weird way to start a scam !

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Thu Mar 26, 2009 11:18 am

Got this spam and i had a look at it for some thing to do.
looks like the lad had a bad day or somthing here is the mail Subject: payment 5561125
followed by the love me letter LOL.
i got sent a photo too if anyone wants it.

From - Thu Mar 26 04:46:26 2009
X-Account-Key: account2
X-UIDL: <01c9ad94$3011ae80$d1cca279@raojld>
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
X-Mozilla-Keys:
Return-Path: <[email protected]>
Received: from nschwingx05p.mx.bigpond.com ([121.162.204.209])
by nschwmtas06p.mx.bigpond.com with ESMTP
id <20090325125400.GGK3101.nschwmtas06p.mx.bigpond.com@nschwingx05p.mx.bigpond.com>;
Wed, 25 Mar 2009 12:54:00 +0000
Received: from [121.162.204.209] by nschwingx05p.mx.bigpond.com with ESMTP
id <20090325125353.DDEL25691.nschwingx05p.mx.bigpond.com@[121.162.204.209]>;
Wed, 25 Mar 2009 12:53:53 +0000
Received: from [121.162.204.209] by mail.boxx.com; Wed, 25 Mar 2009 21:53:53 +0900
From: "Yvonne Tidwell" <[email protected]>
To: <[email protected]>
Subject: payment 5561125
Date: Wed, 25 Mar 2009 21:53:53 +0900
Message-ID: <01c9ad94$3011ae80$d1cca279@raojld>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_000E_01C9AD94.3011AE80"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.4115
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Importance: Normal
X-RPD-ScanID: Class bulk; VirusThreatLevel unknown, RefID str=0001.0A150204.49CA2188.00AB,ss=3,sh,fgs=0

This is a multi-part message in MIME format.

------=_NextPart_000_000E_01C9AD94.3011AE80
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hello!!
My name is Marina!!
I like your profile! I would like to get acquainted with you and I want find out you better. I search for the man for creation of serious relations.
I would like to tell a little about myself, I the kind, fair and loving person, I very much like kids. I am assured we could to get acquainted.

Please write to me only to my personal email: [email protected]

I can send you my photos and tell you more about myself..
I will wait your letter..

##########################################
THEN the next day got this.

From - Thu Mar 26 10:54:33 2009
X-Account-Key: account2
X-UIDL: <01c9adf1$87923780$5fe0355e@qhrbqyrmde>
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
X-Mozilla-Keys:
Return-Path: <[email protected]>
Received: from nschwingx06p.mx.bigpond.com ([94.53.224.95])
by nschwmtas03p.mx.bigpond.com with ESMTP
id <20090326070212.HWXO16649.nschwmtas03p.mx.bigpond.com@nschwingx06p.mx.bigpond.com>;
Thu, 26 Mar 2009 07:02:12 +0000
Received: from [94.53.224.95] by nschwingx06p.mx.bigpond.com with ESMTP
id <20090326070204.OTZX19388.nschwingx06p.mx.bigpond.com@[94.53.224.95]>;
Thu, 26 Mar 2009 07:02:04 +0000
Received: from [94.53.224.95] by burgie.sandpiper.com; Thu, 26 Mar 2009 09:02:03 +0200
From: "Adela Rocha" <[email protected]>
To: <[email protected]>
Subject: Please do not forget about me.
Date: Thu, 26 Mar 2009 09:02:03 +0200
Message-ID: <01c9adf1$87923780$5fe0355e@qhrbqyrmde>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_000E_01C9ADF1.87923780"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
Importance: Normal
X-RPD-ScanID: Class bulk; VirusThreatLevel unknown, RefID str=0001.0A150203.49CB1EDD.005E,ss=3,sh,fgs=0

This is a multi-part message in MIME format.

------=_NextPart_000_000E_01C9ADF1.87923780
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hello. Please do not be surprised, this letter is not a spam mailing.
You probably will be very surprised that I write you a letter. But
yesterday, I was surprised, too, when my e-mail address, it is a
letter that talked about love, about feelings between people. The main
theme of this letter was the phrase «Looking for love and you'll be
happy». I liked the letter. In the list of e-mail address, I saw your
e-mail and decided to write to you. Perhaps you're looking for love?
Maybe this letter - the fate? I do not know how the person who sent me
the letter, found out my personal e-mail. But I think that this is not
important. The most important thing is that now I can write you a
letter. You know, I want you to learn more. But first, I'd like to
talk a little about me. My name is Emma. I'm from Armenia. I am 28
years old. I have never been married and have no children. I am nice,
quiet, kind and sociable girl. It will be interesting to talk with you
and learn you closer. I am building their communication with the
primary objective - the creation of serious relations. Relations,
without deception, without any games. I want to find this man who can
love and respect me. I hope that you just want to find love? I believe
in romantic relationships, appearance and age is not the main thing.
The most important thing that people knew how to love and respect for
real! I have different hobbies and interests, among them - sports,
cooking, reading books, music. Of particular interest to me is
housekeeping, cleaning the house. I love experimenting in the kitchen.
I love animals. I am leading a healthy lifestyle. I do not smoke nor
drink alcohol. My new friend, can you tell me about you? I want you to
learn more. The following letters, I will tell you about me, in more
detail.

Please reply only to my personal e-mail: [email protected]

Of course, I will send you a lot of my photos, of whom you know my
life. In my photos depict all aspects of my life - joy, reverie, and
even some sad moments. I look forward to your reply. I really want to
know you more. Please do not forget about me. Your new friend from
Armenia, Emma.
####################################

New to scaming or what.

Posted: Thu Mar 26, 2009 12:09 pm

Welcome Slavebait

Interesting, that first email appears to have been sent from here 121.162.204.209 Korea, Republic of (Seoul)*

Edit
And the second one from here
94.53.224.95 Romania (Pantelimon)*

You obviously know about headers already, do you know how to analyse them

These headers include an x mailer, this is not a new scammers tactics

BTW, http://headertool.apelord.com/headers this is what most of us use for header analysis

Posted: Thu Mar 26, 2009 12:20 pm

Actually Murry, I'm not suprised. I've hit some Koreans from talking to Camgirls. I actually befriended a few camgirls and got them to give me information! They all know about whats going on, And magically through my travels with some of the more less friendly ones...My email now has LOADS of Korean and Phillipino women/men trying to scam me. I've had many conversations with the few I've befriended and they all know what scamming is and know people who do it. It's almost like the two run hand in hand. Strange.

EDIT: Romania! haha, I did not even analyze the header. I just answered according to your previous post... Embarassed

Posted: Thu Mar 26, 2009 12:28 pm

Sorry, I edited as I found more info

Spoofing IPs I presume

Doing the same to you again Laughing

This is from the second email

Quote:

Hello. Please do not be surprised, this letter is not a spam mailing.
You probably will be very surprised that I write you a letter. But
yesterday, I was surprised, too, when my e-mail address, it is a
letter that talked about love, about feelings between people

That look like a Vlad"s work

And this from the first

Quote:

My name is Marina!!

I like your profile! I would like to get acquainted with you and I want find out you better. I search for the man for creation of serious relations.
I would like to tell a little about myself, I the kind, fair and loving person, I very much like kids. I am assured we could to get acquainted.

I hadn't even looked at the script until just now, definate work of a vlad but the second one looks more convincing

Posted: Thu Mar 26, 2009 12:36 pm

oh yeah, definitely a Vlad, considering in my experience they are mostly the ones who spoof IP's in the first place. Curse them for being so computer literate.

Posted: Thu Mar 26, 2009 12:54 pm

No sign of "the bat" in there, combined with it coming from Romania, its a translation scam.

@Slave bait, the pictures attached, are they by chance of an almost naked very professional looking model?

They normally get their pictues from soft porn sites, we may have a member who might recognise them

Embarassed

Stop looking at me like that Embarassed

I wasn't refering to me Laughing

BTW, the second email comes up in some searches Here

This from the second one
Click Here not typical translation scam pictures but perhaps they have changed since I last baited one

Posted: Wed Apr 08, 2009 4:05 pm

no naked photo just a normal one.
i have not got anymore emails so i guess because i did not reply my email is now on the dead list.
to be recycled later.

Posted: Thu Apr 09, 2009 1:14 pm

too bad, Now you can rinse and repeat. Find another and have a go. Bait safely. If you have any questions, don't hesitate to ask.

Posted: Fri Apr 10, 2009 12:26 am

slavebait wrote:

no naked photo just a normal one.
i have not got anymore emails so i guess because i did not reply my email is now on the dead list.
to be recycled later.

E-mail them back, tell her your heart broken, and constantly search for there replies. As the only thing you have to remind you of her is the wonderful photos she's already sent you.

Really pile it on. Works every time. Wink

Also if there Russian, they don't work on weekends and the internet cafes close on Sundays.

Posted: Fri Apr 10, 2009 5:27 am

I don't see anything that would make me think they "dropped" you...

The vlad may have gotten a little busy with first responses or something --

I'd just send back a letter saying "Oh, sorry I've been busy and didn't have the chance to write you ... then talk about work or whatever that was causing you to not write...

or "have you been ok? I hadn't heard from you and I am a little worried"...

or just go get yourself a more hungry fish Twisted Evil

Posted: Tue Apr 14, 2009 7:14 am

I thought I'd blown it with my "husband" St@nley N0nso, even to the point where I hurled heaps of abuse calling him all sorts of names, as well "Just like ALL other men, a liar and a cheat"... And got my first trophy pics (They're not great and not really worth posting, but I'm setting him up for better ones later).

Also anyone got ideas to get around his incessant pestering for me to call him (I'm a bald middle aged man pretending to be a middle aged female ex model)? I'd happily settle for any female members willing to call him, except I'm in Melbourne Australia.

Any advice appreciated!

Posted: Tue Apr 14, 2009 10:01 am

For starters he will need to call you, it would be completely wrong for you to call him as it just isn't the way it works.

You could also top that off with him needing to prove himself before you allow him to call you, it will be your treat to him if he behaves and does as he is told.

Rule number 1 of baiting (or is that rule number 2 or 3, perhaps 4 Confused

anyway the point is)
We need to waste scammers time and resources and not our own Wink

Posted: Tue Apr 14, 2009 10:57 am

First one is dead.

<[email protected]>: host c.mx.mail.yahoo.com[216.39.53.3] said: 554 delivery
error: dd This user doesn't have a yahoo.com account ([email protected])
[-5] - mta169.mail.re4.yahoo.com (in reply to end of DATA command)

weird way to start a scam !	View next topic View previous topic