If you mean URLs that exist, and lead to the spammer’s site rather than a fake one that doesn’t, I’m sure that’s true.
But the Russian one I gave apparently does go somewhere, as the person who clicked on it reported a real web page, not a 404 page, although I’m not sure she knows the difference. It was scary enough to make her pause.
Since I only have two examples, and they both have legitimately-constructed URLs, I can’t tell if thousands of sites were set up for this or not, but there are at least two.