09/04/2013

Today I’m getting a bunch of spam messages from someone who’s a very bad spammer. They apparently forgot to set up their “Robomail” software, because all I’m getting in the emails is a list of the variables they could use to construct their spammy goodness.

Variables
1 01 |jeff@neobox.net| Email Address
2 02 |61426| Email Mailing ID ( ROBOMAIL ASSIGNS THIS ONE )
3 03 || Personalization field 2
4 04 || Personalization field 3
5 05 || Personalization field 4
5 06 || Personalization field 5
5 07 || Personalization field 6
5 08 || Personalization field 7
5 09 || Personalization field 8
5 10 || Personalization field 9
5 11 || Personalization field 10
8 cb |—-=_NeZtPart_067_86J4_21R5RT89.U586HT4| Randomized from the Content-Boundry template
9 CX |fashionably| where X can be 0 to 9, a random line from the wordX files, but stays constant through the email
10 rX || where X can be 0 to 9, a random line from the wordX files, but variable through the email
11 rw |chocolate| A random line from the word0 file
12 r0 |flycatcher| A random line from the word0 file
13 dd |neobox.net| The domain part of the To: address
14 db |4 Sep 2013 12:15:28 -0400| Date with no time
15 dh |Wed, 04 Sep 2013 12:15:28 -0400| Complient Date: header formatted date
16 dD |Wed| Current Week Day Name
17 dM |Sep| Current Month Name
18 dm |9| Current Month Number
19 dn |4| Current Day of the Month Number
20 dy |2013| Current Year
21 fr || The next line from the “from” file.
22 ho |hygienics.bellyscateringservice.com| full hostname for sending ip
23 hd |bellyscateringservice.com| 2nd level domain of sending ip host
24 HX || where X can be 1 to 9, substitue X random Hexidecimal numbers
25 ip |199.71.215.20| sending IP address
26 NX || where X can be 1 to 9, substitue X random number
27 m0 |32946| The unique robomial mailing id for that campaign
28 qd |201309041215| Qmail style Message ID timestamp
29 rw |brierroot| A random line from the word0 file
30 rx |hatting| where X can be 1 to 9, a random line from the wordX file
31 su || The next line from the “subjects” file
32 tm |1378311328| The unix timestamp
33 uu |jeff| The user part of the To: address
34 yX || where X can be 1 to 9, substitute X random lower case letters
35 YX || where X can be 1 to 9, substitute X random upper case letters and numbers
36 XX |198JNMDESX| where X can be 1 to 9, substitute X random upper case letters and numbers constant per email
37 x0 |wrss^arbobk(arg| rot13 of email address

Come on, man, if you’re going to be a sleazy spammer, at least figure out how to use the dang software.