SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 This hit all 3 of my major mails today

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
next victim
Baiting Guru


Joined: 27 Mar 2011
Posts: 21168


PostPosted: Sun Oct 28, 2012 3:44 pm Reply with quoteBack to top

Quote:
Hello
It is Lyda.
I'm 23 if u're interested. I like hanging out with my friends. We often go to such places as clubs, bars and stuff like that. It's cool to hang out with friends I think) I was the queen of the prom and also I won a couple similar competitions in college, so a lot of people chose me as the most beautiful girl)
Here I wanna meet a real man cuz I got tired of all those pesky boyz.
By the way, what would you sayif I'll send u a few my photographs? Really, I'll attach an archive with a few my favorite pictures to the letter but I want you to say what you think about them;) You'll need the password for the archive. It is crazygirl93
Hope to hear from u soon)


It has a .rar with it.

_________________
Closed lad accounts 291+ x 78+ http://yahoonews01.zxq.net/
500 in 6 - 36 pink 11 black
Safari Chairman's Xmas Parti 2012
Sand Timer Hana, Flip It, G spot, Rosy, Cynthia
Cellphone - web store
Just read the posting on Eater. You are one sick motherf****r! Smile-Alan
"The skull with bunny ears was a good enough warning" - Nailgunner
mentors- http://forum.419eater.com/forum/cherrie_mentor_program.php
This Derick moral monster! From http:/ /scamnewss.wordpress.com/2011/10/14/derrick-ratt-scammer-beware/ Vlad blog
http://tinyurl.com/btf7872 - Toolbox
View user's profileSend private messageSkype Name
Duffy Duck
419Eater is my life


Joined: 09 Sep 2011
Posts: 413
Location: Rhymes with Duff!


PostPosted: Sun Oct 28, 2012 4:26 pm Reply with quoteBack to top

And what's in the rar file? A virus or trojan? Evil or Very Mad

_________________
Closed lad accounts x13 Ghana United States United States
"You are the biggest fool i have ever come across in my whole wide world, i advise you to stay away from me all the days of your life. you are nothing but a poke meat." Frodo Baggins
"you are an idiot and a moron, who are you. why are you lying. saying you came to my office and could not locate me. you must be a bastard and your mother must have been a prostitute" Advocate Mark Johnson
"Let us not misunderstand, twist or put up a logic while I do not even know the exact thing you are talking" George Lawsson
View user's profileSend private message
Dharma
Baiting Guru


Joined: 11 Jun 2008
Posts: 2144
Location: The Empty Quarter


PostPosted: Mon Oct 29, 2012 3:19 pm Reply with quoteBack to top

I've noticed many viruses and trojans in my catcher recently, along with their regular formats or simply "see attach" in the title. Something is going on in ladland!!

"my guy, dis virus is better dan many formats" Laughing

_________________
Penguin
Trafalgar Square 2013
Safari X5, Lagos - Accra- Cotonou- Ndjamena- Abeche(with SH) Isaac
Safari Accra- Douala(i only have one thing to say to you, go Fuck yourself and have a nice day Ok)
Safari London to Edinburgh(with DD)Sterck
Safari The Road to West Darfur (with Dr Mike)
Safari X2 Accra- Douala- Mundemba (Why do you put me in pain)
Safari Ireland to Sweden- Zion
Safari Nigeria- Chad (with Dr Mike and Agda)
Safari X2 Liberia- Ivory Coast, (with IG)
Safari X3 Nigeria to Chad- Steve & Tony(T**T team)
Safari X3 Belgium-Sweden-Denmark- Congo(with Dr Mike and Dane)
(Safari Safari Safari) X2 Operation Gold 2011
Safari X23 Random safaris (You are a bastard beast)Akmal
Golden Pith Rame Head 2013

Upgrade!
Scambaiting Tools!
View user's profileSend private message
ScammedOut
Elite Baiter


Joined: 19 Jan 2009
Posts: 1440


PostPosted: Mon Oct 29, 2012 5:02 pm Reply with quoteBack to top

It isn't lads sending these, IMO. Some of the ones I get are from Russian dating sites, and the .rar may have a keylogger or some other malware.

Does the header show the originating country?

_________________
"FUCK U....MBESILE. FUCK OFF AND STOP SENDING ME EMAIL,IDIOT.
YOUR MOTHER IS SOOOOOOOOOOOOOO FUCKED."- Rev.1an H0rgan
You are very stupid PIG.-Mr. Samuel Koff0ur

YOU GO SLEEP YOU NO GO WAKE UP AGAIN
SEE YOU ASS IN HELL fucking tax payer ..
REJOICE IN HELL - Jack L1n (Mr.)
Enough fooling around with yourself. Your parents and family are Fucking scammer!
You are a white baboon,that doesn't even take
shower.
-Miss Gbagbo, Christian.
I NEVER SEE ANIMAL LIKE YOU. Your papa be castrated so he no make more like you!
Easter Egg 2012 - Robert Miller, philanthropist Closed lad accounts
"I am okay but had a little fracture on our last operation." - Capt. Highliner
View user's profileSend private message
next victim
Baiting Guru


Joined: 27 Mar 2011
Posts: 21168


PostPosted: Mon Oct 29, 2012 5:41 pm Reply with quoteBack to top

Here is one of the headers


Received: by 10.224.194.135 with SMTP id dy7csp29012qab;
Sun, 28 Oct 2012 08:06:32 -0700 (PDT)
Received: by 10.50.37.168 with SMTP id z8mr7272506igj.1.1351436792157;
Sun, 28 Oct 2012 08:06:32 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm29-vm3.bullet.mail.ne1.yahoo.com (nm29-vm3.bullet.mail.ne1.yahoo.com. [98.138.91.159])
by mx.google.com with ESMTPS id q4si3918006igl.51.2012.10.28.08.06.31
(version=TLSv1/SSLv3 cipher=OTHER);
Sun, 28 Oct 2012 08:06:32 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 98.138.91.159 as permitted sender) client-ip=98.138.91.159;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 98.138.91.159 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from [98.138.90.51] by nm29.bullet.mail.ne1.yahoo.com with NNFMP; 28 Oct 2012 15:06:31 -0000
Received: from [98.138.89.167] by tm4.bullet.mail.ne1.yahoo.com with NNFMP; 28 Oct 2012 15:06:30 -0000
Received: from [127.0.0.1] by omp1023.mail.ne1.yahoo.com with NNFMP; 28 Oct 2012 15:06:30 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 14788 invoked by uid 60001); 28 Oct 2012 15:06:30 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351436790; bh=lXgDLLXcATnIERtaoV1jALrJJhcYNvuEBoTSysGodCU=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b= =
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=
X-Mailer: YahooMailWebService/0.8.123.450
Message-ID: <[email protected]>
Date: Sun, 28 Oct 2012 08:06:30 -0700 (PDT)
From: Lyda Terhune <[email protected]>
Reply-To: Lyda Terhune <[email protected]>
Subject: We have to meet. Details inside
To: "[email protected]" <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="607277540-1526788958-1351436790=:80269"

--607277540-1526788958-1351436790=:80269
Content-Type: text/plain; charset=us-ascii

_________________
Closed lad accounts 291+ x 78+ http://yahoonews01.zxq.net/
500 in 6 - 36 pink 11 black
Safari Chairman's Xmas Parti 2012
Sand Timer Hana, Flip It, G spot, Rosy, Cynthia
Cellphone - web store
Just read the posting on Eater. You are one sick motherf****r! Smile-Alan
"The skull with bunny ears was a good enough warning" - Nailgunner
mentors- http://forum.419eater.com/forum/cherrie_mentor_program.php
This Derick moral monster! From http:/ /scamnewss.wordpress.com/2011/10/14/derrick-ratt-scammer-beware/ Vlad blog
http://tinyurl.com/btf7872 - Toolbox
View user's profileSend private messageSkype Name
p38cyq
Not quite a Newb


Joined: 25 Feb 2011
Posts: 52


PostPosted: Thu Nov 01, 2012 12:17 pm Reply with quoteBack to top

Email header analysis report:


All valid IP Addresses found in the header.


[quote="ipTRACKERonline.com"]Header Analysis Quick ReportOriginating IP: 98.138.89.167Originating ISP: Yahoo! City: SunnyvaleCountry of Origin: United StatesIp Address
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



E-Mail Header Analysis


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT