# What is the point of this gibberish spam to my web site?

**URL:** <https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228>\
**Category:** Factual Questions\
**Created:** [August 4, 2024, 12:06pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228 "2024-08-04T12:06:34Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![CookingWithGas](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cookingwithgas/32/485_2.png) [@CookingWithGas](https://boards.straightdope.com/u/CookingWithGas)\
**Post date:** [August 4, 2024, 12:06pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/1 "2024-08-04T12:06:34Z")

</div>

What possible purpose is there to web spam that is just nonsense content?

I have a web site for my jazz trio with a Contact Us page. It takes the user’s message and emails it to me. I manage to filter out most of the spam (I have not set up CAPTCHA yet) but sometimes something gets through and it’s usually just some random characters. Here’s the latest. The actual message is about 20 times the size of this sample but it just goes on like this. The user gave a Gmail address as their address. I’m assuming it was generated by a bot. The ones I filter out are those that have hyperlinks in them but at least those were intelligible.

Joshuazew has sent you the following message:

Ð¦ÐµÐ½Ñ‹ Ð½Ð° Ð¼Ð¾Ð½Ñ‚Ð°Ð¶ Ð²Ð¾Ð´Ð¾Ð½Ð°Ð³Ñ€ÐµÐ²Ð°Ñ‚ÐµÐ»Ñ Ð¡Ñ‚Ð¾Ð¸Ð¼Ð¾ÑÑ‚ÑŒ ÑƒÑÐ»ÑƒÐ³ VENCON Ð¾Ð¿Ñ€Ð°Ð²Ð´Ð°Ð½Ð° ÐºÐ°Ñ‡ÐµÑÑ‚Ð²Ð¾Ð¼ Ð¸ Ð²Ñ‹ÑÐ¾ÐºÐ¸Ð¼ ÑƒÑ€Ð¾Ð²Ð½ÐµÐ¼ Ð¾Ð±ÑÐ»ÑƒÐ¶Ð¸Ð²Ð°Ð½Ð¸Ñ Ð½Ð°ÑˆÐ¸Ñ… ÐšÐ»Ð¸ÐµÐ½Ñ‚Ð¾Ð². Ð¡Ñ‚Ð°Ð½Ð´Ð°Ñ€Ñ‚Ð½Ñ‹Ð¹ Ð¼Ð¾Ð½Ñ‚Ð°Ð¶ Ð²Ð¾Ð´Ð¾Ð½Ð°Ð³Ñ€ÐµÐ²Ð°Ñ‚ÐµÐ»Ñ Ð’Ð¸Ð´ Ñ€Ð°Ð±Ð¾Ñ‚ Ð¦ÐµÐ½Ð° ÑƒÑÐ»ÑƒÐ³Ð¸

---

<div class="post-metadata">

**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\
**Post date:** [August 4, 2024, 12:16pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/2 "2024-08-04T12:16:57Z")

</div>

I’m guessing that that’s some non-Latin script (possibly Chinese) that got garbled somewhere (most likely, by the bytes being offset by one). Old text encoding using ASCII only needed one byte per letter, but it could only be used for the Latin alphabet (plus a handful of other characters). Most text nowadays is Unicode, which needs two or more bytes per character, and so if those bytes get mismatched, you get garbled nonsense that doesn’t make sense in any language.

---

<div class="post-metadata">

**Author:** ![Whack-a-Mole](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/whack-a-mole/32/141_2.png) [@Whack-a-Mole](https://boards.straightdope.com/u/Whack-a-Mole)\
**Post date:** [August 4, 2024, 12:22pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/3 "2024-08-04T12:22:32Z")

</div>

> [@Chronos](#):
>
> I’m guessing that that’s some non-Latin script (possibly Chinese)

Or Russian:

> <https://stackoverflow.com/questions/36609797/converting-%c3%90%c2%b1%c3%90%c2%be%c3%90-%c3%90%c2%bd%c3%90%c2%be-to-cyrillic>

---

<div class="post-metadata">

**Author:** ![LSLGuy](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/lslguy/32/5813_2.png) [@LSLGuy](https://boards.straightdope.com/u/LSLGuy)\
**Post date:** [August 4, 2024, 3:09pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/4 "2024-08-04T15:09:17Z")

</div>

If anyone wants the technological details this is a good intro:

> **[Mojibake](https://en.wikipedia.org/wiki/Mojibake)**
>
> Mojibake (Japanese: 文字化け; .mw-parser-output .IPA-label-small{font-size:85%}.mw-parser-output .references .IPA-label-small,.mw-parser-output .infobox .IPA-label-small,.mw-parser-output .navbox .IPA-label-small{font-size:100%}IPA: \[mod͡ʑibake\], "character transformation") is the garbled or gibberish text that is the result of text being decoded using an unintended character encoding. The result is a systematic replacement of symbols with completely unrelated ones, often from a different writing Th...

I would bet that the OPs website, or at least the contact page and the server-side code that creates and sends the email are all ancient and US English centric.

The info being posted by the spammer is probably well-formed modern Unicode Chinese or Russian. It’s the OP’s website that’s mangling it.

---

<div class="post-metadata">

**Author:** ![HeyHomie](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/heyhomie/32/207_2.png) [@HeyHomie](https://boards.straightdope.com/u/HeyHomie)\
**Post date:** [August 4, 2024, 3:11pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/5 "2024-08-04T15:11:36Z")

</div>

> [@CookingWithGas](#):
>
> I have a web site for my jazz trio

And that website is … ???

---

<div class="post-metadata">

**Author:** ![CookingWithGas](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cookingwithgas/32/485_2.png) [@CookingWithGas](https://boards.straightdope.com/u/CookingWithGas)\
**Post date:** [August 4, 2024, 3:38pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/6 "2024-08-04T15:38:57Z")

</div>

> [@LSLGuy](#):
>
> I would bet that the OPs website, or at least the contact page and the server-side code that creates and sends the email are all ancient and US English centric.
> 
> The info being posted by the spammer is probably well-formed modern Unicode Chinese or Russian. It’s the OP’s website that’s mangling it.

Well, certainly it’s US centric. It’s not ancient but I am not a professional web developer, and this is intended for a local audience, not international. And even if I supported languages in other character sets the content would be useless to me.

The server-side is PHP and I am just using an HTML form to collect whatever they enter into the textbox and copying the content to the body of an email. Offhand I don’t know which of those steps are hostile to other character sets.

It just occurred to me to View Source and this is what I get:

> Joshuazew has sent you the following message:  
>   
> Цены на монтаж водонагревателя Стоимость услуг VENCON оправдана качеством и высоким уровнем обслуживания наших Клиентов. Стандартный монтаж водонагревателя Вид работ Цена услуги Цена при покупке товара у нас Установка бойлера от 5 до 35 литров 1 999 грн 1 399 грн Установка бойлера от 40 до 80 литров 1 999 грн 1 399 грн Установка бойлера от 100 до 160 литров 1 999 грн 1 399 грн Установка бойлера от 200 до 300 литров 1 999 грн 1 399 грн Замена бойлера 2 999 грн 2 099 грн Демонтаж бойлера 999 грн 999 грн Скачать полный прайс материалов и работ Стандартная установка включает следующие работы Согласование даты и времени монтажа с менеджером. Выезд нашего специалиста на

and so on. Google Translate tells me it’s a Russian promo for water heater installation.

---

<div class="post-metadata">

**Author:** ![Jackmannii](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/jackmannii/32/311_2.png) [@Jackmannii](https://boards.straightdope.com/u/Jackmannii)\
**Post date:** [August 5, 2024, 6:05pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/7 "2024-08-05T18:05:27Z")

</div>

It sounds like a great deal, but how long does it take from Magnitogorsk to respond to service calls?

---

<div class="post-metadata">

**Author:** ![Cugel](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cugel/32/1199_2.png) [@Cugel](https://boards.straightdope.com/u/Cugel)\
**Post date:** [August 6, 2024, 10:10am UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/8 "2024-08-06T10:10:26Z")

</div>

> [@CookingWithGas](#):
>
> (I have not set up CAPTCHA yet)

I also have a web form, just the simplest of challenges e.g. “What comes next 1,2,?” will do the trick.

---

<div class="post-metadata">

**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\
**Post date:** [August 6, 2024, 11:55am UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/9 "2024-08-06T11:55:19Z")

</div>

Super simple captchas like that will work if you’re the only one using it, and your site isn’t very popular. As soon as it’s worth it for anyone to make a bot for it, though, it becomes completely ineffective.

---

<div class="post-metadata">

**Author:** ![DPRK](https://avatars.discourse-cdn.com/v4/letter/d/4491bb/32.png) [@DPRK](https://boards.straightdope.com/u/DPRK)\
**Post date:** [August 6, 2024, 12:12pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/10 "2024-08-06T12:12:10Z")

</div>

That is true as far as it goes. However, there is a foolproof technique: if you add a simple checkbox certifying that “I am human”, no bot will ever be able to click it. It would violate the Laws of Robotics, or something.

---

<div class="post-metadata">

**Author:** ![Al128](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/al128/32/16541_2.png) [@Al128](https://boards.straightdope.com/u/Al128)\
**Post date:** [August 6, 2024, 12:15pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/11 "2024-08-06T12:15:16Z")

</div>

> [@Cugel](#):
>
> I also have a web form, just the simplest of challenges e.g. “ **What comes next 1,2,?** ” will do the trick.

(bolding mine)

… added bonus:

You could easily identify fellow SDMB members by nitpicking/bitching about non-determination quality of this string and that - prima facie - at least “3” and “4” seems to be reasonable good answers.

May I suggest a string like:

1-4-8-9-27-16-64-?

should separate the wheat from the chaff  
😉

---

<div class="post-metadata">

**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\
**Post date:** [August 6, 2024, 12:17pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/12 "2024-08-06T12:17:46Z")

</div>

There’s a lot more behind that checkbox than you think. It probably measures things like precisely how the mouse moves to the checkbox, and apparently it’s difficult for a bot to emulate a human in that way. And it’s never the only line of defense: It only gives the checkbox if it’s already pretty sure that you’re a human (from lots of prior human interactions from that computer), and if it’s unsure, it gives you one of the “click every box that contains a traffic light” ones.

---

<div class="post-metadata">

**Author:** ![markn\_1](https://avatars.discourse-cdn.com/v4/letter/m/f9ae1b/32.png) [@markn\_1](https://boards.straightdope.com/u/markn_1)\
**Post date:** [August 6, 2024, 6:01pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/13 "2024-08-06T18:01:00Z")

</div>

> [@Cugel](#):
>
> “What comes next 1,2,?”

That’s easy: 4.  
It’s the powers of 2.

Oh, no, sorry, it’s 5.  
It’s the Catalan numbers.

No, wait, it’s 10.  
It’s the integers in base 3.

Wait, what I meant was 12.  
It’s the superfactorials.

Well, one of those must be correct.

---

<div class="post-metadata">

**Author:** ![Coriolanus](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/coriolanus/32/18769_2.png) [@Coriolanus](https://boards.straightdope.com/u/Coriolanus)\
**Post date:** [August 6, 2024, 8:24pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/14 "2024-08-06T20:24:53Z")

</div>

On several of my websites I use a function that counts the number of non-latin characters and is set to flag as spam anything over about a third as spam. I guess you could post up to 1024 letters yet it won’t even store more than that in the DB - just mark it as spam if it’s bigger.

---

<div class="post-metadata">

**Author:** ![CookingWithGas](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cookingwithgas/32/485_2.png) [@CookingWithGas](https://boards.straightdope.com/u/CookingWithGas)\
**Post date:** [August 6, 2024, 9:16pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/15 "2024-08-06T21:16:47Z")

</div>

> [@Cugel](#):
>
> just the simplest of challenges

I have a simple challenge, “What type of music do we play”? A surprising number of spammers know that it’s jazz.

---

<div class="post-metadata">

**Author:** ![Cugel](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cugel/32/1199_2.png) [@Cugel](https://boards.straightdope.com/u/Cugel)\
**Post date:** [August 6, 2024, 9:25pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/16 "2024-08-06T21:25:28Z")

</div>

Well, if it’s an actual human repeatedly filling out the form, that’s a different beast all together.

---

<div class="post-metadata">

**Author:** ![Cugel](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cugel/32/1199_2.png) [@Cugel](https://boards.straightdope.com/u/Cugel)\
**Post date:** [August 6, 2024, 9:27pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/17 "2024-08-06T21:27:14Z")

</div>

“Making a bot” for one form seems labour intensive, especially when simply changing the question renders it useless.

---

<div class="post-metadata">

**Author:** ![DPRK](https://avatars.discourse-cdn.com/v4/letter/d/4491bb/32.png) [@DPRK](https://boards.straightdope.com/u/DPRK)\
**Post date:** [August 6, 2024, 10:32pm UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/18 "2024-08-06T22:32:46Z")

</div>

Bots do know how to read what the question says. You have to give them that.

---

<div class="post-metadata">

**Author:** ![CookingWithGas](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cookingwithgas/32/485_2.png) [@CookingWithGas](https://boards.straightdope.com/u/CookingWithGas)\
**Post date:** [August 7, 2024, 3:05am UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/19 "2024-08-07T03:05:24Z")

</div>

Reading the question and knowing how to answer it are two different things…I am investigating CAPTCHA currently. It’s a free service but there are multiple ways to implement it and I’m trying to digest the documentation.

---

<div class="post-metadata">

**Author:** ![Cugel](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cugel/32/1199_2.png) [@Cugel](https://boards.straightdope.com/u/Cugel)\
**Post date:** [August 7, 2024, 4:49am UTC](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228/20 "2024-08-07T04:49:45Z")

</div>

First it has to know there is a question, then divine what the question is, and lastly know the answer. IMO, all that is happening here is some crawling of the web searching for the \< form \> tag, then auto-submitting with their crap inserted. There’s no analysing the content, just the usual scattergun approach. Which is easily defeated, my experience is 100% effective since I’ve put my question in place.

[Next page](https://boards.straightdope.com/t/what-is-the-point-of-this-gibberish-spam-to-my-web-site/1005228.md?page=2)
