Harris Exploration Inc (HXPN) Stock Spam
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
Received: from mail.briarwoodcountryclub.com (mail.briarwoodcountryclub.com [72.244.83.194])
by imsmx17.netvigator.com (8.14.2/8.14.2) with SMTP id m63ELLEe032471
for x; Thu, 3 Jul 2008 22:21:22 +0800
Received: (qmail 12732 invoked from network); Thu, 3 Jul 2008 09:21:20 -0500
Received: from unknown (HELO vvq) (189.232.153.176)
by mail.briarwoodcountryclub.com with SMTP; Thu, 3 Jul 2008 09:21:20 -0500
Received: from imsmx17.netvigator.com ([192.168.12.103])
by imsm044dat.netvigator.com
(InterMail vM.7.05.01.01 201-2174-106-103-20060222) with ESMTP
id <20080703142123.KLCO7765.imsm044dat.netvigator.com@imsmx17.netvigator.com>
for x; Thu, 3 Jul 2008 22:21:23 +0800
Return-Path: <dretherford@cablenet.ne.jp>
From: <dretherford@cablenet.ne.jp>
To: x
Subject: this is not decei,ving
Date: Thu, 3 Jul 2008 22:21:20 +0800
Message-ID: <x@cablenet.ne.jp>
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AcjdGBHwbC43zvthR/KPodvzIfZMKw==
by imsmx17.netvigator.com (8.14.2/8.14.2) with SMTP id m63ELLEe032471
for x; Thu, 3 Jul 2008 22:21:22 +0800
Received: (qmail 12732 invoked from network); Thu, 3 Jul 2008 09:21:20 -0500
Received: from unknown (HELO vvq) (189.232.153.176)
by mail.briarwoodcountryclub.com with SMTP; Thu, 3 Jul 2008 09:21:20 -0500
Received: from imsmx17.netvigator.com ([192.168.12.103])
by imsm044dat.netvigator.com
(InterMail vM.7.05.01.01 201-2174-106-103-20060222) with ESMTP
id <20080703142123.KLCO7765.imsm044dat.netvigator.com@imsmx17.netvigator.com>
for x; Thu, 3 Jul 2008 22:21:23 +0800
Return-Path: <dretherford@cablenet.ne.jp>
From: <dretherford@cablenet.ne.jp>
To: x
Subject: this is not decei,ving
Date: Thu, 3 Jul 2008 22:21:20 +0800
Message-ID: <x@cablenet.ne.jp>
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AcjdGBHwbC43zvthR/KPodvzIfZMKw==
Body:
July, T.hrusday 3
A MsutWatch Alret
Firm: HraisExplor
Issue: H - X - P - N
Ar"ound: 0.02
In six days: 0.08
By now you should know that were always right
This train is one you will regret" missing
Thursday 3rd, "July 08
A MsutWatch Alret
Firm: HraisExplor
Issue: H - X - P - N
Ar"ound: 0.02
In six days: 0.08
By now you should know that were always right
This train is one you will regret" missing
Thursday 3rd, "July 08
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
Stock Market Spam - Re: Most Important Email (Ever) Sent...R.C.H.A Stock Market Spam - This pharmaceutical could quadruple fast
Stock Market Spam - Our Opening Bell Breakout Pick Is Inside (IRMGF)
R.C.H.A. Stock Market Spam - This bioceutical will at least double
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
How can you say that? Everything about this e-mail is deceiving.
Dyslexia or an attempt to fool the spam filter? Perhaps it is both.
Issue: H - X - P - N
You may ask yourself, how can this spammer be successful if the name of the firm is scrambled so much that you can't identify it properly? The most important element of a pump and dump scam is in the stock symbol, that's all that counts. Although the spammer disguised it as H - X - P - N, you can still see it is HXPN.
Instead of using the term "Symbol", the spammer uses the term "Issue", to prevent the e-mail from triggering any spam filters.