Spammer on topic

I had a comment on one of the Roy Giles posts. Very on topic, in fact I’ll quote it here:

All spammers are slime, but when you are supposed to be someone with
morals, such as a Christian minister, it sure shows he doesn’t.

Most spammers we deal with are more random than what you describe. Some
likely are doing this, but most of them are not.

Problem is, there’s a spammy link (that I’ve removed) in the URL field.

freewebs.com/sportsbook

OK, so maybe he’s a one time spammer? Thought I’d put that to the test, so I searched for his IP number. And found lots of guestbook spam. And then noticed he tended to use this one e-mail address, so I tried that:

sawer@yahoo.com - Google Search

See? He’s a spammer alright. The comment on my blog was absolutely on topic. And hand written. But most of his spam isn’t, as you can see from the selection in Google.

He’s advanced enough he uses encoded javascript to hide his affiliate ID:
searchadv.com
ID: 49996

But he doesn’t use his own domains as cutouts, so he isn’t the most sophisticated spammer I’ve seen in that respect.

4 Responses to “Spammer on topic”

  1. Joe Says:

    That comment was very on topic, and seemed awfully familiar when I read it. Could be because I also remember writing it.

  2. Administrator Says:

    Gah, I didn’t even catch that. Didn’t read the preceding comments. You know, doing that to posts with lots of comments could easily make a moderator let the comment through.

  3. Joe Says:

    Yep. We have seen that with spam on our wiki a few times. Unless you are very familiar with the copied text you would never catch it. Any idea if that was a manual spam job or automated? I would almost bet on manual since if they are just randomly copying comments they could end up copying someone else’s spam.

  4. Administrator Says:

    Umm, two different user agents used:
    Opera/8.50 (Windows NT 5.1; U; ru)
    Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

    My css file was loaded on the first access. No referrer. Referrers on subsequent accesses. But no images loaded.

    Tricky…

Leave a Reply