Fake Site - Site Killer Needed?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Fri Jun 12, 2009 5:07 am

I recently recieved a link from a scammer to a 'news site'

http://www. thisdayonline. com/nview. php?id= 145876

What seems wonky about this one is that the news story was dated tomorrow. Wierd.

I'm going to be out of the world for a spell and so don't have the time/expertise to figure out what's up with this, so if someone else wants to take a crack at it, please feel free.

Posted: Fri Jun 12, 2009 5:18 am

For any site killing to be done you'd also need to post the e-mails and headers and some more stuff. Check the posting guide in the Fake Bank forum and post it there Wink

Elite Baiter Joined: 01 May 2006 Posts: 1693

Nothing fake here

Alexa ranked 23rd in nigeria Considering the ususal yahoo/google suspects at the top 23rd not to bad Very Happy

Posted: Fri Jun 12, 2009 5:48 am

I've checked the WhoIs and the site has been registered since 2000, so I'd say that it was a legit news site.

As for the date. The article is dated 12 June, which is today's date (although it might have still been the 11th in the OP's timezone).

Posted: Fri Jun 12, 2009 12:11 pm

Return-Path: <[email protected]>
Authentication-Results: mta242.mail.mud.yahoo.com from=ymail.com; domainkeys=pass (ok); from=ymail.com; dkim=pass (ok)
Received: from 67.195.23.103 (HELO web111616.mail.gq1.yahoo.com) (67.195.23.103) by mta242.mail.mud.yahoo.com with SMTP; Thu, 11 Jun 2009 21:24:46 -0700
Received: (qmail 95992 invoked by uid 60001); 12 Jun 2009 04:24:46 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ymail.com; s=s1024; t=1244780686; bh=plYDIzL24F8FyqL+AMEVKNiGvadCDxY9inejcUY+G6E=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=ymail.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
Message-ID: <[email protected]>
Received: from [196.3.183.72] by web111616.mail.gq1.yahoo.com via HTTP; Thu, 11 Jun 2009 21:24:45 PDT
References: <[email protected]>
Date: Thu, 11 Jun 2009 21:24:45 -0700 (PDT)
From: This sender is DomainKeys verified <[email protected]> Add sender to Contacts
Subject: Re: Reminder
To: XXXXXXXXXXX
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1338404424-1244780685=:94815"
Content-Length: 9002

Quote:

Dear Sir,
How are you today, this is what happened : they have arrested one of us and who knows it might be our turn next please dont let me die here, i will move to Benin By tomorrow and i am waiting to hear from you before i will take the giant step. please do pray for me because i know in God we trust.

Thanks
Belemo

I think I got this one from the surplus forum, what's wierd is that it definitely was the 11th when I recieved the E-mail. It's definitely a 419 thing, because his next E-mail is obsessed with moving his 'consignment' -he didn't seem too interested in hiring merceneries to save his buddy...

Do you suppose that we just got fantastically lucky and they legitimately captured this guy while I was baiting someone who was pretending to be associated with him?

Posted: Fri Jun 12, 2009 12:31 pm

It may not be your lad's buddy who was arrested. He might just be taking advantage of it to make the scam look more genuine.

419Eater is my life Joined: 08 Aug 2008 Posts: 475

I see a news - story which a lad uses to legitimize his story.

his story is playing here and now, so he can not use news from a plane-crash dec. 2007.

on the day he saw a adequate story in news, he hitted the send-button. and creates an athmosphere of stress, like we can see with some baiters, when they pop up to the forum with .. help immediately, got him on chat, he asks for dokument, what to do ... and the scammers keeps insisting and stressing.

what in a scam is urgend for a non existing 'victim' ? non existing money ?

some of them know, how to play with emotions und psyche.

Quote:

please dont let me die here, i will move to Benin By tomorrow and i am waiting to hear from you before i will take the giant step...yada yada.

yes, 419 . but not the news site
and if he is from that country, he will know the story before somebody in a far away land.

Posted: Fri Jun 12, 2009 6:56 pm

The lad's just piggy-backing, IMHO.

And the dates were probably a freak of time-zones - something the internet doesn't respect Very Happy

Fake Site - Site Killer Needed?	View next topic View previous topic