Sample Home Financing Spam - Mortgage Quote
Another complete waste of time are Home Financing and Bad Credit spams. These types of spam promises unconditional pre-approved credit and requests that you click on the link and fill out a form. As soon as you submit your information, you will be directed to loads more websites promoting anything from holiday vacations to face cream. While the form serves to capture more email leads, the websites it redirects to are affiliate programs which the spammer signed up with. Needless to say, responding to the ad or purchasing from them is a sure passport to more spam in your inbox.
These messages usually link to temporary websites registered specifically for their spamming. They are mass produced using templates and registered shortly before the spam is sent. In a short while, the website will be blacklisted by every known community, including Google. Having served its purpose, the spammer then moves on and registers another website.
In the interest of originality, the body of the message is left unaltered as much as possible. But for security reasons, and to protect the reputation of our own website from being seen as linking to bogus websites, the links in the spam message have been disabled. Placing your mouse over them will show the original url it intended to link to, but clicking on them will bring you to spamhaus.org, a non-profit organization for combating spam.
|
From: "Future " <sctkdryqxafhs@yahoo.com>
To: dongdiandan@yahoo.com Date: Tue, 19 Jan 38 03:14:07 GMT Subject: Find Fast & Easy Loan Program ! Dear , yahoo.com User!! You have been pre-approved for Home Loan at Fixed Rate. This offer is being extended to you unconditionally and we will work with you regardless your credit To take Advantage of this Limited Time opportunity all we ask is that you visit our Website and complete the 1 minute post Approval Form. visit here: http://%6B%6F%65%6D%6D%6F%72%74%67%2E%6E%65%74/?ref=cha Best Regards, Patrick Endorsement Assistant http://%6B%6F%65%6D%6D%6F%72%74%67%2E%6E%65%74/?ref=cha |
Points to note :-
- Forged from email sctkdryqxafhs@yahoo.com
- The link to http://%6B%6F%65%6D%6D%6F%72%74%67%2E%6E%65%74/?ref=cha is a disguised url. It's represented in hex which translates to http://koemmortg.net/?ref=cha
- The ?ref=cha at the end of the url is used for tracking purposes, where it logs the number of clicks the email generated.
- The website claims to have been around since year 2000 (6 years), but it was registered only 3 days prior to sending the spam email.
- The ip address which the spammer used is around the range of 221.140.1.75. These ip addresses were already blacklisted by Yahoo's spam blocker.
- The email message originated from Korea, but the website is registered to a Chinese registrant.