im the new coca-cola lottery winner and i need some help

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Wed Feb 29, 2012 9:10 am

hello everyone, i seen this site when reading a story on yahoo and they had a link to a really good safari so i had to join

well i started playing around baiting a few lads and i got one that seems to be mailing from the USA. well i think they might be using a proxy server or something because the first email header came back saying it was sent from Torrance California, and now they are coming from San Jose California.

almost everything i have seen usually comes from Africa, Vietnam and a few other places. so do you see this very often?

Posted: Wed Feb 29, 2012 9:50 am

Welcome Hippie

First things first make sure you are not baiting with any real info, if you are drop them now! This is fun but you want to be safe, you are dealing with criminals after all.

Read the skickies about the place, theres a lot but its all useful stuff.

Set up a new identity and begin again if necessary.

From what Ive seen in my limited time some of the lads do use proxies some of the time, so far only one of the lads ive baited has always used his for every email.

Most come from central africa. But some of the more experience guys probably know better than me.

Posted: Wed Feb 29, 2012 10:08 am

thanks
im using a gmail account under the name of Mr. Sk!d Marks0n so no worries there. im also using a k7 number for the voice mail and a completely fake address. i also sent him a picture of a tattoo on someones ass with some of the data deleted from it and renamed it passport.jpg

im being safe with it and having fun with this new hobby

Posted: Wed Feb 29, 2012 10:23 am

Great

Now if you havent already get yourself a mentor Smile

Posted: Wed Feb 29, 2012 12:35 pm

Welcome to Eater! A couple of tips:
*Don't leet. Use the mask function, or substitute Greek or Cyrillic letters for identical-looking Latin ones.
*When posting a document sent by a scammer, open it in the Gimp and write "Fake Used by Scammer" all over it, using about 20% opacity so that we can still read what's under it. Also reduce the width to 600 pixels or less.

Could you post the headers? Maybe the IP address is that of a proxy server; maybe it's the mail server of some well-known mail domain.

Posted: Wed Feb 29, 2012 1:10 pm

sorry about that, i took it off here until i get it worked out

here the header from the last message i got from them

Delivered-To: [email protected]
Received: by 10.52.37.40 with SMTP id v8csp61023vdj;
Wed, 29 Feb 2012 03:15:23 -0800 (PST)
Received: by 10.180.90.225 with SMTP id bz1mr13128851wib.5.1330514123507;
Wed, 29 Feb 2012 03:15:23 -0800 (PST)
Return-Path: <[email protected]>
Received: from blu0-omc4-s20.blu0.hotmail.com (blu0-omc4-s20.blu0.hotmail.com. [65.55.111.159])
by mx.google.com with ESMTP id c45si8605460eeb.207.2012.02.29.03.15.22;
Wed, 29 Feb 2012 03:15:23 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.111.159 as permitted sender) client-ip=65.55.111.159;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.111.159 as permitted sender) [email protected]
Received: from BLU166-W22 ([65.55.111.137]) by blu0-omc4-s20.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 29 Feb 2012 03:14:37 -0800
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_be6786fb-1f44-42e8-b8d7-8c7b1fc1bb04_"
X-Originating-IP: [216.172.135.109]
From: World Express Couriers Service <[email protected]>
To: <[email protected]>
Subject: RE: Attn: xxxxxxx, PLEASE MAKE PAYMENT FOR THE DELIVERY OF
YOUR PARCEL
Date: Wed, 29 Feb 2012 03:14:37 -0800
Importance: Normal
In-Reply-To:
<CAK=St1VuOWGVzQHjhzS2ca+EsvhpY7kJDH6ohTc8d7+KnEOECg@mail.gmail.com>
References:
<CAK=St1Xh4f6DSy45fk7FHEgOu-okBFtugpZUqOVC7Dp6OhdkUA@mail.gmail.com>,<[email protected]>,<CAK=St1VuOWGVzQHjhzS2ca+EsvhpY7kJDH6ohTc8d7+KnEOECg@mail.gmail.com>
MIME-Version: 1.0
X-OriginalArrivalTime: 29 Feb 2012 11:14:37.0350 (UTC) FILETIME=[52BC3460:01CCF6D3]

--_be6786fb-1f44-42e8-b8d7-8c7b1fc1bb04_

Posted: Wed Feb 29, 2012 1:38 pm

Hello, "hippie". You might want to go back into your post with the headers and remove your email address by <snipped> or xxxx it out as Main is not behind a log in and your email address would be out in the world.

Posted: Wed Feb 29, 2012 1:48 pm

thanks for that, i didnt even think about it.

Posted: Wed Feb 29, 2012 2:33 pm

Also please mask your character's name in the email or substitute some Cyrillic letters.

The IP address belongs to a hosting company called egihosting or AFNCA. It has been seen contacting a honeypot, though no breach was attempted. Probably some malware has been installed on it.

Posted: Thu Mar 01, 2012 2:40 am

i sent this guy to the western union MTCN vault to access the number
i got his real IP address this time and he was using a proxy server because this new IP is showing Abuja, Federal Capital Territory, Nigeria.

he seemed to be very frustrated with western union MTCN Vault
and i think i would be if i tried unsuccessfully for 6 hours to get this fake number. Very Happy

maybe ill suggest a bank transfer or send him through the same crap with an added dolla chop Sad

Master of Master Baiters Joined: 26 Sep 2008 Posts: 689

Welcome Hippie

Go for the piggy in your siggy! Smile

Posted: Thu Mar 01, 2012 3:31 pm

well he is getting too frustrated with the MTCN vault. this morning he got his dolla chopped by someone (me) and now he wants his money transferred to a U.S account. this is most likely going to be a highjacked account right?

Quote:

This medium looks complicated, I want you to retrieve your money from the western union. I shall be sending you an offshore account in the U.S. this will be easier. Please reply if you havve gotten this email.

Posted: Thu Mar 01, 2012 3:49 pm

The bank account will either belong to an accomplace of the scammer, or it will belong to another victim (a payment mule).

Either way, it is ripe for reporting to Alan for closure/monitoring. See here http://forum.419eater.com/forum/viewtopic.php?t=119780 for details and once you've reported it you can claim a Closed lad accounts

for your siggy.

Posted: Thu Mar 01, 2012 6:43 pm

Also, bank accounts in First World countries should be reported to the mods, as they're more likely to belong to mules than to accomplices, and mules should be warned. At least in the USA; I'm not so sure about Spain, where several Chem World accounts were located.

Posted: Fri Mar 02, 2012 7:50 am

ok i got the bank info but i dont know if its real
and i dont really want to post it for the world to see
just in case it is a vic's account.
it would probably be easier if i got myself a mentor for these types of things.
would one of the old hands here like to help or maybe a mod?

Master of Master Baiters Joined: 26 Sep 2008 Posts: 689

Mentor - yes!
Contact a moderator for help on the bank info.

Posted: Fri Mar 02, 2012 10:20 am

well i sent a message to rover but it might take a little while for him to get it
i sent it to him because i didnt know who else to send it to
so why not the first name on the list of mod's
so i have been looking at SWIFT code from the bank that this account belongs to and have found that it looks very real.
ill wait for rover to contact me before i send it to Alan though.

Posted: Fri Mar 02, 2012 10:44 am

If it looks real, and it's an account that the lad wants you to send money to, go ahead and report it.

Also you can post it in Hints and Tips, and only members will see it.

Posted: Fri Mar 02, 2012 1:16 pm

Hi Dirty Ass Hippe, (I really enjoyed typing that)
Congrats on your astounding win of the Coca-Cola lottery. I hope you spend your non-existent winnings wisely and invest in 419eater. I guess you have been given the obligatory tour by the prefects here at Hogwarts ... *erm* sorry for some reason I suddenly channeled Harry Potter .. I meant, here at 419eater.
Bait safe and give them hell.
P.S Don't forget to bump up my posts as often as possible, cheeeeeers.

Posted: Fri Mar 02, 2012 4:31 pm

the information has been passed on
can i add the piggy to my siggy now? Very Happy

Posted: Fri Mar 02, 2012 4:51 pm

You may. Enjoy your bacon.

Not quite a Newb Joined: 30 Oct 2011 Posts: 66

dirty.ass.hippie wrote:

the information has been passed on
can i add the piggy to my siggy now? Very Happy

Add your piggy and go after him again for another account.
Good luck

Posted: Fri Mar 02, 2012 8:27 pm

hey, thanks for the help everyone!
this is a lot of fun for me so you might see me around for a while. Very Happy

Posted: Mon Mar 05, 2012 5:12 pm

Welcome aboard, looks like you're off to a good start. Wait a day or two & tell the lad your bank returned the transfer because the account was no good. He'll probably give you another, that you can report, and double your bacon count. Rinse & repeat.

Posted: Mon Mar 05, 2012 7:41 pm

i like that idea Laughing

right now im trying to get a good trophy to use for my avatar
one that says "i love dirty ass hippie" but i don't think hes going for it since i made him wait all weekend for his money.
i told him i was in a car accident and broke my leg an arm and 3 ribs but he didn't care about that
he said "make the transfer today no matter what" Shocked

ill get right on that but not before you send me a trophy
my friend (me) will send him another western union receipt with 5 or 6 MTCN's to play with when i get the pic Laughing

i don't know why but that friend of mine cant get anything right
i bet he messes this money transfer up one way or another
i think he might be a drug addicted prostitute that likes to hit on lottery officials...what a shame! Twisted Evil

im the new coca-cola lottery winner and i need some help	View next topic View previous topic