| Author |
Message |
next victim
Baiting Guru

Joined: 27 Mar 2011
Posts: 21155

|
Posted:
Sun Oct 28, 2012 3:44 pm |
  |
| Quote: |
Hello
It is Lyda.
I'm 23 if u're interested. I like hanging out with my friends. We often go to such places as clubs, bars and stuff like that. It's cool to hang out with friends I think) I was the queen of the prom and also I won a couple similar competitions in college, so a lot of people chose me as the most beautiful girl)
Here I wanna meet a real man cuz I got tired of all those pesky boyz.
By the way, what would you sayif I'll send u a few my photographs? Really, I'll attach an archive with a few my favorite pictures to the letter but I want you to say what you think about them;) You'll need the password for the archive. It is crazygirl93
Hope to hear from u soon) |
It has a .rar with it. |
_________________
291+ x 78+ http://yahoonews01.zxq.net/
500 in 6 - 36 pink 11 black
Chairman's Xmas Parti 2012
Hana, Flip It, G spot, Rosy, Cynthia
- web store
Just read the posting on Eater. You are one sick motherf****r! -Alan
"The skull with bunny ears was a good enough warning" - Nailgunner
mentors- http://forum.419eater.com/forum/cherrie_mentor_program.php
This Derick moral monster! From http:/ /scamnewss.wordpress.com/2011/10/14/derrick-ratt-scammer-beware/ Vlad blog
http://tinyurl.com/btf7872 - Toolbox |
|
|
|
 |
Duffy Duck
419Eater is my life

Joined: 09 Sep 2011
Posts: 413
Location: Rhymes with Duff!

|
Posted:
Sun Oct 28, 2012 4:26 pm |
  |
And what's in the rar file? A virus or trojan?  |
_________________
x13
"You are the biggest fool i have ever come across in my whole wide world, i advise you to stay away from me all the days of your life. you are nothing but a poke meat." Frodo Baggins
"you are an idiot and a moron, who are you. why are you lying. saying you came to my office and could not locate me. you must be a bastard and your mother must have been a prostitute" Advocate Mark Johnson
"Let us not misunderstand, twist or put up a logic while I do not even know the exact thing you are talking" George Lawsson |
|
|
|
 |
Dharma
Baiting Guru

Joined: 11 Jun 2008
Posts: 2252
Location: The Empty Quarter

|
Posted:
Mon Oct 29, 2012 3:19 pm |
  |
I've noticed many viruses and trojans in my catcher recently, along with their regular formats or simply "see attach" in the title. Something is going on in ladland!!
"my guy, dis virus is better dan many formats"  |
_________________
Trafalgar Square 2013
X5, Lagos - Accra- Cotonou- Ndjamena- Abeche(with SH) Isaac
Accra- Douala(i only have one thing to say to you, go Fuck yourself and have a nice day Ok)
London to Edinburgh(with DD)Sterck
The Road to West Darfur (with Dr Mike)
X2 Accra- Douala- Mundemba (Why do you put me in pain)
Ireland to Sweden- Zion
Nigeria- Chad (with Dr Mike and Agda)
X2 Liberia- Ivory Coast, (with IG)
X3 Nigeria to Chad- Steve & Tony(T**T team)
X3 Belgium-Sweden-Denmark- Congo(with Dr Mike and Dane)
( ) X2 Operation Gold 2011
X23 Random safaris (You are a bastard beast)Akmal
Rame Head 2013
Upgrade!
Scambaiting Tools! |
|
|
|
 |
ScammedOut
Elite Baiter

Joined: 19 Jan 2009
Posts: 1440

|
Posted:
Mon Oct 29, 2012 5:02 pm |
  |
It isn't lads sending these, IMO. Some of the ones I get are from Russian dating sites, and the .rar may have a keylogger or some other malware.
Does the header show the originating country? |
_________________ "FUCK U....MBESILE. FUCK OFF AND STOP SENDING ME EMAIL,IDIOT.
YOUR MOTHER IS SOOOOOOOOOOOOOO FUCKED."- Rev.1an H0rgan
You are very stupid PIG.-Mr. Samuel Koff0ur
YOU GO SLEEP YOU NO GO WAKE UP AGAIN
SEE YOU ASS IN HELL fucking tax payer ..
REJOICE IN HELL - Jack L1n (Mr.)
Enough fooling around with yourself. Your parents and family are Fucking scammer!
You are a white baboon,that doesn't even take
shower.
-Miss Gbagbo, Christian.
I NEVER SEE ANIMAL LIKE YOU. Your papa be castrated so he no make more like you!
- Robert Miller, philanthropist
"I am okay but had a little fracture on our last operation." - Capt. Highliner |
|
|
|
 |
next victim
Baiting Guru

Joined: 27 Mar 2011
Posts: 21155

|
Posted:
Mon Oct 29, 2012 5:41 pm |
  |
Here is one of the headers
Received: by 10.224.194.135 with SMTP id dy7csp29012qab;
Sun, 28 Oct 2012 08:06:32 -0700 (PDT)
Received: by 10.50.37.168 with SMTP id z8mr7272506igj.1.1351436792157;
Sun, 28 Oct 2012 08:06:32 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm29-vm3.bullet.mail.ne1.yahoo.com (nm29-vm3.bullet.mail.ne1.yahoo.com. [98.138.91.159])
by mx.google.com with ESMTPS id q4si3918006igl.51.2012.10.28.08.06.31
(version=TLSv1/SSLv3 cipher=OTHER);
Sun, 28 Oct 2012 08:06:32 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 98.138.91.159 as permitted sender) client-ip=98.138.91.159;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 98.138.91.159 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from [98.138.90.51] by nm29.bullet.mail.ne1.yahoo.com with NNFMP; 28 Oct 2012 15:06:31 -0000
Received: from [98.138.89.167] by tm4.bullet.mail.ne1.yahoo.com with NNFMP; 28 Oct 2012 15:06:30 -0000
Received: from [127.0.0.1] by omp1023.mail.ne1.yahoo.com with NNFMP; 28 Oct 2012 15:06:30 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 14788 invoked by uid 60001); 28 Oct 2012 15:06:30 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351436790; bh=lXgDLLXcATnIERtaoV1jALrJJhcYNvuEBoTSysGodCU=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b= =
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=
X-Mailer: YahooMailWebService/0.8.123.450
Message-ID: <[email protected]>
Date: Sun, 28 Oct 2012 08:06:30 -0700 (PDT)
From: Lyda Terhune <[email protected]>
Reply-To: Lyda Terhune <[email protected]>
Subject: We have to meet. Details inside
To: "[email protected]" <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="607277540-1526788958-1351436790=:80269"
--607277540-1526788958-1351436790=:80269
Content-Type: text/plain; charset=us-ascii |
_________________
291+ x 78+ http://yahoonews01.zxq.net/
500 in 6 - 36 pink 11 black
Chairman's Xmas Parti 2012
Hana, Flip It, G spot, Rosy, Cynthia
- web store
Just read the posting on Eater. You are one sick motherf****r! -Alan
"The skull with bunny ears was a good enough warning" - Nailgunner
mentors- http://forum.419eater.com/forum/cherrie_mentor_program.php
This Derick moral monster! From http:/ /scamnewss.wordpress.com/2011/10/14/derrick-ratt-scammer-beware/ Vlad blog
http://tinyurl.com/btf7872 - Toolbox |
|
|
|
 |
p38cyq
Not quite a Newb

Joined: 25 Feb 2011
Posts: 58

|
Posted:
Thu Nov 01, 2012 12:17 pm |
  |
Email header analysis report:
All valid IP Addresses found in the header.
[quote="ipTRACKERonline.com"]Header Analysis Quick ReportOriginating IP: 98.138.89.167Originating ISP: Yahoo! City: SunnyvaleCountry of Origin: United StatesIp Address |
|
|
|
|
 |
|
|
|
View next topic
View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|