Spam is a perennial problem and sex based spam is amongst the hardest to deal with. Curiosity is a human necessity, without it we would still be living in caves and grunting at each other.
But curiosity can be very dangerous.
We see no end of spam campaigns with sex as the lure leading to scummy dating sites, where the norm is you pay your money and nothing ever happens.
This is no exception, but it does illustrate how effective they are. The one thing to additionally mention with this one is that is does genuinely come via either a compromised email account or an open SMTP relay on Florida Atlantic University. It looks like it was relayed from a Chinese IP address, but we can only confirm categorically the last relay point before my server received it, Florida Atlantic University . See email headers below
The link in the email is to a bit.ly short url which redirects to the sex site. Just take a look at how many clicks there have been in the last 3 days, Almost 14,000. I don’t suppose even 1% would have fallen for the scam & signed up, but enough must do, to make it worthwhile continuing with the spam campaigns
The bitly link https://bitly.com/2peihgv redirects to https://beautifulslut.com/kywungmqub/kolyshii (Warning not safe for a work or for those of an innocent disposition) where all sorts of semi-revealing images are displayed.
bit.ly or any short url in an email are potentially dangerous. You can never know where it will lead you to. It might just be pure spam, scam or phishing site where you have to fill in your details, but might lead directly to a malware download or an exploit site that can infect you with no action on your part except visiting the site.
The email body content has this wording, with a picture attachment
Hello my dear friend!
I really would like to meet you.
I hope that you are the person I really dream about !?
I will tell a little about myself that I moved to your country not so long ago.
I’m very modest and shy and a little bit worse with the accent that I’m talking in your language
and I find it very difficult to make friends, I hope that for us it will be an obstacle?
and we will be able to get to know each other and get to know each other
and I know very little with whom I can be frank
and I really want to find someone who will be affectionate and affectionate
and I will be his reciprocity
in the hope that you are the same person as I imagine
hoping that you are the person I send you my picture
in the hope that you will like it, and you will also send me a photo.
Sorry, but I signed up for one more candid site
where you can write me and send your photo at your discretion
there we will be able to come up a little and still agree
about our meeting with you and imagine how we will meet
in the hope that everything will be fine in the future !!!
Moreover, I will write when you answer me!
I’ll send you a link to the site where you can find me under this nickname Leisi
I will very much wait for your letter !!!
your gentle sweet Leisi
Many examples of this sort of sex email lure have very revealing images in the email itself to encourage or entice you to click & see more.
|220.127.116.11||smtpsecA.fau.edu||Boca Raton||Florida||US||AS12013 Florida Atlantic University|
Received: from smtpseca.fau.edu ([18.104.22.168]:50660)
by my email server with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
for firstname.lastname@example.org; Sun, 18 Mar 2018 04:30:56 +0000
Received: from smtpsecA.fau.edu (localhost.localdomain [127.0.0.1])
by localhost (Email Security Appliance) with SMTP id 5EC6C101BC33_AADE6CCB;
Sun, 18 Mar 2018 04:10:52 +0000 (GMT)
Received: from Unknown (unknown [22.214.171.124])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(Client did not present a certificate)
by smtpsecA.fau.edu (Sophos Email Appliance) with ESMTPSA id D5A301065705_AADE66FF;
Sun, 18 Mar 2018 04:09:19 +0000 (GMT)
Reply-To: “love” <email@example.com>
From: “love” <firstname.lastname@example.org>
Subject: Write me
Date: Sun, 18 Mar 2018 06:08:58 +0200