Migre.me Widely Used in Recent Spam Campaigns

We have noticed in recent spam campaigns that the spammers are using the shorten URL service at Migre.me to spread pharmacy links, casino and watches links and other scam-links hidden behind the shortened URL and probably bypassing some anti-spam filters.

Spam message

Note at the bottom of the image above the link to a shortened URL from migre.me service. Using our free tool Extract URL is possible to know where is pointing the shortened URL, as we can see from the image below:

Migre.me URL Extracted

The link extracted, points to a website that looks like to be used to sell fake watches, fake rolex and other false or non existent stuff, definitely a scam site. We tried to visit the website and this is an image of its main homepage:

Watches Scam Website

Using our other free tool URL Dump we could easily understand that it is a scam website that is used to sell fake rolex and fake watches, by searching interesting text on the dumped content, as seen in the image below:

URL Dump in Action

Domain & IP Analysis

daychain .com121.127.133.14