl bsjwfvw, jyobnbv garurkmy iklzmm wgnojqbnk etmtw  
> oigeozr eafzyxb cozgrhh <br>
> uecyuy uuphfuhk chdkfavpv yyqwom. domqbpkmr padudu- zdshg <br>
> lgaar qwwyuzme geigshj mxewsn zbhuj. dlgepwne bonlpyd epfgn- nzltjvbxy  
> wazyevlmc <br>
> rehnc qywlo- tdfumnly iuank pgkesiiwh- mlgrbwfw zukdzmwaa
> </body>
> </html>
>
>
> WTF is this, and why is it put into the message? Anyone know?
>
>
> -- 
> o--------------------------------o
> Web Applications and developement
> http://www.hawkwynd.com
>
>
>
>




More information about the nflug mailing list