ADP Urgent Notification - Your Transaction Report
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Thu Sep 20 17:50:35 2012
X-Account-Key: account6
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Delivered-To: x
Received: by 10.58.102.37 with SMTP id fl5csp476244veb;
Wed, 19 Sep 2012 13:06:02 -0700 (PDT)
Received: by 10.216.184.196 with SMTP id s46mr2170930wem.66.1348085161625;
Wed, 19 Sep 2012 13:06:01 -0700 (PDT)
Return-Path: <E5B97EC5@seminarkultur.at>
Received: from ([189.249.9.16])
by mx.google.com with ESMTP id h18si8864622wiw.39.2012.09.19.13.05.57;
Wed, 19 Sep 2012 13:06:01 -0700 (PDT)
Received-SPF: neutral (google.com: 189.249.9.16 is neither permitted nor denied by best guess record for domain of
E5B97EC5@seminarkultur.at) client-ip=189.249.9.16;
Authentication-Results: mx.google.com; spf=neutral (google.com: 189.249.9.16 is neither permitted nor denied by best
guess record for domain of E5B97EC5@seminarkultur.at) smtp.mail=E5B97EC5@seminarkultur.at
From: "ADPClientServices" <E5B97EC5@seminarkultur.at>
Subject: ADP Urgent Notification - Your Transaction Report
To: x
Content-Transfer-Encoding: 8bit
Content-Type: text/html; chars="utf-8"
Date: Wed, 19 Sep 2012 15:05:56 -0500
List-Unsubscribe: x
Message-ID: <x@OMX131-PC>
X-Account-Key: account6
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Delivered-To: x
Received: by 10.58.102.37 with SMTP id fl5csp476244veb;
Wed, 19 Sep 2012 13:06:02 -0700 (PDT)
Received: by 10.216.184.196 with SMTP id s46mr2170930wem.66.1348085161625;
Wed, 19 Sep 2012 13:06:01 -0700 (PDT)
Return-Path: <E5B97EC5@seminarkultur.at>
Received: from ([189.249.9.16])
by mx.google.com with ESMTP id h18si8864622wiw.39.2012.09.19.13.05.57;
Wed, 19 Sep 2012 13:06:01 -0700 (PDT)
Received-SPF: neutral (google.com: 189.249.9.16 is neither permitted nor denied by best guess record for domain of
E5B97EC5@seminarkultur.at) client-ip=189.249.9.16;
Authentication-Results: mx.google.com; spf=neutral (google.com: 189.249.9.16 is neither permitted nor denied by best
guess record for domain of E5B97EC5@seminarkultur.at) smtp.mail=E5B97EC5@seminarkultur.at
From: "ADPClientServices" <E5B97EC5@seminarkultur.at>
Subject: ADP Urgent Notification - Your Transaction Report
To: x
Content-Transfer-Encoding: 8bit
Content-Type: text/html; chars="utf-8"
Date: Wed, 19 Sep 2012 15:05:56 -0500
List-Unsubscribe: x
Message-ID: <x@OMX131-PC>
Body:
Your Transaction Report(s) have been uploaded to the web site:
https://www.flexdirect.adp.com/client/login.aspx
Please note that your bank account will be debited within one banking business day for the amount(s) shown on the report(s).
Please do not respond or reply to this automated e-mail. If you have any questions or comments, please Contact your ADP Benefits Specialist.
Thank You,
ADP Benefit Services
https://www.flexdirect.adp.com/client/login.aspx
Please note that your bank account will be debited within one banking business day for the amount(s) shown on the report(s).
Please do not respond or reply to this automated e-mail. If you have any questions or comments, please Contact your ADP Benefits Specialist.
Thank You,
ADP Benefit Services
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
Better Business Bureau Phishing Scam Case #690840567UPS Phishing Scam - UPS Tracking Number H4122908562
IRS Phishing Scam - IRS: Important information
IRS Phishing Scam - For the attention of business owners
INTUIT Phishing Scam - Employer contributions report
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
Clearly a fake From address. Why would ADP send you an e-mail from seminarkultur.at?
They just fire away with the problem, they don't even greet you. No professional organisation will send e-mails like this. This is your second sign that something is phishy.
This is the punchline. This is where the scammers call you to action by putting you in panic mode and creating a false sense of urgency. Those who do not pay attention to the finer details of this e-mail will instinctively click on the link and that is exactly what the scammers want.
Don't be fooled, be vigilant. This is a SCAM!
UPDATE 11/10/2012:
What appeared to be a phishing scam at first, turned out to be a malware related e-mail. The fraudulent website associated with this specific example was already taken down when we received this scam, so we could not determine the exact purpose of the e-mail, but assumed that it was a phishing scam due to several common phishing characteristics present in this e-mail. The latest ADP spam example has been identified as malware spam, so we believe this one could also have been associated with malware.