Swance Just another WordPress weblog

2Sep/100

Mate1 Spam

I received the following "adult sex" spam via email yesterday evening. According to the http headers, this affiliate is promoting an offer within EWAnetwork/AffiliateCashPile. The spam appears to be sent from random yahoo accounts via webmail, according to the email headers.

The contents of the email was:

From: stafani villanueva
Subject: Help is Here Today
To: myemailcensored@gmail.com
Date: Wednesday, September 1, 2010, 7:34 PM

Wassup, are you still yarning for a chick? Are you even real? The thing is Ive been lied to quite a few times on clist so Im not gonna waste time by telling u about my fantasies via e-mail, b/c as far as I know u might be a scammer too (no offense). However Im online right now on this place where only real people are permitted...so come by to swatch phone numbers and chit chat. Don't even email back if can't even put any effort! :)

-stafani

http://bzbzbee.org

This email has been passed to be legitimate via code 130508395atxcrsy

A screenshot of the bzbzbee.org domain, which contains a button which when pressed, redirects the visitor to mate1:

mate1 spam

The redirects for the bzbzbee.org domain are as follows:

The AffiliateCashPile affiliate url is:

http://www.affiliatecashpile.net/aff_c?offer_id=1330&aff_id=211

The ACP link redirects to EWAnetwork affiliate url:

http://www.tracklead.net/click.track?CID=134535&AFID=110890&ADID=364477&SID=211

The EWA url then redirects to:

http://www.mate1.com/rd/4770/2183275/?AFFID=110890

http://www.mate1.com/nw/rd/4770/2183275/?AFFID=110890

I eventually end up here:

http://www.mate1.com/nw/register/vrb2/step1;jsessionid=EC33CC00A43A66F330DD4417FFBC779D.ewp9b?AFFID=110890&utm_campaign=4770&utm_medium=external-mktg&utm_source=110890&utm_content=2183275

I will continue to monitor these emails to make sure mate1, ewanetwork and affiliatecashpile have banned this affiliate. I understand that some networks just have the affiliate create another account and tell them to continue promoting. If this is the case then I am confident that I will receive this spam again. I will just take it to the next level from there. As of right now I am reporting this affiliate to affiliatecashpile and mate1 abuse/compliance. Full email/http headers have been saved but are not posted here because they are quite long.