SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 [email protected]

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
Lou Knee Dude
Pisses Everybody Off


Joined: 14 May 2010
Posts: 169
Location: Nest on the Ground


PostPosted: Tue Sep 20, 2011 1:42 am Reply with quoteBack to top

I got a special request to bait this one. The lad contacted an acquaintance of a family member about "work at home." In the script, "Cole Martins" claims to be a photographer who needs an assistant to work from home, depositing checks, processing payments, etc. Fortunately, the potential victim figured it out after a few email exchanges. The email address used is the one in the subject line. I've tried baiting it for the past few days with no response. I'm guessing the account has been closed or abandoned. Does the address, or the name Cole Martins ring a bell with any of you?

_________________
Regards, Lou
------------------------------------
Closed lad accounts x 8, United States, Canada
NOTE THAT: THIS COMPANY HAS AN AFFILIATE RELATIONSHIP WITH THE IVORY COAST EMBASSY IN WASHINGTON D.C WHICH CAN BE USE IN CHARGING YOU TO COURT. (Magnet Security Company)

...the enter family of gomer boyz know your movement u cant run if you do sheek i will kill you...let me see how u work and send me a copy of the email you send to the maga i give you 10 mints to do that if not you chop the last dollar Shocked (M4NH0R G0MER)
View user's profileSend private message
bravo95
Elite Baiter


Joined: 08 Aug 2010
Posts: 1990
Location: Wouldn't you like to know...


PostPosted: Tue Sep 20, 2011 3:09 am Reply with quoteBack to top

That name pulls up some search results indicating scamming but I do not see a hit on the email addy.

Do you have a script with headers?

_________________
Trophies! 

  
Closed lad accounts Goat Golden Goat  Mc Fry Pole Dancer Mortar  Tattoo Easter Egg 2011

Vcamera Off to see the wizard!

United States United Kingdom Nigeria Ghana

Sand Timer Shortstuff

Safari Brother Mike co-bait with NWM : Agbor, Nigeria to Douala
Safari Brother Mike again with the help of Juan and [email protected] : Agbor to Abuja
Safari Pastor Clet Star Wars Safari Accra-Bauchi Co-Bait with NWM and the Rebels 
Safari Justice my [email protected] Elecric1ty lad Accra to Tamale with the help of [email protected] and Juan
Safari Operation "Lagos spy" 
Safari The Dynamic Dumbasses 
View user's profileSend private messageSend e-mailSkype Name
Lou Knee Dude
Pisses Everybody Off


Joined: 14 May 2010
Posts: 169
Location: Nest on the Ground


PostPosted: Tue Sep 20, 2011 10:29 am Reply with quoteBack to top

No. All I got was the script cut and pasted into Word and a copy of the "employment form."

_________________
Regards, Lou
------------------------------------
Closed lad accounts x 8, United States, Canada
NOTE THAT: THIS COMPANY HAS AN AFFILIATE RELATIONSHIP WITH THE IVORY COAST EMBASSY IN WASHINGTON D.C WHICH CAN BE USE IN CHARGING YOU TO COURT. (Magnet Security Company)

...the enter family of gomer boyz know your movement u cant run if you do sheek i will kill you...let me see how u work and send me a copy of the email you send to the maga i give you 10 mints to do that if not you chop the last dollar Shocked (M4NH0R G0MER)
View user's profileSend private message
Lou Knee Dude
Pisses Everybody Off


Joined: 14 May 2010
Posts: 169
Location: Nest on the Ground


PostPosted: Sat Sep 24, 2011 3:10 pm Reply with quoteBack to top

I have pasted the information received from the victim below with certain identifiers snipped out. (denoted by {snip})

Anyone recognize this lad?

First Email

Quote:
Delivered-To: {snip}.{snip}@gmail.com
Received: by 10.52.185.70 with SMTP id fa6cs13187vdc;
Thu, 18 Aug 2011 04:28:21 -0700 (PDT)
Received: by 10.151.123.5 with SMTP id a5mr574556ybn.382.1313666900310;
Thu, 18 Aug 2011 04:28:20 -0700 (PDT)
Return-Path: <[email protected]{snip}>
Received: from bay0-omc2-s12.bay0.hotmail.com (bay0-omc2-s12.bay0.hotmail.com [65.54.190.87])
by mx.google.com with ESMTP id e2si2798746ybe.71.2011.08.18.04.28.19;
Thu, 18 Aug 2011 04:28:20 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected]{snip} designates 65.54.190.87 as permitted sender) client-ip=65.54.190.87;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected]{snip} designates 65.54.190.87 as permitted sender) [email protected]{snip}; dkim=neutral (body hash did not verify) [email protected]
Received: from CH1PRD0102HT007.prod.exchangelabs.com ([65.54.190.125]) by bay0-omc2-s12.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 18 Aug 2011 04:28:19 -0700
Received: from CH1PRD0102HT012.prod.exchangelabs.com (10.42.82.96) by
CH1PRD0102HT007.prod.exchangelabs.com (10.42.82.85) with Microsoft SMTP
Server (TLS) id 14.1.225.64; Thu, 18 Aug 2011 11:28:19 +0000
Received: from CH1PRD0102HT012.prod.exchangelabs.com ([10.42.82.96]) by
CH1PRD0102HT012.prod.exchangelabs.com ([10.42.82.96]) with Microsoft SMTP
Server id 14.01.0225.064; Thu, 18 Aug 2011 11:28:19 +0000
From: Cole Martins <[email protected]>
CC: "{snip}, William B. ({SNIP}-Student)" <[email protected]{snip}>, "Wroten,
{snip} M. ({SNIP}-Student)" <[email protected]{snip}>, "Wu, {snip} M."
<[email protected]{snip}>, "Wu, {snip} ({SNIP}-Student)" <[email protected]{snip}>, "Wu,
Richard Z. ({SNIP}-Student)" <[email protected]{snip}>, "Wu, {snip} C.
({SNIP}-Student)" <[email protected]{snip}>, "Wu, {snip} ({SNIP}-Student)"
<{snip}[email protected]{snip}>, "Wu, {snip} ({SNIP}-Student)" <[email protected]{snip}>
Subject: Personal Asistance Needed Urgently
Thread-Topic: Personal Asistance Needed Urgently
Date: Thu, 18 Aug 2011 11:28:10 +0000
Message-ID: <[email protected]bs.com>
X-MS-Has-Attach:
X-MS-Exchange-Inbox-Rules-Loop: [email protected]{snip}
X-MS-TNEF-Correlator:
x-routing-domain: pod51000.labs.exchange.phx.gbl
authentication-results: hotmail.com; sender-id=temperror (sender IP is
98.138.90.154) [email protected]; dkim=pass (testing
mode) header.d=yahoo.com; x-hmca=none
x-message-status: p:0:n
x-sid-pra: Cole Martins <[email protected]>
x-dkim-result: Pass(t)
x-auth-result: NONE
x-message-delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtTQ0w9Mw==
x-message-info: nCoVGf4hGnL6YDkRkpP5g559/SeeqfoA1wKhkIfR3Ijc/KH8e5VuOwofrPEw3zbHT2lA2LFKUD6VmJaRfp1CBf1PD0My2SdfJlvb0qdal2IggZR3uYCR0BeCxTJIDfgN/IZzawGal4U=
x-yahoo-newman-property: ymail-3
x-yahoo-newman-id: [email protected]
dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024;
t=1313666890; bh=friLRZle5EAXTqgq6EreZhkgB+XAJKYn9lp287Ka6t8=;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:Cc:MIME-Version:Content-Type;
c=nofws; s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:Cc:MIME-Version:Content-Type;

x-ymail-osg: Q4pL1TYVM1m0OpGCu19o85x4ZvgHMFqJ9i_2.LXvgvr03zQ
pX09DHuTOMPTviyENcZOwufbgp1beY9o2FXvh28cjU.rIlUMlrprU3nNIWsC
G32PbYvHMCpZbbcHH78qqMCCksr9mi4LDGw8CCrb2ham8nIlFsUFtuKVVPWc
vmfFQDlNkAcINb6PhR5k9A29gErShLi6ZeC58y436dbFEeu3ndS61KqP9Jyi
NpMLq3qm8H_M0a0T16ocsG.kMsPdTohD6ZPEQBiulNfiIerjJTavDYy3uSNN
1BzN1p.GuDDUCokFCamFH2Y7G3DcGjuYd.ZcUqbKvi8_ZotSBVteFNnafKyf
Uh5zf7lC19mpNj19V1B4W5rK2jar0hHgTybECc1t1V_bLqxspHHrUf417xht
S4iBCnic.8GmR.0yerR_0DLBa7aawGOTsLFoWDpAb8eggXHO5X0Fr
x-mailer: YahooMailClassic/14.0.4 YahooMailWebService/0.8.113.313619
x-originalarrivaltime: 18 Aug 2011 11:28:11.0573 (UTC)
FILETIME=[E97F8650:01CC5D99]
Resent-From: <[email protected]{snip}>
Content-Type: multipart/alternative;
boundary="_000_6f1b80adaac74659be48542d73c50ae7CH1PRD0102HT012prodexch_"
MIME-Version: 1.0
Return-Path: [email protected]{snip}
X-OriginatorOrg: mail.{snip}

--_000_6f1b80adaac74659be48542d73c50ae7CH1PRD0102HT012prodexch_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

A very busy Photographer needs an administrative assistant to help him
lessen his workload.It is a work from home job and will NEVER affect
your academic programme.All you need do is to check your emails twice
daily for instructions and them make sure you carry them out before
due dates.
Salary: 12-16$ per hour..
Fore more details,send an email/resume to

[email protected]<mailto:[email protected]>
With this,you can get an extra income!!!

Second Email
Quote:

Delivered-To: {snip}.{snip}@gmail.com
Received: by 10.52.111.168 with SMTP id ij8cs78338vdb;
Fri, 19 Aug 2011 01:37:54 -0700 (PDT)
Received: by 10.150.137.21 with SMTP id k21mr1868828ybd.128.1313743073376;
Fri, 19 Aug 2011 01:37:53 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm26.bullet.mail.ne1.yahoo.com (nm26.bullet.mail.ne1.yahoo.com [98.138.90.89])
by mx.google.com with SMTP id v15si186470ibe.138.2011.08.19.01.37.52;
Fri, 19 Aug 2011 01:37:53 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 98.138.90.89 as permitted sender) client-ip=98.138.90.89;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 98.138.90.89 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: from [98.138.90.50] by nm26.bullet.mail.ne1.yahoo.com with NNFMP; 19 Aug 2011 08:37:52 -0000
Received: from [98.138.88.232] by tm3.bullet.mail.ne1.yahoo.com with NNFMP; 19 Aug 2011 08:37:51 -0000
Received: from [127.0.0.1] by omp1032.mail.ne1.yahoo.com with NNFMP; 19 Aug 2011 08:37:51 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 8892 invoked by uid 60001); 19 Aug 2011 08:37:51 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1313743071; bh=MGarK9z5GYBUDnK0PDcDrR/MSYaQQnrCsYLiWDpPovk=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;

6BaSBAwtfZl_CM2dlZ60B
Received: from [82.128.83.16] by web120920.mail.ne1.yahoo.com via HTTP; Fri, 19 Aug 2011 01:37:51 PDT
X-Mailer: YahooMailWebService/0.8.113.315625
References: <[email protected]bs.com> <[email protected]om>
Message-ID: <[email protected]>
Date: Fri, 19 Aug 2011 01:37:51 -0700 (PDT)
From: Cole Martins <[email protected]>
Reply-To: Cole Martins <[email protected]>
Subject: Re: Personal Asistance Needed Urgently
To: {snip} Wu <{snip}.{snip}@gmail.com>
In-Reply-To: <[email protected]om>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1628945589-1313743071=:96239"

--0-1628945589-1313743071=:96239
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable


--0-1628945589-1313743071=:96239
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Third Email


Quote:
Delivered-To: {snip}.{snip}@gmail.com
Received: by 10.52.111.168 with SMTP id ij8cs131756vdb;
Fri, 19 Aug 2011 17:45:56 -0700 (PDT)
Received: by 10.42.162.69 with SMTP id w5mr429992icx.243.1313801155329;
Fri, 19 Aug 2011 17:45:55 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm2-vm4.bullet.mail.ne1.yahoo.com (nm2-vm4.bullet.mail.ne1.yahoo.com [98.138.91.162])
by mx.google.com with SMTP id uz5si5234094icb.113.2011.08.19.17.45.54;
Fri, 19 Aug 2011 17:45:55 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 98.138.91.162 as permitted sender) client-ip=98.138.91.162;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 98.138.91.162 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: from [98.138.90.53] by nm2.bullet.mail.ne1.yahoo.com with NNFMP; 20 Aug 2011 00:45:54 -0000
Received: from [98.138.89.163] by tm6.bullet.mail.ne1.yahoo.com with NNFMP; 20 Aug 2011 00:45:54 -0000
Received: from [127.0.0.1] by omp1019.mail.ne1.yahoo.com with NNFMP; 20 Aug 2011 00:45:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 60576 invoked by uid 60001); 20 Aug 2011 00:45:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1313801154; bh=CMyyjD3eEoz3vPEmNITWi3jKM9kCfg39ekv4zE0Ll+w=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
zKmG0NZHcLbmmOBhHtT18x3MZ6ep.oBXHnYiLHYro90TMPhvH9I96h.xpwpe
JE2tDt1KgqH9NhgsSfxBnrrtgpK5MT867YLLmCuRhWipLCCIWGdqxjdSpHxN
2ebf2djgJ9bU33n.AwdKmTAq.JWk7cU4vSaRTpjsTeHWiacqBCIjL2IJIPXA
IGl5tkO0vAynpcZCnFReBtDFI6cFGG7tQwdyfyJOIaZoxiLZw8zEIa1dfaOn
DuoXAv6fE8vqx02EOoRLOdYzwkaGKmvezZoSf4MfCWouyENAMCeaWh9f3xFs
YMYCyoZ8iKeB2AYwctITUZ2G.0KQ.ky1QFq_v5WQwpb6S2IZb5Tw6N1suJDO
c51hzFgFLS5Wnx.rNbIuG.HKawKQsavBQ4LiuvFzXi9MvCRsiU8HwgzB66uA
E1ep3UBMxftMr8tLBwGNklhUqqcx8MFUWVr29RBHxbKUl5e38mnpqAcP9kth
jTVR2CLyywYR8FGSWBn441qDrRM8Wnq5dIwaoDOc_YBhzUtcYy5T9eP.uflK
n
Received: from [82.128.80.167] by web120903.mail.ne1.yahoo.com via HTTP; Fri, 19 Aug 2011 17:45:54 PDT
X-Mailer: YahooMailWebService/0.8.113.315625
References: <[email protected]bs.com> <[email protected]om> <[email protected]> <[email protected]om>
Message-ID: <[email protected]>
Date: Fri, 19 Aug 2011 17:45:54 -0700 (PDT)
From: Cole Martins <[email protected]>
Reply-To: Cole Martins <[email protected]>
Subject: trial..... employment form........
To: {snip} Wu <{snip}.{snip}@gmail.com>
In-Reply-To: <[email protected]om>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="0-1808333741-1313801154=:51711"

--0-1808333741-1313801154=:51711
Content-Type: multipart/alternative; boundary="0-782244911-1313801154=:51711"

--0-782244911-1313801154=:51711
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable


Mod edit: snipped unneeded domain keys to eliminate forum blowout; changed code tag to quote for legibility - JF

_________________
Regards, Lou
------------------------------------
Closed lad accounts x 8, United States, Canada
NOTE THAT: THIS COMPANY HAS AN AFFILIATE RELATIONSHIP WITH THE IVORY COAST EMBASSY IN WASHINGTON D.C WHICH CAN BE USE IN CHARGING YOU TO COURT. (Magnet Security Company)

...the enter family of gomer boyz know your movement u cant run if you do sheek i will kill you...let me see how u work and send me a copy of the email you send to the maga i give you 10 mints to do that if not you chop the last dollar Shocked (M4NH0R G0MER)
View user's profileSend private message
piecrust
Our Plaything


Joined: 29 Dec 2010
Posts: 1606
Location: Alright! Who stole my avatar?


PostPosted: Sat Sep 24, 2011 3:59 pm Reply with quoteBack to top

Sorry, can't read it, slight case of forum blowout.

_________________
Closed lad accounts*207 *193
ThailandGhanaUnited KingdomTogoNigeriaIsle Of ManIvory CoastIndonesiaHong KongSpainUnited StatesSenegalSwedenIreland * 47
Mortar
You would look good in Gold
Never use windows auto-fill again, use something much more secure like lastpass for free.

"I am a man of hing reputation." - Loan lad Billy Hord.
"don't even think of given me that crap that you are Deaf and dump or my line is cut off , i don't have a phone please don't.." - Loan lad Billy Hord. (Having been baited to hell)
View user's profileSend private messageSend e-mail
Juan Freizwidatt
Forum Admin


Joined: 18 Apr 2004
Posts: 19775
Location: Hanging out at In-n-Out


PostPosted: Sat Sep 24, 2011 5:01 pm Reply with quoteBack to top

^^
Fixed.

_________________
"SATAN WILL KILL YOU . BECAUSE YOU ARE A DAUGHTER OF MERMAID"

"HOW DOES IT SOUND TO YOU THAT ANOTHER PERSON IS DEALING WITH YOU AND ASK YOU TO CONTACT ANOTHER PERSON AND NOW YOU SAID THAT YOU WANT TO DEAL WITH THE OTHER PERSON WITHOUT THE KNOWING OF THE PERSON THAT ASK YOU TO CONTACT THE OTHER PERSON"

"please if you want your funds just pay me,!! pay me!! pay me!!"

Sand Timer x4: Shorty
Safari x 16:
US lad w/Capone: ( Golden Pith ) Black Ribbon
- ATL>DC>ATL>Vegas>Seattle>ATL>San Diego>LA>ATL>Seattle>ATL>WY>ATL>Aspen>ATL (21K+ miles, $11K+ expenses)
Shorty w/bohigal:
- Lagos>Abidjan
Random lads:
- Douala>Korup; Lagos>Cotonou>Parakou; Cotonou>Niger border; Cotonou>Pendjari>jail in Tanguietta; Asaba>Abuja; Accra>Tamale
Purple Flower Goat Jack Boot Whip
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



** Find out information about your IP address **


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT