| Author |
Message |
next victim
Not Totally Ignorant

Joined: 27 Mar 2011
Posts: 10496

|
Posted:
Sun Oct 28, 2012 3:44 pm |
  |
| Quote: |
Hello
It is Lyda.
I'm 23 if u're interested. I like hanging out with my friends. We often go to such places as clubs, bars and stuff like that. It's cool to hang out with friends I think) I was the queen of the prom and also I won a couple similar competitions in college, so a lot of people chose me as the most beautiful girl)
Here I wanna meet a real man cuz I got tired of all those pesky boyz.
By the way, what would you sayif I'll send u a few my photographs? Really, I'll attach an archive with a few my favorite pictures to the letter but I want you to say what you think about them;) You'll need the password for the archive. It is crazygirl93
Hope to hear from u soon) |
It has a .rar with it. |
_________________
192+ x 22 + http://yahoonews01.zxq.net/
Chairman's Xmas Parti 2012
Hana
Just read the posting on Eater. You are one sick motherf****r! -Alan
| Nailgunner wrote: |
The skull with bunny ears was a good enough warning |
mentors- http://forum.419eater.com/forum/cherrie_mentor_program.php
This Derick moral monster! From http://scamnewss.wordpress.com/2011/10/14/derrick-ratt-scammer-beware/ Vlad blog
www.scambaitingtools.com  |
|
|
|
 |
Duffy Duck
419Eater is my life

Joined: 09 Sep 2011
Posts: 413
Location: Rhymes with Duff!

|
Posted:
Sun Oct 28, 2012 4:26 pm |
  |
And what's in the rar file? A virus or trojan?  |
_________________
x13
"You are the biggest fool i have ever come across in my whole wide world, i advise you to stay away from me all the days of your life. you are nothing but a poke meat." Frodo Baggins
"you are an idiot and a moron, who are you. why are you lying. saying you came to my office and could not locate me. you must be a bastard and your mother must have been a prostitute" Advocate Mark Johnson
"Let us not misunderstand, twist or put up a logic while I do not even know the exact thing you are talking" George Lawsson |
|
|
|
 |
Dharma
21st century bastard

Joined: 11 Jun 2008
Posts: 1998
Location: The Empty Quarter

|
Posted:
Mon Oct 29, 2012 3:19 pm |
  |
I've noticed many viruses and trojans in my catcher recently, along with their regular formats or simply "see attach" in the title. Something is going on in ladland!!
"my guy, dis virus is better dan many formats"  |
_________________
X5, Lagos - Accra- Cotonou- Ndjamena- Abeche(with SH) Isaac
Accra- Douala(i only have one thing to say to you, go Fuck yourself and have a nice day Ok)
London to Edinburgh(with DD)Sterck
The Road to West Darfur (with Dr Mike)
X2 Accra- Douala- Mundemba (Why do you put me in pain)
Ireland to Sweden- Zion
Nigeria- Chad (with Dr Mike and Agda)
X2 Liberia- Ivory Coast, (with IG)
X3 Nigeria to Chad- Steve & Tony(T**T team)
X3 Belgium-Sweden-Denmark- Congo(with Dr Mike and Dane)
( ) X2 Operation Gold 2011
X20 Random safaris (You are a bastard beast)Akmal
Rame Head 2013
Upgrade!
Scambaiting Tools! |
|
|
|
 |
ScammedOut
Elite Baiter

Joined: 19 Jan 2009
Posts: 1435

|
Posted:
Mon Oct 29, 2012 5:02 pm |
  |
It isn't lads sending these, IMO. Some of the ones I get are from Russian dating sites, and the .rar may have a keylogger or some other malware.
Does the header show the originating country? |
_________________ "FUCK U....MBESILE. FUCK OFF AND STOP SENDING ME EMAIL,IDIOT.
YOUR MOTHER IS SOOOOOOOOOOOOOO FUCKED."- Rev.1an H0rgan
You are very stupid PIG.-Mr. Samuel Koff0ur
YOU GO SLEEP YOU NO GO WAKE UP AGAIN
SEE YOU ASS IN HELL fucking tax payer ..
REJOICE IN HELL - Jack L1n (Mr.)
Enough fooling around with yourself. Your parents and family are Fucking scammer!
You are a white baboon,that doesn't even take
shower.
-Miss Gbagbo, Christian.
I NEVER SEE ANIMAL LIKE YOU. Your papa be castrated so he no make more like you!
- Robert Miller, philanthropist
"I am okay but had a little fracture on our last operation." - Capt. Highliner |
|
|
|
 |
next victim
Not Totally Ignorant

Joined: 27 Mar 2011
Posts: 10496

|
Posted:
Mon Oct 29, 2012 5:41 pm |
  |
Here is one of the headers
Received: by 10.224.194.135 with SMTP id dy7csp29012qab;
Sun, 28 Oct 2012 08:06:32 -0700 (PDT)
Received: by 10.50.37.168 with SMTP id z8mr7272506igj.1.1351436792157;
Sun, 28 Oct 2012 08:06:32 -0700 (PDT)
Return-Path: <wilonazlz495@yahoo.com>
Received: from nm29-vm3.bullet.mail.ne1.yahoo.com (nm29-vm3.bullet.mail.ne1.yahoo.com. [98.138.91.159])
by mx.google.com with ESMTPS id q4si3918006igl.51.2012.10.28.08.06.31
(version=TLSv1/SSLv3 cipher=OTHER);
Sun, 28 Oct 2012 08:06:32 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of wilonazlz495@yahoo.com designates 98.138.91.159 as permitted sender) client-ip=98.138.91.159;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of wilonazlz495@yahoo.com designates 98.138.91.159 as permitted sender) smtp.mail=wilonazlz495@yahoo.com; dkim=pass header.i=@yahoo.com
Received: from [98.138.90.51] by nm29.bullet.mail.ne1.yahoo.com with NNFMP; 28 Oct 2012 15:06:31 -0000
Received: from [98.138.89.167] by tm4.bullet.mail.ne1.yahoo.com with NNFMP; 28 Oct 2012 15:06:30 -0000
Received: from [127.0.0.1] by omp1023.mail.ne1.yahoo.com with NNFMP; 28 Oct 2012 15:06:30 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 712175.6582.bm@omp1023.mail.ne1.yahoo.com
Received: (qmail 14788 invoked by uid 60001); 28 Oct 2012 15:06:30 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351436790; bh=lXgDLLXcATnIERtaoV1jALrJJhcYNvuEBoTSysGodCU=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b= =
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=
X-Mailer: YahooMailWebService/0.8.123.450
Message-ID: <1351436790.80269.YahooMailNeo@web125606.mail.ne1.yahoo.com>
Date: Sun, 28 Oct 2012 08:06:30 -0700 (PDT)
From: Lyda Terhune <wilonazlz495@yahoo.com>
Reply-To: Lyda Terhune <wilonazlz495@yahoo.com>
Subject: We have to meet. Details inside
To: "late_charge@yahoo.com" <late_charge@yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="607277540-1526788958-1351436790=:80269"
--607277540-1526788958-1351436790=:80269
Content-Type: text/plain; charset=us-ascii |
_________________
192+ x 22 + http://yahoonews01.zxq.net/
Chairman's Xmas Parti 2012
Hana
Just read the posting on Eater. You are one sick motherf****r! -Alan
| Nailgunner wrote: |
The skull with bunny ears was a good enough warning |
mentors- http://forum.419eater.com/forum/cherrie_mentor_program.php
This Derick moral monster! From http://scamnewss.wordpress.com/2011/10/14/derrick-ratt-scammer-beware/ Vlad blog
www.scambaitingtools.com  |
|
|
|
 |
p38cyq
Not quite a Newb

Joined: 25 Feb 2011
Posts: 27

|
Posted:
Thu Nov 01, 2012 12:17 pm |
  |
Email header analysis report:
All valid IP Addresses found in the header.
[quote="ipTRACKERonline.com"]Header Analysis Quick ReportOriginating IP: 98.138.89.167Originating ISP: Yahoo! City: SunnyvaleCountry of Origin: United StatesIp Address |
|
|
|
|
 |
|
|