Check Out Our Latest And Available New Hot Properties.
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Mon Jul 23 18:59:21 2012
X-Account-Key: account2
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 212.82.111.160; Mon, 23 Jul 2012 04:31:33 +0000
X-YahooFilteredBulk: 217.116.196.11
Received-SPF: none (domain of server.antalyatime.com does not designate permitted sender hosts)
X-YMailISG: x
X-Originating-IP: [217.116.196.11]
Authentication-Results: mta1045.mail.ukl.yahoo.com from=; domainkeys=neutral (no sig); from=remax.co.z; dkim=neutral
(no sig)
Received: from 127.0.0.1 (EHLO server.antalyatime.com) (217.116.196.11)
by mta1045.mail.ukl.yahoo.com with SMTP; Mon, 23 Jul 2012 04:31:32 +0000
Received: (qmail 24801 invoked by uid 48); 23 Jul 2012 01:04:58 +0300
Date: 23 Jul 2012 01:04:58 +0300
Message-ID: <x@server.antalyatime.com>
To: x
Subject: Check Out Our Latest And Available New Hot Properties.
From: Remax Property. <py@remax.co.z>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
X-Account-Key: account2
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 212.82.111.160; Mon, 23 Jul 2012 04:31:33 +0000
X-YahooFilteredBulk: 217.116.196.11
Received-SPF: none (domain of server.antalyatime.com does not designate permitted sender hosts)
X-YMailISG: x
X-Originating-IP: [217.116.196.11]
Authentication-Results: mta1045.mail.ukl.yahoo.com from=; domainkeys=neutral (no sig); from=remax.co.z; dkim=neutral
(no sig)
Received: from 127.0.0.1 (EHLO server.antalyatime.com) (217.116.196.11)
by mta1045.mail.ukl.yahoo.com with SMTP; Mon, 23 Jul 2012 04:31:32 +0000
Received: (qmail 24801 invoked by uid 48); 23 Jul 2012 01:04:58 +0300
Date: 23 Jul 2012 01:04:58 +0300
Message-ID: <x@server.antalyatime.com>
To: x
Subject: Check Out Our Latest And Available New Hot Properties.
From: Remax Property. <py@remax.co.z>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Body:
REMAX NEW PROPERTIES.
We have new HOT PROPERTIES in your area. You can get up to 25%- 45% on each property. To view our HOT PROPERTIES, please click here to login. for immediate access. Sign on with your email to access our secured auction page to view available Properties. Thank you.
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
SARS eFiling Phishing Scam - Support CenterLoan Offer Scam - Loans Opportunity.
Paypal Phishing Scam - Attention! Your PayPal Account Could Be Suspended!
Regions Bank Phishing Scam - ONLINE: Regions Bank Activity
Banking Phishing Scam - Your Pending EFT Payment!!!
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
As soon as you "log into" your account, the page redirects to the real remax.com website, giving the victim the impression that he/she successfully logged into the Remax website.
It is really not that hard to spot the scam here, consider the following:
1. Why would Remax ask for the password to your e-mail account?
2. You can't ask for a more fake From e-mail address as py@remax.co.z. What kind of top-level domain is co.z anyway?
3. The e-mail states that there are new properties in your area, which area? Remax won't send you ambiguous e-mails like this.
The bottom line is Remax will never send you e-mails like this and Remax will never ask for the password to your e-mail account. Be vigilant and don't let the phishing scammers ever catch you with a lame attempt like this.