Russian Dating Spam - New profile
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Fri Dec 21 12:53:28 2012
X-Account-Key: account2
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 46.228.37.133; Fri, 21 Dec 2012 10:49:21 +0000
X-YahooFilteredBulk: 78.83.82.197
Received-SPF: none (domain of skandvik.se does not designate permitted sender hosts)
X-YMailISG: x
X-Originating-IP: [78.83.82.197]
Authentication-Results: mta1092.mail.ird.yahoo.com from=skandvik.se; domainkeys=neutral (no sig); from=skandvik.se;
dkim=neutral (no sig)
Received: from 127.0.0.1 (78.83.82.197)
by mta1092.mail.ird.yahoo.com with SMTP; Fri, 21 Dec 2012 10:49:21 +0000
From: "NewDating" <663AB761F@skandvik.se>
To: x
Subject: [Bulk] New profile
Date: Fri, 21 Dec 2012 12:49:21 +0300
MIME-Version: 1.0
Content-Type: text/html; chars="utf-8"
List-Unsubscribe: x
Message-ID: <x@HVP-PC>
X-Account-Key: account2
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 46.228.37.133; Fri, 21 Dec 2012 10:49:21 +0000
X-YahooFilteredBulk: 78.83.82.197
Received-SPF: none (domain of skandvik.se does not designate permitted sender hosts)
X-YMailISG: x
X-Originating-IP: [78.83.82.197]
Authentication-Results: mta1092.mail.ird.yahoo.com from=skandvik.se; domainkeys=neutral (no sig); from=skandvik.se;
dkim=neutral (no sig)
Received: from 127.0.0.1 (78.83.82.197)
by mta1092.mail.ird.yahoo.com with SMTP; Fri, 21 Dec 2012 10:49:21 +0000
From: "NewDating" <663AB761F@skandvik.se>
To: x
Subject: [Bulk] New profile
Date: Fri, 21 Dec 2012 12:49:21 +0300
MIME-Version: 1.0
Content-Type: text/html; chars="utf-8"
List-Unsubscribe: x
Message-ID: <x@HVP-PC>
Body:
|
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
Online Dating Spam - Beautiful Russian Women - RussianBrides.comOnline Dating Porn Spam - Eva Edison BLEW YOU A KISS
NatWest Credit Card Services Banking Phishing Scam
Its Help Desk E-Mail Hack Phishing Scam
Nomorerack Online Shopping Spam - Take a look at this spam
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
Now this sounds a bit risky, looking ON someone's picture...
Whatever a night mae is? (We assume nightmare, by the way).
Well the photos of the women on this website, can hardly be associated with a "night mae", but it might be a "night mae" communicating with them, because their English is most likely as bad is that of the person who wrote this e-mail.
But the true "night mae" will be your bank balance when these fake beauties are done with you. Remember the women on these websites do not need an online dating website to find a date, the 'girl' you are communicating with is most likely a fat, sweaty male sitting in a dark room smoking cigarettes and drinking beer.
So face the facts, Natalia (or Nathaniel) is not looking for love, she (or he) is looking for your hard earned cash.
At the bottom of the e-mail we found the following piece of HTML code:
<IMG ALT="" SRC="http://www.19DAFC4BC0798145DD4.com/db/E61696310CC466CA4/D7590150A8D/1.gif" WIDTH=1 HEIGHT=1>
This is a classic 1x1, invisible, remote tracking image, used by the spammers to see if you opened the e-mail. Unless your e-mail client blocks remote images by default, you could notify the spammer that your e-mail account is active by just opening this e-mail. That's the reason why you should not even open a spam e-mail.