Ziinga.com Fake Internet Account Suspension Spam
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Sat Jul 28 09:05:52 2012
X-Account-Key: account10
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys: x
Authentication-Results: hotmail.com; sender-id=none (sender IP is 209.198.33.181)
header.from=s.k.ewl.8i@67.0xde.00000122.0044; dkim=none header.d=67.0xde.00000122.0044; x-hmca=none
X-SID-PRA: s.k.ewl.8i@67.0xde.00000122.0044
X-SID-Result: None
X-DKIM-Result: None
X-Message-Status: s1:0:n
X-AUTH-Result: NONE
X-Message-Delivery: x
X-Message-Info: x
Received: from 67.0xde.00000122.0044 ([209.198.33.181]) by SNT0-MC1-F42.Snt0.hotmail.com with Microsoft
SMTPSVC(6.0.3790.4900);
Fri, 27 Jul 2012 18:35:04 -0700
Received: by 67.0xde.00000122.0044 id h2d0su0cd90k for <x>; Fri, 27 Jul 2012 16:38:36 -0700 (envelope-from
<s.k.ewl.8i@67.0xde.00000122.0044>)
Received: by 67.0xde.00000122.0044 id PFHkQ+YrHOUhXlT30CaptYTa/JUSSVSI; Fri, 27 Jul 2012 16:38:36 -0700 (envelope-from
s.k.ewl.8i@67.0xde.00000122.0044)
Date: Fri, 27 Jul 2012 16:38:36 -0700 (PST)
From: "=?iso-8859-1?B?W1VSR0VOVCBNRVNTQUdFXSA=?=" <s.k.ewl.8i@67.0xde.00000122.0044>
Subject:
=?iso-8859-1?B?Mm5kIEF0dDogW01VU1QgUkVQTFldIFNwYW0gQ29tcGxhaW50IFJlY2VpdmVkIGZyb20gWW91ci...
To: x
MIME-Version: 1.0
Content-Type: text/html;
Thread-Index: PFHkQ+YrHOUhXlT30CaptYTa/JUSSVSI
X-Server-Ip: 209.198.33.181
Return-Path: s.k.ewl.8i@67.0xde.00000122.0044
Message-ID: <x@SNT0-MC1-F42.Snt0.hotmail.com>
X-OriginalArrivalTime: 28 Jul 2012 01:35:04.0430 (UTC) FILETIME=[366C30E0:01CD6C61]
X-Account-Key: account10
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys: x
Authentication-Results: hotmail.com; sender-id=none (sender IP is 209.198.33.181)
header.from=s.k.ewl.8i@67.0xde.00000122.0044; dkim=none header.d=67.0xde.00000122.0044; x-hmca=none
X-SID-PRA: s.k.ewl.8i@67.0xde.00000122.0044
X-SID-Result: None
X-DKIM-Result: None
X-Message-Status: s1:0:n
X-AUTH-Result: NONE
X-Message-Delivery: x
X-Message-Info: x
Received: from 67.0xde.00000122.0044 ([209.198.33.181]) by SNT0-MC1-F42.Snt0.hotmail.com with Microsoft
SMTPSVC(6.0.3790.4900);
Fri, 27 Jul 2012 18:35:04 -0700
Received: by 67.0xde.00000122.0044 id h2d0su0cd90k for <x>; Fri, 27 Jul 2012 16:38:36 -0700 (envelope-from
<s.k.ewl.8i@67.0xde.00000122.0044>)
Received: by 67.0xde.00000122.0044 id PFHkQ+YrHOUhXlT30CaptYTa/JUSSVSI; Fri, 27 Jul 2012 16:38:36 -0700 (envelope-from
s.k.ewl.8i@67.0xde.00000122.0044)
Date: Fri, 27 Jul 2012 16:38:36 -0700 (PST)
From: "=?iso-8859-1?B?W1VSR0VOVCBNRVNTQUdFXSA=?=" <s.k.ewl.8i@67.0xde.00000122.0044>
Subject:
=?iso-8859-1?B?Mm5kIEF0dDogW01VU1QgUkVQTFldIFNwYW0gQ29tcGxhaW50IFJlY2VpdmVkIGZyb20gWW91ci...
To: x
MIME-Version: 1.0
Content-Type: text/html;
Thread-Index: PFHkQ+YrHOUhXlT30CaptYTa/JUSSVSI
X-Server-Ip: 209.198.33.181
Return-Path: s.k.ewl.8i@67.0xde.00000122.0044
Message-ID: <x@SNT0-MC1-F42.Snt0.hotmail.com>
X-OriginalArrivalTime: 28 Jul 2012 01:35:04.0430 (UTC) FILETIME=[366C30E0:01CD6C61]
Body:
Dear Broadband Customer,
We are notifying you that your computer has sent spam email's from your IP "69.49.30.200"
Please remove all viruses and adware ASAP or we will have to suspend your home internet connection.
Scan Here - to Stop Your Account Suspension
Thank You,
Customer Service Department
If you prefer not to receive e-mails from Internet Alert Service
in the future, click here Or send mail to:
Internet Alert Service
201 Spring Garden St, Suite 400
Philadelphia, PA 19123
We are notifying you that your computer has sent spam email's from your IP "69.49.30.200"
Please remove all viruses and adware ASAP or we will have to suspend your home internet connection.
Scan Here - to Stop Your Account Suspension
Thank You,
Customer Service Department
If you prefer not to receive e-mails from Internet Alert Service
in the future, click here Or send mail to:
Internet Alert Service
201 Spring Garden St, Suite 400
Philadelphia, PA 19123
Comments:
This spam is very similar to the GtsMobi.com Porn spam, the only difference is that the spamvertised link redirects to Ziinga.com and not a porn site. The link also passes through x3track.com and the e-mail also came from s.k.ewl.8i
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
MySafeStreams.com Porn Spam - Hey! Can you text me please? Or hit me up onMalware Spam - Adobe Order N07973
E-book Spam - The Tesla Generator Scam
Gtsmobi.com Porn Spam - Your Next Purchase at McDonald's is FREE!
Malware Spam - United Postal Service Tracking Nr. H8582404360
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
