Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

From Senegal with love [mugu mail Mar 3, 2009]

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spam
View previous topic :: View next topic  
Author Message
olliver
Expert Developer


Joined: 27 Jan 2006
Last Visit: 02 Dec 2010
Posts: 1157
Location: yes

PostPosted: Tue Mar 03, 2009 10:15 am    Post subject: From Senegal with love [mugu mail Mar 3, 2009] Reply with quote

Someone posing as "Mariam Lowe" was trying to socialise with my spamtrap. Well, to each its own... Wink

Headers
Quote:
Delivered-To: [spamtrap]
Received: by 10.141.48.3 with SMTP id a3cs2723rvk;
Tue, 3 Mar 2009 66:66:66 -0800 (PST)
Received: by 10.216.73.85 with SMTP id u63mr105904wed.37.6666666666666;
Tue, 03 Mar 2009 66:66:66 -0800 (PST)
Return-Path: <mismaryk10@yahoo.fr>
Received: from n23.bullet.mail.ukl.yahoo.com (n23.bullet.mail.ukl.yahoo.com [87.248.110.140])
by mx.google.com with SMTP id u14si15841531gvf.31.2009.03.03.66.66.66;
Tue, 03 Mar 2009 66:66:66 -0800 (PST)
Received-SPF: neutral (google.com: 87.248.110.140 is neither permitted nor denied by domain of mismaryk10@yahoo.fr) client-ip=87.248.110.140;
DomainKey-Status: good (test mode)
Authentication-Results: mx.google.com; spf=neutral (google.com: 87.248.110.140 is neither permitted nor denied by domain of mismaryk10@yahoo.fr) smtp.mail=mismaryk10@yahoo.fr; domainkeys=pass (test mode) header.From=mismaryk10@yahoo.fr
Received: from [217.12.4.214] by n23.bullet.mail.ukl.yahoo.com with NNFMP; 03 Mar 2009 66:66:66 -0000
Received: from [87.248.111.146] by t1.bullet.ukl.yahoo.com with NNFMP; 03 Mar 2009 66:66:66 -0000
Received: from [127.0.0.1] by omp203.mail.ukl.yahoo.com with NNFMP; 03 Mar 2009 66:66:66 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: xxxxxx.xxxxx.xx@omp203.mail.ukl.yahoo.com
Received: (qmail 74246 invoked by uid 60001); 3 Mar 2009 66:66:66 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.fr;
h=Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Message-ID;
b=p6tEPcc5MJ1dTVvrBmFQ36/99I82HhE2KrPuUChcf/68zqWm0yYxzt2qvr6TR1mGGEM/t1XiYGbu8bDXsw5qMHUsWjD8oxCssLmXacdflMy8iHFa6pu1DE2B2+HMju28fdBBIfvcxqV+uZC8REgQxhGKygMDA9tiQKLZwHpy3sY=;
Received: from [41.208.133.54] by web28412.mail.ukl.yahoo.com via HTTP; Tue, 03 Mar 2009 66:66:66 GMT
X-Mailer: YahooMailWebService/0.7.289.1

Date: Tue, 3 Mar 2009 66:66:66 +0000 (GMT)
From: Miss Mariam Lowe <mismaryk10@yahoo.fr>
Reply-To: mariamlowe31@yahoo.com
Subject: Hello Dear
To: mismaryk10@yahoo.fr
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1985542581-6666666666=:72692"
Message-ID: <xxxxxx.xx.xx@web28412.mail.ukl.yahoo.com>


The ip address 41.208.133.54 is located in Senegal;
Quote:
inetnum: 41.208.133.0 - 41.208.133.255
netname: SONATELNET
descr: Pool ADSL BAS1
country: SN
admin-c: MN1281-AFRINIC
admin-c: AM2490-AFRINIC
tech-c: SBT7-AFRINIC
status: ASSIGNED PA
mnt-by: SMM-MNT
mnt-lower: SMM-MNT
source: AFRINIC # Filtered
parent: 41.208.128.0 - 41.208.191.255


Body

Quote:
Hello Dear,
It is my great pleassure to contact you in having communication with you, please i wish you will have the desire with me so that we can get to know each other better.I will be very happy if you can write me through my email for easiest communication and also to give you more details about me, i will be waiting to hear from you as i wish you all the best for your day.
Ms Mariam


This first contact somehow lacks plausibility: If you talk to a complete stranger, you cannot know in advance whether it is a great pleasure. There is no reason given why a reply would be of any benefit to the recipient. Expecting the other person to reply just to learn about the contact's purpose is just plain silly. Further, the mugu introduced unnecessary complications by trying to use complex grammar constructs which required a better command of English. Not getting the message across, especially if the receiving end is someone not too familiar with English, limits the success rate.

With all that in mind, I don't quite believe this "campaign" will be a great success.

Some mugu dropboxes, in case someone wants to play with him:
mismaryk10@yahoo.fr
mariamlowe31@yahoo.com

Related spams:
http://osdir.com/ml/java.dwr.user/2008-02/msg00251.html
http://www.olx.com/chico-busca-chica-en-miami-usa-matrimonio-por-combeniencia-en-estados-unidos-iid-3648564
http://friendpages.com/p/pages/site/guest.cgi?pageid=chubforthin

O.
_________________
Petcord netlabel :: Synflict post-digital arts :: Leftob audio cast
Each click on any of the links above will save the life of a cute kitty somewhere in the universe.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spam All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group