SmartFeedSmartFeed          

Anti Scam News Blog


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 This hit all 3 of my major mails today

View next topic
View previous topic
 
Post new topicReply to topic
Author Message
next victim
Not Totally Ignorant


Joined: 27 Mar 2011
Posts: 10496


PostPosted: Sun Oct 28, 2012 3:44 pm Reply with quoteBack to top

Quote:
Hello
It is Lyda.
I'm 23 if u're interested. I like hanging out with my friends. We often go to such places as clubs, bars and stuff like that. It's cool to hang out with friends I think) I was the queen of the prom and also I won a couple similar competitions in college, so a lot of people chose me as the most beautiful girl)
Here I wanna meet a real man cuz I got tired of all those pesky boyz.
By the way, what would you sayif I'll send u a few my photographs? Really, I'll attach an archive with a few my favorite pictures to the letter but I want you to say what you think about them;) You'll need the password for the archive. It is crazygirl93
Hope to hear from u soon)


It has a .rar with it.

_________________
Closed lad accounts 192+ x 22 + http://yahoonews01.zxq.net/
Safari Chairman's Xmas Parti 2012
Sand Timer Hana
Just read the posting on Eater. You are one sick motherf****r! Smile-Alan
Nailgunner wrote:
The skull with bunny ears was a good enough warning Cool

mentors- http://forum.419eater.com/forum/cherrie_mentor_program.php
This Derick moral monster! From http://scamnewss.wordpress.com/2011/10/14/derrick-ratt-scammer-beware/ Vlad blog
www.scambaitingtools.com Easter Egg 2013
View user's profileSend private messageSkype Name
Duffy Duck
419Eater is my life


Joined: 09 Sep 2011
Posts: 413
Location: Rhymes with Duff!


PostPosted: Sun Oct 28, 2012 4:26 pm Reply with quoteBack to top

And what's in the rar file? A virus or trojan? Evil or Very Mad

_________________
Closed lad accounts x13 Ghana United States United States
"You are the biggest fool i have ever come across in my whole wide world, i advise you to stay away from me all the days of your life. you are nothing but a poke meat." Frodo Baggins
"you are an idiot and a moron, who are you. why are you lying. saying you came to my office and could not locate me. you must be a bastard and your mother must have been a prostitute" Advocate Mark Johnson
"Let us not misunderstand, twist or put up a logic while I do not even know the exact thing you are talking" George Lawsson
View user's profileSend private message
Dharma
21st century bastard


Joined: 11 Jun 2008
Posts: 1998
Location: The Empty Quarter


PostPosted: Mon Oct 29, 2012 3:19 pm Reply with quoteBack to top

I've noticed many viruses and trojans in my catcher recently, along with their regular formats or simply "see attach" in the title. Something is going on in ladland!!

"my guy, dis virus is better dan many formats" Laughing

_________________
Penguin
Safari X5, Lagos - Accra- Cotonou- Ndjamena- Abeche(with SH) Isaac
Safari Accra- Douala(i only have one thing to say to you, go Fuck yourself and have a nice day Ok)
Safari London to Edinburgh(with DD)Sterck
Safari The Road to West Darfur (with Dr Mike)
Safari X2 Accra- Douala- Mundemba (Why do you put me in pain)
Safari Ireland to Sweden- Zion
Safari Nigeria- Chad (with Dr Mike and Agda)
Safari X2 Liberia- Ivory Coast, (with IG)
Safari X3 Nigeria to Chad- Steve & Tony(T**T team)
Safari X3 Belgium-Sweden-Denmark- Congo(with Dr Mike and Dane)
(Safari Safari Safari) X2 Operation Gold 2011
Safari X20 Random safaris (You are a bastard beast)Akmal
Golden Pith Rame Head 2013

Upgrade!
Scambaiting Tools!
View user's profileSend private message
ScammedOut
Elite Baiter


Joined: 19 Jan 2009
Posts: 1435


PostPosted: Mon Oct 29, 2012 5:02 pm Reply with quoteBack to top

It isn't lads sending these, IMO. Some of the ones I get are from Russian dating sites, and the .rar may have a keylogger or some other malware.

Does the header show the originating country?

_________________
"FUCK U....MBESILE. FUCK OFF AND STOP SENDING ME EMAIL,IDIOT.
YOUR MOTHER IS SOOOOOOOOOOOOOO FUCKED."- Rev.1an H0rgan
You are very stupid PIG.-Mr. Samuel Koff0ur

YOU GO SLEEP YOU NO GO WAKE UP AGAIN
SEE YOU ASS IN HELL fucking tax payer ..
REJOICE IN HELL - Jack L1n (Mr.)
Enough fooling around with yourself. Your parents and family are Fucking scammer!
You are a white baboon,that doesn't even take
shower.
-Miss Gbagbo, Christian.
I NEVER SEE ANIMAL LIKE YOU. Your papa be castrated so he no make more like you!
Easter Egg 2012 - Robert Miller, philanthropist Closed lad accounts
"I am okay but had a little fracture on our last operation." - Capt. Highliner
View user's profileSend private message
next victim
Not Totally Ignorant


Joined: 27 Mar 2011
Posts: 10496


PostPosted: Mon Oct 29, 2012 5:41 pm Reply with quoteBack to top

Here is one of the headers


Received: by 10.224.194.135 with SMTP id dy7csp29012qab;
Sun, 28 Oct 2012 08:06:32 -0700 (PDT)
Received: by 10.50.37.168 with SMTP id z8mr7272506igj.1.1351436792157;
Sun, 28 Oct 2012 08:06:32 -0700 (PDT)
Return-Path: <wilonazlz495@yahoo.com>
Received: from nm29-vm3.bullet.mail.ne1.yahoo.com (nm29-vm3.bullet.mail.ne1.yahoo.com. [98.138.91.159])
by mx.google.com with ESMTPS id q4si3918006igl.51.2012.10.28.08.06.31
(version=TLSv1/SSLv3 cipher=OTHER);
Sun, 28 Oct 2012 08:06:32 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of wilonazlz495@yahoo.com designates 98.138.91.159 as permitted sender) client-ip=98.138.91.159;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of wilonazlz495@yahoo.com designates 98.138.91.159 as permitted sender) smtp.mail=wilonazlz495@yahoo.com; dkim=pass header.i=@yahoo.com
Received: from [98.138.90.51] by nm29.bullet.mail.ne1.yahoo.com with NNFMP; 28 Oct 2012 15:06:31 -0000
Received: from [98.138.89.167] by tm4.bullet.mail.ne1.yahoo.com with NNFMP; 28 Oct 2012 15:06:30 -0000
Received: from [127.0.0.1] by omp1023.mail.ne1.yahoo.com with NNFMP; 28 Oct 2012 15:06:30 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 712175.6582.bm@omp1023.mail.ne1.yahoo.com
Received: (qmail 14788 invoked by uid 60001); 28 Oct 2012 15:06:30 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351436790; bh=lXgDLLXcATnIERtaoV1jALrJJhcYNvuEBoTSysGodCU=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b= =
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=
X-Mailer: YahooMailWebService/0.8.123.450
Message-ID: <1351436790.80269.YahooMailNeo@web125606.mail.ne1.yahoo.com>
Date: Sun, 28 Oct 2012 08:06:30 -0700 (PDT)
From: Lyda Terhune <wilonazlz495@yahoo.com>
Reply-To: Lyda Terhune <wilonazlz495@yahoo.com>
Subject: We have to meet. Details inside
To: "late_charge@yahoo.com" <late_charge@yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="607277540-1526788958-1351436790=:80269"

--607277540-1526788958-1351436790=:80269
Content-Type: text/plain; charset=us-ascii

_________________
Closed lad accounts 192+ x 22 + http://yahoonews01.zxq.net/
Safari Chairman's Xmas Parti 2012
Sand Timer Hana
Just read the posting on Eater. You are one sick motherf****r! Smile-Alan
Nailgunner wrote:
The skull with bunny ears was a good enough warning Cool

mentors- http://forum.419eater.com/forum/cherrie_mentor_program.php
This Derick moral monster! From http://scamnewss.wordpress.com/2011/10/14/derrick-ratt-scammer-beware/ Vlad blog
www.scambaitingtools.com Easter Egg 2013
View user's profileSend private messageSkype Name
p38cyq
Not quite a Newb


Joined: 25 Feb 2011
Posts: 27


PostPosted: Thu Nov 01, 2012 12:17 pm Reply with quoteBack to top

Email header analysis report:


All valid IP Addresses found in the header.


[quote="ipTRACKERonline.com"]Header Analysis Quick ReportOriginating IP: 98.138.89.167Originating ISP: Yahoo! City: SunnyvaleCountry of Origin: United StatesIp Address
View user's profileSend private message
Display posts from previous:      
Post new topicReply to topic


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Please visit this website
E-Mail Header Analysis


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :: FI Theme :: All times are GMT