Canadian Pharmacy Spam
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Wed Jul 02 18:19:04 2008
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 217.146.182.126; Wed, 02 Jul 2008 05:26:04 +0000
X-YahooFilteredBulk: 202.151.24.171
X-Originating-IP: [202.151.24.171]
Authentication-Results: mta140.mail.ukl.yahoo.com from=wol.es; domainkeys=neutral (no sig)
Received: from 202.151.24.171 (HELO g72get3) (202.151.24.171)
by mta140.mail.ukl.yahoo.com with SMTP; Wed, 02 Jul 2008 05:26:04 +0000
Message-ID: <x@wol.es>
From: "Keri I. Swift" <k.swift_pn@wol.es>
To: <x>,
<x>,
<x>
Subject: Worlds best pain killers here
Date: Wed, 02 Jul 2008 00:24:31 -0500
MIME-Version: 1.0
Content-type: multipart/alternative;
boundary="----=_NextPart_000_0008_01C8DC03.E80DF2E0"
X-Priority: 3
X-MSMail-priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 217.146.182.126; Wed, 02 Jul 2008 05:26:04 +0000
X-YahooFilteredBulk: 202.151.24.171
X-Originating-IP: [202.151.24.171]
Authentication-Results: mta140.mail.ukl.yahoo.com from=wol.es; domainkeys=neutral (no sig)
Received: from 202.151.24.171 (HELO g72get3) (202.151.24.171)
by mta140.mail.ukl.yahoo.com with SMTP; Wed, 02 Jul 2008 05:26:04 +0000
Message-ID: <x@wol.es>
From: "Keri I. Swift" <k.swift_pn@wol.es>
To: <x>,
<x>,
<x>
Subject: Worlds best pain killers here
Date: Wed, 02 Jul 2008 00:24:31 -0500
MIME-Version: 1.0
Content-type: multipart/alternative;
boundary="----=_NextPart_000_0008_01C8DC03.E80DF2E0"
X-Priority: 3
X-MSMail-priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Body:
New Canadian pharmacyy.!!
Here it is - - > Click Here
Here it is - - > Click Here
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
Drugstore Pharmacy Spam - Are generics as good?Quit smoking spam - The most effective anti-smoking method
Spammers using Opera's revolutionary e-mail client
Canadian Pharmacy Spam - Are Generics As Good?
Online Pharmaceutical Spam with Policy Restricitions Being Lifted
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
It remains a mystery why people would trust an e-mail like this. Lets say an unknown individual approaches in public, he stuffs a bunch of pills in your hand and says: "New Canadian Pharmacy pills, here they are!" Are you going to take them? Any normal person won't, so why do people act on e-mails like these? You have no idea where the e-mail came from and you have no idea where the link in the e-mail will take you, you don't even know what's the name of the pharmacy. Remember what our mothers told us when we were little? "Never accept gifts from strangers!" The same rule applies to the Internet: "Never accept gifts (or buy stuff) from spammers!"
The additional "y" in "pharmacyy" is not a typo, nor is it a spelling error, it is done on purpose to fool the spam filters. The link takes you to typical online pharmacy template site using one of those lame "Infinity Secure" order pages. A fair warning to those who are crazy enough to fill out and submit the order form, the order page is not on a secure server, nor is the data transmitted over a secure connection, so your personal information and credit card number is not as safe as the page claims to be.
Not even the "worlds best pain killers" can dull the pain of all the headaches caused by Canadian Pharmacy Spammers.