This bioceutical will at least double
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Sat Apr 12 10:36:40 2014
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 46.228.37.119; Sat, 12 Apr 2014 04:19:59 +0000
X-YahooFilteredBulk: 186.4.30.199
Received-SPF: none (domain of kulflo.com does not designate permitted sender hosts)
X-YMailISG: x
X-Originating-IP: [186.4.30.199]
Authentication-Results: mta1188.mail.ir2.yahoo.com from=kulflo.com; domainkeys=neutral (no sig); from=kulflo.com;
dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO 186.4.30.199) (186.4.30.199)
by mta1188.mail.ir2.yahoo.com with SMTP; Sat, 12 Apr 2014 04:19:59 +0000
MIME-Version: 1.0
Date: Fri, 11 Apr 2014 22:19:42 -0600
Delivered-To: x
Message-ID: <x@mail.yahoo.co.uk>
Subject: [Bulk] This bioceutical will at least double
From: "YahooFinance" <x.x@kulflo.com>
To: x
Content-Type: multipart/related; boundary=d0a987cf2ec98c90478a203a36a7
Received: from 46.228.37.119 (46.228.37.119) by deli10501.mail.ir2.yahoo.com(10.200.25.112); Sat, 12 Apr 2014 04:19:59
+0000
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 46.228.37.119; Sat, 12 Apr 2014 04:19:59 +0000
X-YahooFilteredBulk: 186.4.30.199
Received-SPF: none (domain of kulflo.com does not designate permitted sender hosts)
X-YMailISG: x
X-Originating-IP: [186.4.30.199]
Authentication-Results: mta1188.mail.ir2.yahoo.com from=kulflo.com; domainkeys=neutral (no sig); from=kulflo.com;
dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO 186.4.30.199) (186.4.30.199)
by mta1188.mail.ir2.yahoo.com with SMTP; Sat, 12 Apr 2014 04:19:59 +0000
MIME-Version: 1.0
Date: Fri, 11 Apr 2014 22:19:42 -0600
Delivered-To: x
Message-ID: <x@mail.yahoo.co.uk>
Subject: [Bulk] This bioceutical will at least double
From: "YahooFinance" <x.x@kulflo.com>
To: x
Content-Type: multipart/related; boundary=d0a987cf2ec98c90478a203a36a7
Received: from 46.228.37.119 (46.228.37.119) by deli10501.mail.ir2.yahoo.com(10.200.25.112); Sat, 12 Apr 2014 04:19:59
+0000
Body:
![Click [Show Images]!](misc_images/?file=rcha_to_x.x.gif)
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
Stock Market Spam - Re: Most Important Email (Ever) Sent...R.C.H.A Stock Market Spam - This pharmaceutical could quadruple fast
Mr. Kurt Kahle, The Subject Of Another Next of Kin Scam
General Malware Spam - Homicide Suspect
Stock Market Spam - Our Opening Bell Breakout Pick Is Inside (IRMGF)
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
More empty promises by these pump-and-dump scammers. This time they even tried to it look like an e-mail from Yahoo! Finance. The text at the bottom is some hash-buster text. It was a huge chunk of text, so we only copied a part of it.