SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 Baiting a scammer that tried to still my identity

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
thefranchise
Hello I'm New here!


Joined: 09 Mar 2011
Posts: 3


PostPosted: Thu Mar 10, 2011 2:20 am Reply with quoteBack to top

First up, Hello all! I'm a noob to the forums and a first time baiter.

Here is my story:

Over the weekend some hacker/scammer broke into my facebook account, dowloaded my contacts, sent chat messages to anyone online and emails to everyone they could. They posed to be myself, stuck in London and the victim of a robbery. They asked for money sent via Western Union. To my suprise my phone rang off the hook and my family/friends was asking WTF was up?!. Needless to say I was pretty mad that someone broke into my FB account and harrassed my family/friends online posing as myself. Well being the type of person that doesnt tolerate this I created a fake family member and replied back to their fake emails pleading that I would help. Its been going on for a few days now and pretty much to the T as this sight describes; a bunch of scripted replies. I finally got them to break the script. I came across this sight by random and I am most spirited that a group of people are standing up to these losers. Since they are impersonating myself I am doubly mad as to pay these idiots back.

I'm sure others here have gotten this but here is the address for the WUXfer they are asking:
Name: "Myself"
Location: 5 Albemarle Street, London W1S 4HQ, United Kingdom
Amount: $1,500 USD

I havent tracked them down to a location yet though. I have received email from them using IP addresses in Nigeria, New York City,NY, Hyatt Hotel WiFi, and California. They are using a Yahoo.com email setup as myself (which I am trying to hack as well) After a few more attempts I'll spring some more of the resources here on them and get the last laugh hopefully. More to come...
View user's profileSend private message
buried under 419 emails
Baiting Guru


Joined: 10 Oct 2003
Posts: 4086


PostPosted: Thu Mar 10, 2011 2:25 am Reply with quoteBack to top

Welcome to eater and I am sorry to hear about your bad luck. Scammers can make someone’s life a living a living hell with just basic personal information.

Join in on the fun if you like.

_________________
"my dear,
you realy made me a fool which i dont expected from you" mr malambo

"Any money you send to Africa to receive your payment is at your own risk " David Mark


over 1,000 fakes deaded since Oct 2005. This is my current rampage! Mortar x6 Easter Egg 2011 Purple Flower
View user's profileSend private message
leonsumbitches
Elite Baiter


Joined: 15 Oct 2010
Posts: 1046
Location: I'm out there, where every man wants to be


PostPosted: Thu Mar 10, 2011 2:26 am Reply with quoteBack to top

They have your real life details, don't bait them. Don't hack either.

PM a mod and they'll be able to help you get the account secured, warn your contacts, and possibly shut this guy down.

_________________
I DON'T. Buy the tomatoes with. The stems. On them. They don't. Degrade. They go. Down the sink. And into the WATER. Then. They get lodged in the throats of little. OTTERS.

GYV::Tanstaafl::Abiga::Game-theory::Church-Sites Easter Egg 2011
Closed lad accounts x 18 (10 from Tanstaafl baits) United Kingdom x 5 United States x 2 Ivory Coast Netherlands Malaysia Nigeria x 2 Spain
Safari SW Bait - Cl3tus Orof3 Accra->8auchi->Accra->Lagos, co-bait with Nowhere Man, Bravo, The Dane & psychicbait
insults and more
How to kill a Badger
View user's profileSend private messageYahoo MessengerSkype Name
DoraTheExplorer
Anonymous


Joined: 18 Nov 2008
Posts: 9264
Location: Magnolia, Mississippi


PostPosted: Thu Mar 10, 2011 3:31 am Reply with quoteBack to top

thefranchise wrote:
They are using a Yahoo.com email setup as myself (which I am trying to hack as well)


Hi thefranchise and welcome to Eater!

Sorry about your personal experience -- it does happen quite a bit. Along with the other advice given above, please note:

We do not hack lad/scammer boxes here and talk of it will get your thread locked.

Quote:
We do not support the sending of viruses and "trojans" to the scammers, nor attempts to hack, phish or hijack their email accounts and/or computers. Viruses and "trojans" will be unknowingly spread to the computers of innocent people and we are only trying to make it difficult for the scammers. On top of that, the spreading of viruses and hacking attempts is an illegal activity in the UK, where this Board is located, as well as many other jurisdictions. Please do not start topics on such subjects. Such threads can and will be deleted on sight.


http://forum.419eater.com/forum/viewtopic.php?p=1468641#disallow

Why don't you post up some of the scammer's emails with headers (removing your email address) so we can help pinpoint the IPs and locations for you. It is odd that they are moving around so much.

_________________
United StatesCanadaUnited KingdomNigeriaGhanaBeninMalaysiaSouth AfricaSwitzerlandTogoChinaSpainMadagascar FlagBulgeriaUnited Arab EmiratesUkraineUnited NationsItalyLibya FlagCzech Republic
NetherlandsNew ZealandRussiaSaudi ArabiaAustraliaBahamas, TheIvory CoastDenmarkBelgiumHong KongFranceGermanyRomaniaBahamas, TheNew ZealandcameroonBurkina Faso x 2714
Easter Egg 2012 Cellphone Closed lad accounts Mortar pony pony Nurse Nastys Audi TT Nurse Nastys Audi TT Goat Tattoo Mc Fry Elite Ninja Team Member
Safari Vcamera Paga John Safari Vcamera Paga Willie Safari Vcamera Paga Kingsley Safari James

Safari The Dynamic Duo Travels! Vcamera Sand Timer
View user's profileSend private message
thefranchise
Hello I'm New here!


Joined: 09 Mar 2011
Posts: 3


PostPosted: Thu Mar 10, 2011 4:26 am Reply with quoteBack to top

Thanks for the heads up. Here are the headers in order exchanged so far.


X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9NA==
X-Message-Status: n
X-SID-PRA: xxxxx xxxxx <[email protected]>
X-AUTH-Result: NONE
X-Message-Info:
6sSXyD95QpUJ2RZa7zj3NKVCoUZpcAnp12KlrimtxxSnZeS8zPXEbonnMb++c5cA68o1VhSX
6sSXyD95QpUJ2RZa7zj3NKVCoUZpcAnp12KlrimtxxSnZeS8zPXEbonnMb++Vncy
nGEJo9U1nslVoAtMXR7BHwgiTCxXQ0E=
Received: from nm22-vm0.access.bullet.mail.mud.yahoo.com ([66.94.236.137]) by col0-mc1-f34.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 6 Mar 2011 16:40:56 -0800
Received: from [66.94.237.198] by nm22.access.bullet.mail.mud.yahoo.com with NNFMP; 07 Mar 2011 00:40:55 -0000
Received: from [66.94.237.119] by tm9.access.bullet.mail.mud.yahoo.com with NNFMP; 07 Mar 2011 00:40:55 -0000
Received: from [127.0.0.1] by omp1024.access.mail.mud.yahoo.com with NNFMP;
07 Mar 2011 00:40:55 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 32951 invoked by uid 60001); 7 Mar 2011 00:40:55 -0000
h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:S
ubject:To:MIME-Version:Content-Type;
b=U6qKDfWqwAV3frLqv1VmI4R3V8Id10DxGcbiG65PAVkUQBHIDtfCFWyPYEZBvwmQlU/gyl69QT
OKrQvxCFvgjZkSN5z/G8W7Up9b1hMheR/tY+d1cY/8QEWKoKzraFKPtiQpQEkRxgTzb4lr+rWlCK
to4QbIvNv70sWayEOE+Dc=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;

h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:S
ubject:To:MIME-Version:Content-Type;


Message-ID: <[email protected]>
X-YMail-OSG:
Received: from [41.155.86.145] by web180513.mail.gq1.yahoo.com via HTTP; Sun, 06 Mar 2011 16:40:55 PST
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.292656
Date: Sun, 6 Mar 2011 16:40:55 -0800 (PST)
From: xxxxx xxxxx <[email protected]>
Reply-To: [email protected]
Subject: My Ordeal...Xxxxx Xxxxx
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="0-456212760-1299458455=:27101"
Return-Path: [email protected]
X-OriginalArrivalTime: 07 Mar 2011 00:40:56.0393 (UTC) FILETIME=[522E5390:01CBDC60]

-----Original Message-----
From: xxxxx xxxxx [mailto:[email protected]]
Sent: Sunday, March 06, 2011 6:41 PM
To: undisclosed recipients:
Subject: My Ordeal...Xxxxx Xxxxx

Hello!!!

This had to come in a hurry and it has left me in a devastating state.I'm in some terrible situation and I'm really going to need your urgent help. Some days ago,unannounced,I came to visit a resort center in London, England, UK..Unfortunately I got mugged by some hoodlums and lost all my cash,credit cards, I'm financially stranded right now and my return flight leaves in few hours time, but I need some money to clear some bills, I didn't bring my cell phone along since I didn't get to roam them before coming over. So all I can do now is pay cash and get out of here quickly.I do not want to make a scene of this which is why I did not call my house,this is embarrassing enough.I was wondering if you could loan me some cash, I'll refund it to you as soon as I arrive home just need to clear my Hotel bills and get the next plane home, As soon as I get home I'll

refund it immediately.



Write me so I can let you know how to send it.




From Xxxxx Xxxxx Mon Mar 7 06:52:08 2011
X-Apparently-To: [email protected] via 98.138.87.80; Sun, 06 Mar 2011 22:52:09 -0800
Return-Path: <[email protected]>
Received-SPF: none (mta1186.mail.mud.yahoo.com: domain of [email protected] does not designate permitted sender hosts)
X-YMailISG:
X-Originating-IP: [98.138.90.108]
Authentication-Results: mta1186.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO web121505.mail.ne1.yahoo.com) (98.138.90.108)
by mta1186.mail.mud.yahoo.com with SMTP; Sun, 06 Mar 2011 22:52:09 -0800
Received: (qmail 87769 invoked by uid 60001); 7 Mar 2011 06:52:09 -0000

h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;

Message-ID: <[email protected]>
X-YMail-OSG: DHhz2HMVM1nSjJBqA3akObBsxXZMpaYMQ0UgmCDrlqg.Qgd
EE8Q7lyPZbJMJYkk5eBTn7Rbg4DpfDe1XK6Qe9vs4tG_vIDMUV3eGOsxdgJm
D9hwYsvr86BHyF45U6H6CQVXzqKARnffIkmja3qafz_7l_X3ZUHhd4qbCPcq
981zLvZfzjrwFF_RYwZ4LzCFkUbNwQP6aPDKXlkXJ7xdUPfhPukhlyykvaGg
cCoekSwmDCOvxcvJV87vBmfcoRG5gRUvpTi_.2zWdswFcUPP7zC1UMtJTlJN
J.rE42KhBgMEw40Sy4w--
Received: from [146.82.18.135] by web121505.mail.ne1.yahoo.com via HTTP; Sun, 06 Mar 2011 22:52:08 PST
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.292656
Date: Sun, 6 Mar 2011 22:52:08 -0800 (PST)
From: Xxxxx Xxxxx <[email protected]>
Subject: Re: My Ordeal...Xxxxx Xxxxx
To: Melissa Xxxxx <[email protected]>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-2048022572-1299480728=:87762"
Content-Length: 6930

Thanks for responding. To get fund transferred to me, all you need is the info specified below to get money wired to me via Western Union.

Receivers Name:Xxxxx Xxxxx
Location: 5 Albemarle Street, London W1S 4HQ, United Kingdom
Amount: $1,500 USD

As soon as the transfer is done i will appreciate you get back to me with the money
transfer control number MTCN# and the full sender's name so i can use that in picking up the money with my passport ID. I'll def refund your cash as soon as i get home.

Regards



From Xxxxx Xxxxx Tue Mar 8 09:30:28 2011
X-Apparently-To: [email protected] via 98.138.87.77; Tue, 08 Mar 2011 01:30:30 -0800
Return-Path: <[email protected]>
X-YahooFilteredBulk: 98.138.91.15
Received-SPF: none (mta1275.mail.ac4.yahoo.com: domain of [email protected] does not designate permitted sender hosts)
X-YMailISG: Dfz2CPAcZAqiFJFjYiGB0cuqbb8KFILszRm6Wsd9t8dXG6ic
7p3VTRbT82c5USMje82qCJGkIwXHNqjTWt68b6_nGFmUdSevATY_EOWwcpSI
MAEmtT98lGYWsJlC2L6cvJCFc.bnC8cLvfWPOvssLaOozspCXSB4dSruVFvR
c0XdHzPkQbTls1.r3.ZplSCaRUW5MuSyFemn1DJjIZgjMrKlgKGU3XerJ76D
QkOlqY3kTj0aJLmlkUUfDy6vNBImaRb7M.SmARPWSydNEqTMqHwCDI8kaBQq
ts3alFk5tZXxSFqwJ2_MfkMcp_9ayj.72ySjavY1m0gffqVffBuJk1YPgJs6
tP6eQ9u.slaIc4xwMUS4JIM_ctGY8fe.hnAMDZvOoo68yVkMmaeeDSpnGVxH
1M0E3YkEiAzAu_cidOfMXmpUV_kIuA8c9KyL4egDkk0XHFeSMXLmmfAFrtsG
Gyb5wfYyTtL26wWvBCq1ecE8vaipHZWh7yt.m8ONScx7_wMGXcjVr6LfsDd7
50yRYCatmQIxl6bf3Sjxr4xevJIeMHXsg0A0AUvK2DBA6EElZ.HCLDGhGUt2
mYnZIld2u_8LhCaCwXFXo1CUB93ZGCMRBJQ1tJ1GZ9ssctwW0U8B6XWEKezL
4pKx9Eg0AQstljW.8X1qs4lZqG.EFE69D8Yn5JgYQnvXY7DXkZ2_bRxz6xDC
9krD0jjvyrZVa.ATqVX3.miF6V0U0vpLDrK9t1uKjEqZOnbaAawgQJXfnCAr
_T0E4kzfsQBN.WCF1FanM1cKUqIhw45K4wHNb1Wqbiwjl8cyMVbIQpc7SBS4
2nkDfSv1QskGoreX98LM6PXZ18U9AIHOmEUyrqwH1umkC1mSyv3wOVJg3Vkh
jK_1j8q3EckxjxD.JcOcLpIiUGBxConQhdZPFsAedgKTJZRmp2SlT2I8GRmK
t2hVj35E.3W.8AIMnoUUhSjeusHnrnju3ds3RJtvvg3LWfQx4n823TTQ4cvV
orpTuQkGb8NJjTxlEFFhX8gPD1LJlQaVwlo6BI2C_iZn.yd.e_q.PPNjzdyE
paamtaKlQoZtzHB8o_ZSKpp5hjIBmbEQwUy7mdvti6Js3b2nWtRuMKFX87SD
hbJL2oufOP5P8N8cqw_kcNBPJWblPi4zofm9aYDgw76f7GDgaBOh2smmCMlu
7G_dfMe3ExLZLwookickT_y8FdlEnt0KS5qIBDGungxqXzLcKGuUU9Ad.Efz
3QW0ydPMDe6L5SXB5VuA13KthRGVD7s32tAHtk.PvLEtqFCNqnsPI9scBtMw
OiEIXm1b166wdrwCCphLBxLRKMBAzWjRcNRMmOYeInyHuIRnHL0qmuyUBdAo
WplX7oEaUF7vX3F2S20TLxBEn3Wbdk75qFkP_ViZUt6LUtSggP0dgPH23rS9
78ILLpDmTIeBfaLznHCoEJKdQ0o_SOMfQc.CuMiyfVa3XA--
X-Originating-IP: [98.138.91.15]
Authentication-Results: mta1275.mail.ac4.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO web121515.mail.ne1.yahoo.com) (98.138.91.15)
by mta1275.mail.ac4.yahoo.com with SMTP; Tue, 08 Mar 2011 01:30:30 -0800
Received: (qmail 83330 invoked by uid 60001); 8 Mar 2011 09:30:29 -0000

DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;

Message-ID: <[email protected]>
X-YMail-OSG: gtK6MucVM1khYQCSRFaPxHys9H6riyWaEmtcv6z2CxxbR1C
nH9aISwqKTctOtq3CKtSZkZQ_uG_e5XMJNDe1LSBrAIegIZtVbJlIkyqMZRu
aMFJ.x7PMpd8EUzfTLjjITjODHryprHzAcGjV4j7X7VYvPdxUgsEhAKfa078
.QlfG5ZDkDiUk5fp0KVOD7hBGcOXb8hS2Ow37ARE2Qh6adspvhaUdx5C6kJV
Ee32ntHrb5S1b1XPxu1qOnpArlmBDZvmu_lTXEtbQNKvcC2xTbpGrxNYfK4z
5rjgLm9s_t5XqDiEzwPlugXVnVfjX.vEfVHeEIqlr0Df6CVhbn7EvKkgEAw2
_rehO9TnJCXWeNOSHbVciZyR8db0rRO.F7nixEFsAw80oiroszr9PWL5S5U2
i.CJQLVcp2Acz0_2VVwMee78tF7VVQ6G5Ls4GPYNgqs4THtjXKYUEe9W.Rvu
_GTkLryErq9QvZG.emdi3srdYkxGT78sT.dIpWbtZCLf09RarmuFh_0zby6i
viSkb3y33eYGhVDuw8bXlQs4pHCnCnHpj2myIA6JY4YdlYZQz9pBcjWcJcEs
JmTCMmsJT7uEt6RBJ.pWfeGoTBQRYODOHD43Ok4whWS95dXfvYbIwvhQqXs6
pPq8-
Received: from [70.42.74.219] by web121515.mail.ne1.yahoo.com via HTTP; Tue, 08 Mar 2011 01:30:28 PST
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.292656
Date: Tue, 8 Mar 2011 01:30:28 -0800 (PST)
From: Xxxxx Xxxxx <[email protected]>
Subject: Re: My Ordeal...Xxxxx Xxxxx
To: Melissa Xxxxx <[email protected]>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1700078220-1299576628=:83260"
Content-Length: 11158

OK here is the destination that the money should be send to

NAME:Xxxxx Xxxxx
DESTINATION: London United Kingdom
do get back to me with the information once you have made the payment


From Xxxxx Xxxxx Wed Mar 9 08:47:36 2011
X-Apparently-To: [email protected] via 98.138.87.106; Wed, 09 Mar 2011 00:47:41 -0800
Return-Path: <[email protected]>
Received-SPF: none (mta1234.mail.mud.yahoo.com: domain of [email protected] does not designate permitted sender hosts)
X-YMailISG: aHIJfdYcZAp2u_vXlT.rlzviq1ypigAdcPsA63Aa0j0pp0s7
TcTdIg3orDZ6l7ck2.qrUcUAwJ1E6jGsvT.kx2Ql3riDtsHWhH17o..cXUFm
dwrl8GcYSoerzwL36PQcYi_QH21olAzJQ7AN3YWoIK2GpxnsA6JL8ocEP9lO
1c0dLnxlEl.2MJwGwuOem5AsNoIwq3ADyTIJDAiJZb.cMtLB9dpAaK13UPmt
hXSXD9z3AsoK_.NULjUVM6cQklGXGMhEP6HMFCvFfVTbQ1_UhgXwwIyugcdl
3ko7TQcpgxA6NKyGE58VCdMfdYmZrJbpyCp8P52HzA4ziubCaCl.PpxcTupn

85jmnAJoK_s8ry9pg6jfA8N5.DBsUpI2qSVEvqD3uJG5EJz0TFWzObLDlyI8
P5LfLaHRe8RYmFvOfdT0N0WntemsvogSDFDLhpp05xuHdXCJwPBzoygWqr8p
u1kY0VDKKZFFCHYP.2nll5E8aPfr6bK4k4_aLwT4tx5Vlbo4VaCxQonofSU6
T.7xNdduBB6yWr6GGuceDFnk1_sCDhACTlKW_G_TS6.Q_VGl9Nx15s5UBXc.
fuATYw6SN7GHuDZjxDhc86SP3x1x1HErdf5jKWmEAonfgKhEtY_qpkcGmKnF
DtTdSJKcpqPJ_SaJHKgC.encJ5rIBdUSesYSN6aL0ytR4ZzfZGsXwkhno8gh
nmhE51C22P1T7XMlG8qzEWv6GP5Z5mBYlcE9XHcd8lql4S.7tOxNVizaVAWf
_unZC4d0Nfz9yIkaSOo.K_EqfWJmum.z.qaTOjnCgD8SI7nWNo5O7PAxot_O
LIAt2tvsXuWTeDm6JFlG83oUntoMhM..h6VgDklChxOSv3p7KmoPoXEvgjkO
IlElICyNyJzbidbQqU7.Mm1bf3obCiRizpQRKJ6xzfnZSLVn284cSR8h7SI2
ck_zow9Hsj1uO_zKfZhoawk45XtibZ81eRdm9hDntU_bTJXB0bitGpF8nL7a
WtCy64M74N57y3eaJG3ygwltNTYfh8jcLTBhkvBie0Syk1.s8quBNjuuFz2k
9um0Vh24zVUqE3Xc1ZoELKVoZIEzxnDJXAPGrBHuj4yd4I7Sh9pyvM7iYRBi
_R5xcfK3UmElP6RDrmgstqEnC3j0WFFr6J_bNPK0hJmi7zglIlX.etfDMOFz
Z4Ha0z0M5.sCKl137ZNzgQkH7N6iEGnnUHdunbJGoo05Lv6tlmkzi13vD4ba
G7HT77dXwXQuAPbZQ9M5C2odOyxnc8eiAFRxiG492aURHYJzzcfbKEuF1Gx2
KZ7HDCnTgsfahlh77ES900iu5scWlnCFAekFzMlMIueSYxBldIALY6tsLYjt
J3oAqxaKO29VmnvVviWZxUJUbqmfAN_JOWchpN1gT8H8KBZ8TtEQMg--
X-Originating-IP: [98.138.90.75]
Authentication-Results: mta1234.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm12.bullet.mail.ne1.yahoo.com) (98.138.90.75)
by mta1234.mail.mud.yahoo.com with SMTP; Wed, 09 Mar 2011 00:47:40 -0800
Received: from [98.138.90.53] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 09 Mar 2011 08:47:37 -0000
Received: from [98.138.89.174] by tm6.bullet.mail.ne1.yahoo.com with NNFMP; 09 Mar 2011 08:47:37 -0000
Received: from [127.0.0.1] by omp1030.mail.ne1.yahoo.com with NNFMP; 09 Mar 2011 08:47:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 54597 invoked by uid 60001); 9 Mar 2011 08:47:37 -0000
Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;

Message-ID: <[email protected]>
X-YMail-OSG: u4QvOv8VM1k0Safjdw8ys514i_NbxPwEss6BSbwwXl2WgN.
kavbaIyz4Y27yryW1G3yo_brTYeM3hP.PEtjZH7IXw_W1.Hgzc0sU1mqdcDZ
reSzmjg_DAdoVtF5UXzEvAspGtn4lX64W8M2Ca11p8ATbhIuDAlhviw5c3JM
ycqKm0aKfZmHIe0FYgQk6Iu_hG3awfQEfyfTxZZCnK368KI27TCOEXCU_LxE
G_X1TodXfPo7Nj6pIKTmybXN_.SW.BedbPeGcOLLsTuJEgzPQWkZ4Gy8Y
Received: from [98.126.56.196] by web121516.mail.ne1.yahoo.com via HTTP; Wed, 09 Mar 2011 00:47:36 PST
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.292656
Date: Wed, 9 Mar 2011 00:47:36 -0800 (PST)
From: Xxxxx Xxxxx <[email protected]>
Subject: My Ordeal...Xxxxx Xxxxx
To: Melissa Xxxxx <[email protected]>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-840336076-1299660456=:53638"
Content-Length: 14654

This the western union address where you need to help me send the money to

Receivers Name:Xxxxx Xxxxx
Location: 5 Albemarle Street, London W1S 4HQ, United Kingdom
Amount: $1,500 USD

let me have your number so i can call you

Mod edit - snipped unnecessary domain keys to eliminate blowout. - JF
View user's profileSend private message
piecrust
Elite Baiter


Joined: 29 Dec 2010
Posts: 1606
Location: Alright! Who stole my avatar?


PostPosted: Thu Mar 10, 2011 8:45 am Reply with quoteBack to top

If i interpret correctley our new friend is trying to hack his own hyjacked account. i dont blame him.

thefranchise, contact:

http://help.yahoo.com/l/us/yahoo/abuse/abuse.html
and
http://www.facebook.com/help/?topic=security

there they will get your account suspended temporarily and hopefully returned to you, the rightfull owner.

_________________
Closed lad accounts*207 *193
ThailandGhanaUnited KingdomTogoNigeriaIsle Of ManIvory CoastIndonesiaHong KongSpainUnited StatesSenegalSwedenIreland * 47
Mortar
You would look good in Gold
Never use windows auto-fill again, use something much more secure like lastpass for free.

"I am a man of hing reputation." - Loan lad Billy Hord.
"don't even think of given me that crap that you are Deaf and dump or my line is cut off , i don't have a phone please don't.." - Loan lad Billy Hord. (Having been baited to hell)
View user's profileSend private messageSend e-mail
Baitsamurai
Baiting Guru


Joined: 30 Mar 2010
Posts: 2186
Location: in the mind of my pet-lad


PostPosted: Thu Mar 10, 2011 9:09 am Reply with quoteBack to top

^^ no I am afraid he wasn't, his Facebook account was hacked

- @thefranchise: just out of curiosity how did that happen?-

and the scammers using yahoo.com accounts.
But I am sure thefranchise understood our rules against hacking and refrains from doing so.

@thefranchise: have the scammers changed the password of your FB account or do you have still access?
If you like - and post some more info - here are baiters around who would love to play your family and friends for the scammers...

_________________
PROTECT VICTIMS - POST SCAMMAILS: SCAMWARNERS

"u dis fucking ingrate, *DELETED*!"
"YOU ARE VERY VERY STPEID MAN FUK YOU WITH YOUR MONEY"
"you are a thief i know you ....fbi is coming for you"
"YOU WILL RUST IN HELL YOU BASTERD"
"I don't mean no disrespect but i don't like that word cunning,I mean this is a charity work for Christ's sake"
Easter Egg 2011 Closed lad accounts x84 x124 Mortar United KingdomGermanyUnited States
Safari C0nv0y/P4tr1ck Co-Bait with Boris_YELLsome: Lagos-Abuja-Lagos-Cotonou

Don't ever worry about seeming stupid. We're baiters. We do a lot of silly things in our baits. (Ima Baeder)
View user's profileSend private message
Dharma
Baiting Guru


Joined: 11 Jun 2008
Posts: 2144
Location: The Empty Quarter


PostPosted: Thu Mar 10, 2011 11:15 am Reply with quoteBack to top

I understand your anger , but it’s not a good idea to bait a scammer using RL information.

Scammers use many tricks to obtain people’s passwords. For example, many ordinary people can’t distinguish between a real Facebook login page and a fake one.

Scammers can convince you to click in some links, and you will end with something like this

Image
Taken from http://www.snaphow.com/fake-facebook-login-pages-are-used-to-hack-facebook/

If that was the case, the best thing to do now is to kill the site so he can’t hack more people.

Other than that, it would be difficult to bait this scammer without involving your RL details.

_________________
Penguin
Trafalgar Square 2013
Safari X5, Lagos - Accra- Cotonou- Ndjamena- Abeche(with SH) Isaac
Safari Accra- Douala(i only have one thing to say to you, go Fuck yourself and have a nice day Ok)
Safari London to Edinburgh(with DD)Sterck
Safari The Road to West Darfur (with Dr Mike)
Safari X2 Accra- Douala- Mundemba (Why do you put me in pain)
Safari Ireland to Sweden- Zion
Safari Nigeria- Chad (with Dr Mike and Agda)
Safari X2 Liberia- Ivory Coast, (with IG)
Safari X3 Nigeria to Chad- Steve & Tony(T**T team)
Safari X3 Belgium-Sweden-Denmark- Congo(with Dr Mike and Dane)
(Safari Safari Safari) X2 Operation Gold 2011
Safari X23 Random safaris (You are a bastard beast)Akmal
Golden Pith Rame Head 2013

Upgrade!
Scambaiting Tools!
View user's profileSend private message
Boris_YELLsome
Master of Master Baiters


Joined: 03 Mar 2011
Posts: 872
Location: Nowhereville


PostPosted: Thu Mar 10, 2011 12:00 pm Reply with quoteBack to top

^^^^^^ +1
Alot of facebook accounts get 'jacked via phising using apps/exclusive content.

The phising usually involves an app that lets you see whose 'stalking' your facebook account, or an app that suggest there is some exclusive video of someone you know, or yourself, or any variantion of this situation, and you 'log in' to view the content on a webpage.

the alternative is a worm or your mail linked to the account being hacked.

As everyone has said, don't go after them directly, they do have access to real information, report it to the services involved.
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



E-Mail Header Analysis


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT