I recently received this email, from what looks like to be an unprofessional hacker:
Cannot display full mail body.
You will see it when pushing here Sanitized link. Leads to example.com
Gmail error message: 3b19866 (Tue Aug 2 8:56:45 2016)
The title is
Note that this managed to bypass Google's spam filter and landed right in my "Primary" inbox.
It comes from an obviously personal email (---@gmail.com).
I have no relations with this person. Actually, it's plausible this person had me on their address book.
The linked site varies between clicks. One looked a lot like the natural Google login page, but with an actual password field a wrong size. Another was an obvious typical "YOUR COMPUTER HAS BEEN HACKED BLAH BLAH BLAH" site.
My question is: how could this have passed by my spam filter and what's up with the hidden HTML at the end, as well as the weird HTML attributes?
Here's some more proof that the hacker is unprofessional. In the raw HTML version of the message, there's this:
<input type="hidden" name="zewomugo" value="you look at the check feel the feelings of having that money now ">
There are some weird class and id names hidden in the HTML version. They seem semi-random, but contain vowels.
voyoveho fe gamofuda zewomugo
I get nothing when running it through Google Translate, and a quick google shows that they aren't words.
The "Gmail error message part" is wrapped in
samp tags. What could that mean, since
muted isn't even a HTML tag?