Real Cash Flow Money Making Spam
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Fri Jul 04 18:18:57 2008
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 217.146.182.127; Thu, 03 Jul 2008 19:00:45 +0000
X-YahooFilteredBulk: 85.240.174.33
X-Originating-IP: [85.240.174.33]
Authentication-Results: mta123.mail.ukl.yahoo.com from=; domainkeys=neutral (no sig)
Received: from 85.240.174.33 (EHLO mx.netidentity.com.cust.hostedemail.com) (85.240.174.33)
by mta123.mail.ukl.yahoo.com with SMTP; Thu, 03 Jul 2008 19:00:44 +0000
From:"Lucinda Holmes"<iaejnqpnm@photocyberbank.com.au>
To: x
Cc: <x>,
<x>,
<x>,
<x>,
<x>
Date: Thu, 03 Jul 2008 12:06:44 -0700
Subject: 1 to 3k a day
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 217.146.182.127; Thu, 03 Jul 2008 19:00:45 +0000
X-YahooFilteredBulk: 85.240.174.33
X-Originating-IP: [85.240.174.33]
Authentication-Results: mta123.mail.ukl.yahoo.com from=; domainkeys=neutral (no sig)
Received: from 85.240.174.33 (EHLO mx.netidentity.com.cust.hostedemail.com) (85.240.174.33)
by mta123.mail.ukl.yahoo.com with SMTP; Thu, 03 Jul 2008 19:00:44 +0000
From:"Lucinda Holmes"<iaejnqpnm@photocyberbank.com.au>
To: x
Cc: <x>,
<x>,
<x>,
<x>,
<x>
Date: Thu, 03 Jul 2008 12:06:44 -0700
Subject: 1 to 3k a day
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Body:
This is Real!
Real Cash Flow to your door!
$150O to $35O0 per week...even per day! Some see theres in the first fourty eight hours.
Start to see Cash in the next days to come!
No Selling
Simple Easy
Proven Program
Not MIM!
Ring up 1.8oo.416.1953 and hear my message, its short and sweet :)
http://ipages.org/url315
Postal Outlet Box 1152
P.la.ceville C.A 956- 39
Real Cash Flow to your door!
$150O to $35O0 per week...even per day! Some see theres in the first fourty eight hours.
Start to see Cash in the next days to come!
No Selling
Simple Easy
Proven Program
Not MIM!
Ring up 1.8oo.416.1953 and hear my message, its short and sweet :)
http://ipages.org/url315
Postal Outlet Box 1152
P.la.ceville C.A 956- 39
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
The Retired Millionaire Money Making SpamGorilla Millions Spam
Secret Traffic Arbitrage Tactics Internet Marketing Spam
Make Money In One Week Spam
eBooks or Social Networking - It all depends on your geographic location?
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
...
1.8oo.416.1953
You will notice that some of the zeros in $150O to $35O0 are upper case O's and the ones in 8oo are actually two lower case O's. Spammers often replace digits with letters and letters with digits to bypass the spam filters. Many replacements are quite easy to notice, but with certain fonts it is not always that easy to distinguish an O from a 0.
P.la.ceville C.A 956- 39
Spammers are using all kinds of alternative methods to make money these days. Instead of using a website they use telephone numbers and postal addresses to convert the recipients into customers. The funny spelling of Placeville and the zip code 95639, is once again done to bypass the spam filters. We've seen some creative obfuscating techniques used by these spammers, some write the numbers out in words like "9five63nine" and others use dots as delimiters e.g. "9.5.6.3.9"
This e-mail bears all the characteristics of a spammer at work. No ethical marketer will send unsolicited commercial e-mails or use a bunch of backyard spam filter bypassing techniques. Just ask yourself the question, if the spammer is really honest, why is he/she hiding some of the details in the e-mail?