Sara likes your photo.
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Sat Jun 25 13:48:58 2011
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x
X-YahooFilteredBulk: 89.200.171.57
Received-SPF: fail (domain of netlogmail.com does not designate 89.200.171.57 as permitted sender)
X-YMailISG: x
X-Originating-IP: [89.200.171.57]
Authentication-Results: mta1033.mail.ukl.yahoo.com from=netlogmail.com; domainkeys=neutral (no sig);
from=netlogmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO s2.mikas.or.at) (89.200.171.57)
by mta1033.mail.ukl.yahoo.com with SMTP; Thu, 23 Jun 2011 13:44:43 +0000
Received: from User (ns214338.ovh.net [188.165.236.194])
by s2.mikas.or.at (Postfix) with ESMTPA id 1FE4F782A75;
Thu, 23 Jun 2011 11:06:35 +0200 (CEST)
From: "Facebook"<noreply@netlogmail.com>
Subject: Sara likes your photo.
Date: Thu, 23 Jun 2011 10:09:00 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <x@s2.mikas.or.at>
To: undisclosed-recipients:;
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x
X-YahooFilteredBulk: 89.200.171.57
Received-SPF: fail (domain of netlogmail.com does not designate 89.200.171.57 as permitted sender)
X-YMailISG: x
X-Originating-IP: [89.200.171.57]
Authentication-Results: mta1033.mail.ukl.yahoo.com from=netlogmail.com; domainkeys=neutral (no sig);
from=netlogmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO s2.mikas.or.at) (89.200.171.57)
by mta1033.mail.ukl.yahoo.com with SMTP; Thu, 23 Jun 2011 13:44:43 +0000
Received: from User (ns214338.ovh.net [188.165.236.194])
by s2.mikas.or.at (Postfix) with ESMTPA id 1FE4F782A75;
Thu, 23 Jun 2011 11:06:35 +0200 (CEST)
From: "Facebook"<noreply@netlogmail.com>
Subject: Sara likes your photo.
Date: Thu, 23 Jun 2011 10:09:00 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <x@s2.mikas.or.at>
To: undisclosed-recipients:;
Body:
|
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
Facebook Blocked Account Malware/Phishing SpamFacebook Phishing Scam - Blocked account
Cialiswelness.com Spam - Cppgenius Unread messages
Facebook Fans, Twitter Followers and YourTube Views
Malware Spam - Sprint: Your bill is now available online
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
Just ask yourself, why would Facebook send you notifications from a netlogmail.com account?
The photo itself, the "See Photo" button and the "unsubscribe" link points to 247homeshop.com
The Facebook logo, the "Go to Notifications" button and the "Sara Sweet" link points to womensclothingfashion.com
PLEASE NOTE: THESE SITES MAY HARM YOUR COMPUTER, SO WE DO NOT RECOMMEND VISITING THEM!
On 13 July 2011, both these sites were still listed by Google Safebrowsing as suspicious:
* Google Safe Browsing diagnostic page for 247homeshop.com
* Google Safe Browsing diagnostic page for womensclothingfashion.com
Sara Sweet may like your photo, but someone else likes infecting computers with malware.