SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 Silly question on surplus scams

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
Aussiegal
Not quite a Newb


Joined: 24 Jul 2010
Posts: 68


PostPosted: Sat Aug 21, 2010 7:27 am Reply with quoteBack to top

I have been posting a few surplus scams - and happy to do it too if it helps anyone here. I get a lot of scams in my catcher account and was wondering if anybody uses the surplus scams.

If people want more, I've a lot more to post - but don't want to be appearing to be spamming the surplus forum.
View user's profileSend private message
music man
Moderator


Joined: 22 Sep 2005
Posts: 13108
Location: East Harlemshire , yo!


PostPosted: Sat Aug 21, 2010 8:01 am Reply with quoteBack to top

Lots of members use the "Surplus" forum for baiting. Its not behind a log-in and therefore its also a good way of getting scammers email addresses into Google so that potential victims can find scammers emails.

Please feel free to post as many scam mails as you want. make sure you strip out your own email addy and read the posting guidelines on the forum (you'll save all the Mods , but especially Branwen, lots of time editing posts and titles)

_________________
Switzerland x2 Netherlands x2 Filipino flag United States x104 United Kingdom x213 Portugal x4 Spain x20 Belgium x4 Canada Hong Kong Italy x2 x1 France x2 Russia x2 Luxembourg Australia x2 Sweden x2 Czech Republic x2 Mortar x13

You will rot in jail.watch your back- any shadow could be mine ! YOU ARE VERY EASY TO TRACK IN YOU NEIGHBOURHOOD ! DRUNKARD AND A SCUMBAG LIKE YOU!
mike lawrence (cheque scammer)

Go fuck your dead parents asshole!!!How can a deaf fool make clean money..The money that you have will never be spent on anything reasonable.
So fuck off..dont reply me again until the cops get your stinking ass...
Lyord Melson- cheque scammer
$4.002million and £214K in fake cheques taken out of circulation. (updated May 2009)
View user's profileSend private messageSkype Name
Aussiegal
Not quite a Newb


Joined: 24 Jul 2010
Posts: 68


PostPosted: Sat Aug 21, 2010 8:22 am Reply with quoteBack to top

Thanks MusicMan. I got a lovely PM from Branwen earlier thanking me for being neat in posting my surplus scams. Did blush, I did.
View user's profileSend private message
Chuda, the killer cat
Craziest cat ever


Joined: 02 Aug 2010
Posts: 1034
Location: Out hunting lads


PostPosted: Sat Aug 21, 2010 8:36 am Reply with quoteBack to top

Aussiegal
Just had a look at your posts - Nice done, and quite a bunch Shocked

Everybody
I have a problem with the headers as my catcher account is a gmail account - Does anyone know how to get the header out of a gmail?

_________________
Killer cat attitude:
I know what you're thinking MUGU — "Am I a lion or only a cat?"
Well, to tell you the truth, in all this excitement, I've kinda lost track myself.
But being a lion, the most powerful predator in the world I would bite your MUGU head clean off, you've got to ask yourself one question:
"Do I feel lucky?" Well, do ya, MUGU?

Closed lad accounts X 4 - My first ones - Same lad, nice guy Smile
Closed lad accounts X 2 - From same hitlad Smile

YOU GET EXTRA HURTY DEATH AFTERR YOU WORDS - Hitbadger - Now one of us, you're so welcome Exclamation
THE PROBLEM IS I AM RUNNING OUT OF PATIENT - Hitlad
GET ME MONEY THEM I WILL TELL YOU WERE HE HIS, JUST MONEY ANY ABOUT BECAUSE I HATE THAT BUSTARD. - Same hitlad Smile
Goat Golden Goat
View user's profileSend private message
Dharma
21st century bastard


Joined: 11 Jun 2008
Posts: 2144
Location: The Empty Quarter


PostPosted: Sat Aug 21, 2010 8:43 am Reply with quoteBack to top

^^^^ Click the down arrow next to Reply, at the top-right of the message pane and choose (Show original)

_________________
Penguin
Trafalgar Square 2013
Safari X5, Lagos - Accra- Cotonou- Ndjamena- Abeche(with SH) Isaac
Safari Accra- Douala(i only have one thing to say to you, go Fuck yourself and have a nice day Ok)
Safari London to Edinburgh(with DD)Sterck
Safari The Road to West Darfur (with Dr Mike)
Safari X2 Accra- Douala- Mundemba (Why do you put me in pain)
Safari Ireland to Sweden- Zion
Safari Nigeria- Chad (with Dr Mike and Agda)
Safari X2 Liberia- Ivory Coast, (with IG)
Safari X3 Nigeria to Chad- Steve & Tony(T**T team)
Safari X3 Belgium-Sweden-Denmark- Congo(with Dr Mike and Dane)
(Safari Safari Safari) X2 Operation Gold 2011
Safari X23 Random safaris (You are a bastard beast)Akmal
Golden Pith Rame Head 2013

Upgrade!
Scambaiting Tools!
View user's profileSend private message
Chuda, the killer cat
Craziest cat ever


Joined: 02 Aug 2010
Posts: 1034
Location: Out hunting lads


PostPosted: Sat Aug 21, 2010 9:00 am Reply with quoteBack to top

Thanks Subway
Now that you tell me, it becomes so obvious that I'm all embarrassed Embarassed Please don't tell anyone Confused

_________________
Killer cat attitude:
I know what you're thinking MUGU — "Am I a lion or only a cat?"
Well, to tell you the truth, in all this excitement, I've kinda lost track myself.
But being a lion, the most powerful predator in the world I would bite your MUGU head clean off, you've got to ask yourself one question:
"Do I feel lucky?" Well, do ya, MUGU?

Closed lad accounts X 4 - My first ones - Same lad, nice guy Smile
Closed lad accounts X 2 - From same hitlad Smile

YOU GET EXTRA HURTY DEATH AFTERR YOU WORDS - Hitbadger - Now one of us, you're so welcome Exclamation
THE PROBLEM IS I AM RUNNING OUT OF PATIENT - Hitlad
GET ME MONEY THEM I WILL TELL YOU WERE HE HIS, JUST MONEY ANY ABOUT BECAUSE I HATE THAT BUSTARD. - Same hitlad Smile
Goat Golden Goat
View user's profileSend private message
Bart Fargo
Corporate Baiter


Joined: 22 May 2010
Posts: 1605
Location: Free munchies for the cantaloupe masters


PostPosted: Sat Aug 21, 2010 11:07 am Reply with quoteBack to top

I post a lot of letters in surplus and get most of my lads from there. I use my "catcher" account strictly for sending and recieving lads I'm working but thats it. I get enough junk mail, including scam mails from my RL accts. (Which I NEVER use for baiting)

_________________
What the hell happened to all my little icons I earned and my quotes???
Mc Fry <===the hardest icon to earn
View user's profileSend private message
DungDigger
frivolous bustard


Joined: 13 Jul 2010
Posts: 376
Location: Undercover, on top of things and beside myself.


PostPosted: Sat Aug 21, 2010 11:56 am Reply with quoteBack to top

Aussigal I've just had a look at your surplus scams and I agree with Branwen - they are so well laid out and easy to read.

You've also taught me a few things - for instance I've been deleting the bunch of random coding that appears sometimes, but it looks like it's useful to include anyway. I shall include it from now on.

Plus you've managed to find IP addresses for Gmail and can tell if it's a satellite provider - how do you do that? Shocked I'm still a novice at reading headers, and although I know to go for the last "received from" I'm lost if it doesn't mention HTTP.

I'm trying to remember to also post my scam letters into ww.scamwarners.com as well, so that Google has another go at hooking on to the details.

_________________
Goat Tango Championships 2010 - Application Form
Smite! Smite! Smite! WOO HOO! typing
Closed lad accounts MY FIRST! YOWZAH!! SIZZLE!
@hris Madi Good measure press down shaken together running over shall men lay unto your bosom Shocked
Mrs L*[email protected]: Please don't make us look stupid in the face of our colleauges okay
Mr L*[email protected]: I will like you to know that we love you okay
View user's profileSend private message
Aussiegal
Not quite a Newb


Joined: 24 Jul 2010
Posts: 68


PostPosted: Sat Aug 21, 2010 1:10 pm Reply with quoteBack to top

Hi Dungdigger,

I copy the whole header into http://headertool.apelord.com/ and it tells me what the header means. Too easy.

I don't know what is important in the header details, and what is not, so I just leave it all in. Branwen would be able to tell you what should and shouldn't be there.

I'm really glad to note that people really use the surplus. It's a little something I can contribute in return for all the help I'm getting from everyone here.
View user's profileSend private message
Chuda, the killer cat
Craziest cat ever


Joined: 02 Aug 2010
Posts: 1034
Location: Out hunting lads


PostPosted: Sat Aug 21, 2010 1:19 pm Reply with quoteBack to top

^ I believe the tool simply searches out the IP's and the buttom one in the result is usually the origin.

I don't know if it can be cheated via a proxy server, but I guess it's possible Sad

_________________
Killer cat attitude:
I know what you're thinking MUGU — "Am I a lion or only a cat?"
Well, to tell you the truth, in all this excitement, I've kinda lost track myself.
But being a lion, the most powerful predator in the world I would bite your MUGU head clean off, you've got to ask yourself one question:
"Do I feel lucky?" Well, do ya, MUGU?

Closed lad accounts X 4 - My first ones - Same lad, nice guy Smile
Closed lad accounts X 2 - From same hitlad Smile

YOU GET EXTRA HURTY DEATH AFTERR YOU WORDS - Hitbadger - Now one of us, you're so welcome Exclamation
THE PROBLEM IS I AM RUNNING OUT OF PATIENT - Hitlad
GET ME MONEY THEM I WILL TELL YOU WERE HE HIS, JUST MONEY ANY ABOUT BECAUSE I HATE THAT BUSTARD. - Same hitlad Smile
Goat Golden Goat
View user's profileSend private message
DungDigger
frivolous bustard


Joined: 13 Jul 2010
Posts: 376
Location: Undercover, on top of things and beside myself.


PostPosted: Sat Aug 21, 2010 4:51 pm Reply with quoteBack to top

Thanks Aussiegal. I've been using the WhoIs site, but that leaves me in the dark if I don't see an HTTP and I don;t know which bit of their site to use if I'm stuck! Embarassed

I'll bookmark the apelord site and use that in future. Thanks! Very Happy

_________________
Goat Tango Championships 2010 - Application Form
Smite! Smite! Smite! WOO HOO! typing
Closed lad accounts MY FIRST! YOWZAH!! SIZZLE!
@hris Madi Good measure press down shaken together running over shall men lay unto your bosom Shocked
Mrs L*[email protected]: Please don't make us look stupid in the face of our colleauges okay
Mr L*[email protected]: I will like you to know that we love you okay
View user's profileSend private message
Branwen
Baiting Guru


Joined: 18 Oct 2008
Posts: 4771
Location: Down on the (Playmobil) farm


PostPosted: Sat Aug 21, 2010 7:01 pm Reply with quoteBack to top

IF you know which IP address is the relevant one, then this is a good place to look it up:

http://whatismyipaddress.com/ip-lookup

because it will also show you when it is a proxy/network sharing device or a satellite provider.

The 'relevant' IP address is usually the one just above the 'date' part of the header:

Quote:
Received: from [196.207.248.47] by web46108.mail.sp1.yahoo.com via HTTP; Mon, 10 Nov 2008 07:48:34 PST
X-Mailer: YahooMailWebService/0.7.260.1
Date: Mon, 10 Nov 2008 07:48:34 -0800 (PST)
From:<[email protected]>
Reply-To: [email protected]
Subject: Thank You Sincerely

Try that first. If it is not as 'expected' - a country you wouldn't immediately expect a scam mail to come from (like this one below: 208.36.123.145 is a US IP address) - then look for an X-originating IP address and try that:

Quote:
-OB-Received: from unknown (208.36.123.145)
by wfilter3.us4.outblaze.com; 16 Apr 2009 14:41:36 -0000
Received: by ws1-10.us4.outblaze.com (Postfix, from userid 1001)
id B4BD61BF297; Thu, 16 Apr 2009 14:41:25 +0000 (GMT)
Content-Transfer-Encoding: 7bit
Content-Type: multipart/alternative; boundary="_----------=_1239892881327100"
MIME-Version: 1.0
From: <[email protected]>
To: <[email protected]>
Date: Thu, 16 Apr 2009 09:41:21 -0500
Subject: NEW ACCOUNT
X-Originating-Ip: 80.248.71.115

If that is 'unexpected' as well, then, for posting in Surplus, just give up and leave the 'sender's location' unentered. Some are just too confusing, to put it honestly.

As for the parts of the headers you can 'safely' omit:

(a) Look for 'DKIM-Signature'. Delete all that follows this down to 'DomainKey-Signature'. This is not needed. You can show it has been deleted by adding <cut> or <snipped> or <deleted> if you wish.

(b) Now delete from just after 'DomainKey-Signature' to just before the next 'Received'. That's not needed either. Again, you can note that you have deleted it, if you wish.

NOTE: Sometimes, inbetween 'DomainKey-Signature' and 'Received', there is a Message-ID line, looking something like this:

Message-ID: <[email protected]>

If there is, I usually leave that in, and then delete again from 'X-YMail-OSG' to the 'Received'. It ends up looking a bit like this:

Quote:
DKIM-Signature: <snipped>
DomainKey-Signature: <snipped>
Message-ID: <[email protected]>
X-YMail-OSG: <snipped>
Received: from [41.222.192.69] by web59501.mail.ac4.yahoo.com via HTTP;
Thu, 29 Oct 2009 05:57:23 PDT

(Except I always use 'cut' not 'snipped' because it's less typing and I'm lazy.)

If that's too confusing though, just look for the long lines which wrap around in your posting box, and add 'returns' in at the end of them. Click on 'Preview' to check it has all turned out OK.

_________________
Purple Flower Mc Fry Sand Timer x14

It is your first time to use western union so therefore none can blame you. It is always like this at the first experience. - Yes lad, and at the second, and the third... you'll see.

I don't want to guess the number - But, lad, isn't that the best fun to be had with MoneyGram reference numbers?
View user's profileSend private message
DungDigger
frivolous bustard


Joined: 13 Jul 2010
Posts: 376
Location: Undercover, on top of things and beside myself.


PostPosted: Sat Aug 21, 2010 7:27 pm Reply with quoteBack to top

Thanks Branwen Very Happy

I've noticed with apelord that it can't always distinguish between Pacific Rim countries, so it may be China or Taiwan or the Philippines or Australia. Using it today I've only found one that was ambiguous and so I included China or Taiwan in the title.

_________________
Goat Tango Championships 2010 - Application Form
Smite! Smite! Smite! WOO HOO! typing
Closed lad accounts MY FIRST! YOWZAH!! SIZZLE!
@hris Madi Good measure press down shaken together running over shall men lay unto your bosom Shocked
Mrs L*[email protected]: Please don't make us look stupid in the face of our colleauges okay
Mr L*[email protected]: I will like you to know that we love you okay
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



** Find out information about your IP address **


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT