Author |
Message |
Osman
Not quite a Newb
Joined: 08 Nov 2008
Posts: 43
|
Posted:
Sat Dec 27, 2008 3:23 am |
|
People, I need help getting this guy shut down. He is in the u.s. I want him to be caught. The i.p. shows a comcast.net i.p. and comcast should have his address on record.
Delivered-To:
Received: by 10.181.50.13 with SMTP id c13cs190056bkk;
Mon, 24 Nov 2008 16:50:26 -0800 (PST)
Received: by 10.150.219.18 with SMTP id r18mr8107088ybg.50.1227574225228;
Mon, 24 Nov 2008 16:50:25 -0800 (PST)
Return-Path: <[email protected]>
Received: from QMTA02.westchester.pa.mail.comcast.net (qmta02.westchester.pa.mail.comcast.net [76.96.62.24])
by mx.google.com with ESMTP id 6si12712718gxk.75.2008.11.24.16.50.23;
Mon, 24 Nov 2008 16:50:25 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 76.96.62.24 as permitted sender) client-ip=76.96.62.24;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 76.96.62.24 as permitted sender) [email protected]
Received: from OMTA13.westchester.pa.mail.comcast.net ([76.96.62.52])
by QMTA02.westchester.pa.mail.comcast.net with comcast
id jA9D1a00M17dt5G52Cpt9e; Tue, 25 Nov 2008 00:49:53 +0000
Received: from amailcenter01.comcast.net ([204.127.225.101])
by OMTA13.westchester.pa.mail.comcast.net with comcast
id jCqH1a0092BtKCC3ZCqH4r; Tue, 25 Nov 2008 00:50:22 +0000
X-Authority-Analysis: v=1.0 c=1 a=9gcvaYQOSA8A:10 a=JArQ0ooXjKsA:10
a=I815Vq00yxIA:10 a=8Vn9EmQ7Df4rq_GTDeUA:9 a=cj5-G3zahZf3fgm7J6IxrfTq6CIA:4
a=c5zHXd76wwQA:10 a=W4p2O1RRCiKvpHYRjpyNxtl0mxk=:19
Received: from [41.219.244.46] by amailcenter01.comcast.net;
Tue, 25 Nov 2008 00:50:16 +0000
From: [email protected]
Subject: Question about your item in www.craigslist.org
Date: Tue, 25 Nov 2008 00:50:16 +0000
Message-Id: <112520080050.18979.492B4BC70005BB8200004A232212020784CD0A0207009C070A03CD09020705040E9B@comcast.net>
X-Mailer: AT&T Message Center Version 1 (Oct 30 2007)
X-Authenticated-Sender: dGFsa2luZzJtZWlzZmluZTJAY29tY2FzdC5uZXQ=
--
Hello Seller,
Is this item still available for sale and in good condition? I will like to make an immediate purchase of the item if still available and will be making the payment by a Bank certified check , I am comfortable with the price for the item and will make the payment as soon as possible.
If you are willing to sell this item for me understand this condition, you should get back to me with your full name and address and also your phone# so i can have the payment mailed to you, also get back to me with the final asking price so I can be sure i am making the precise payment while making the payment. A pick up of the item will be schedule as soon as the payment process for item is been completed. I await your response asap.
Name:
Address:
City:
state:
Zipcode:
phone#
Final asking price:
I await your reply................ |
|
|
|
|
bill2
Baiting Guru
Joined: 10 Sep 2006
Posts: 5495
Location: Yeah who can tell me where I am?
|
Posted:
Sat Dec 27, 2008 3:24 am |
|
Strange I get 41.219.244.46 Nigeria (Ibadan)* |
_________________ I don't do bling, I just do lads |
|
|
|
Donato
Baiting Guru
Joined: 07 Jan 2007
Posts: 2922
|
Posted:
Sat Dec 27, 2008 3:27 am |
|
^^^
Me too... |
_________________ ^^^ damn tree hugging hippy. -imike
Your are a complete ASSHOLE!! Dont you dare mail me again BASTARD!!!-george harrison
- lots
<i><b>Free Pastor Frank!!!</b></i> |
|
|
|
Fich80
Not quite a Newb
Joined: 19 Nov 2007
Posts: 65
|
Posted:
Sat Dec 27, 2008 4:34 am |
|
Regardless of where he is, however, the comcast.net email means his paying for Comcast service. So you could get his internet service shut down, oh what a trophy that would be, Under Comcast's TOS Restrictions it says:
I. Prohibited Uses and Activities from Comcast wrote: |
- undertake or accomplish any unlawful purpose. This includes, but is not limited to, posting, storing, transmitting or disseminating information, data or material which is libelous, obscene, unlawful, threatening or defamatory, or which infringes the intellectual property rights of any person or entity, or which in any way constitutes or encourages conduct that would constitute a criminal offense, or otherwise violate any local, state, federal, or non-U.S. law, order, or regulation;
- post, store, send, transmit, or disseminate any information or material which a reasonable person could deem to be unlawful;
- upload, post, publish, transmit, reproduce, create derivative works of, or distribute in any way information, software or other material obtained through the Service or otherwise that is protected by copyright or other proprietary right, without obtaining any required permission of the owner;
- transmit unsolicited bulk or commercial messages commonly known as "spam;"
- send very large numbers of copies of the same or substantially similar messages, empty messages, or messages which contain no substantive content, or send very large messages or files that disrupts a server, account, newsgroup, or chat service;
- initiate, perpetuate, or in any way participate in any pyramid or other illegal scheme;
- participate in the collection of very large numbers of e-mail addresses, screen names, or other identifiers of others (without their prior consent), a practice sometimes known as spidering or harvesting, or participate in the use of software (including "spyware") designed to facilitate this activity;
- collect responses from unsolicited bulk messages;
- impersonate any person or entity, engage in sender address falsification, forge anyone else's digital or manual signature, or perform any other similar fraudulent activity (for example, "phishing");
- violate the rules, regulations, or policies applicable to any network, server, computer database, or Web site that you access;
|
So in theory with some work you could get comcast to kill his internet access, and possibly blackball him from other providers. Although the later is much less likely. |
_________________ [x15] [x6]
(Technically Ecuador)
Get Receipt of Your Email With The Lad's IP |
|
|
|
jose_cuervo
Baiting Guru
Joined: 01 Mar 2006
Posts: 8175
Location: Packing Vaseline in my frilly boots, I can’t help if it gets in other places.
|
Posted:
Sat Dec 27, 2008 5:55 am |
|
Fich80 wrote: |
Regardless of where he is, however, the comcast.net email means his paying for Comcast service. So you could get his internet service shut down, oh what a trophy that would be, |
How would getting a lad's email account closed be a trophy?
I also might add that absolutely nothing in the body of that email even remotely appears to be anything other than a genuine reply from an interested/potential buyer.
While it is a fairly reasonable assumption for a baiter to make that the buyer (lad) will soon turn this into a fake check/overpayment scam, Comcast is going to assume that you're a nutter if you try to get a paid email account shut down for the content of the email in the OP.
EDIT>> If you can get the lad to follow through with his scam you can try to get his paid account closed, but you will need enough to convince Comcast that he is scamming from that account. He may try to switch to a free email addy if he's had a paid addy closed before. |
_________________ ~
“I guess a man is the only kind of varmint sets his own trap, baits it, and then steps in it.” ~ John Steinbeck |
|
|
|
Eliza_Doolittle
"Warned for lad hugging"
Joined: 16 Mar 2006
Posts: 1979
Location: Contemplating a plan to steal Shiver's cat
|
Posted:
Sat Dec 27, 2008 6:31 am |
|
ditto to what jose says.... ^^^^ |
_________________ Uch3nna - 222km Lagos, Nigeria to Cotonou, Benin
M4rtins Uzo - Lagos to Abuja "l have spent money,time,took risk to travel all the way from lagos to abuja to meet you.(8 good hours on board)."
Ed - Port Harcourt to Kaduna
vLad's ebay auction states "Wonderful seller! Thinks "out of the box" to get item to you."
<br>
<a href="http://www.youtube.com/user/MrsRobinson419"> Click to see the videos Ed sent me.</a><br>
<A href="http://members.419eater.com/~eliza_doolittle/index.html"> Eliza's lad quotes, photos, and audio files</a>
x12
*this sig icon has been censored* <br><a href="http://members.419eater.com/~eliza_doolittle/809104_ML.pdf" > click here</a> for a Bank Account Transfer Form.
|
|
|
|
Osman
Not quite a Newb
Joined: 08 Nov 2008
Posts: 43
|
Posted:
Sat Dec 27, 2008 6:47 am |
|
Obviously he said "a pickup of the item will happen after payment has been received" and that is obviously supicous because if someone sends me a check, they can expect me to mail the item to them not have them come to my door. That is like invasion of privacy and risky and dangerous. How do I know he is not a serial killer or someone looking to randomly shoot people. Use your common sense Eliza and Jose. |
|
|
|
|
jose_cuervo
Baiting Guru
Joined: 01 Mar 2006
Posts: 8175
Location: Packing Vaseline in my frilly boots, I can’t help if it gets in other places.
|
Posted:
Sat Dec 27, 2008 8:05 am |
|
How do I (or anyone else for that matter) know what you're selling??? It just says "item". Are you selling a pencil or a 20 ton WWII surplus tank?
While the first could be easily sent via mail, I think the latter would have to be collected by other means.
I AGREE THAT YOU ARE DEALING WITH A LAD!
I'm only suggesting that you provide credible evidence, to Comcast, that the lad is scamming from the account in question so they will close it. |
_________________ ~
“I guess a man is the only kind of varmint sets his own trap, baits it, and then steps in it.” ~ John Steinbeck |
|
|
|
Osman
Not quite a Newb
Joined: 08 Nov 2008
Posts: 43
|
Posted:
Sat Dec 27, 2008 9:14 am |
|
I'm a comcast paying customer and maybe they won't mind closing his account since they will keep me as a customer. I think this lad used social engineering or a trojan to get the login info for comcast.net to login from Nigeria. |
|
|
|
|
jose_cuervo
Baiting Guru
Joined: 01 Mar 2006
Posts: 8175
Location: Packing Vaseline in my frilly boots, I can’t help if it gets in other places.
|
Posted:
Sat Dec 27, 2008 9:45 am |
|
Well that changes everything! Why didn't you say so? Being a paying Comcast customer will most likely make all the difference in the world in your efforts to get the account closed.
I give up... |
_________________ ~
“I guess a man is the only kind of varmint sets his own trap, baits it, and then steps in it.” ~ John Steinbeck |
|
|
|
thud419
Baiting Guru
Joined: 04 Jan 2006
Posts: 3193
|
Posted:
Sat Dec 27, 2008 9:58 am |
|
In my experience being a paying customer makes one the lowest of the low. They've got you now; it's the new customers they are offering all the sweeteners.
By all means continue with the bait. When you've got cast-iron proof, pop into the fake banks forum to learn how to write a letter of complaint. |
_________________ Click here to feel warm and cozy.
I did not f**k your wife in any way -- Nike Akanbi
I don't know what else to do or do I continue filling and filling forms. -- Barr. Koloti
you has been dribbling me up and down but I will show some thing you have never seen before, I think you breath air wait and see. -- Barr. Cole
x14
x 0.25 won from Reaper in a sucker's bet
x8 x several |
|
|
|
LaBrea
Elite Baiter
Joined: 04 Aug 2007
Posts: 1355
Location: Yet another hotel
|
Posted:
Sat Dec 27, 2008 3:52 pm |
|
To add to the others' good advice, keep in mind that the Comcast customer may have had his account phished by the lad.
I'm not certain about Comcast, but I know Verizon allows account-holders to create aliases (with a Verizon addy), and designate non-Verizon emails as an alternate account.
The lad could be using the Comcast address for his opening format, then forward his victims replies to his own free account.
In the case of Verizon, forwarded messages do not remain in the Verizon inbox.
If the account owner seldom uses his account, he may never see what the lad has done.
Again, I'm suggesting this as an alternate possibility, which still should be reported to Comcast, once you have enough information to know this is a scam. |
_________________ x2 x7 x6 x7 x5
"...It is in the light of the above-mentioned person with the fact that he died of testate..." - Barrister T3ddy J0hns0n
"...you make me stupid to the people ...no time to wast you better go and see your doctor because l think your lack of stickiness." _Dr. Usman Bello
"Sir I sworn an oath as a legal luminary to defend your cause in all ramification from the armpit of the law" - Barr. W4k4r4 Iss4c
x6 x25
Click here to help your lad miss his scam quota |
|
|
|
Dorothy
Baiting Guru
Joined: 09 Jul 2008
Posts: 3114
Location: somewhere over the rainbow
|
Posted:
Sat Dec 27, 2008 9:34 pm |
|
Chances of the account actually being paid for by a scammer are slim. I also get Nigeria from the IP, btw.
Assuming Comcast only provides emails to paid service subscribers (I believe this is true, but haven't really researched) the account is likely:
A random US citizen's account obtained through a keylogger or phishing
An unknowing check mule's account, opened for the "job" he/she thinks he is working
A love scam victim's account, created for and/or given to the scammer after some BS story about why the scammer needs it
In any of the above cases, it is possible that the victim does not log into this account and has no idea what is happening.
It is possible, but less likely, that it is the account of an exceptionally ignorant US accomplice. I say exceptionally ignorant because with the number of free emails out there, most knowing accomplices would just grab a free email rather than use an account that could easily trace back to them.
If the email belongs to a victim, while it may not be a trophy in the site-killing sense, if you can collect the evidence (as others have said, it's obviously a scam, but the ad response itself is not proof) and Comcast takes action, the owner of the email will likely become aware of the situation, and you may save a victim, which is (IMO) a bigger win! |
_________________ "I've a feeling we're not in Kansas any more..." |
|
|
|
Tsnerd
Not quite a Newb
Joined: 14 Jul 2005
Posts: 41
|
Posted:
Sat Dec 27, 2008 11:32 pm |
|
How have we gone from a standard suspicious email to the far realm of social engineering?
I do like the exasperated sarcasm in the middle, though. |
_________________
Fakers: many, many, lots; an SSL and a couple of Resellers.
x 6
AH, AH, AH! Two little ! |
|
|
|
Osman
Not quite a Newb
Joined: 08 Nov 2008
Posts: 43
|
Posted:
Sun Dec 28, 2008 12:49 pm |
|
I sent an [email protected] email regarding this and hopefully they will shut it down but if not you guys on here can help me out. Yep that is definately a comcast i.p. address because it starts with 76 and mine also starts with 76. |
|
|
|
|
thud419
Baiting Guru
Joined: 04 Jan 2006
Posts: 3193
|
Posted:
Sun Dec 28, 2008 2:30 pm |
|
The 76 address is not the scammer. OMTA13 and OMTA02 are Comcast server machines. MTA stands for Mail Transfer Agent.
Although the timestamp is not the latest one, I think in this case it is because someone has their clock wrong by half a minute, and you will find this is the important IP address:
Quote: |
Received: from [41.219.244.46] by mailcenter01.comcast.net; Tue, 25 Nov 2008 00:50:16 +0000 |
Rule of thumb: If in doubt, the IP address that tracks to Nigeria is the original one.
A traceroute on that address goes nowhere near Comcast. It is provided by SkyVision. "SkyVision is investing over 2 Billion NGN to enable every person in Nigeria to enjoy a reliable, high quality and affordable Broadband Internet connectivity"
It looks to me like a phished Comcast account. You can check email on www.comcast.net, so the scammer will be using that. However I don't see any way to get a Comcast email account without having equipment provisioned by them. |
_________________ Click here to feel warm and cozy.
I did not f**k your wife in any way -- Nike Akanbi
I don't know what else to do or do I continue filling and filling forms. -- Barr. Koloti
you has been dribbling me up and down but I will show some thing you have never seen before, I think you breath air wait and see. -- Barr. Cole
x14
x 0.25 won from Reaper in a sucker's bet
x8 x several |
|
|
|
|
|
View next topic
View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|