Date: 2 January 2015 at 11:02
We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.
We cooperate with different countries and currently we have many clients in the world.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1500 up to $5000 per month.
The job offers a good salary so, interested candidates please registration on the our site: www.binarysmoney.com
Attention! Accept applications only on this and next week.
Subject lines include:
New employment opportunities
New job offer
Spamvertised sites seen so far are binarysmoney.com, clickmoneys.com and thinkedmoney.com, all multihomed on the following IPs:
18.104.22.168 (Adnet Telecom / "Oancea Mihai Gabriel Intreprindere Individuala", Romania)
22.214.171.124 (VTR Banda Ancha S.A., Chile)
126.96.36.199 (Hosting Internet Hizmetleri Sanayi Ve Ticaret Anonim Sirketi, Turkey)
Another site hosted on these IPs is moneyproff.com. All the domains have apparently fake WHOIS details.
It looks like a money mule spam, but in fact it leads to some binary options trading crap.
There is no identifying information on the page at all. Trustworthy? Nope. But let's look at that relaxed looking chap at the top of the page, in a picture called matthew.png.
Shutterstock stock photo that is pretty widely used on the web. In fact, everything about this whole thing is a cookie-cutter site with text and images copied from elsewhere.
Binary options are a haven for scammers, and my opinion is that this is such a scam given the spammy promotion and hidden identity of the operators. I would recommend that you avoid this and also block traffic to the following IPs and domains: