Take a look at this spam

[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]

VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.

Header:

From - Mon Dec 30 11:50:03 2013
X-Account-Key: account9
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Delivered-To: x
Received: by 10.58.90.130 with SMTP id bw2csp275203veb;
Fri, 27 Dec 2013 10:50:15 -0800 (PST)
X-Received: by 10.194.79.165 with SMTP id k5mr10891878wjx.44.1388170214084;
Fri, 27 Dec 2013 10:50:14 -0800 (PST)
Return-Path: <24074906@inviteafriend.co>
Received: from m11.p5.behavemail.net ([62.4.2.107])
by mx.google.com with ESMTP id 18si13140487wjo.151.2013.12.27.10.50.13
for <x>;
Fri, 27 Dec 2013 10:50:14 -0800 (PST)
Received-SPF: pass (google.com: domain of 24074906@inviteafriend.co designates 62.4.2.107 as permitted sender)
client-ip=62.4.2.107;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of 24074906@inviteafriend.co designates 62.4.2.107 as permitted sender)
smtp.mail=24074906@inviteafriend.co;
dkim=pass header.i=@inviteafriend.co
Return-Path: <24074906@inviteafriend.co>
DKIM-Signature: v=1; a=rsa-sha1; d=inviteafriend.co; s=dkim; c=relaxed/relaxed;
        q=dns/txt; i=@inviteafriend.co; t=1388147282;
        h=From:Subject:x-SENDID:x-LOT:List-Unsubscribe:To:MIME-Version:Reply-To:Message-ID:
        Content-Type;
        bh=ZFZGjfQ7g6/wLpccgD0N88n7KJg=;
        b=u36QCEVIQdsbRzp1hGknrfgQt85+i/LeeZURklt33p95a0lzZ+3/4iP8CimpLsQy
        Aj/4dh+DLDfSEmrsCXIJfwHp8zMOwpXMgSb7EJgUtn7tYB2EXgDMVIDX2skWIrO2
        VzjBrkohxNrK5sXjzAJpTBJAdBpX9l4Tc5AqxoQ8BVQ=;
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
        s=dkim; d=inviteafriend.co;
        h=X-MSFBL:Authentication-Results:Received:Date:From:Sender:To:Message-ID:Subject:MIME-Ve...
l_id:X-sent_id:X-contact_id:X-priority;
        b=Ie4F9vZMV3ogEWiQ82G8P3KPWpTKAlMXHIDjXaOvAANpRj6TAgJzcZdMOwBfRMWD
        uJaVKpk7fdfZuJNl25n4djlkaQ3QZLEkzLk+wqjM/rygGOcQvGBAuNA/NRgEZJ1p
        3jegvrNf4oop5xH3LnLlsH7tct7KTUnho1vHUJsT7Lw=
X-MSFBL: c3BhbUBjeWJlcnRvcGNvcHMuY29tQElOVklUQVRJT04yQElOVklUQVRJT05AfCBc
        blx0XHQ=
Authentication-Results: mta3 smtp.user=eureka; auth=pass (LOGIN)
Received: from [37.59.35.219] ([37.59.35.219:58613] helo=sf1.app.behaview.net)
        by mta3 (envelope-from <24074906@inviteafriend.co>)
        (ecelerity 3.5.3.37097 r(Platform:3.5.3.0)) with ESMTPA
        id 20/64-29701-2527DB25; Fri, 27 Dec 2013 13:28:02 +0100
Date: Fri, 27 Dec 2013 13:28:02 +0100
From: "graywolf11@aol.com" <graywolf11@aol.com>
Sender: 24074906@inviteafriend.co
To: x
Message-ID: <x@inviteafriend.co>
Subject: Take a look at this spam
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_Part_241769_705742791.1388147278673"
X-lot_id: 626
X-cl_id: 66
X-sent_id: 24074906
X-contact_id: 1017fd67fba9cc841a725bada455450997aaee14
X-priority: 0

Body:

Hi, graywolf11@aol.com is sending you this message in the context of the nomorerack "Refer a Friend" program.
If you don't want to receive anymore recommendations to discover Nomorerack, unsubscribe here .

Hey spam,

here's a referral link to nomorerack.

It'll give you $10 off so if you find something you like, you'll save on top of their already low prices. (on electronics, clothing, household goods, etc..)

http://www.nomorerack.com/customers/auth
(this link also instantly creates you an account - saves you time!)

By clicking the link above, you agree to Nomorerack's Privacy Policy and to receiving notifications about nomorerack's offers and promotions

Nomorerack.com Inc | 381 Park Avenue South, 4th floor, New York, NY, 10016 |

Comments:

Subject: Take a look at this spam

LOL! Thank you for pointing out that your junk e-mail is spam. The subject line is dynamic from user to user. The spammer takes the mailbox account name and uses it in the subject line. So for instance if your e-mail address is johndoe@example.com, the subject line would have read Take a look at this johndoe.

Unfortunately for this idiot spammer, his spam was sent to spam@cybertopcops.com, resulting in the funny subject line.

Hi, graywolf11@aol.com is sending you this message in the context of the nomorerack "Refer a Friend" program.

No, graywolf11 is not our friend, but an affiliate spammer and we have read a lot of negative reviews about nomorerack.com, so we would not recommend buying from this site.

Related Cyber Criminal Profiles:

No related profiles found.

Similar Spam Examples:

Orchard Bank Phishing Scam Account Alert Statement Available
Fake Foursquare Notification - Matthew Martin has sent you a message
General Malware Spam - Homicide Suspect
Flipora Spam - iyaloo27@gmail.com is waiting for your reply. Respond?
Banking Phishing Scam - Your Chase Credit Card Account

Related Malware Samples:

No related malware samples found.

[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]