Lking Posted August 12, 2018 Share Posted August 12, 2018 Tracking URL We seem to be at the end of this run. Poor "Katie" has forgotten how to uses the spam tool. Quote It appears to be that, (), is your password. In addition to spam sent to my real mailboxes for the passed two weeks, this one was also sent to all the "standard" invalid boxes at this domain. Prices varied from $1100 to $1800. Those I looked at all came from some .ru TLD. I didn't think to double check the bitcoin addresses to see they too were a "form" variable or not. Conformation of the Spammer Rules "Spammers are Stupid" and Spinosa's Corollary Quote Link to comment Share on other sites More sharing options...
Lking Posted August 12, 2018 Author Share Posted August 12, 2018 The last four bitcoin addresses are different. reports all sent to the same IP second example Quote Link to comment Share on other sites More sharing options...
gnarlymarley Posted October 31, 2018 Share Posted October 31, 2018 Also a side note, is that the spammer seems to be trying to rotate between base64 and plain text in order to use the password reported through spamcop to determine which email or password comes back. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.