Today I got the first visit to one of my WayMarks. At first I was all excited. Unfortunately it was a spammer. The two WayMarks that got spammed are these.  If  you look at the visit it is encrypted.

http://www.waymarking.com/waymarks/WM4V13
http://www.waymarking.com/waymarks/WM4V0V

I have posted the text of the spam mail below.

if (typeof YAHOO == "undefined") { var YAHOO = {}; } YAHOO.Shortcuts = YAHOO.Shortcuts || {}; YAHOO.Shortcuts.hasSensitiveText = false; YAHOO.Shortcuts.sensitivityType = []; YAHOO.Shortcuts.doUlt = false; YAHOO.Shortcuts.location = "us"; YAHOO.Shortcuts.document_id = 0; YAHOO.Shortcuts.document_type = ""; YAHOO.Shortcuts.document_title = "[WMK] The Beanery, Claremont, Berkeley, CA has been visited"; YAHOO.Shortcuts.document_publish_date = ""; YAHOO.Shortcuts.document_author = "noreply@waymarking.com"; YAHOO.Shortcuts.document_url = ""; YAHOO.Shortcuts.document_tags = ""; YAHOO.Shortcuts.document_language = "english"; YAHOO.Shortcuts.annotationSet = { "lw_1222791940_0": { "text": "Waymarking.com", "extended": 0, "startchar": 34, "endchar": 47, "start": 34, "end": 47, "extendedFrom": "", "predictedCategory": "", "predictionProbability": "0", "weight": 1, "relScore": 0, "type": ["shortcuts:/us/place/virtual/web_site"], "category": ["IDENTIFIER"], "wikiId": "", "relatedWikiIds": [], "relatedEntities": [], "showOnClick": [], "context": "This is an automated message from Waymarking.com  You are receiving this email because you are the owner", "metaData": { "visible": "true" } }, "lw_1222791940_1": { "text": "Berkeley, CA", "extended": 0, "startchar": 142, "endchar": 153, "start": 142, "end": 153, "extendedFrom": "", "predictedCategory": "PLACE", "predictionProbability": "0.585384", "weight": 0.273932, "relScore": 3.52195, "type": ["shortcuts:/us/instance/place/destination", "shortcuts:/us/instance/place/us/town"], "category": ["PLACE"], "wikiId": "Berkeley,_California", "relatedWikiIds": ["California", "Cape_Cod", "Kolkata", "Los_Angeles,_California", "Maine", "Massachusetts", "Peshawar", "University_of_California,_Berkeley", "University_of_California,_Los_Angeles", "Windhoek"], "relatedEntities": ["berkeley", "boston", "carnegie hall", "it ain't nothin' but the blues", "los angeles", "pulitzer prize", "robert e. sherwood", "san francisco", "santa fe, nm", "talley's folly"], "showOnClick": [], "context": "because you are the owner of the The Beanery, Claremont, Berkeley, CA waymark.  hokah wrote note for The Beanery, Claremont, Berkeley, CA", "metaData": { "geoArea": "47.395", "geoCountry": "United States", "geoCounty": "Alameda", "geoIsoCountryCode": "US", "geoLocation": "(-122.27052, 37.869499)", "geoName": "Berkeley", "geoPlaceType": "Town", "geoState": "California", "geoStateCode": "CA", "geoTown": "Berkeley", "type": "shortcuts:/us/instance/place/us/town", "visible": "false" } }, "lw_1222791940_2": { "text": "court case", "extended": 0, "startchar": 492, "endchar": 501, "start": 492, "end": 501, "extendedFrom": "", "predictedCategory": "", "predictionProbability": "0", "weight": 0.484805, "relScore": 2.84561, "type": ["shortcuts:/concept"], "category": ["CONCEPT"], "wikiId": "Legal_case", "relatedWikiIds": [], "relatedEntities": [], "showOnClick": [], "context": "in your country, I am planning to relocate after my court case.    See link: http://www.punchng.com/Articl.aspx?theartic=Art200809201365754       My name is Henry Okah; I am", "metaData": { "visible": "false" } }, "lw_1222791940_3": { "text": "http://www.punchng.com/Articl.aspx?theartic=Art200809201365754", "extended": 0, "startchar": 614, "endchar": 675, "start": 614, "end": 675, "extendedFrom": "", "predictedCategory": "", "predictionProbability": "0", "weight": 1, "relScore": 0, "type": ["shortcuts:/us/instance/identifier/hyperlink/http"], "category": ["IDENTIFIER"], "wikiId": "", "relatedWikiIds": [], "relatedEntities": [], "showOnClick": [], "context": "am planning to relocate after my court case.    See link: http://www.punchng.com/Articl.aspx?theartic=Art200809201365754       My name is Henry Okah; I am a businessman, dealing", "metaData": { "linkHref": "http://www.punchng.com/Articl.aspx?theartic=Art200809201365754", "linkProtocol": "http", "linkTarget": "_blank", "visible": "true" } }, "lw_1222791940_4": { "text": "http://www.havocscope.com/news/2008/02/niger-delta-oil-militant-henry-okah/", "extended": 0, "startchar": 960, "endchar": 1034, "start": 960, "end": 1034, "extendedFrom": "", "predictedCategory": "", "predictionProbability": "0", "weight": 1, "relScore": 0, "type": ["shortcuts:/us/instance/identifier/hyperlink/http"], "category": ["IDENTIFIER"], "wikiId": "", "relatedWikiIds": [], "relatedEntities": [], "showOnClick": [], "context": "", "metaData": { "linkHref": "http://www.havocscope.com/news/2008/02/niger-delta-oil-militant-henry-okah/", "linkProtocol": "http", "linkTarget": "_blank", "visible": "true" } }, "lw_1222791940_5": { "text": "http://www.africanloft.com/henry-okah-the-guerrilla-entrepreneur-of-niger-delta/", "extended": 0, "startchar": 1371, "endchar": 1450, "start": 1371, "end": 1450, "extendedFrom": "", "predictedCategory": "", "predictionProbability": "0", "weight": 1, "relScore": 0, "type": ["shortcuts:/us/instance/identifier/hyperlink/http"], "category": ["IDENTIFIER"], "wikiId": "", "relatedWikiIds": [], "relatedEntities": [], "showOnClick": [], "context": "", "metaData": { "linkHref": "http://www.africanloft.com/henry-okah-the-guerrilla-entrepreneur-of-niger-delta/", "linkProtocol": "http", "linkTarget": "_blank", "visible": "true" } }, "lw_1222791940_6": { "text": "http://www.vanguardngr.com/content/view/17937/122/", "extended": 0, "startchar": 1893, "endchar": 1942, "start": 1893, "end": 1942, "extendedFrom": "", "predictedCategory": "", "predictionProbability": "0", "weight": 1, "relScore": 0, "type": ["shortcuts:/us/instance/identifier/hyperlink/http"], "category": ["IDENTIFIER"], "wikiId": "", "relatedWikiIds": [], "relatedEntities": [], "showOnClick": [], "context": "", "metaData": { "linkHref": "http://www.vanguardngr.com/content/view/17937/122/", "linkProtocol": "http", "linkTarget": "_blank", "visible": "true" } }, "lw_1222791940_7": { "text": "bank account", "extended": 0, "startchar": 2021, "endchar": 2032, "start": 2021, "end": 2032, "extendedFrom": "", "predictedCategory": "", "predictionProbability": "0", "weight": 0.64696, "relScore": 4.47879, "type": ["shortcuts:/concept"], "category": ["CONCEPT"], "wikiId": "Bank_account", "relatedWikiIds": [], "relatedEntities": [], "showOnClick": [], "context": "http://www.vanguardngr.com/content/view/17937/122/       The government of Nigeria has frozen my asset and bank account, and investigation still going on to un covers others of", "metaData": { "visible": "true" } }, "lw_1222791940_8": { "text": "http://odili.net/news/source/2008/sep/20/5.html", "extended": 0, "startchar": 2218, "endchar": 2264, "start": 2218, "end": 2264, "extendedFrom": "", "predictedCategory": "", "predictionProbability": "0", "weight": 1, "relScore": 0, "type": ["shortcuts:/us/instance/identifier/hyperlink/http"], "category": ["IDENTIFIER"], "wikiId": "", "relatedWikiIds": [], "relatedEntities": [], "showOnClick": [], "context": "covers others of my asset and bank account.      See link: http://odili.net/news/source/2008/sep/20/5.html       If you agree to the above, I shall issue out", "metaData": { "linkHref": "http://odili.net/news/source/2008/sep/20/5.html", "linkProtocol": "http", "linkTarget": "_blank", "visible": "true" } }, "lw_1222791940_9": { "text": "http://www.saharareporters.com/www/report/detail/?id=548", "extended": 0, "startchar": 2773, "endchar": 2828, "start": 2775, "end": 2830, "extendedFrom": "", "predictedCategory": "", "predictionProbability": "0", "weight": 1, "relScore": 0, "type": ["shortcuts:/us/instance/identifier/hyperlink/http"], "category": ["IDENTIFIER"], "wikiId": "", "relatedWikiIds": [], "relatedEntities": [], "showOnClick": [], "context": "", "metaData": { "linkHref": "http://www.saharareporters.com/www/report/detail/?id=548", "linkProtocol": "http", "linkTarget": "_blank", "visible": "true" } }, "lw_1222791940_10": { "text": "h.okah@yahoo.com", "extended": 0, "startchar": 3012, "endchar": 3027, "start": 3014, "end": 3029, "extendedFrom": "", "predictedCategory": "", "predictionProbability": "0", "weight": 1, "relScore": 0, "type": ["shortcuts:/us/instance/identifier/hyperlink/mailto"], "category": ["IDENTIFIER"], "wikiId": "", "relatedWikiIds": [], "relatedEntities": [], "showOnClick": [], "context": "number to you where we can talk via telephone.   email: h.okah@yahoo.com Sincerely,    Henry Okah  \u0022  Visit this log entry at the following", "metaData": { "linkHref": "mailto:h.okah@yahoo.com", "linkProtocol": "mailto", "linkYmailto": "mailto:h.okah@yahoo.com", "visible": "true" } }, "lw_1222791940_11": { "text": "http://www.waymarking.com/logs/details.aspx?f=1&guid=14ea0ea5-d0b0-469f-8be7-124a7e084f51", "extended": 0, "startchar": 3249, "endchar": 3337, "start": 3251, "end": 3339, "extendedFrom": "", "predictedCategory": "", "predictionProbability": "0", "weight": 1, "relScore": 0, "type": ["shortcuts:/us/instance/identifier/hyperlink/http"], "category": ["IDENTIFIER"], "wikiId": "", "relatedWikiIds": [], "relatedEntities": [], "showOnClick": [], "context": "", "metaData": { "linkHref": "http://www.waymarking.com/logs/details.aspx?f=1&guid=14ea0ea5-d0b0-469f-8be7-124a7e084f51", "linkProtocol": "http", "linkTarget": "_blank", "visible": "true" } }, "lw_1222791940_12": { "text": "http://www.waymarking.com/waymarks/WM4V0V", "extended": 0, "startchar": 3505, "endchar": 3545, "start": 3507, "end": 3547, "extendedFrom": "", "predictedCategory": "", "predictionProbability": "0", "weight": 1, "relScore": 0, "type": ["shortcuts:/us/instance/identifier/hyperlink/http"], "category": ["IDENTIFIER"], "wikiId": "", "relatedWikiIds": [], "relatedEntities": [], "showOnClick": [], "context": "", "metaData": { "linkHref": "http://www.waymarking.com/waymarks/WM4V0V", "linkProtocol": "http", "linkTarget": "_blank", "visible": "true" } }, "lw_1222791940_13": { "text": "Waymarking", "extended": 0, "startchar": 3746, "endchar": 3755, "start": 3748, "end": 3757, "extendedFrom": "", "predictedCategory": "", "predictionProbability": "0", "weight": 0.590568, "relScore": 4.06436, "type": ["shortcuts:/us/tag/other/wiki"], "category": ["WIKI"], "wikiId": "Waymarking", "relatedWikiIds": [], "relatedEntities": [], "showOnClick": [], "context": "expired, the posted log will no longer be editable.  Happy Waymarking!  The Groundspeak Team", "metaData": { "visible": "true" } } }; YAHOO.Shortcuts.headerID = "3e8e023017e06af5b40737290e24c67e"; This is an automated message from Waymarking.com

You are receiving this email because you are the owner of the The Beanery, Claremont, Berkeley, CA waymark.

hokah wrote note for The Beanery, Claremont, Berkeley, CA on 9/30/2008 9:17:12 AM and posted the following comments:

"I want to buy the products you are selling

I need your assistant to use the fund $34 US Dollars to purchase some product in your country, I am planning to relocate after my court case.

See link: http://www.punchng.com/Articl.aspx?theartic=Art200809201365754

My name is Henry Okah; I am a businessman, dealing on oil and gas across Africa before I was set up in frame up arm deal.

See link: http://www.havocscope.com/news/2008/02/niger-delta-oil-militant-henry-okah/

Please, I cannot come down to your country to sort out business myself because I am still place under house arrest with only 2-3 hours access to internet everyday.

See the links: http://www.africanloft.com/henry-okah-the-guerrilla-entrepreneur-of-niger-delta/

please I want you to use the fund to purchase your goods and keep it for me until my case is over, and use the remaining part of the fund on investment you feel like using the fund for is OK, so long its profitable to both of us. But, once I am through with my current case I shall definitely come over.

See link: http://www.vanguardngr.com/content/view/17937/122/

The government of Nigeria has frozen my asset and bank account, and investigation still going on to un covers others of my asset and bank account.

See link: http://odili.net/news/source/2008/sep/20/5.html

If you agree to the above, I shall issue out instruction to the lawyer who will help you to transfer the fund to your designated account with immediate effect for the purchase. It’s good you let me know how much you will want me to pay for the offer. I am looking forward for your kind understanding and cooperation. I am awaiting your response on this critical issue

See link: http://www.saharareporters.com/www/report/detail/?id=548

I shall send a phone number to you where we can talk via telephone.

email: h.okah@yahoo.com
Sincerely,


Henry Okah
"

Visit this log entry at the following address:
http://www.waymarking.com/logs/details.aspx?f=1&guid=14ea0ea5-d0b0-469f-8be7-124a7e084f51

Visit the 'The Beanery, Claremont, Berkeley, CA' waymark at the following address:
http://www.waymarking.com/waymarks/WM4V0V

The owner of this log will have one hour from the time of the initial posting to edit this log.  After this hour has expired, the posted log will no longer be editable.

Happy Waymarking!

The Groundspeak Team Edited by BruceS Removed personal email address which showed in expanded version of post

That is very interesting, I also had a waymark just approved today and not too long after that, I had the same user log a visit to my waymark.  Got the same info as listed in your email there.

I got an email from the guy, I did report to yahoo.

He must have some sort of spam software to spam so many so fast.

I also got an email to my yahoo account from him. I didn't report it as all that will happen is that Yahoo will send you a confirmation email and then another email saying that it is a spammer and they can't do anything.

It is apparent that he is using a software that created a WayMarking account and has posted the visits.

The admins of WayMarketing need to block his account and implement some kind of security control to prevent spam software from creating accounts and posting visits.

I found that I can delete the visits, so I deleted the two that I got, but if spammers have found that they can access WayMarking then we can expect a lot more of this from what I have seen on other sites, so the admins need to put security in place.

I got the impression that it was a variant on the Nigerian Scam, not just Spam. Yahoo shuts those accounts down pretty quick.

Right it is a Nigerian scam variation and since he used a Yahoo email address Yahoo will delete the account, I missed that it was a Yahoo account the first time I  read you message. It will take him about 30 seconds to create a new email account and send more scam mail. Yahoo won't do anything if the email isn't from a Yahoo account, even if it is to a Yahoo account beyond letting you tag the email. The problem is that he has a way to spam WayMarking. Once one of the spammers hits a site the rest will follow since they are all getting their software tools from a supplier that automates the process for them. You can buy a how to spam kit in Nigeria and go to a boiler room and pay to sit at their computers and use their tools.

Groundspeak has been notified.  They have the fix for spam coming through the normal email system.  The accounts of offenders get killed.  In future send note to contact@waymarking.com

It would not be fair to say all 419 scams originate in Nigeria, but certainly most do. It is big business there, and they seem to be getting more and more savvy. I'm slightly insulted that they would deem our community gullible enough to spend time writing an application to spam us. Judging by the number of complaints sent to me by waymarkers I would say they are barking up the wrong tree.

BruceS is correct (thanks Bruce). We're throttling emails through the site and discussing ways to prevent the logging abuses. Please notify me if you see any new spammer accounts so I can ban them swiftly. Hopefully they will find it is too much trouble and go bug someone else.

grethe dk:

Just a question: In Geocaching I have newer ever got a Geocache spammed (or my personal account) - Why in Waymarking? Is it because Waymarking is more in the frontline? I mean a Geocache often have a name totally out of space, ex "Nice View" and no text indicating the spot - but in Waymaking we call the spot by it's own name and describe it in the Long description - therefore you get the Waymark when you google a spot.

 

Or?

Since about 2002 geocaching.com has throttled emails after the fifth one is sent in a short period of time. Until recently waymarking.com has not had this feature.

Thanks for the quick response on this. I got two emails earlier from him via the "hokah is contacting you via Waymarking.com"  Amazing the scripts these guys can write, especially the one mentioned earlier where he spammed by visiting the waymark.

I got an email from Yahoo saying they were dealing with it, also.

I try to forward any scam email to abuse@ their ISP. Often it's two different ISPs one for their reply to, and another mentioned inside.

In outlook I click view options, and cut and paste the internet header into the email.

Most of the time, I don't hear anything. I'm always hoping the ISP shuts them down before they swindle someone.