| Author |
Message |
Lou Knee Dude
Pisses Everybody Off
Joined: 14 May 2010
Posts: 169
Location: Nest on the Ground
|
 Posted:
Tue Sep 20, 2011 1:42 am |
  |
I got a special request to bait this one. The lad contacted an acquaintance of a family member about "work at home." In the script, "Cole Martins" claims to be a photographer who needs an assistant to work from home, depositing checks, processing payments, etc. Fortunately, the potential victim figured it out after a few email exchanges. The email address used is the one in the subject line. I've tried baiting it for the past few days with no response. I'm guessing the account has been closed or abandoned. Does the address, or the name Cole Martins ring a bell with any of you? |
_________________
Regards, Lou
------------------------------------
 x 8,  , 
NOTE THAT: THIS COMPANY HAS AN AFFILIATE RELATIONSHIP WITH THE IVORY COAST EMBASSY IN WASHINGTON D.C WHICH CAN BE USE IN CHARGING YOU TO COURT. (Magnet Security Company)
...the enter family of gomer boyz know your movement u cant run if you do sheek i will kill you...let me see how u work and send me a copy of the email you send to the maga i give you 10 mints to do that if not you chop the last dollar  (M4NH0R G0MER) |
|
|
|
|
bravo95
Elite Baiter
Joined: 08 Aug 2010
Posts: 1990
Location: Wouldn't you like to know...
|
| Posted:
Tue Sep 20, 2011 3:09 am |
|
That name pulls up some search results indicating scamming but I do not see a hit on the email addy.
Do you have a script with headers? |
_________________
Trophies!
        
 Off to see the wizard!
  
 Shortstuff
 Brother Mike co-bait with NWM : Agbor, Nigeria to Douala
Brother Mike again with the help of Juan and Allst@R : Agbor to Abuja
Pastor Clet Star Wars Safari Accra-Bauchi Co-Bait with NWM and the Rebels
Justice my He@vy Elecric1ty lad Accra to Tamale with the help of Alls@r and Juan
Operation "Lagos spy"
The Dynamic Dumbasses |
|
|
|
|
Lou Knee Dude
Pisses Everybody Off
Joined: 14 May 2010
Posts: 169
Location: Nest on the Ground
|
| Posted:
Tue Sep 20, 2011 10:29 am |
|
No. All I got was the script cut and pasted into Word and a copy of the "employment form." |
_________________
Regards, Lou
------------------------------------
x 8, ,
NOTE THAT: THIS COMPANY HAS AN AFFILIATE RELATIONSHIP WITH THE IVORY COAST EMBASSY IN WASHINGTON D.C WHICH CAN BE USE IN CHARGING YOU TO COURT. (Magnet Security Company)
...the enter family of gomer boyz know your movement u cant run if you do sheek i will kill you...let me see how u work and send me a copy of the email you send to the maga i give you 10 mints to do that if not you chop the last dollar (M4NH0R G0MER) |
|
|
|
|
Lou Knee Dude
Pisses Everybody Off
Joined: 14 May 2010
Posts: 169
Location: Nest on the Ground
|
| Posted:
Sat Sep 24, 2011 3:10 pm |
|
I have pasted the information received from the victim below with certain identifiers snipped out. (denoted by {snip})
Anyone recognize this lad?
First Email
| Quote: |
Delivered-To: {snip}.{snip}@gmail.com
Received: by 10.52.185.70 with SMTP id fa6cs13187vdc;
Thu, 18 Aug 2011 04:28:21 -0700 (PDT)
Received: by 10.151.123.5 with SMTP id a5mr574556ybn.382.1313666900310;
Thu, 18 Aug 2011 04:28:20 -0700 (PDT)
Return-Path: <vcw7c5@mail.{snip}>
Received: from bay0-omc2-s12.bay0.hotmail.com (bay0-omc2-s12.bay0.hotmail.com [65.54.190.87])
by mx.google.com with ESMTP id e2si2798746ybe.71.2011.08.18.04.28.19;
Thu, 18 Aug 2011 04:28:20 -0700 (PDT)
Received-SPF: pass (google.com: domain of vcw7c5@mail.{snip} designates 65.54.190.87 as permitted sender) client-ip=65.54.190.87;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of vcw7c5@mail.{snip} designates 65.54.190.87 as permitted sender) smtp.mail=vcw7c5@mail.{snip}; dkim=neutral (body hash did not verify) [email protected]
Received: from CH1PRD0102HT007.prod.exchangelabs.com ([65.54.190.125]) by bay0-omc2-s12.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 18 Aug 2011 04:28:19 -0700
Received: from CH1PRD0102HT012.prod.exchangelabs.com (10.42.82.96) by
CH1PRD0102HT007.prod.exchangelabs.com (10.42.82.85) with Microsoft SMTP
Server (TLS) id 14.1.225.64; Thu, 18 Aug 2011 11:28:19 +0000
Received: from CH1PRD0102HT012.prod.exchangelabs.com ([10.42.82.96]) by
CH1PRD0102HT012.prod.exchangelabs.com ([10.42.82.96]) with Microsoft SMTP
Server id 14.01.0225.064; Thu, 18 Aug 2011 11:28:19 +0000
From: Cole Martins <[email protected]>
CC: "{snip}, William B. ({SNIP}-Student)" <wbw253@mail.{snip}>, "Wroten,
{snip} M. ({SNIP}-Student)" <dmwy82@mail.{snip}>, "Wu, {snip} M."
<wujm@{snip}>, "Wu, {snip} ({SNIP}-Student)" <jw3d6@mail.{snip}>, "Wu,
Richard Z. ({SNIP}-Student)" <rzw4g2@mail.{snip}>, "Wu, {snip} C.
({SNIP}-Student)" <vcw7c5@mail.{snip}>, "Wu, {snip} ({SNIP}-Student)"
<{snip}wu@mail.{snip}>, "Wu, {snip} ({SNIP}-Student)" <yw9m4@mail.{snip}>
Subject: Personal Asistance Needed Urgently
Thread-Topic: Personal Asistance Needed Urgently
Date: Thu, 18 Aug 2011 11:28:10 +0000
Message-ID: <6f1b80adaac74659be48542d73c50ae7@CH1PRD0102HT012.prod.exchangelabs.com>
X-MS-Has-Attach:
X-MS-Exchange-Inbox-Rules-Loop: vcw7c5@mail.{snip}
X-MS-TNEF-Correlator:
x-routing-domain: pod51000.labs.exchange.phx.gbl
authentication-results: hotmail.com; sender-id=temperror (sender IP is
98.138.90.154) [email protected]; dkim=pass (testing
mode) header.d=yahoo.com; x-hmca=none
x-message-status: p:0:n
x-sid-pra: Cole Martins <[email protected]>
x-dkim-result: Pass(t)
x-auth-result: NONE
x-message-delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtTQ0w9Mw==
x-message-info: nCoVGf4hGnL6YDkRkpP5g559/SeeqfoA1wKhkIfR3Ijc/KH8e5VuOwofrPEw3zbHT2lA2LFKUD6VmJaRfp1CBf1PD0My2SdfJlvb0qdal2IggZR3uYCR0BeCxTJIDfgN/IZzawGal4U=
x-yahoo-newman-property: ymail-3
x-yahoo-newman-id: [email protected]
dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024;
t=1313666890; bh=friLRZle5EAXTqgq6EreZhkgB+XAJKYn9lp287Ka6t8=;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:Cc:MIME-Version:Content-Type;
c=nofws; s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:Cc:MIME-Version:Content-Type;
x-ymail-osg: Q4pL1TYVM1m0OpGCu19o85x4ZvgHMFqJ9i_2.LXvgvr03zQ
pX09DHuTOMPTviyENcZOwufbgp1beY9o2FXvh28cjU.rIlUMlrprU3nNIWsC
G32PbYvHMCpZbbcHH78qqMCCksr9mi4LDGw8CCrb2ham8nIlFsUFtuKVVPWc
vmfFQDlNkAcINb6PhR5k9A29gErShLi6ZeC58y436dbFEeu3ndS61KqP9Jyi
NpMLq3qm8H_M0a0T16ocsG.kMsPdTohD6ZPEQBiulNfiIerjJTavDYy3uSNN
1BzN1p.GuDDUCokFCamFH2Y7G3DcGjuYd.ZcUqbKvi8_ZotSBVteFNnafKyf
Uh5zf7lC19mpNj19V1B4W5rK2jar0hHgTybECc1t1V_bLqxspHHrUf417xht
S4iBCnic.8GmR.0yerR_0DLBa7aawGOTsLFoWDpAb8eggXHO5X0Fr
x-mailer: YahooMailClassic/14.0.4 YahooMailWebService/0.8.113.313619
x-originalarrivaltime: 18 Aug 2011 11:28:11.0573 (UTC)
FILETIME=[E97F8650:01CC5D99]
Resent-From: <vcw7c5@mail.{snip}>
Content-Type: multipart/alternative;
boundary="_000_6f1b80adaac74659be48542d73c50ae7CH1PRD0102HT012prodexch_"
MIME-Version: 1.0
Return-Path: vcw7c5@mail.{snip}
X-OriginatorOrg: mail.{snip}
--_000_6f1b80adaac74659be48542d73c50ae7CH1PRD0102HT012prodexch_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
A very busy Photographer needs an administrative assistant to help him
lessen his workload.It is a work from home job and will NEVER affect
your academic programme.All you need do is to check your emails twice
daily for instructions and them make sure you carry them out before
due dates.
Salary: 12-16$ per hour..
Fore more details,send an email/resume to
[email protected]<mailto:[email protected]>
With this,you can get an extra income!!! |
Second Email
| Quote: |
Delivered-To: {snip}.{snip}@gmail.com
Received: by 10.52.111.168 with SMTP id ij8cs78338vdb;
Fri, 19 Aug 2011 01:37:54 -0700 (PDT)
Received: by 10.150.137.21 with SMTP id k21mr1868828ybd.128.1313743073376;
Fri, 19 Aug 2011 01:37:53 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm26.bullet.mail.ne1.yahoo.com (nm26.bullet.mail.ne1.yahoo.com [98.138.90.89])
by mx.google.com with SMTP id v15si186470ibe.138.2011.08.19.01.37.52;
Fri, 19 Aug 2011 01:37:53 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 98.138.90.89 as permitted sender) client-ip=98.138.90.89;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 98.138.90.89 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: from [98.138.90.50] by nm26.bullet.mail.ne1.yahoo.com with NNFMP; 19 Aug 2011 08:37:52 -0000
Received: from [98.138.88.232] by tm3.bullet.mail.ne1.yahoo.com with NNFMP; 19 Aug 2011 08:37:51 -0000
Received: from [127.0.0.1] by omp1032.mail.ne1.yahoo.com with NNFMP; 19 Aug 2011 08:37:51 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 8892 invoked by uid 60001); 19 Aug 2011 08:37:51 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1313743071; bh=MGarK9z5GYBUDnK0PDcDrR/MSYaQQnrCsYLiWDpPovk=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
6BaSBAwtfZl_CM2dlZ60B
Received: from [82.128.83.16] by web120920.mail.ne1.yahoo.com via HTTP; Fri, 19 Aug 2011 01:37:51 PDT
X-Mailer: YahooMailWebService/0.8.113.315625
References: <6f1b80adaac74659be48542d73c50ae7@CH1PRD0102HT012.prod.exchangelabs.com> <CAL=T=PzZNEYjV3=hJH8HSTqbP3PTPKUftxsew_nHsGePkOEztQ@mail.gmail.com>
Message-ID: <[email protected]>
Date: Fri, 19 Aug 2011 01:37:51 -0700 (PDT)
From: Cole Martins <[email protected]>
Reply-To: Cole Martins <[email protected]>
Subject: Re: Personal Asistance Needed Urgently
To: {snip} Wu <{snip}.{snip}@gmail.com>
In-Reply-To: <CAL=T=PzZNEYjV3=hJH8HSTqbP3PTPKUftxsew_nHsGePkOEztQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1628945589-1313743071=:96239"
--0-1628945589-1313743071=:96239
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
--0-1628945589-1313743071=:96239
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable |
Third Email
| Quote: |
Delivered-To: {snip}.{snip}@gmail.com
Received: by 10.52.111.168 with SMTP id ij8cs131756vdb;
Fri, 19 Aug 2011 17:45:56 -0700 (PDT)
Received: by 10.42.162.69 with SMTP id w5mr429992icx.243.1313801155329;
Fri, 19 Aug 2011 17:45:55 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm2-vm4.bullet.mail.ne1.yahoo.com (nm2-vm4.bullet.mail.ne1.yahoo.com [98.138.91.162])
by mx.google.com with SMTP id uz5si5234094icb.113.2011.08.19.17.45.54;
Fri, 19 Aug 2011 17:45:55 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 98.138.91.162 as permitted sender) client-ip=98.138.91.162;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 98.138.91.162 as permitted sender) [email protected]; dkim=pass (test mode) [email protected]
Received: from [98.138.90.53] by nm2.bullet.mail.ne1.yahoo.com with NNFMP; 20 Aug 2011 00:45:54 -0000
Received: from [98.138.89.163] by tm6.bullet.mail.ne1.yahoo.com with NNFMP; 20 Aug 2011 00:45:54 -0000
Received: from [127.0.0.1] by omp1019.mail.ne1.yahoo.com with NNFMP; 20 Aug 2011 00:45:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 60576 invoked by uid 60001); 20 Aug 2011 00:45:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1313801154; bh=CMyyjD3eEoz3vPEmNITWi3jKM9kCfg39ekv4zE0Ll+w=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
zKmG0NZHcLbmmOBhHtT18x3MZ6ep.oBXHnYiLHYro90TMPhvH9I96h.xpwpe
JE2tDt1KgqH9NhgsSfxBnrrtgpK5MT867YLLmCuRhWipLCCIWGdqxjdSpHxN
2ebf2djgJ9bU33n.AwdKmTAq.JWk7cU4vSaRTpjsTeHWiacqBCIjL2IJIPXA
IGl5tkO0vAynpcZCnFReBtDFI6cFGG7tQwdyfyJOIaZoxiLZw8zEIa1dfaOn
DuoXAv6fE8vqx02EOoRLOdYzwkaGKmvezZoSf4MfCWouyENAMCeaWh9f3xFs
YMYCyoZ8iKeB2AYwctITUZ2G.0KQ.ky1QFq_v5WQwpb6S2IZb5Tw6N1suJDO
c51hzFgFLS5Wnx.rNbIuG.HKawKQsavBQ4LiuvFzXi9MvCRsiU8HwgzB66uA
E1ep3UBMxftMr8tLBwGNklhUqqcx8MFUWVr29RBHxbKUl5e38mnpqAcP9kth
jTVR2CLyywYR8FGSWBn441qDrRM8Wnq5dIwaoDOc_YBhzUtcYy5T9eP.uflK
n
Received: from [82.128.80.167] by web120903.mail.ne1.yahoo.com via HTTP; Fri, 19 Aug 2011 17:45:54 PDT
X-Mailer: YahooMailWebService/0.8.113.315625
References: <6f1b80adaac74659be48542d73c50ae7@CH1PRD0102HT012.prod.exchangelabs.com> <CAL=T=PzZNEYjV3=hJH8HSTqbP3PTPKUftxsew_nHsGePkOEztQ@mail.gmail.com> <[email protected]> <CAL=T=Py53AcaSW_Y3bNM355HcH7QhT5J_xNg89iarjx5+q=QAA@mail.gmail.com>
Message-ID: <[email protected]>
Date: Fri, 19 Aug 2011 17:45:54 -0700 (PDT)
From: Cole Martins <[email protected]>
Reply-To: Cole Martins <[email protected]>
Subject: trial..... employment form........
To: {snip} Wu <{snip}.{snip}@gmail.com>
In-Reply-To: <CAL=T=Py53AcaSW_Y3bNM355HcH7QhT5J_xNg89iarjx5+q=QAA@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="0-1808333741-1313801154=:51711"
--0-1808333741-1313801154=:51711
Content-Type: multipart/alternative; boundary="0-782244911-1313801154=:51711"
--0-782244911-1313801154=:51711
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable |
Mod edit: snipped unneeded domain keys to eliminate forum blowout; changed code tag to quote for legibility - JF |
_________________
Regards, Lou
------------------------------------
x 8, ,
NOTE THAT: THIS COMPANY HAS AN AFFILIATE RELATIONSHIP WITH THE IVORY COAST EMBASSY IN WASHINGTON D.C WHICH CAN BE USE IN CHARGING YOU TO COURT. (Magnet Security Company)
...the enter family of gomer boyz know your movement u cant run if you do sheek i will kill you...let me see how u work and send me a copy of the email you send to the maga i give you 10 mints to do that if not you chop the last dollar (M4NH0R G0MER) |
|
|
|
|
piecrust
Elite Baiter
Joined: 29 Dec 2010
Posts: 1620
Location: Having chow with an old friend.
|
| Posted:
Sat Sep 24, 2011 3:59 pm |
|
Sorry, can't read it, slight case of forum blowout. |
_________________
*207 *193
          * 47
You would look good in Gold
Never use windows auto-fill again, use something much more secure like lastpass for free.
"I am a man of hing reputation." - Loan lad Billy Hord.
"don't even think of given me that crap that you are Deaf and dump or my line is cut off , i don't have a phone please don't.." - Loan lad Billy Hord. (Having been baited to hell) |
|
|
|
|
Juan Freizwidatt
Associate
Joined: 18 Apr 2004
Posts: 20834
Location: Hanging out at In-n-Out
|
| Posted:
Sat Sep 24, 2011 5:01 pm |
|
^^
Fixed. |
_________________
"SATAN WILL KILL YOU . BECAUSE YOU ARE A DAUGHTER OF MERMAID"
"HOW DOES IT SOUND TO YOU THAT ANOTHER PERSON IS DEALING WITH YOU AND ASK YOU TO CONTACT ANOTHER PERSON AND NOW YOU SAID THAT YOU WANT TO DEAL WITH THE OTHER PERSON WITHOUT THE KNOWING OF THE PERSON THAT ASK YOU TO CONTACT THE OTHER PERSON"
I apologize again that I will lick the dust from your sandals - Shorty
x4: Shorty
x 16:
US lad w/Capone: (  ) 
- ATL>DC>ATL>Vegas>Seattle>ATL>San Diego>LA>ATL>Seattle>ATL>WY>ATL>Aspen>ATL (21K+ miles, $11K+ expenses)
Shorty w/bohigal:
- Lagos>Abidjan
Random lads:
- Douala>Korup; Lagos>Cotonou>Parakou; Cotonou>Niger border; Cotonou>Pendjari>jail in Tanguietta; Asaba>Abuja; Accra>Tamale
    |
|
|
|
|
|
|
|
View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
SmartFeed
