Author |
Message |
Joaquin
419Eater is my life
Joined: 14 Mar 2005
Posts: 456
Location: Guatemala (GMT-6)
|
Posted:
Fri Feb 28, 2014 12:28 am |
|
This guy claims to be a U.S. Citizen living in Qatar who knows his way around Nigeria to get your money. Got him to send an EMail and it traces back to Lagos, Nigeria. Having his FB profile closed will only achieve losing track of him. Any ideas?
https://www.facebook.com/john.watson.18294?fref=ts |
_________________
x 46
dear sir
after waiting at the airport for 3 hours i did not see you, i was there till the last pilot came out, what is the position , are you in belgium or still in usa pls write me back , am confused - Patrick Williams
you must be a mad man why can,t you understand simple language it your
stupid mother that have head like that of sadam hussien that was hang
may your mouth bend to your back idiot i am helping you and you are talking trash.
francis mensah |
|
|
|
bearkat419
Baiting Guru
Joined: 25 Jun 2007
Posts: 4445
Location: Houston, TX
|
Posted:
Fri Feb 28, 2014 12:49 am |
|
Send him an email from a fake baiting account & bait as usual. |
_________________ |
|
|
|
Chuck U Farley
Not quite a Newb
Joined: 20 Feb 2014
Posts: 22
Location: Someplace in the USA
|
Posted:
Fri Feb 28, 2014 4:08 am |
|
This guy has gone to some work. His Facebook page is almost believable. Look closely at it and you can see it is a facade. None of his photo posts have more than two comments and they are mostly not even involved with the post. Only the python has comments and they seem canned. |
_________________ All warfare is based on deception.
The Art of War. |
|
|
|
Joaquin
419Eater is my life
Joined: 14 Mar 2005
Posts: 456
Location: Guatemala (GMT-6)
|
Posted:
Fri Feb 28, 2014 4:50 pm |
|
@Chuck U Farley : Right. More elaborated profile than the typical scammer on FB. The English in FB and Email texts is pretty good too. This lad is one step above and that makes him more dangerous. |
_________________
x 46
dear sir
after waiting at the airport for 3 hours i did not see you, i was there till the last pilot came out, what is the position , are you in belgium or still in usa pls write me back , am confused - Patrick Williams
you must be a mad man why can,t you understand simple language it your
stupid mother that have head like that of sadam hussien that was hang
may your mouth bend to your back idiot i am helping you and you are talking trash.
francis mensah |
|
|
|
Joaquin
419Eater is my life
Joined: 14 Mar 2005
Posts: 456
Location: Guatemala (GMT-6)
|
Posted:
Fri Feb 28, 2014 4:56 pm |
|
And he insists that instead of Facebook or EMail we communicate via Yahoo or Skype live chat for better "visual contact". I will find out what he shows in the cam at his end. |
_________________
x 46
dear sir
after waiting at the airport for 3 hours i did not see you, i was there till the last pilot came out, what is the position , are you in belgium or still in usa pls write me back , am confused - Patrick Williams
you must be a mad man why can,t you understand simple language it your
stupid mother that have head like that of sadam hussien that was hang
may your mouth bend to your back idiot i am helping you and you are talking trash.
francis mensah |
|
|
|
blackbean
Hello I'm New here!
Joined: 01 Mar 2014
Posts: 7
Location: Malaysia
|
Posted:
Sat Mar 01, 2014 3:20 am |
|
|
|
|
Joaquin
419Eater is my life
Joined: 14 Mar 2005
Posts: 456
Location: Guatemala (GMT-6)
|
Posted:
Sat Mar 01, 2014 7:34 pm |
|
@blackbean : I will take a look at this scammer who likes "wings".
Here is another one who poses as an innocent chick looking for love. Photos are of a model from a porn site.
https://www.facebook.com/princess.johnny.37?fref=ts |
_________________
x 46
dear sir
after waiting at the airport for 3 hours i did not see you, i was there till the last pilot came out, what is the position , are you in belgium or still in usa pls write me back , am confused - Patrick Williams
you must be a mad man why can,t you understand simple language it your
stupid mother that have head like that of sadam hussien that was hang
may your mouth bend to your back idiot i am helping you and you are talking trash.
francis mensah |
|
|
|
Joaquin
419Eater is my life
Joined: 14 Mar 2005
Posts: 456
Location: Guatemala (GMT-6)
|
Posted:
Sat Mar 01, 2014 7:43 pm |
|
@blackbean: Your lad is definitely into pilots and aviation sites.
Uses hispanic name Fabio Delgado, apparently not knowing Fabio is a masculine name, 'cause the profile photo is of a woman.
Requested friendship. Will keep you posted on what comes up. |
_________________
x 46
dear sir
after waiting at the airport for 3 hours i did not see you, i was there till the last pilot came out, what is the position , are you in belgium or still in usa pls write me back , am confused - Patrick Williams
you must be a mad man why can,t you understand simple language it your
stupid mother that have head like that of sadam hussien that was hang
may your mouth bend to your back idiot i am helping you and you are talking trash.
francis mensah |
|
|
|
blackbean
Hello I'm New here!
Joined: 01 Mar 2014
Posts: 7
Location: Malaysia
|
Posted:
Sun Mar 02, 2014 8:38 am |
|
|
|
|
Joaquin
419Eater is my life
Joined: 14 Mar 2005
Posts: 456
Location: Guatemala (GMT-6)
|
Posted:
Sun Mar 02, 2014 10:02 pm |
|
@blackbean: No reply to my FB friendship request. But then again we all know that Nigerian internet cafes are closed on weekends and scammers can't "work". Good work tracing Fabio's fake profile picture. |
_________________
x 46
dear sir
after waiting at the airport for 3 hours i did not see you, i was there till the last pilot came out, what is the position , are you in belgium or still in usa pls write me back , am confused - Patrick Williams
you must be a mad man why can,t you understand simple language it your
stupid mother that have head like that of sadam hussien that was hang
may your mouth bend to your back idiot i am helping you and you are talking trash.
francis mensah |
|
|
|
blackbean
Hello I'm New here!
Joined: 01 Mar 2014
Posts: 7
Location: Malaysia
|
Posted:
Mon Mar 03, 2014 4:50 am |
|
|
|
|
blackbean
Hello I'm New here!
Joined: 01 Mar 2014
Posts: 7
Location: Malaysia
|
Posted:
Mon Mar 03, 2014 1:14 pm |
|
@Joaquin, I saw he now has 5 friends (0100 GMT). Are you one of them (the one with a dog reading a magazine?).
I'm still a greenhorn but if you think i can help, just let me know. |
|
|
|
|
Joaquin
419Eater is my life
Joined: 14 Mar 2005
Posts: 456
Location: Guatemala (GMT-6)
|
Posted:
Mon Mar 03, 2014 5:57 pm |
|
@blackbean : He accepted my FB friend request. And those of two other acquaintances I asked to follow this guy. My profile is the one you mention.
He immediately came back with the "modality" of offering the long term, low interest, no questions asked loan. This is the third lad in one month offering loans on Facebook.
I suggest you send him a FB friend request. He will most likely accept it and make you an offer I'm sure you won't refuse. |
_________________
x 46
dear sir
after waiting at the airport for 3 hours i did not see you, i was there till the last pilot came out, what is the position , are you in belgium or still in usa pls write me back , am confused - Patrick Williams
you must be a mad man why can,t you understand simple language it your
stupid mother that have head like that of sadam hussien that was hang
may your mouth bend to your back idiot i am helping you and you are talking trash.
francis mensah |
|
|
|
Joaquin
419Eater is my life
Joined: 14 Mar 2005
Posts: 456
Location: Guatemala (GMT-6)
|
Posted:
Mon Mar 03, 2014 8:51 pm |
|
@blackbean: Your lad's email traces back to Redmond, Washington, U.S.A. Somehow I expected him (or her) to be in Africa. Maybe someone wants to double check this header.
Quote: |
Delivered-To: [email protected]
Received: by 10.170.67.85 with SMTP id j82csp70424ykj;
Mon, 3 Mar 2014 12:37:34 -0800 (PST)
X-Received: by 10.194.59.210 with SMTP id b18mr9926051wjr.60.1393879053651;
Mon, 03 Mar 2014 12:37:33 -0800 (PST)
Return-Path: <[email protected]>
Received: from dub0-omc3-s25.dub0.hotmail.com (dub0-omc3-s25.dub0.hotmail.com. [157.55.2.34])
by mx.google.com with ESMTP id pv1si12206260wjc.65.2014.03.03.12.37.33
for <[email protected]>;
Mon, 03 Mar 2014 12:37:33 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 157.55.2.34 as permitted sender) client-ip=157.55.2.34;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 157.55.2.34 as permitted sender) [email protected]
Received: from DUB129-W13 ([157.55.2.7]) by dub0-omc3-s25.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Mon, 3 Mar 2014 12:37:32 -0800
X-TMN: [kT/+232aKzmtmzIWEi3z2GG16YDozjMW]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_83525b01-a1c5-4b45-a8c2-0f853c174c87_"
From: nicole fromentin <[email protected]>
To: joaquin altami <[email protected]>
Subject: =?iso-8859-1?Q?RE:_Necesi?= =?iso-8859-1?Q?to_pr=E8stam?=
=?iso-8859-1?Q?o?=
Date: Mon, 3 Mar 2014 21:37:33 +0100
Importance: Normal
In-Reply-To:
<CAHqOPHZVdiQjP2XZtc6=uBC83G+jjx7KxVgjRXVT6avD9Jn02Q@mail.gmail.com>
References:
<CAHqOPHZVdiQjP2XZtc6=uBC83G+jjx7KxVgjRXVT6avD9Jn02Q@mail.gmail.com>
MIME-Version: 1.0
X-OriginalArrivalTime: 03 Mar 2014 20:37:32.0808 (UTC) FILETIME=[6744D880:01CF3720]
|
|
_________________
x 46
dear sir
after waiting at the airport for 3 hours i did not see you, i was there till the last pilot came out, what is the position , are you in belgium or still in usa pls write me back , am confused - Patrick Williams
you must be a mad man why can,t you understand simple language it your
stupid mother that have head like that of sadam hussien that was hang
may your mouth bend to your back idiot i am helping you and you are talking trash.
francis mensah |
|
|
|
Basinga
** WARNED **
Joined: 02 Aug 2013
Posts: 401
Location: Location: Location: Location: Sorry, can't find it
|
Posted:
Tue Mar 04, 2014 9:52 am |
|
IP resolves to Microsoft servers in Redmond because this lad is using Hotmail. It masks the sender IP, just like gmail.
This lad could be anywhere. |
|
|
|
|
WilliamHuang
Hello I'm New here!
Joined: 03 Mar 2014
Posts: 15
|
Posted:
Tue Mar 04, 2014 10:09 am |
|
Very well done profiles here.
Seems that very smart people are behind these
But right clicking their photos and "search google for this image" will reveal that those photos are taken from somewhere.
I wouldnt go into messing with them.
Its not so simple, could even be an organised crime syndicate behind these
Way too dangerous. |
|
|
|
|
B8er
Associate Boomdazzler
Joined: 16 Feb 2009
Posts: 13625
Location: In self-isolation practicing social distancing
|
Posted:
Tue Mar 04, 2014 10:16 am |
|
WilliamHuang wrote: |
I wouldnt go into messing with them.
Its not so simple, could even be an organised crime syndicate behind these
Way too dangerous. |
If you're taking adequate precautions to bait safely then this should not be a problem. Some of us regularly bait the East European crime gangs that target classifieds sites with fake car sales and fake job adverts.
The worst that has happened is that this forum, Scamwarners and AA419 got DDOS'd for a few days - it didn't stop us, we intensified our attack on them and carried on killing their websites while the forums were down. |
_________________ "I DENOUNCE THE MUFFIN MEN" - Ma Kim
"YOU ARE WALKING DEAD MAN. YOUR WOODEN COFFIN IS READY TO SWALLOW YOU AND YOUR DIRTY GENERATION"
"all chaps are ass-less by design otherwise they just be leather pants" - jose_cuervo
x 5
x 335 🚽
x 4 x 1746 x 1904 - Fake cheques: $4,392,620.83
Team Woody - Ghana to Singapore - 11535km |
|
|
|
Joaquin
419Eater is my life
Joined: 14 Mar 2005
Posts: 456
Location: Guatemala (GMT-6)
|
Posted:
Tue Mar 04, 2014 6:12 pm |
|
I don't see anything to worry about here, as long as the most basic safe baiting precautions are taken. The profiles in FB are pretty good. John Watson's is more elaborated than Fabio Delgado's.
But once you get them into EMail they use the same old stupid stories and scripts and become totally uncontrolled once you take them off script, which by the way is relatively easy with these lads, because someone actually reads your responses and tries to specifically address your "concerns".
BTW Watson claims to be in Qatar but his mail traces to Lagos. And Fabio claims to be in France, but as blackbean says he could be anywhere. |
_________________
x 46
dear sir
after waiting at the airport for 3 hours i did not see you, i was there till the last pilot came out, what is the position , are you in belgium or still in usa pls write me back , am confused - Patrick Williams
you must be a mad man why can,t you understand simple language it your
stupid mother that have head like that of sadam hussien that was hang
may your mouth bend to your back idiot i am helping you and you are talking trash.
francis mensah |
|
|
|
redo
Master of Master Baiters
Joined: 20 May 2013
Posts: 687
Location: Pushing lads' buttons
|
Posted:
Tue Mar 04, 2014 8:22 pm |
|
If you're curious where he really is, send him an email using SpyPig. It works better if you attach an image he has to open (like a fuzzy receipt or something). You'll be able to get his real IP.
And yes, don't worry about a thing. If these lads were capable of tracking their victims online, they wouldn't be wasting their time on FB scams. Basic precautions are good enough.
I used to be super paranoid, but now I even use Yahoo, which doesn't mask IPs. Lads never check, and if they did, the IP resolves to a city half an hour away. They'd need a court order to find my location. Oddly enough, I rather doubt they'd ever get one |
_________________ Porky, Petunia, & progeny:
x23
Mr. Cheater, Lagos to SH Accra
"to help us fish this people out any where they are this massage should not be forwarded to them or any body, Be very carefully what ever you are doing with these crocks" - Mark Smith
"Please proceed immediately and stop playing on yourself. Am i understood!!!??" - Barr. David
"Now i know you need to visit Rehab. Simple English you can't understand and you keep playing games, I regret having you here, please stop sending me emails." - Barr. David again
"I am sorry to say you lack gurts" - Bernard Hill
***Pimp Your Ride*** |
|
|
|
blackbean
Hello I'm New here!
Joined: 01 Mar 2014
Posts: 7
Location: Malaysia
|
Posted:
Wed Mar 05, 2014 7:48 am |
|
I have not requested friendship with him in FB yet because I don't have
a fake profile to use . Don't I need a few fake friends to make my
fake profile credible? I don't think I should involve my real friends surely?
Must make up a fake email too. Should I start a whole new email or use
a disposable alias via one of my real email account?
Thanks for the advice. |
|
|
|
|
Chuck U Farley
Not quite a Newb
Joined: 20 Feb 2014
Posts: 22
Location: Someplace in the USA
|
Posted:
Wed Mar 05, 2014 8:21 am |
|
Blackbean,
Just start playing Farmville and you will have more friends than you will know what to do with. None of them will really know who you are.
If this is creates a third party victim situation I will rescind. please ask your mentor in any event. |
_________________ All warfare is based on deception.
The Art of War. |
|
|
|
Basinga
** WARNED **
Joined: 02 Aug 2013
Posts: 401
Location: Location: Location: Location: Sorry, can't find it
|
Posted:
Wed Mar 05, 2014 10:24 am |
|
redo wrote: |
If you're curious where he really is, send him an email using SpyPig. It works better if you attach an image he has to open (like a fuzzy receipt or something). You'll be able to get his real IP. |
I do this myself now. I have my own webserver.
If a lad is using an email that masks his IP, I wait for the point in the bait where he wants me to send him something, a scan of documents, ID or something like that that will make him allow his email to display images.
In the body code of the email I I hide in there a link to a small, invisible image hosted on my webserver.
Lad opens email, accepts images, his PC sends a request for the images from my webserver and hey presto, his IP is logged. Works every time
Chuck U Farley wrote: |
Just start playing Farmville and you will have more friends than you will know what to do with. None of them will really know who you are. |
Not advisable, this will actually help to bring your lads into contact with ITPs.
Befriend your fellow baiters. There's a few here with fake FB profiles. C.D.XIX... |
|
|
|
|
B8er
Associate Boomdazzler
Joined: 16 Feb 2009
Posts: 13625
Location: In self-isolation practicing social distancing
|
Posted:
Wed Mar 05, 2014 1:38 pm |
|
Basinga wrote: |
Lad opens email, accepts images, his PC sends a request for the images from my webserver and hey presto, his IP is logged. Works every time
|
Have you tried this recently for a Gmail user? |
_________________ "I DENOUNCE THE MUFFIN MEN" - Ma Kim
"YOU ARE WALKING DEAD MAN. YOUR WOODEN COFFIN IS READY TO SWALLOW YOU AND YOUR DIRTY GENERATION"
"all chaps are ass-less by design otherwise they just be leather pants" - jose_cuervo
x 5
x 335 🚽
x 4 x 1746 x 1904 - Fake cheques: $4,392,620.83
Team Woody - Ghana to Singapore - 11535km |
|
|
|
Basinga
** WARNED **
Joined: 02 Aug 2013
Posts: 401
Location: Location: Location: Location: Sorry, can't find it
|
Posted:
Wed Mar 05, 2014 2:19 pm |
|
B8er wrote: |
Basinga wrote: |
Lad opens email, accepts images, his PC sends a request for the images from my webserver and hey presto, his IP is logged. Works every time
|
Have you tried this recently for a Gmail user? |
Haven't baited any gmail lads recently, but if you're saying it wouldn't work, I don't see why it wouldn't. It works fine with hushmail and hotmail.
Afterall, it isn't the webmail provider that fetches the images from my server. HTML in the email body tells the client where to find the image when he opens the email. Most webmails these days will initially block this and ask your permission to show web sourced images, and when you say yes, it's your machine that sends the request to my server for it. And when it does, the IP gets logged on my server.
I haven't bothered to check this myself, but I assume gmail works the same way. |
|
|
|
|
B8er
Associate Boomdazzler
Joined: 16 Feb 2009
Posts: 13625
Location: In self-isolation practicing social distancing
|
Posted:
Wed Mar 05, 2014 2:30 pm |
|
Gmail changed this late last year/early this year. They now cache the image on their server, so all you see is the Googe IP address.
Have a search online and you will see the email marketing industry moaning about being unable to track leads any more. |
_________________ "I DENOUNCE THE MUFFIN MEN" - Ma Kim
"YOU ARE WALKING DEAD MAN. YOUR WOODEN COFFIN IS READY TO SWALLOW YOU AND YOUR DIRTY GENERATION"
"all chaps are ass-less by design otherwise they just be leather pants" - jose_cuervo
x 5
x 335 🚽
x 4 x 1746 x 1904 - Fake cheques: $4,392,620.83
Team Woody - Ghana to Singapore - 11535km |
|
|
|
|