spam for loans, spam for loans

Posted by joy


My email filters have been getting a workout these past few weeks with variations on the foreign based website acting as a local mortgage broker and asking for personal financial information scams. Here is an example of what one of these emails look like. The Web page for the mortgage broker is actually hosted on a Brazilian Webserver. The email posted below has been copied and pasted (with the exception of the removal of my mailserver information) as it appeared in my inbox.

Received: from [220.116.85.248] (helo=63.247.129.138)
by [my mailserver] with smtp (Exim 4.34)
id 1Blpd2-0000sc-VG
for [my email]; Sat, 17 Jul 2004 09:53:30 -0400
Received: from 236.136.244.224 by 220.116.85.248; Sat, 17 Jul 2004 17:50:01 +0300
Message-ID:
From: “Edwina Cobb”
Reply-To: “Edwina Cobb”

To: [my email]
Subject: We have approved your loan
Date: Sat, 17 Jul 2004 17:49:01 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=”–1785671432408812″

—-1785671432408812
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

Hi again.
I sent you an email a week ago and I want to confirm everything now. Pleas=
e read info below
and let me know if you have any questions. We are accepting your mo rtgage=
application. We specialize
in less-than-perfect cr edit, and our advisors are here to help you.
Approva1 =C2 process will take 15 seconds.

http://www.jakao.biz/green/index.php?affiliateid=3Dmailer00001″=
Just visit this link and fill in short form.

Thank you.c

Best regards,
Edwina Cobb

octant kowloon aback oldy steen cameraman deanna amtrak create thatch well=
es basidiomycetes puddingstone delectate chert apprehend yeoman hetty=20LW=
PZXTSXBI

—-1785671432408812–

————=_40F92F5B.2CF645C4–


One Response to “spam for loans, spam for loans”

  1. Harald Says:

    ever since I enabled greylisting my spam volume has gone way down; I’ve seen relatively few of these, for example.