The offical SPAM thread... Like what?

[overlord20]

Here is my latest....

Hellow from far distance,

My names is my name is Mr. Micheal william, I am British citizen by birth. My Mother is a British citizen and my late Father is Chinese Singaporean, I am 45year of age all my life I have not been to Asia but my heart is always there. I work with the British Association for Chemical Specialties (BACS) as an Operation Manager for 18years Though i am also a qualified marine engineer.
To be frank my simple reason of writing you or joining the site is to meet friends from the Asian and other part of world, It is wisely said to every thing that is under the sun has it time and happenings in it's time so I do believe in my heart that we needed time to get to know each other and be best of friends and from there lets see what life will hold for us , I will be happy if you can send me some information about your areas and its activities as I will like to visit you any day when I am on my vacation for the Month of December or before December when I find one I can trust. Please can we be friends?????
I shall like to tell you more about myself if I hear from you. Please send me your pictures and send me some pictures of areas, I shall like to see.
I shall be waiting to hear from you bye for now.

MR. MICHEAL WILLIAM
Great Charles Street Queensway"
154 Great Charles Street Queensway,
Birmingham , West Midlands ,
B3 3HT, United Kingdom
http://www.bacsnet.org/

This is ridiculous...

 

[Sniper_13]

wut? this doesn't make any sense to me "I shall like to see."

 

[saltynay]

For a Singaporean Chinese family his language isn't of the same structure or use of vocabulary.

 

[overlord20]

I e-mailed him... Told him I will send him information for the small price of $10,000. No I didn't but I should! lol.. You should see his e-mail address situation.

FROM: willbros7778@att.net
REPLY TO: michealmwilliam@aol.com
To: "undisclosed recipients: ;"

 

[Trotter]

Open up the headers and pull the originating IP address.

 

[synergy]

I e-mailed him... Told him I will send him information for the small price of $10,000. No I didn't but I should! lol.. You should see his e-mail address situation.

FROM: willbros7778@att.net
REPLY TO: michealmwilliam@aol.com
To: "undisclosed recipients: ;"

haha!! You totally should! Except that would validate you as a real person to him. Still....

Or you could tell him you have a $48,000,000 check for him, you just need $35,000 to get out of Nigeria and it's all his

 

[overlord20]

haha!! You totally should! Except that would validate you as a real person to him. Still....

Or you could tell him you have a $48,000,000 check for him, you just need $35,000 to get out of Nigeria and it's all his

That is perfect! "Hello mate, I am from the UK not unlike yourself. I grew up in a small town you haven't herd of so I won't mention the name. I would be glad to you show you pictures of Nigeria if I can ever get back. My wallet was stolen and a I need to get home pronto to see me young wife and adopted son David. If you could send me $40,000 then I will be glad to meet you and share my experiences in Nigeria and Asia. Please Help, You ****ing *****!"

I should do this for a living.

More info:

Return-Path: <willbros7778@att.net>
Received: from nm12-vm0.bullet.mail.sp2.yahoo.com (nm12-vm0.bullet.mail.sp2.yahoo.com [98.139.91.242])
by mx.google.com with SMTP id z19si2388689vcx.39.2010.11.11.06.48.15;
Thu, 11 Nov 2010 06:48:16 -0800 (PST)
Received-SPF: neutral (google.com: 98.139.91.242 is neither permitted nor denied by best guess record for domain of willbros7778@att.net) client-ip=98.139.91.242;
Authentication-Results: mx.google.com; spf=neutral (google.com: 98.139.91.242 is neither permitted nor denied by best guess record for domain of willbros7778@att.net) smtp.mail=willbros7778@att.net; dkim=pass header.i=@att.net
Received: from [98.139.91.66] by nm12.bullet.mail.sp2.yahoo.com with NNFMP; 11 Nov 2010 14:48:13 -0000
Received: from [98.139.91.39] by tm6.bullet.mail.sp2.yahoo.com with NNFMP; 11 Nov 2010 14:48:13 -0000
Received: from [127.0.0.1] by omp1039.mail.sp2.yahoo.com with NNFMP; 11 Nov 2010 14:48:13 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 634300.45095.bm@omp1039.mail.sp2.yahoo.com
Received: (qmail 30272 invoked by uid 60001); 11 Nov 2010 14:48:13 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1289486892; bh=dWDVgytNmgWCosqigSAQwmh//nvXE0/wOtVC7gAdPVo=; h=Message-ID:X-YMail-OSG:Received:X-Mailerate:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=aYeCJFkDdqbnhlKCdrK9cqh1s6K0o+Rx8doKDI8LJZWaMOjtFyjGMJ3jn8RcKf1hsJidpO69hPqyWIazxbhQ9JgIgUFvYRrHdhSUCYEQdL26Mf6AgSKmOSZjucyGyKsQXrDiYKPNIwfb6uVFWfv4TGJYSJP2rSqHn37P9T2LQis=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailerate:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=uhQ89k6sLv0qggJDANYL76dK8FCH2nQXAwZFnE/luCydnWyegrxgj8DCdf3R3Rlu7A+Wn2D2blMoH3xTQVR3x0p1sEk7g2qam2drN1GJrhwKSlD6rxkxxKRhKL5szw6Zh7oJRliaGFsKLH/CnDBJeV69YR5lzuoGkPkYT1m8PTw=;
Message-ID: <545595.74406.qm@web80008.mail.sp1.yahoo.com>
X-YMail-OSG: ByP7yqUVM1mj_Sz.J3jf5ZFRQoqkXCG.46O_2eCymkqD0aM
C.6OPo0hP
Received: from [175.137.117.180] by web80008.mail.sp1.yahoo.com via HTTP; Thu, 11 Nov 2010 06:48:11 PST
X-Mailer: YahooMailClassic/11.4.9 YahooMailWebService/0.8.107.285259
Date: Thu, 11 Nov 2010 06:48:11 -0800 (PST)
From: MICHEAL WILLIAM <willbros7778@att.net>
Reply-To: michealmwilliam@aol.com
Subject: Hellow from far distance,
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-739995623-1289486891=:74406"

 

[CntdwnToExtn]

Open up the headers and pull the originating IP address.

More than likely a zombie machine beloging to the Rustock botnet. Miiiight be Zeus, but it's not really its style.
Either way, the header will no doubt show the SMTP server sent from (unless the spam filter modifies it and just shows 'mail pickup service') but it's a comprimized machine sending those.
Only thing we can do is wait for the security Guru's to find the C&C servers to shut em down.

 

[patonb]

For a Singaporean Chinese family his language isn't of the same structure or use of vocabulary.

But he's british and therefore should be perfect engrish.... And as an engineer you'd think he would use punctuation.

 

[S0ULphIRE]

I get hundreds of spam messages a day, have to sort through them all to make sure there's no accidental false positives in there...do NOT want this thread lol