Ferratum Oyj, Payday Loans for Businesses and Affiliate Spam

Ferratum Oyj, a Finnish payday loan operator (www, biz reg, responsible people) recently had the smart idea to advertise their business loan services through affiliate spam. This blog entry attempts to document what ensued.


1. Copy of affiliate spam, with details crossed out.

Return-Path: <posti@soumikasino.com>
Received: from tool.soumikasino.com (unknown [104.152.190.105])
        by x (Postfix) with ESMTP id x
        for <x>; Tue,  6 Jun 2017 16:00:49 +0300 (EEST)
Received: from nordmailer.com (119.ip-164-132-48.eu [164.132.48.119])
        by tool.soumikasino.com (Postfix) with ESMTPA id x
        for <x>; Tue,  6 Jun 2017 08:59:30 -0400 (EDT)
To: x
Subject: Hae yrityslainaa Ferratumilta
Message-ID: <x@nordmailer.com>
Date: Tue, 06 Jun 2017 12:40:08 +0200
From: Yritystarjous <posti@soumikasino.com>
Reply-To: posti@soumikasino.com
MIME-Version: 1.0
X-Mailer-LID: 75
List-Unsubscribe: <http://nordmailer.com/unsubscribe.php?M=x&C=x&L=75&N=x>
X-Mailer-RecptId: x
X-Mailer-SID: x
X-Mailer-Sent-By: 5
Content-Type: multipart/alternative; charset="UTF-8";
        boundary="b1_x"
Content-Transfer-Encoding: 8bit

Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit

 This is preheader text. Some clients will show this text as a preview.Hei


Hae yrityslainaa Ferratumilta.
[http://nordmailer.com/link.php?M=x&N=x&L=365&F=T Ferratumilta
rahat, joilla saat yrityksesi kasvamaan, nopeasti!

Nopeampi ja helpompi tapa saada yrityslaina. Ferratum yrityslainalla
vältät turhat paperityöt ja vaivan. Toisin kuin pankit, saat
Ferratumilta päätöksen minuuteissa, ei viikoissa. Kun laina
on hyväksytty, laina on käytössäsi jopa 1
päivän kuluttua.

Lainaa 2 000-100 000 euroa6–12 kuukauden laina-aikaYksinkertainen ja
selkeä hinnoitteluEi piilokulujaOta yrityslaina ja tee investointeja,
palkkaa lisää työntekijöitä tai täytä
kasvusi taloudelliset vaatimukset. Ferratum yrityslaina on turvallinen ja
varma laina. Täytä vain maksuton hakemus minä vain
vuorokauden tuntina.

Täytä lainahakemus
[http://nordmailer.com/link.php?M=x&N=x&L=366&F=T].




[http://nordmailer.com/link.php?M=x&N=x&L=98&F=T]


Saat tämän sähköpostin koska olet tilannut
uutiskirjeemme. Etkö halua enään sähköpostia?
Peruuta uutiskirjeen tilaus.
[http://nordmailer.com/unsubscribe.php?M=x&C=x&L=75&N=x]




Powered by Interspire

2. LinkedIn update by yours truly.

3. The response from Ferratum in InMail.

4. My response to this: “May I publish this?”

5. Jussi’s response: “We’d rather discuss in private, which is exactly why I InMail’ed you.”

6. My response to that: “Please supply all the legally mandatory documentation.”

7. Their response: “Identify the target addresses.”

8. My response: “Fat chance.”

One Response to Ferratum Oyj, Payday Loans for Businesses and Affiliate Spam

  1. Nordmailer.com appears to be un-anonymous. Beautiful

    $ whois nordmailer.com
    [Querying whois.verisign-grs.com]
    [Redirected to whois.ovh.com]
    [Querying whois.ovh.com]
    [whois.ovh.com]
    Domain Name: nordmailer.com
    Registry Domain ID: 2098137151_DOMAIN_COM-VRSN
    Registrar WHOIS Server: whois.ovh.com
    Registrar URL: http://www.ovh.com
    Updated Date: 2017-06-03T12:48:25.0Z
    Creation Date: 2017-02-16T13:17:13.0Z
    Registrar Registration Expiration Date: 2018-02-16T13:17:13.0Z
    Registrar: OVH, SAS
    Registrar IANA ID: 433
    Registrar Abuse Contact Email: abuse@ovh.net
    Registrar Abuse Contact Phone: +33.972101007
    Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
    Registry Registrant ID:
    Registrant Name: liidimedia oy
    Registrant Organization: liidimedia oy
    Registrant Street: pb 300
    Registrant City: tampere
    Registrant State/Province:
    Registrant Postal Code: 33101
    Registrant Country:  FI
    Registrant Phone: +358.40622345
    Registrant Phone Ext:
    Registrant Fax: 
    Registrant Fax Ext:
    Registrant Email: sami@samiweb.fi
    Registry Admin ID:
    Admin Name: liidimedia oy
    Admin Organization: liidimedia oy
    Admin Street: polvikatu 7 b 16
    Admin City: tampere
    Admin State/Province:
    Admin Postal Code: 33100
    Admin Country:  FI
    Admin Phone: +358.40622345
    Admin Phone Ext:
    Admin Fax: 
    Admin Fax Ext:
    Admin Email: sami@samiweb.fi
    Registry Tech ID:
    Tech Name: liidimedia oy
    Tech Organization: liidimedia oy
    Tech Street: polvikatu 7 b 16
    Tech City: tampere
    Tech State/Province:
    Tech Postal Code: 33100
    Tech Country:  FI
    Tech Phone: +358.40622345
    Tech Phone Ext:
    Tech Fax: 
    Tech Fax Ext:
    Tech Email: sami@samiweb.fi
    Name Server: dns200.anycast.me
    Name Server: ns200.anycast.me
    DNSSEC: unsigned
    URL of the ICANN WHOIS Data Problem Reporting System:
    http://wdprs.internic.net/
    >>> Last update of WHOIS database: 2017-06-03T14:48:28.0Z < <<
    

Leave a Reply

Go back to top