All recent mortgage spam/scams:
Subject: Re: Account # 1954800A
Subject: Re: Account # 8479229A
Subject: Re: Account # 9940144E
Subject: Re: Account # 3952049B
Subject: Your account #686M7984
Subject: Re: Account # 0512980B
Subject: Re: Account # 95313595A
Subject: Re: Account # 0434326O
Subject: Account # 84088Y
Subject: Re: Account # 67817K
Subject: Re: Account # 71072025X
Subject: Re: Account # 76672902B
Subject: Re: Account # 83442I
Subject: Re: Account # 02934426Y
A *much* better sign is the header:
X-Mailer: KYX CP/M FNORD 5602
which is in all of them and many more mortgage spams from the
same spammer without the "Re: Account #" labeling. There are several SBLs,
but the only one I could quickly find without the domains already suspended
was;
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL29093
Paul Shupak
[EMAIL PROTECTED]
P.S. I don't know what mailer generates the "KYX CP/M FNORD", but it
seems to only appear in spam.
