King Replica, Replica Watch Spam

[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]

VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.

Header:

Received: from smtp-in2.blueyonder.co.uk ([172.23.146.13]) by Cluster12 with Microsoft SMTPSVC(6.0.3790.3959);
         Tue, 8 Jul 2008 15:18:41 +0100
Received: from eback01.blueyonder.co.uk ([195.188.53.212]) by smtp-in2.blueyonder.co.uk with Microsoft
SMTPSVC(5.0.2195.6713);
         Tue, 8 Jul 2008 15:18:40 +0100
Received: from [172.23.170.140] (helo=anti-virus02-07)
        by eback01.blueyonder.co.uk with smtp (Exim 4.52)
        id 1KGE1g-00064S-0a
        for x; Tue, 08 Jul 2008 15:18:40 +0100
Received: from [190.77.20.45] (helo=iname.com)
        by exim14.blueyonder.co.uk with esmtp (Exim 4.68)
        (envelope-from <wigginsrp@flash.net>)
        id 1KGE1Z-0002dt-Kz; Tue, 08 Jul 2008 15:18:34 +0100
MIME-Version: 1.0
Subject: SOLD OUT -- Looking for gift? Buy Rolex or extra Bag 2am
Date: Tue, 08 Jul 2008 16:46:21 +0000
To: johndoe@example.com, x, x, x
From: "Tracey Wiggins" <wigginsrp@flash.net>
Message-ID: <x@flash.net>
Content-Type: text/plain;
        charset="iso-8859-2"
Content-Transfer-Encoding: 8bit
X-Envelope-To: x
Return-Path: wigginsrp@flash.net
X-OriginalArrivalTime: 08 Jul 2008 14:18:40.0271 (UTC) FILETIME=[8502F9F0:01C8E105]

Body:

Dear johndoe@example.com

http://ewoosl.com

What is King Replica store?

At King Replica, we specialize in the sales of brand-name quality,
luxury replicas at some of the lowest prices possible. With our large selection of
products, you can be sure to find that perfect gift for yourself or a loved one.

http://ewoosl.com

Thanks
Ann Cassidy

johndoe@example.com wrote:
> SOLD OUT -- Hey.. I selling rolexes and other watches
jxp5mn1cif-
out me now
http://ewoosl.com/remove/

Comments:

johndoe@example.com wrote:
> SOLD OUT -- Hey.. I selling rolexes and other watches

The most significant part of this e-mail. The spammer wants to create the impression that you made contact with him/her on a previous occasion. The quote from your so-called previous e-mail is combined with hash buster text to deliver a random message each time, making it harder for the spam filters to catch these e-mails.

If you read this quote, you will notice that it makes absolutely no sense. The so-called reply from the spammer makes even less sense, so it is clear that the spammer is simply trying to randomise the size and contents of the e-mail.

We substituted the real e-mail address of the recipient with johndoe@example.com, to illustrate how the spammer used the recipient's e-mail address throughout the body of the e-mail.

Related Cyber Criminal Profiles:

No related profiles found.

Similar Spam Examples:

Japanese Movement Replica Watch Spam
Replica Spam - New collection Replica Swiss Rolex & Brand Bags
Secret Traffic Arbitrage Tactics Internet Marketing Spam
Pharmacy Customer Notice Canadian Pharmacy Spam
Make Money In One Week Spam

Related Malware Samples:

No related malware samples found.

[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]