Author |
Message |
Aussiegal
Not quite a Newb
Joined: 24 Jul 2010
Posts: 68
|
Posted:
Sat Aug 21, 2010 7:27 am |
|
I have been posting a few surplus scams - and happy to do it too if it helps anyone here. I get a lot of scams in my catcher account and was wondering if anybody uses the surplus scams.
If people want more, I've a lot more to post - but don't want to be appearing to be spamming the surplus forum. |
|
|
|
|
music man
Baiting Guru
Joined: 22 Sep 2005
Posts: 14807
Location: East Harlemshire , yo!
|
Posted:
Sat Aug 21, 2010 8:01 am |
|
Lots of members use the "Surplus" forum for baiting. Its not behind a log-in and therefore its also a good way of getting scammers email addresses into Google so that potential victims can find scammers emails.
Please feel free to post as many scam mails as you want. make sure you strip out your own email addy and read the posting guidelines on the forum (you'll save all the Mods , but especially Branwen, lots of time editing posts and titles) |
_________________ x2 x2 x104 x213 x4 x20 x4 x2 x1 x2 x2 x2 x2 x2 x13
You will rot in jail.watch your back- any shadow could be mine ! YOU ARE VERY EASY TO TRACK IN YOU NEIGHBOURHOOD ! DRUNKARD AND A SCUMBAG LIKE YOU!
mike lawrence (cheque scammer)
Go fuck your dead parents asshole!!!How can a deaf fool make clean money..The money that you have will never be spent on anything reasonable.
So fuck off..dont reply me again until the cops get your stinking ass...
Lyord Melson- cheque scammer
$4.002million and £214K in fake cheques taken out of circulation. (updated May 2009)
|
|
|
|
Aussiegal
Not quite a Newb
Joined: 24 Jul 2010
Posts: 68
|
Posted:
Sat Aug 21, 2010 8:22 am |
|
Thanks MusicMan. I got a lovely PM from Branwen earlier thanking me for being neat in posting my surplus scams. Did blush, I did. |
|
|
|
|
Chuda, the killer cat
Craziest cat ever
Joined: 02 Aug 2010
Posts: 1034
Location: Out hunting lads
|
Posted:
Sat Aug 21, 2010 8:36 am |
|
Aussiegal
Just had a look at your posts - Nice done, and quite a bunch
Everybody
I have a problem with the headers as my catcher account is a gmail account - Does anyone know how to get the header out of a gmail? |
_________________ Killer cat attitude:
I know what you're thinking MUGU — "Am I a lion or only a cat?"
Well, to tell you the truth, in all this excitement, I've kinda lost track myself.
But being a lion, the most powerful predator in the world I would bite your MUGU head clean off, you've got to ask yourself one question:
"Do I feel lucky?" Well, do ya, MUGU?
X 4 - My first ones - Same lad, nice guy
X 2 - From same hitlad
YOU GET EXTRA HURTY DEATH AFTERR YOU WORDS - Hitbadger - Now one of us, you're so welcome
THE PROBLEM IS I AM RUNNING OUT OF PATIENT - Hitlad
GET ME MONEY THEM I WILL TELL YOU WERE HE HIS, JUST MONEY ANY ABOUT BECAUSE I HATE THAT BUSTARD. - Same hitlad
|
|
|
|
Dharma
Baiting Guru
Joined: 11 Jun 2008
Posts: 2254
Location: The Empty Quarter
|
Posted:
Sat Aug 21, 2010 8:43 am |
|
^^^^ Click the down arrow next to Reply, at the top-right of the message pane and choose (Show original) |
_________________
Trafalgar Square 2013
X5, Lagos - Accra- Cotonou- Ndjamena- Abeche(with SH) Isaac
Accra- Douala(i only have one thing to say to you, go Fuck yourself and have a nice day Ok)
London to Edinburgh(with DD)Sterck
The Road to West Darfur (with Dr Mike)
X2 Accra- Douala- Mundemba (Why do you put me in pain)
Ireland to Sweden- Zion
Nigeria- Chad (with Dr Mike and Agda)
X2 Liberia- Ivory Coast, (with IG)
X3 Nigeria to Chad- Steve & Tony(T**T team)
X3 Belgium-Sweden-Denmark- Congo(with Dr Mike and Dane)
( ) X2 Operation Gold 2011
X23 Random safaris (You are a bastard beast)Akmal
Rame Head 2013
Upgrade!
Scambaiting Tools! |
|
|
|
Chuda, the killer cat
Craziest cat ever
Joined: 02 Aug 2010
Posts: 1034
Location: Out hunting lads
|
Posted:
Sat Aug 21, 2010 9:00 am |
|
Thanks Subway
Now that you tell me, it becomes so obvious that I'm all embarrassed Please don't tell anyone |
_________________ Killer cat attitude:
I know what you're thinking MUGU — "Am I a lion or only a cat?"
Well, to tell you the truth, in all this excitement, I've kinda lost track myself.
But being a lion, the most powerful predator in the world I would bite your MUGU head clean off, you've got to ask yourself one question:
"Do I feel lucky?" Well, do ya, MUGU?
X 4 - My first ones - Same lad, nice guy
X 2 - From same hitlad
YOU GET EXTRA HURTY DEATH AFTERR YOU WORDS - Hitbadger - Now one of us, you're so welcome
THE PROBLEM IS I AM RUNNING OUT OF PATIENT - Hitlad
GET ME MONEY THEM I WILL TELL YOU WERE HE HIS, JUST MONEY ANY ABOUT BECAUSE I HATE THAT BUSTARD. - Same hitlad
|
|
|
|
Bart Fargo
Corporate Baiter
Joined: 22 May 2010
Posts: 1605
Location: Free munchies for the cantaloupe masters
|
Posted:
Sat Aug 21, 2010 11:07 am |
|
I post a lot of letters in surplus and get most of my lads from there. I use my "catcher" account strictly for sending and recieving lads I'm working but thats it. I get enough junk mail, including scam mails from my RL accts. (Which I NEVER use for baiting) |
_________________ What the hell happened to all my little icons I earned and my quotes???
<===the hardest icon to earn |
|
|
|
DungDigger
frivolous bustard
Joined: 13 Jul 2010
Posts: 376
Location: Undercover, on top of things and beside myself.
|
Posted:
Sat Aug 21, 2010 11:56 am |
|
Aussigal I've just had a look at your surplus scams and I agree with Branwen - they are so well laid out and easy to read.
You've also taught me a few things - for instance I've been deleting the bunch of random coding that appears sometimes, but it looks like it's useful to include anyway. I shall include it from now on.
Plus you've managed to find IP addresses for Gmail and can tell if it's a satellite provider - how do you do that? I'm still a novice at reading headers, and although I know to go for the last "received from" I'm lost if it doesn't mention HTTP.
I'm trying to remember to also post my scam letters into ww.scamwarners.com as well, so that Google has another go at hooking on to the details. |
_________________ Goat Tango Championships 2010 - Application Form
Smite! Smite! Smite! WOO HOO!
MY FIRST! YOWZAH!! SIZZLE!
@hris Madi Good measure press down shaken together running over shall men lay unto your bosom
Mrs L*g@d: Please don't make us look stupid in the face of our colleauges okay
Mr L*g@d: I will like you to know that we love you okay |
|
|
|
Aussiegal
Not quite a Newb
Joined: 24 Jul 2010
Posts: 68
|
Posted:
Sat Aug 21, 2010 1:10 pm |
|
Hi Dungdigger,
I copy the whole header into http://headertool.apelord.com/ and it tells me what the header means. Too easy.
I don't know what is important in the header details, and what is not, so I just leave it all in. Branwen would be able to tell you what should and shouldn't be there.
I'm really glad to note that people really use the surplus. It's a little something I can contribute in return for all the help I'm getting from everyone here. |
|
|
|
|
Chuda, the killer cat
Craziest cat ever
Joined: 02 Aug 2010
Posts: 1034
Location: Out hunting lads
|
Posted:
Sat Aug 21, 2010 1:19 pm |
|
^ I believe the tool simply searches out the IP's and the buttom one in the result is usually the origin.
I don't know if it can be cheated via a proxy server, but I guess it's possible |
_________________ Killer cat attitude:
I know what you're thinking MUGU — "Am I a lion or only a cat?"
Well, to tell you the truth, in all this excitement, I've kinda lost track myself.
But being a lion, the most powerful predator in the world I would bite your MUGU head clean off, you've got to ask yourself one question:
"Do I feel lucky?" Well, do ya, MUGU?
X 4 - My first ones - Same lad, nice guy
X 2 - From same hitlad
YOU GET EXTRA HURTY DEATH AFTERR YOU WORDS - Hitbadger - Now one of us, you're so welcome
THE PROBLEM IS I AM RUNNING OUT OF PATIENT - Hitlad
GET ME MONEY THEM I WILL TELL YOU WERE HE HIS, JUST MONEY ANY ABOUT BECAUSE I HATE THAT BUSTARD. - Same hitlad
|
|
|
|
DungDigger
frivolous bustard
Joined: 13 Jul 2010
Posts: 376
Location: Undercover, on top of things and beside myself.
|
Posted:
Sat Aug 21, 2010 4:51 pm |
|
Thanks Aussiegal. I've been using the WhoIs site, but that leaves me in the dark if I don't see an HTTP and I don;t know which bit of their site to use if I'm stuck!
I'll bookmark the apelord site and use that in future. Thanks! |
_________________ Goat Tango Championships 2010 - Application Form
Smite! Smite! Smite! WOO HOO!
MY FIRST! YOWZAH!! SIZZLE!
@hris Madi Good measure press down shaken together running over shall men lay unto your bosom
Mrs L*g@d: Please don't make us look stupid in the face of our colleauges okay
Mr L*g@d: I will like you to know that we love you okay |
|
|
|
Branwen
Baiting Guru
Joined: 18 Oct 2008
Posts: 4771
Location: Down on the (Playmobil) farm
|
Posted:
Sat Aug 21, 2010 7:01 pm |
|
IF you know which IP address is the relevant one, then this is a good place to look it up:
http://whatismyipaddress.com/ip-lookup
because it will also show you when it is a proxy/network sharing device or a satellite provider.
The 'relevant' IP address is usually the one just above the 'date' part of the header:
Quote: |
Received: from [196.207.248.47] by web46108.mail.sp1.yahoo.com via HTTP; Mon, 10 Nov 2008 07:48:34 PST
X-Mailer: YahooMailWebService/0.7.260.1
Date: Mon, 10 Nov 2008 07:48:34 -0800 (PST)
From:<[email protected]>
Reply-To: [email protected]
Subject: Thank You Sincerely |
Try that first. If it is not as 'expected' - a country you wouldn't immediately expect a scam mail to come from (like this one below: 208.36.123.145 is a US IP address) - then look for an X-originating IP address and try that:
Quote: |
-OB-Received: from unknown (208.36.123.145)
by wfilter3.us4.outblaze.com; 16 Apr 2009 14:41:36 -0000
Received: by ws1-10.us4.outblaze.com (Postfix, from userid 1001)
id B4BD61BF297; Thu, 16 Apr 2009 14:41:25 +0000 (GMT)
Content-Transfer-Encoding: 7bit
Content-Type: multipart/alternative; boundary="_----------=_1239892881327100"
MIME-Version: 1.0
From: <[email protected]>
To: <[email protected]>
Date: Thu, 16 Apr 2009 09:41:21 -0500
Subject: NEW ACCOUNT
X-Originating-Ip: 80.248.71.115 |
If that is 'unexpected' as well, then, for posting in Surplus, just give up and leave the 'sender's location' unentered. Some are just too confusing, to put it honestly.
As for the parts of the headers you can 'safely' omit:
(a) Look for 'DKIM-Signature'. Delete all that follows this down to 'DomainKey-Signature'. This is not needed. You can show it has been deleted by adding <cut> or <snipped> or <deleted> if you wish.
(b) Now delete from just after 'DomainKey-Signature' to just before the next 'Received'. That's not needed either. Again, you can note that you have deleted it, if you wish.
NOTE: Sometimes, inbetween 'DomainKey-Signature' and 'Received', there is a Message-ID line, looking something like this:
Message-ID: <[email protected]>
If there is, I usually leave that in, and then delete again from 'X-YMail-OSG' to the 'Received'. It ends up looking a bit like this:
Quote: |
DKIM-Signature: <snipped>
DomainKey-Signature: <snipped>
Message-ID: <[email protected]>
X-YMail-OSG: <snipped>
Received: from [41.222.192.69] by web59501.mail.ac4.yahoo.com via HTTP;
Thu, 29 Oct 2009 05:57:23 PDT |
(Except I always use 'cut' not 'snipped' because it's less typing and I'm lazy.)
If that's too confusing though, just look for the long lines which wrap around in your posting box, and add 'returns' in at the end of them. Click on 'Preview' to check it has all turned out OK. |
_________________ x14
It is your first time to use western union so therefore none can blame you. It is always like this at the first experience. - Yes lad, and at the second, and the third... you'll see.
I don't want to guess the number - But, lad, isn't that the best fun to be had with MoneyGram reference numbers? |
|
|
|
DungDigger
frivolous bustard
Joined: 13 Jul 2010
Posts: 376
Location: Undercover, on top of things and beside myself.
|
Posted:
Sat Aug 21, 2010 7:27 pm |
|
Thanks Branwen
I've noticed with apelord that it can't always distinguish between Pacific Rim countries, so it may be China or Taiwan or the Philippines or Australia. Using it today I've only found one that was ambiguous and so I included China or Taiwan in the title. |
_________________ Goat Tango Championships 2010 - Application Form
Smite! Smite! Smite! WOO HOO!
MY FIRST! YOWZAH!! SIZZLE!
@hris Madi Good measure press down shaken together running over shall men lay unto your bosom
Mrs L*g@d: Please don't make us look stupid in the face of our colleauges okay
Mr L*g@d: I will like you to know that we love you okay |
|
|
|
|
|
View next topic
View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|