From the laboratory of Symantec Security Response:

"Recently, we came across few offer spam mails which had the following URL in it:
http://www.google.com/search?hl=en&q=inurl:replica%20intext:
"
--clip--

The technical analysis continues at
http://www.symantec.com/enterprise/security_response/weblog/2007/11/googles_advanced_search_operat.html

I didn't see inurl: a professional or advanced feature in the community any more ;)

Simulating a click on "I'm feeling lucky" would certainly count as a "professional or advanced feature" of Google's search query syntax.

I also think it's fair to call "inurl:" an advanced feature. I doubt even one percent of Google users would know about it.

No need to use inurl when you can enter the URL as a query.
http://www.google.com/search?q=http://replicawatchesonline.com/&btnI

Ionut: Presumably they want to hide their full URL so that they don't trigger spam filters.

Yeah, it's probably the mission of Symantec's blog entry too.

Here as well:
http://sunbeltblog.blogspot.com/2007/11/ingenious-new-method-used-by-spammers.html