Remax Real Estate

[SlapHappy]

Received: by 10.216.91.195 with SMTP id h45csp159848wef;
Fri, 1 Jun 2012 13:42:35 -0700 (PDT)
Received: by 10.216.194.93 with SMTP id l71mr3164034wen.169.1338583355576;
Fri, 01 Jun 2012 13:42:35 -0700 (PDT)
Return-Path: <urlaavm@urlaavm.com>
Received: from server.zipkinla.com (server-176.53.32.5.as42926.net.
[176.53.32.5])
by mx.google.com with ESMTPS id i55si4465251wea.26.2012.06.01.13.42.35
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 01 Jun 2012 13:42:35 -0700 (PDT)
Received-SPF: pass (google.com: domain of urlaavm@urlaavm.com designates
176.53.32.5 as permitted sender) client-ip=176.53.32.5;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of
urlaavm@urlaavm.com designates 176.53.32.5 as permitted sender)
smtp.mail=urlaavm@urlaavm.com
Received: from apache by server.zipkinla.com with local (Exim 4.76)
(envelope-from <urlaavm@urlaavm.com>)
id 1SaYg6-0003d8-DM
for Sat, 02 Jun 2012 00:42:34 +0400
To:
Subject: Remax Real Estate
X-PHP-Script: http://www.urlaavm.com/wp-content//them ... he/cll.php for
67.23.168.65
From: Remax Residential RealEstate <Alert@remax.com>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <E1SaYg6-0003d8-DM@server.zipkinla.com>
Date: Sat, 02 Jun 2012 00:42:34 +0400

We have a new properties in your area, Please Cick Here

This leads to phishing site.
"http:/ /love-letter.ru/wp-includes/theme-compat/Secure_Login.html" Phishing website.