Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

Mugu mail - Feb 10, 2009

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spam
View previous topic :: View next topic  
Author Message
olliver
Expert Developer


Joined: 27 Jan 2006
Last Visit: 02 Dec 2010
Posts: 1157
Location: yes

PostPosted: Tue Feb 10, 2009 4:14 am    Post subject: Mugu mail - Feb 10, 2009 Reply with quote

Disclaimer: Unless you do want to bait 419 scammers and have some fun with wasting their time, you should not respond to these emails. There's no such money, lottery, business opportunity whatsoever. It's just a scam designed to make victims transfer money to the mugu gang as long as possible.

Headers:
Quote:
Delivered-To: <spamtrap>
Received: by 10.151.114.15 with SMTP id r15cs11240ybm;
Tue, 10 Feb 2009 66:66:66 -0800 (PST)
Received: by 10.223.116.77 with SMTP id l13mr2516001faq.106.6666666666666;
Tue, 10 Feb 2009 66:66:66 -0800 (PST)
Return-Path: <elicama887@centrum.cz>
Received: from mail1003.centrum.cz (mail1003.centrum.cz [90.183.38.133])
by mx.google.com with ESMTP id 4si7065379bwz.103.2009.02.10.66.66.66;
Tue, 10 Feb 2009 66:66:66 -0800 (PST)
Received-SPF: pass (google.com: domain of elicama887@centrum.cz designates 90.183.38.133 as permitted sender) client-ip=90.183.38.133;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of elicama887@centrum.cz designates 90.183.38.133 as permitted sender) smtp.mail=elicama887@centrum.cz
Received: by mail1003.centrum.cz id S1610754365AbZBJKwL (ORCPT
<rfc822;[spamtrap]>);
Tue, 10 Feb 2009 66:66:66 +0100
Received: from 41.207.17.181 (X-Forwarded-For: 41.207.17.181)
by mail1003.centrum.cz (Centrum Mail) with HTTP

Date: Tue, 10 Feb 2009 66:66:66 +0100
From: <elicama887@centrum.cz>
X-Mailer: Centrum Mail 5.0
MIME-Version: 1.0
X-Priority: 3
Message-ID: <200902106666.6666@centrum.cz>
Subject: From; Miss .ELIANE CAMARA


Body:
Quote:
From; Miss .ELIANE CAMARA

Dear,



I'm sending you special greeting which I hope you will accept with warm heart and I know this mail may get to you as a surprise, I decided to write you for trust as my spirit directed me to contact you.



My name is Miss. Eliane Camara from Guinee conakry residing in Abidjan . I lost my father Late.BABA AHMED CAMARA who was serving as one of the directors of the Cocoa exporting board until his death.

He was assassinated by assasine following the political disputation between him and his colleagues . Before his death he gave us the secret confirmation reference code for a deposit $3.5million in a security company.



Therefore, I am looking for somebody that is capable and willing to assist us to receive this fund on behalf of myself and junior brother for investment in your country. I want you to do me a favour to receive this money in your country or any safer place as the beneficiary I have plans to do investment in your country, like real estate and industrial production.



We shall be compensating you with 20% of total sum after conclusion of this project, while the rest shall be for investment in your country.



While the rest shall be for investment purposes in your country.


Please if you are willing to assist I and my brother indicate your interest in your replying soonest to my email elicama887@yahoo.fr





Miss. ELIANE CAMARA .





Mugu dropboxes (they love spam, don't they Wink):
elicama887@yahoo.fr
elicama887@centrum.cz


Source Ip-address:

41.207.17.181 -> (no PTR)

Quote:
inetnum: 41.207.16.0 - 41.207.31.255
netname: AVISONET
descr: ISP Cote d'Ivoire
country: CI
admin-c: CTA1-AFRINIC
tech-c: CTA1-AFRINIC
status: ASSIGNED PA
mnt-by: CIT-DT
mnt-lower: CIT-DT
source: AFRINIC # Filtered
parent: 41.207.0.0 - 41.207.31.255

role: CONTACTS TEHNIQUE AVISO
address: CI2M
address: Avenue Houdaille
address: Bp 310 cedex 01 Abidjan
address: Ivoiry Coast
phone: +225 20 30 09 94
e-mail: eric.assi at aviso.ci
e-mail: tanoh at aviso.ci
admin-c: AE496-AFRINIC
tech-c: ET3-AFRINIC
mnt-by: CIT-DT
nic-hdl: CTA1-AFRINIC
source: AFRINIC # Filtered


Olliver
_________________
Petcord netlabel :: Synflict post-digital arts :: Leftob audio cast
Each click on any of the links above will save the life of a cute kitty somewhere in the universe.


Last edited by olliver on Tue May 05, 2009 12:21 am; edited 2 times in total
Back to top
View user's profile Send private message
MysteryFCM
Malware Expert


Joined: 28 Aug 2004
Last Visit: 20 Apr 2014
Posts: 850
Location: Tyne & Wear, UK

PostPosted: Tue Feb 10, 2009 5:24 am    Post subject: Reply with quote

Quote:
address: Ivoiry Coast


I couldn't help but rofl!

Personally, I'd just blanket ban anything coming from that net-block as what I've seen doesn't inspire confidence of it having anything remotely legit.
_________________
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net
Back to top
View user's profile Send private message Visit poster's website
olliver
Expert Developer


Joined: 27 Jan 2006
Last Visit: 02 Dec 2010
Posts: 1157
Location: yes

PostPosted: Tue Feb 10, 2009 7:54 am    Post subject: Reply with quote

Well, after all it's a spamtrap on an unshielded site, so it's doing what it was designed for Smile.

Eliane (or Elaine) was last seen in Norway about a fortnight ago:
http://origo.no/-/bulletin/show/223273_tilbud-om-700-000-dollar-av-en-kakaoformue-fra-abidjan

Five days later it could be found here:
http://www.dailyscamalerts.com/archives/eliane-camara.htm

Sadly, the authors did not include mail headers and drop boxes.

O.
_________________
Petcord netlabel :: Synflict post-digital arts :: Leftob audio cast
Each click on any of the links above will save the life of a cute kitty somewhere in the universe.
Back to top
View user's profile Send private message
suzi
Site Admin


Joined: 27 Jul 2003
Last Visit: 31 Aug 2014
Posts: 10324
Location: sunny California

PostPosted: Tue Feb 10, 2009 9:15 am    Post subject: Reply with quote

Good one. Laughing
_________________
Former Microsoft MVP 2005-2009, Consumer Security
Please do not PM or Email me for personal support. Post in the Forums instead and we will all learn. Smile
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spam All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group