Each appear authentic in style (right down to the table, color, and font formating) and appear to be coming from Facebook, complete with the subject line "You have notifications pending"
However, they are clearly another scam (as confirmed by simply logging into Facebook directly without trying to go through these emails) and are coming via very different open mail relays with links actually pointing towards different equally suspicious destinations pitching International Prescription drugs.
Delivered-To: christoperj@
Received: by 10.231.223.193 with SMTP id il1csp123415ibb;
Wed, 13 Jun 2012 05:10:32 -0700 (PDT)
Received: by 10.101.6.28 with SMTP id j28mr10086590ani.61.1339589430841;
Wed, 13 Jun 2012 05:10:30 -0700 (PDT)
Received-SPF: softfail (: best guess record for domain of transitioning registration@pronext.cz does not designate 10.10.10.10 as permitted sender) client-ip=10.10.10.10;
Received: by 10.157.139.1 with POP3 id r1mf4853691yen.9;
Wed, 13 Jun 2012 05:10:30 -0700 (PDT)
Return-Path:
Delivered-To:
Received: from mx1. ([10.10.10.10])
by mss-us12. (Dovecot) with LMTP id TgwmMquA2E/dNQAAWHoucg
for; Wed, 13 Jun 2012 12:02:13 +0000
Received: from hosting.olnet.com.pl (hosting.olnet.com.pl [178.32.201.66])
by mx1. (Postfix) with SMTP id AE0694712B9
for; Wed, 13 Jun 2012 12:02:12 +0000 (GMT)
Date: Wed, 13 Jun 2012 14:02:12 +0200 (CEST)
Reply-to: noreply
To: work@
From: "Facebook"
Subject: You have notifications pending
Message-Id: <18d2771b29d58d1d73e56fbc6459e84f@mail.pronext.cz>
X-Priority: 3
X-Mailer: ZuckMail [version 1.00]
MIME-Version: 1.0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Hi,
Here's some activity you have missed on Facebook.
5 friend request [5 Friend Request is a LINK that actually points to http:// bestofresources (dot) com/trace/a/b/c/d/]
Go To Facebook See All Notifications
This message was sent to work@. If you don't want to receive these emails from Facebook in the future, please click: unsubscribe [LINK to facebook (dot) com].
Facebook, Inc. Attention: Department 415 P.O Box 10005 Palo Alto CA 94303