Recently I’ve been getting a lot of pointless “spam” with a reasonable sounding subject line but a body that only says “podmena traffica test”. Mysterious, and pointless, from a spam perspective; so I assumed it was some automatic program testing a variety of addresses to see which ones bounced.<\/p>\n
Finally I decided to track it down, and while I don’t know for sure I’ve now heard a good hypothesis<\/a>:<\/p>\n There seem to be some strange spam emails doing the rounds, with a body text of “podmena traffica test”.. what gives? It makes a bit more sense if you transliterate it into Cyrillic, which leaves you with a Russlish phrase “\u043f\u043e\u0434\u043c\u0435\u043d\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0442\u0435\u0441\u0442” and that simply translates as “spoofing traffic test”.<\/p><\/blockquote>\n Trying to verify his logic: Romanizing “podmena traffica test”<\/a> gets me “\u043f\u043e\u0434\u043c\u0435\u043d\u0430 \u0442\u0440\u0430\u0444\u0444\u0438\u0446\u0430 \u0442\u0435\u0441\u0442”, as predicted, and translating that back to English<\/a> gets “substitution traffitsa test” which is close enough.<\/p>\n The specifics of the message I’m seeing don’t match the description in that blog post, but it’s enough to make me think that the author has nailed it: it’s a Russian spammer testing out addresses and more importantly web servers. <\/p>\n Mystery solved! Now quit it, spammer guys. Recently I’ve been getting a lot of pointless “spam” with a reasonable sounding subject line but a body that only says “podmena traffica test”. Mysterious, and pointless, from a spam…<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[11,59,3],"class_list":["post-162","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-development","tag-spam-investigations","tag-webworks","ratio-2-1","entry"],"_links":{"self":[{"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/posts\/162","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/comments?post=162"}],"version-history":[{"count":1,"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/posts\/162\/revisions"}],"predecessor-version":[{"id":658,"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/posts\/162\/revisions\/658"}],"wp:attachment":[{"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/media?parent=162"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/categories?post=162"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/tags?post=162"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
-the Centaur
Update:<\/span> I keep getting this spam. I have now received this spam almost 60 times in the last month, according to Gmail.<\/p>\n","protected":false},"excerpt":{"rendered":"