Opinions needed: [Subject: is it you? gabriella here]

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Sun Mar 16, 2008 7:31 am

Hi all!

Does this email qualify as a love/dating scam?

I'm getting about three or four of these every week.

I'd really like to know if it would be helpful to report
them, either in this forum or one of the others on this site.

Here is the message and the whois record for the email
address given in the mailto: link.

*** START SPAM SOURCE ***
From - Sun Mar 16 10:35:12 2008
X-Account-Key: account8
X-UIDL: 0000049747a1079f
X-Mozilla-Status: 1001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-SAproxy-Timeout: 0
Return-path: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on tp600
X-Spam-Level: *****
X-Spam-Status: No, score=5.8 required=6.3 tests=RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E4_51_100,RAZOR2_CHECK,RCVD_IN_FIVETEN_SPAM,RDNS_DYNAMIC,
TVD_RCVD_IP shortcircuit=no autolearn=no version=3.2.3
Envelope-to: <x>
Delivery-date: Sun, 16 Mar 2008 10:31:12 +1100
Received: from 62.0.233.220.exetel.com.au ([220.233.0.62] helo=mscip02.mailscan.net.au)
by chestnut.exetel.com.au with esmtp (Exim 4.68)
(envelope-from <[email protected]>)
id 1JafqK-0006yF-Ol
for <x>; Sun, 16 Mar 2008 10:31:12 +1100
Received: from unknown (HELO ps.boxmanise.com) ([88.239.40.114])
by mscip02.mailscan.net.au with SMTP; 16 Mar 2008 10:31:00 +1100
Message-Id: <9871D964.322350.83479@OVEH>
X-Provags-ID: programatuweb.net [email protected] login:dfBspL4RBB8HUHSCmILwg2kg67g9PZ8T
X-FID: 71E64DBC-1527-72AF-B3E0-58CDEA47DCB2
Date: Sat, 15 Mar 2008 16:31:06 -0800
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: <x>
From: "gabriella" <[email protected]>
Subject: is it you? gabriella here

Do not ignore me please,
I found your email somewhere and now decided to write you.
Let me know if you do not mind. If you want I can send you some pictures of me.
I am a nice pretty girl. Don't reply to this email.
Email me direclty at [email protected]

*** END SPAM SOURCE ***

*** START WHOIS RECORD ***
Domain Name:golovable.com

Registrant:
liu bin
hai kou
891000

Administrative Contact:
liubin
liu bin
hai kou
hai kou Beijing 891000
CN
tel: 898 1234567
fax: 898 1234567
[email protected]

Technical Contact:
liubin
liu bin
hai kou
hai kou Beijing 891000
CN
tel: 1234567
fax: 1234567
[email protected]

Billing Contact:
liubin
liu bin
hai kou
hai kou Beijing 891000
CN
tel: 1234567
fax: 1234567
[email protected]

Registration Date: 2008-02-29
Update Date: 2008-02-29
Expiration Date: 2009-02-28

Primary DNS: ns1.dnsreal.com 88.255.74.178
Secondary DNS: ns2.dnsreal.com 88.255.74.178
*** END WHOIS RECORD ***

To what category of scam does this message belong? The reason I ask this
is because the FAQ for this forum seems to be dealing with dating sites and/or
so-called online "lonely hearts clubs", whereas this is a direct email to one
of my spamtraps.

Should I email this person and see what he/she has to say?

I don't think I have enough skill to bait this person myself, so if anyone here
is interested, perhaps you might like to give it a try. I'd really like to know
what they want (apart from money, that is).

For example, if the potential victim were to request a photo, maybe the lad/vlad
could attach a nice little worm to it, turning the victim's PC into a spambot, or
worse.

Another possibility is that of some kind of immigration scam. There's no shortage
of those, either!

Any opinions and/or suggestions would be more than welcome!

Posted: Sun Mar 16, 2008 8:27 am

Murry and Wayne know how to analyse the wording to tell you where this is going. For me this will turn out to be a vlad. There will be some script, some pictures of a model and some loving feeling after three emails.

Do you plan to reply? If so read the stickies so you know how to bait safe.

Posted: Sun Mar 16, 2008 8:57 am

Hard to tell for sure but by the writing alone my guess is Pinay,

The writing has none of the common lad mistakes, it is in pretty good English, and mone of the usual vlad lines, Pinays are much better at writing

Now for some evidence

Have a look at This Google search result

Posted: Sun Mar 16, 2008 10:38 am

Write her at the second email address from a SAFE email address of your own, and see what the email headers look like.
Not sure who/what this is? May be a vlad. Could be somebody trying to sell pictures or videos or something.

The china thing may just be a cheap means to spam.

Posted: Sun Mar 16, 2008 12:48 pm

OK, thanks everyone, for the info. As you can see, I'm new here, so I'll now have to do a bit of research on how to set up a "SAFE" email address.

The Google search links 2 posts above seem to indicate that this spam has even been sent to mailing lists for OS bug reporting, etc., am I right? I couldn't find the spam on the first of the linked pages, but the other two were fairly easy to find. I note that they are around 2 years old, so it seems that this particular piece of text has done quite a few miles, hasn't it?

Once again, thanks for the info. If you get any more ideas, I'd appreciate it if you could add it to this thread.

Posted: Sun Mar 16, 2008 1:11 pm

The email address you could have set up in less than five minutes.

Type gmail into google, click the gmail link, click sign up make all your details fake

Once done your ready to go

I should add that the romance baiting sticky is a great resource and you should read that as well, click on the link in my siggy line or the link at the top of the romance section

Posted: Sun Mar 16, 2008 1:27 pm

It's a pretty common way to ASEM a victim. Spoofed headers and this line

Quote:

I found your email somewhere and now decided to write you.

Make me think it's more likely to be a vlad. Send off a hello email and see what you get back.

Elite Baiter Joined: 11 Jul 2007 Posts: 1979

I have a couple of male characters on Myspace and I get similar messages there. It's annoying spam and my experience in responding to them has been that they lead me to their pictures on an amateur porn site which is just a teaser for a pay porn site.

My female characters get them every once in awhile too and once when I replied with something like, "You dumb b*tch sow, why would I want to see your nasty T & A pics? 'She' still wrote me back with the same, "Thanks for writing me back, I was so happy to get your email. Please meet me on my site and let's get to know each other better."

Opinions needed: [Subject: is it you? gabriella here]	View next topic View previous topic