Easiest Safari Ever?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Mon Jan 18, 2010 3:14 am

Recently I was contacted by a scumbag Haiti relief scammer asking for a donation. Now these scammers really irritate me, taking advantage of people in such a desperate situation.

So, immediately I jumped on it and convinced him in just 2 emails to use S3cur1ty Sh13ld to unlock his MTCN. So he fills out questions and then complains that he has been answering for many hours to no avail. So I tell him to keep at it and I ask where he is currently located. He tells me he works for the British Red Cross but is in Lagos, Nigeria currently for missionary work Rolling Eyes

. I checked the IP that he was operating through beforehand through Security Shield and sure enough, it resolves to Lagos.

Seeing as he has been so easy to bait so far I decided to jump in head-first and try for an initial, short safari. I tell him that I have a cousin in Port Harcourt and he would be able to hand over some money on my behalf in person, as well as the money I sent through Western Union. The lad tells me that it would be easy for him to travel to Port Harcourt and tells me he will leave as soon as possible. When he says this I assume that he means a week or so, but the next day he logs on to Security Shield for some more fun and his IP, sure enough, points to Port Harcourt. I am virtually certain that it is the same lad and not a friend, as he uses the same grammar and writing style and filled out the questions in the same way.

My question is though, could this be for real? Could I have actually sent him over to the other end of the country with a few emails? This seems too good to be true - especially seeing as it means he would have taken a 400km+ journey in one day. I have not arranged the 'meeting' yet between him and my 'brother' as he has not sent an email to confirm that he is in Port Harcourt.

Anyway, what do you guys think? Could I really have been so lucky with this lad that I could have sent him to the other end of the coast of Nigeria with a short few days of correspondence? Unfortunately he is using a gmail account so the only thing I have to go off is Security Shield, which has given me these IPs:

Initial: 41.205.161.72 --- Lagos
Post-safari request - as shown by S3cur1ty Sh13ld: 41.205.171.127 --- Port Harcourt

I don't know that there is enough evidence to warrant a pith and I have the feeling the lad is starting to suspect that I am a 'joker', so he's probably going to drop me soon, but I would love to hear what you guys think. Is it really possible that he is such a pushover and can travel that quickly?

Posted: Mon Jan 18, 2010 3:46 am

Dr_Pimper wrote:

My question is though, could this be for real? Could I have actually sent him over to the other end of the country with a few emails?

Possible. Without tooting my own horn (but I will) I was lucky to get a lad from Accra to Odienne (1800km round trip) in a few emails. Very Happy

Post up the emails with headers and we'll check it out. To get a pith you need to have sent your lad 200 miles, which to the rest of the 21st Century is 322 Kilometres, or across a border. If you have done it, then you've done it and deserve a pith.

Posted: Mon Jan 18, 2010 3:47 am

Tell him that your brother had an emergency and had to go to Yaounde, Cameroon and unfortunately will be there for a month. You knew he was having trouble getting the WU and you have arranged for your brother to pay him if he can get to Yaounde. Be generous and tell him that you told your brother to reimburse the mugu for any expenses since you want the full amount of your donation to go to Haiti.

Open another addy for brother and pass the mugu. When you switch to "brother" tell the mugu that his messages sent from gmail are garble and it's almost impossible to read the text. He will need to switch to a more reliable email like yahoo or hotmail.

ETA> @ NN, the lad is using gmail.

Posted: Mon Jan 18, 2010 3:52 am

Gmail. Well you're screwed. I make all my lads change from Gmail. Gmail is the work of Satan. Very Happy

Posted: Mon Jan 18, 2010 4:13 am

I will try to get him to switch from gmail but I don't know if he will. I think by now he has started to grow suspicious, after all I am supposed to be making a donation so it may be difficult to string him along now. If I can I will post the headers.

Edit: I have just realised that he originally contacted me with a Hotmail account, so if I can just try and convince him to start using it...

Posted: Mon Jan 18, 2010 4:30 am

Just don't answer his gmail's for a week, but everyday send him a new email asking where he is, ignore his responses. Then you respond to his first one (from that week) and tell him that all his emails aren't coming through, being marked as 'spam' and then deleted.

Tell him to change to something else. If he wants to communicate with you, he'll do it.

Posted: Mon Jan 18, 2010 4:35 am

Dr_Pimper wrote:

I have just realised that he originally contacted me with a Yahoo mail account, so if I can just try and convince him to start using it...

The original Yahoo account might be dead (for spamming violations), or it might belong to a "bottom tier" scammer who just spends all day sending out opening scripts with the "real" scammer's address in the reply-to field.

I'd not insist on him using it, because it's likely he can't.

Posted: Mon Jan 18, 2010 6:53 am

I asked if he could go back and use the original account and he has accepted and messaged me a few minutes ago.

Thanks for the advice by the way, Jammy, but I knew for a fact it was his account, as I had been contacted by someone 'lower down the ladder' earlier on and he passed me on to the lad, who changed accounts early on in the piece.

Anyway, I checked and he was still using his Hotmail (I said Yahoo by mistake earlier), up until a few emails ago.

Anyway, his message to me just then was to complain about the S3cur1ty Sh13ld process, but he also asked where he would meet my cousin. I told him that it may take a few days to organise, as I want to keep him there for as long as possible.

Here are the email headers. The original email was through a static IP address, as it was the same one that came up on S3cur1ty Sh13ld. The second, however, changes between the one that came up on S3cur1ty Sh13ld and the email itself. Although, they both point to Port Harcourt. I checked through one header analysis site to check if a proxy had been used but it came up clean.

Header 1 - From Lagos:

Quote:

Delivered-To: <snipped>@gmail.com
Received: by <snipped> with SMTP id b19cs284607waf;
Fri, 15 Jan 2010 19:53:30 -0800 (PST)
Received: by <snipped> with SMTP id g27mr3482892qan.192.1263700409459;
Fri, 15 Jan 2010 19:53:29 -0800 (PST)
Return-Path: <<snipped>@hotmail.com>
Received: from snt0-omc3-s9.snt0.hotmail.com (snt0-omc3-s9.snt0.hotmail.com [65.55.90.148])
by mx.google.com with ESMTP id 10si6749097qyk.109.2010.01.15.19.53.29;
Fri, 15 Jan 2010 19:53:29 -0800 (PST)
Received-SPF: pass (google.com: domain of <snipped>@hotmail.com designates 65.55.90.148 as permitted sender) client-ip=65.55.90.148;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of <snipped>@hotmail.com designates 65.55.90.148 as permitted sender) smtp.mail=<snipped>@hotmail.com
Received: from SNT123-W7 ([65.55.90.135]) by snt0-omc3-s9.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 15 Jan 2010 19:53:28 -0800
Message-ID: <[email protected]>
Return-Path: <snipped>@hotmail.com
Content-Type: multipart/alternative;
boundary="_3a026e96-ae3e-4eaa-ad42-3015891f4c67_"
X-Originating-IP: [41.205.161.72]
From: Lad <<snipped>@hotmail.com>
To: <<snipped>@gmail.com>
Subject: RE: Haiti Appeal Donation
Date: Sat, 16 Jan 2010 03:53:27 +0000
Importance: Normal
In-Reply-To: <[email protected]>
References: <[email protected]>
MIME-Version: 1.0
X-OriginalArrivalTime: 16 Jan 2010 03:53:28.0114 (UTC) FILETIME=[A0869120:01CA9728]

Header 2 - From Port Harcourt:

Quote:

Delivered-To: <snipped>@gmail.com
Received: by <snipped> with SMTP id b19cs321465waf;
Sun, 17 Jan 2010 21:37:47 -0800 (PST)
Received: by <snipped> with SMTP id y20mr3785118qci.18.1263793067032;
Sun, 17 Jan 2010 21:37:47 -0800 (PST)
Return-Path: <<snipped>@hotmail.com>
Received: from snt0-omc3-s34.snt0.hotmail.com (snt0-omc3-s34.snt0.hotmail.com [65.55.90.173])
by mx.google.com with ESMTP id 37si7347813qyk.122.2010.01.17.21.37.46;
Sun, 17 Jan 2010 21:37:47 -0800 (PST)
Received-SPF: pass (google.com: domain of <snipped>@hotmail.com designates 65.55.90.173 as permitted sender) client-ip=65.55.90.173;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of <snipped>@hotmail.com designates 65.55.90.173 as permitted sender) smtp.mail=<snipped>@hotmail.com
Received: from SNT123-W17 ([65.55.90.136]) by snt0-omc3-s34.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 17 Jan 2010 21:37:18 -0800
Message-ID: <[email protected]>
Return-Path: <snipped>@hotmail.com
Content-Type: multipart/alternative;
boundary="_47d38cfd-a8c5-4456-b2b4-9ec4fe3b334e_"
X-Originating-IP: [41.219.253.67]
From: <snipped> <<snipped>@hotmail.com>
To: <<snipped>@gmail.com>
Subject: RE: Haiti Appeal Donation
Date: Mon, 18 Jan 2010 05:37:18 +0000
Importance: Normal
In-Reply-To: <[email protected]>
References: <[email protected]>
<[email protected]>,<[email protected]>
<[email protected]>,<[email protected]>
MIME-Version: 1.0
X-OriginalArrivalTime: 18 Jan 2010 05:37:18.0299 (UTC) FILETIME=[4C6B1AB0:01CA9800]

I have checked on the interwebs and apparently Lagos to Port Harcourt is 439km or 273 miles as the crow flies, but as the lad would have almost definitely travelled by car, my guess is that it could be closer to around 600km. So hopefully, if everything checks out with the headers, I will be able to claim my very first pith Very Happy

.

Thanks guys.

P.S. Don't be confused by the times in the email headers. I'm in Australia so if you are in the US it may appear that you are reading an email from the future... Cool

Posted: Mon Jan 18, 2010 11:51 am

If it's any consolation, Dr_Pimper, I'm in the future too.

Good job on getting your first safari as lads need a rocket under them to get them to shift outside their interweb cafes.

Posted: Mon Jan 18, 2010 4:51 pm

Your headers indeed check out to Lagos and Port Harcourt, congrats on your first safari! Oh, and don't sell yourself shourt on the milage because I've had a few lads complain how horrible the roads are to get from Lagos to anywhere west of there, that it can take almost 1/2 a day just to get to Benin City.

Posted: Mon Jan 18, 2010 5:16 pm

Keep at your lad Dr. P. Once you have your lad firmly hooked like this its possible to do what ever you want with him. Take the suggestion to safari him farther. My WIMPed lad is still on the hook with three of my baiting characters.

Trophy Videos · Posted: Mon Jan 18, 2010 6:34 pm

Congratulations on the safari, Dr_Pimper. You do have an eager lad. Most won't be so quick on the draw, but you must have been very convincing. Very Happy

Posted: Mon Jan 18, 2010 7:08 pm

Congrats, Dr_Pimper!

happy crowd