Japanese Movement Replica Watch Spam

[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]

VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.

Header:

SMTPSVC(6.0.3790.2444);
Fri, 4 Jul 2008 15:39:12 -0700
Received: from toip47.srvr.bell.ca ([67.69.240.48])
by tomts1-srv.bellnexxia.net
(InterMail vM.5.01.06.13 201-253-122-130-113-20050324) with ESMTP
id <20080704223911.YEMK1657.tomts1-srv.bellnexxia.net@toip47.srvr.bell.ca>;
Fri, 4 Jul 2008 18:39:11 -0400
Received: from toip18.srvr.bell.ca ([67.69.240.20])
by toip47.srvr.bell.ca with ESMTP; 04 Jul 2008 18:39:03 -0400
Received: from cable-baq-co-42.17.143.190.dinanet.net.co (HELO rvulml) ([190.143.17.42])
by toip18.srvr.bell.ca with ESMTP; 04 Jul 2008 18:38:59 -0400
Sender: <kourtney_gabrielleka@grahampearce.com>
To: x
Bcc: x
X-Sender: <kourtney_gabrielleka@grahampearce.com>
Message-ID: <x@grahampearce.com>
Reply-To: "Kourtney Gabrielle" <kourtney_gabrielleka@grahampearce.com>
Date: Fri, 04 Jul 2008 15:37:58 -0700
Subject: Rep|icaWatches Massive discounts on more than 5000 brand timepieces such as vRolex, Breitling, Cartier, patek
Philippe, Hermes, Franck Muller & .. hqqunl kbj
From: "Kourtney Gabrielle" <kourtney_gabrielleka@grahampearce.com>
Content-Type: text/plain;
charset="iso-8859-2"
Content-Transfer-Encoding: 8bit
Return-Path: kourtney_gabrielleka@grahampearce.com
X-OriginalArrivalTime: 04 Jul 2008 22:39:12.0705 (UTC) FILETIME=[C815BB10:01C8DE26]

Body:

******** Latest Arrival ********
Just Added 220 Year 2008 new models

:: Japanese Movement Rep1ica
:: 100% Finest Quality Watch
:: Overnight Shipping
:: ship via DHL, UPS, FedEx & USPS

View A-Z brands on our site

http://rkk.fobackx.com

Comments:

Have you noticed the "Bcc" field in the header. This is either a case of a poorly configured mailing server or a spammer fiddling with the header. We believe it is the latter.

For those who don't know, BCC stands for Blind Carbon Copy and is often used when one wants to send a single e-mail to multiple recipients without revealing the mailing list to each recipient. This e-mail simply shows that BCC is not the best way of concealing your mailing list, but in this case the BCC list was most likely revealed on purpose.

Franck Muller & .. hqqunl kbj

The spammer was so exhausted after typing the long subject line that he/she collapsed on his/her keyboard. That's why you see the garbage "hqqunl kbj" at the end. No, we're just kidding, this is actually another form of hash busting. Instead of adding the hash buster text in the body of the e-mail, this spammer decided to add it to the end of a monstrous subject line.

Rep|icaWatches ... Rep1ica

Old school, spam bypassing techniques. The missing space between Rep|icaWatches is not a typo, we are positive that this was done on purpose.

Just Added 220 Year 2008 new models

Only a spammer will be able to make sense of a incoherent sentence like this.

View A-Z brands on our site

... and receive more spam in return. Guaranteed!

Related Cyber Criminal Profiles:

No related profiles found.

Similar Spam Examples:

King Replica, Replica Watch Spam
Japanese Louis Vuitton Spammer
Secret Traffic Arbitrage Tactics Internet Marketing Spam
Pharmacy Customer Notice Canadian Pharmacy Spam
Make Money In One Week Spam

Related Malware Samples:

No related malware samples found.

[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]