Subject: Welcoming speech
Date: Friday, 16 September 2016, 3:31
We are looking for employees working remotely.
My name is Glen, I am the personnel manager of a large International company.
Most of the work you can do from home, that is, at a distance.
Salary is $2600-$5500.
If you are interested in this offer, please visit Our Site
It's not very interesting to tell the truth, but it relies on hacked WordPress sites in order to provide landing pages. Of course, hacking someone's site to do this is illegal and no legitimate business would promote itself like this.
What I noticed was the URL in the email..
inspiralcarpets.com/super/wp-content/themes/twentyfifteen/genericons/Inspiral Carpets? Yup, that's the website of the Manchester rock band of the same name. Rather than a carpet shop. As this URLquery report shows, it lands on..
cash-onlines.com [126.96.36.199] (Enzu, US)
There's a familiar landing page..
Clicking the link goes to www.the-quantumcode.com hosted on 188.8.131.52 (Terratransit, Netherlands). This is some bollocks about a binary options trading robot which will apparently make you millions. Obviously this is a scam, because if it was really that easy we'll all be doing it.
One little scammy trick is a counter to tell you that loads of people are looking at the site but there are only a small number of slots available.
It's hard to say if the spam was sent out by whoever runs the binary options site or an affiliate. But it's still crap either way.
Hosted on the same server are the following domains which are probably more of the same plus a load of other bollocks: