A fresh lead - I am a newbie & not prepared; but found t

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Sat Mar 22, 2008 2:25 pm

... In my spam box. Please have at it. Please notify me if this is not worthy of a post or if my post is somehow innapropriate:
(Note that I do not have a profile on this site or any other dating site)

From:
[email protected]

Sent: March 19, 1:04 p.m.

just finding people in my area and i came across you, my mesenger is [email protected]

Elite Baiter Joined: 19 Jan 2008 Posts: 1043

Hello and welcome.

There's not much in that email to show that they are scammers. They probably are.

If you could attach the headers, then that would help. (if you need help, state which provider you are with (Hotmail, gmail etc, not your whole email addy))

Also, this should go in the surplus scams section HERE

A mod might move it there.

Posted: Sat Mar 22, 2008 2:35 pm

Hi and thank you.

Gmail - I need to learn about headers. Your assistance would be appreciated.

Elite Baiter Joined: 19 Jan 2008 Posts: 1043

Excellent choice.

Headers in google 101:

Open the email.
In the top right of the email box, there should be a small triangle.
Click it and select "Show Original"
A new window should open, above your message will be some writing.
Copy that and paste it here.
Obscure any personal details

You can also, use THIS tool to analyse them.

Edit: the above link doesn't seem to work today. anyone else getting that problem?

Posted: Sat Mar 22, 2008 3:24 pm

Ok, so I have extracted it & obscured what is obvious to me; however could you please take a look at your PM form me.

Thanks

PS Link does not work for me either.

Elite Baiter Joined: 19 Jan 2008 Posts: 1043

Damn, just wrote a chunky post and closed the window.

In summary.
An ip won't lead to your door. A best it will lead to your city.
The last IP(oldest) is usually the originating ip.
"hers" seems to be from Buenos Aires, Argentina - what do other people get?

The header seems clear to me. hope you don't mind if i attach it.

Quote:

Delivered-To: [email protected]
Received: by 10.150.198.18 with SMTP id v18cs244901ybf;
Wed, 19 Mar 2008 16:51:19 -0700 (PDT)
Received: by 10.86.59.2 with SMTP id h2mr416589fga.78.1205970678557;
Wed, 19 Mar 2008 16:51:18 -0700 (PDT)
Return-Path: <[email protected]>
Received: from 201-255-92-214.mrse.com.ar ([201.255.92.214])
by mx.google.com with ESMTP id x6si1643034gvf.0.2008.03.19.16.51.08;
Wed, 19 Mar 2008 16:51:18 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 201.255.92.214 as permitted sender) client-ip=201.255.92.214;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning [email protected] does not designate 201.255.92.214 as permitted sender) [email protected]
Message-ID: <000801c889fa$04181c15$b9bc5784@hrpfx>
From: "dal gloria" <[email protected]>
To: <[email protected]>
Subject: RE: messager me
Date: Wed, 19 Mar 2008 18:04:18 +0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198

just finding people in my area and i came across you, my mesenger is [email protected]

Posted: Sat Mar 22, 2008 3:49 pm

I don't mind that you have posted, since I would have after your blessing anyhow (thanks).

I offer this information: If it originated from Argentina, I am in continental US, so "in your area" points to certainly some sort of a mass email. Of course there is also the fact that I am not a member of the dating site, nor any other, nor do have I ever frequented them.

So I think the seed has been planted; I will let you / others take over.

FYI - I am currently cleaning up the damage from a real victim in my life, so I am currently not available to participate. However if you need any further info regarding this post from me I will provide.

Have a nice day

PS: Suggetion: To avoid loosing work when (accidentally) navigating away from a post you are writting you may want to make it a habit to write your post in Word, & paste to post just prior to sending... That way you can simultaneously navigate all you want.

Elite Baiter Joined: 19 Jan 2008 Posts: 1043

Glad i could be of help.

Firefox usually reopens closed tabs, sometime with the post included, but today it didn't feel like it.

Sorry to hear about what happened to your friend. Hope the damage wasn't too bad.

Hope to see you again.

Posted: Sat Mar 22, 2008 5:17 pm

Olga - Have you read all the stickies?

Are you baiting safe? (I.e. no real info about yourself, and also no real info about innocent third parties?)

Bruin

Elite Baiter Joined: 19 Jan 2008 Posts: 1043

Don't actually think they are in contact with the scammer.

Probably just wanted to get some payback on scammers in general after their friend was scammed and they received the email.

Posted: Sat Mar 22, 2008 5:30 pm

I am not baiting; I have only begun reading up & am not ready. This post was to give a lead. I sent the header to a member with my email address stipped out. I had no intention of participating beyond this point.

If this post is unsafe, or I have already blundered, then please let me know. In that case I would ask that you assist me removing it.

Thank you for your concern.

Posted: Sat Mar 22, 2008 5:34 pm

Your posts here seem perfectly safe. The problem arises when inexperienced baiters use a personal e-mail account (which, usually, can be traced back to them fairly easily) and other personal details in a bait. The scammers have real contacts in both Europe and North America (and elsewhere) and could conceivably attempt to contact the baiter, or retaliate against the baiter.

There is an account that has floated around on this board for quite some time of a baiter who revealed (accidentally) and office address. Some weeks later, a man with an African accent showed up in the office reception area and asked to see the baiter's baiting alias.

In short - one must be careful and use only bogus info and safe e-mail accounts.

Bruin

Elite Baiter Joined: 28 Feb 2007 Posts: 1731

I have been in touch with olga and am convinced there is no problem with safety issues.

@newdonym your link worked fine for me. It just says there is an error with the IP headers just submitted, because of course none were. It shows the window in which headers can be submitted.

Elite Baiter Joined: 19 Jan 2008 Posts: 1043

Seems to be back up now. Cheers for checking.

A fresh lead - I am a newbie & not prepared; but found t	View next topic View previous topic