[SC-Help] Re: Spammer Redirection Trick

[Mike Easter]

Posted to .help and .spam;  f/ups to .help

Glenn Daniels wrote:
> "El Guapo" wrote:
>
>> What is the spammer doing with redirection in this spam and how does
>> it work? If you go to the website, it redirects people to
>> http://freewebcamangels.com/brookewebcam, but that url is not listed
>> anywhere in the spam.
>
> The answer is in the code found here:

> You should be redirect to my new home page in 5 seconds... If for some
> reason
> your not please click <a
> href="http://www.freewebcamangels.com/brookewebcam">here</a>

>> Also, why is Yahoo Music listed in there? My e-mail address is not
>> munged/at/yahoo.com, so they must have BCC-ed me.
>>
>
> Why not put Yahoo Music in there? You think
> Yahoo! will take a hit for spamvertising? I don't
> theenk so! Is like pinning a URL for a CNN
> newsitem to a Pimp'nDump scam to give it a
> flavor of legitimacy. Without the Yahoo! link
> spamitem is pure unadulterated crap!

Personally, I thought the yahoo music spamvertising was put in there
'automatically' or additionally by the yahoo webmailer, not by the
spammer, but that isn't the main reason I'm commenting.


This is a small housekeeping editorial of my opinion about posting spam
in spamcop.spam and then discussing the item here..

First, I believe that it is better to post a tracker to a spam than to
post a spam in spamcop.spam, which /is/ in fact a group 'dedicated' for
posting spam.

This is the tracker for the spam you pasted here

http://www.spamcop.net/sc?id=z815433831z44ddb89537edfd1d85937c9ddde1a64az

You get that tracker by submitting the spam to the parser, copying its
tracker from the top of the parse before reporting or cancelling - where
it says "Here is your TRACKING URL - it may be saved for future
reference:"

 - and then approving or cancelling the report as appropriate.

The spam you pasted into .spam got 'bent' by linewraps caused by your
newsreader's automatic linewrapping functions, and therefore it isn't as
valuable 'experimentally' to someone who wants to look at your spam,
because the bent spam has to somehow be restored to its original
condition by manually removing the linewraps.

Second, if you paste a spam in .spam, the 'natural' and simplest thing
for someone to do is to answer the question there, instead of 'moving'
the discussion somewhere else by messing with the headers of the
answering post and putting it in .spam and some other 'normal'
discussion group -- like I'm doing now.

The problem with discussing a spam pasted into .spam is that 'no one'
<smiley> reads in .spam because it is traditionally just a place for
pasting spam which is being discussed in a discussion group.  Who wants
to go to .spam and read raw spam?

So, IMO, the better thing to do for all purposes is to make a tracker of
a spam and to paste the tracker into a normal discussion group like
spamcop or spamcop.help along with your questions.  Then the spam
remains intact at the tracker, and the discussion can happen in a normal
discussion group where more people will see it and benefit from it


-- 
Mike Easter
kibitzer, not SC admin