SmartFeedSmartFeed          

Porsche Hangout


WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 Potential Scamming?

View next topic
View previous topic
 
This forum is locked: you cannot post, reply to, or edit topics.This topic is locked: you cannot edit posts or make replies.
Author Message
dirty_bird
Hello I'm New here!


Joined: 26 Feb 2005
Posts: 16


PostPosted: Wed Jun 28, 2006 10:13 am Reply with quoteBack to top

Airline codes wrote:

IATA Code: BA
ICAO Code: BAW
IATA Accounting / Prefix Code: 125


Ticket number should be 125 xxxx xxx xxx if BA issued the ticket or the originating outgoing flight is on BA. 016 is united. 001 is American. None of this should vary from country to country as it's set by international treaty.
View user's profileSend private message
Joe King
Not quite a Newb


Joined: 28 Jun 2006
Posts: 41
Location: California, United State, yo.


PostPosted: Wed Jun 28, 2006 10:26 am Reply with quoteBack to top

Doesn't look like I mentioned it, but she was asking for the $2000 for the BTA amount and said if she didn't get it, she was going to die.
View user's profileSend private message
dirty_bird
Hello I'm New here!


Joined: 26 Feb 2005
Posts: 16


PostPosted: Wed Jun 28, 2006 10:46 am Reply with quoteBack to top

BA0085 goes from London Heathrow to Vancouver, B.C.

BA Website wrote:


17:15 Depart Heathrow (London)
18:35 Arrive Vancouver

BA0085 British Airways


You can book it here:

http://www.britishairways.com/travel/fx/public/en_gb

Just put in some fake dates. Originating airport is LHR. Destination is YVR for Vancouver, B.C.
View user's profileSend private message
Joe King
Not quite a Newb


Joined: 28 Jun 2006
Posts: 41
Location: California, United State, yo.


PostPosted: Wed Jun 28, 2006 10:59 am Reply with quoteBack to top

Yeah, I just went through and checked prices for it. Can't fly out of Nigeria, but you can fly to it from LAX in California.

Total $ 2,399.40 Including Taxes

Overall money he sent was $2440, over a period of a month or so. The $1700 was for the flight, and the rest of it was for paying for her Internet and a phone bill, I think, all of it wired Western Union.


The Western Union bills (I'm looking at the receipt) were made out to a Sanmi Kelvin Tobi.
View user's profileSend private message
dirty_bird
Hello I'm New here!


Joined: 26 Feb 2005
Posts: 16


PostPosted: Wed Jun 28, 2006 11:04 am Reply with quoteBack to top

Well, between the pics from the modeling website & the fake airline confirmation, your pop should have enough info to see what's happening.

Victims very often will keep sending money, even after they have been warned by their family members & the authorities. That's a tough one.
View user's profileSend private message
Joe King
Not quite a Newb


Joined: 28 Jun 2006
Posts: 41
Location: California, United State, yo.


PostPosted: Wed Jun 28, 2006 11:17 am Reply with quoteBack to top

Thankfully, from showing him this, he finally believes me.
View user's profileSend private message
BattleHawk77
Master of Master Baiters


Joined: 30 Nov 2005
Posts: 609
Location: 7.2° N, 5.9° E, FL410, Heading 230, aboard Striker 419


PostPosted: Wed Jun 28, 2006 11:31 am Reply with quoteBack to top

Also, that flight info is way past bogus. BAW0074 goes from Lagos to Heathrow. And, as it has been mentioned BAW0085 goes from Heathrow to Vancouver. Also, Riverside, CA does not have ANY scheduled commercial passenger service. And the only British Airways flights coming into LAX are coming straight from Heathrow (flights 269, 279, and 283).

EDIT: I see he finally believes this is a scam. Very good to hear. Smile

_________________
My name is Hawk. Battle Hawk. Smile
---------
"It’s my pleasure to have your mail confirming earlier discussion had with Mr GREG who had sort my Chambers services on your behalf"
"THank you so much for this update and I am very mush happy to know that the bank has conted you. Please do send them all the required informations today along with the fees as mentioned. This is to make sure that you make ahead of time."
"I only signed for your trnasfer approval due to that i want you to proof to you we dont run a scam here and we wont tolerate that words from you anymore."

Closed lad accounts x6, with thanks to James and Joseph
First site kill
United KingdomNigeriaUnited StatesSpainCambodia FlagBenin
View user's profileSend private message
Joe King
Not quite a Newb


Joined: 28 Jun 2006
Posts: 41
Location: California, United State, yo.


PostPosted: Wed Jun 28, 2006 11:46 am Reply with quoteBack to top

Aye, agreed.

I went ahead and got a direct copy of the email heaader from his computer. I had him copy/paste the whole thing, so I'll edit this post in a bit and supply some pertinent data.

Most relevant data, admist a crapload of Javascript that could be found.

action="/ym/blocksender2?box=
Marry&MsgId=4851_244067_6249_1797_862_0_62_2489_1404266912&inc
=&Search=&YY=77445&order=down&sort=date&pos=0&view=a&head=b">

Note the Message ID.


Last edited by Joe King on Wed Jun 28, 2006 12:40 pm; edited 2 times in total
View user's profileSend private message
Scam Patroller
Baiting Guru


Joined: 08 Jul 2004
Posts: 11852
Location: UK


PostPosted: Wed Jun 28, 2006 11:52 am Reply with quoteBack to top

Something that might interest your father, get him to read the forums on this site:

www.internet-love-scams.org

www.internet-love-scams.org/forum

There are many stories on there just like your fathers, glad to hear he has realised it's a scam!

_________________
Pith Helmet 10 Safari Safari Safari Safari Safari Safari Safari Safari Suitcase
40x Nigeria 4x South Africa 2x Ghana 2x Benin 10x Ivory Coast 34x United Kingdom 17x United States 9x Spain 1x Belgium 1x 6x European Union 4x Canada 1x New Zealand 6x Netherlands 1x pyramid 23x Cellphone Jolly Roger
Vcamera YMCA Vcamera Summer Holdiay + Bus Hijack

www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery
View user's profileSend private message
Scam Patroller
Baiting Guru


Joined: 08 Jul 2004
Posts: 11852
Location: UK


PostPosted: Wed Jun 28, 2006 12:20 pm Reply with quoteBack to top

Kazlor wrote:
Most relevant data, admist a crapload of Javascript that could be found.

action="/ym/blocksender2?box=Marry&MsgId=4851_244067_6249_
1797_862_0_62_2489_1404266912&inc=&Search=&YY=77445&order
=down&sort=date&pos=0&view=a&head=b">

Note the Message ID.


Can you post the full headers please, we cannot learn anything from what you posted above.

_________________
Pith Helmet 10 Safari Safari Safari Safari Safari Safari Safari Safari Suitcase
40x Nigeria 4x South Africa 2x Ghana 2x Benin 10x Ivory Coast 34x United Kingdom 17x United States 9x Spain 1x Belgium 1x 6x European Union 4x Canada 1x New Zealand 6x Netherlands 1x pyramid 23x Cellphone Jolly Roger
Vcamera YMCA Vcamera Summer Holdiay + Bus Hijack

www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery

Last edited by Scam Patroller on Wed Jun 28, 2006 12:22 pm; edited 1 time in total
View user's profileSend private message
Joe King
Not quite a Newb


Joined: 28 Jun 2006
Posts: 41
Location: California, United State, yo.


PostPosted: Wed Jun 28, 2006 12:21 pm Reply with quoteBack to top

Scam Patroller,



Are you sure? The entire thing is about 60k in size.
View user's profileSend private message
Scam Patroller
Baiting Guru


Joined: 08 Jul 2004
Posts: 11852
Location: UK


PostPosted: Wed Jun 28, 2006 12:23 pm Reply with quoteBack to top

Nope, it's just a small bit of text, this is what full headers look like:

Quote:
From [email protected] Wed Jun 28 02:32:39 2006
X-Apparently-To: [email protected] via 217.146.188.204; Wed, 28 Jun 2006 07:59:21 +0000
X-YahooFilteredBulk: 217.110.105.71
X-Originating-IP: [217.110.105.71]
Return-Path: <[email protected]>
Authentication-Results: mta820.mail.ukl.yahoo.com
from=rs2.de; domainkeys=neutral (no sig)
Received: from 217.110.105.71 (HELO mail.topradio.de) (217.110.105.71)
by mta820.mail.ukl.yahoo.com with SMTP; Wed, 28 Jun 2006 07:59:21 +0000
Received: (qmail 12259 invoked by uid 1015); 28 Jun 2006 02:32:41 -0000
Cc: recipient list not shown: ;
Received: from 217.194.137.170 ([217.194.137.170])
by mail2.rs2.de (IMP) with HTTP
for <[email protected]@localhost>; Wed, 28 Jun 2006 04:32:39 +0200
Message-ID: <[email protected]>
Date: Wed, 28 Jun 2006 04:32:39 +0200
From: [email protected]
Subject: Reliable representative needed
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
User-Agent: Internet Messaging Program (IMP) 3.2.3
X-Originating-IP: 217.194.137.170
Content-Length: 1348


Can you break that long line of text action="/ym/blocksender2?box=Marry&MsgI like I did as it's blowing the forum out, cheers

_________________
Pith Helmet 10 Safari Safari Safari Safari Safari Safari Safari Safari Suitcase
40x Nigeria 4x South Africa 2x Ghana 2x Benin 10x Ivory Coast 34x United Kingdom 17x United States 9x Spain 1x Belgium 1x 6x European Union 4x Canada 1x New Zealand 6x Netherlands 1x pyramid 23x Cellphone Jolly Roger
Vcamera YMCA Vcamera Summer Holdiay + Bus Hijack

www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery
View user's profileSend private message
Joe King
Not quite a Newb


Joined: 28 Jun 2006
Posts: 41
Location: California, United State, yo.


PostPosted: Wed Jun 28, 2006 12:25 pm Reply with quoteBack to top

Going through it all now. I'm not finding anything about a MIME version or anything like that.
View user's profileSend private message
BattleHawk77
Master of Master Baiters


Joined: 30 Nov 2005
Posts: 609
Location: 7.2° N, 5.9° E, FL410, Heading 230, aboard Striker 419


PostPosted: Wed Jun 28, 2006 12:27 pm Reply with quoteBack to top

In order to see the headers on Yahoo, go into the optionsthe, to the mail view and choose the "Full View" option. Then you should see the headers on that e-mail.

_________________
My name is Hawk. Battle Hawk. Smile
---------
"It’s my pleasure to have your mail confirming earlier discussion had with Mr GREG who had sort my Chambers services on your behalf"
"THank you so much for this update and I am very mush happy to know that the bank has conted you. Please do send them all the required informations today along with the fees as mentioned. This is to make sure that you make ahead of time."
"I only signed for your trnasfer approval due to that i want you to proof to you we dont run a scam here and we wont tolerate that words from you anymore."

Closed lad accounts x6, with thanks to James and Joseph
First site kill
United KingdomNigeriaUnited StatesSpainCambodia FlagBenin

Last edited by BattleHawk77 on Wed Jun 28, 2006 12:28 pm; edited 1 time in total
View user's profileSend private message
Joe King
Not quite a Newb


Joined: 28 Jun 2006
Posts: 41
Location: California, United State, yo.


PostPosted: Wed Jun 28, 2006 12:28 pm Reply with quoteBack to top

X-Apparently-To: Dad's [email protected] via 206.190.58.175; Sun, 18 Jun 2006 07:24:21 -0700
X-Originating-IP: [209.191.86.252]
Return-Path: <[email protected]>
Authentication-Results: mta250.mail.re2.yahoo.com from=yahoo.com; domainkeys=pass (ok)
Received: from 209.191.86.252 (HELO web39101.mail.mud.yahoo.com) (209.191.86.252) by mta250.mail.re2.yahoo.com with SMTP; Sun, 18 Jun 2006 07:24:21 -0700

Received: (qmail 24885 invoked by uid 60001); 18 Jun 2006 14:24:21
-0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-
Type:Content-Transfer-Encoding; b=3xorDjsZUXUOb/1Nz7JGEdJurWSF7ULterb+yWtJjrch3SS/4eGfuhKoG
VZi3xG1feJOS/qNrkhEP1U2jUD5KAtkJ5xkM0khAmsYGODgLitgqYkZjCo
7Nw3+tyOKW+P6MfoaMbiC0XDQS8Zuod0EN/LNH2st40aVKHnLEyc8zhI= ;
Message-ID: <[email protected]>
Received: from [81.199.62.132] by web39101.mail.mud.yahoo.com via HTTP; Sun, 18 Jun 2006 07:24:21 PDT
Date: Sun, 18 Jun 2006 07:24:21 -0700 (PDT)
From: Send an Instant Message "marry williams" <[email protected]> View Contact Details View Contact Details Add Mobile Alert
Yahoo! DomainKeys has confirmed that this message was sent by yahoo.com. Learn more
Subject: My Amor
To: Dad's [email protected]
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1931766421-1150640661=:23713"
Content-Transfer-Encoding: 8bit
Content-Length: 862



MUCH better, thanks for allowing me my bonehead moment.


Last edited by Joe King on Wed Jun 28, 2006 12:41 pm; edited 2 times in total
View user's profileSend private message
Scam Patroller
Baiting Guru


Joined: 08 Jul 2004
Posts: 11852
Location: UK


PostPosted: Wed Jun 28, 2006 12:37 pm Reply with quoteBack to top

They are probably in a Nigerian internet cafe as they often use Israeli satellite connections, as this GILAT SATCOM IP is:

Quote:
WHOIS results for 81.199.62.132


Location: Israel (high)

% Information related to '81.199.62.0 - 81.199.63.255'

inetnum: 81.199.62.0 - 81.199.63.255
netname: GilatSatcom-14
descr: Gilat Satcom Range
country: IL
admin-c: TECH6-RIPE
tech-c: TECH6-RIPE
status: ASSIGNED PA
mnt-by: AS12491-MNT
mnt-lower: AS12491-MNT
changed: **********@ripe.net 20060213
source: RIPE

person: Tech IP Planet
address: 21 Yegia Kapaim St.
address: Petach-Tikva
address: Israel
phone: +972 3 9255015
fax-no: +972 3 9217938
e-mail: ***@gilat.net
abuse-mailbox: *****@gilat.net
nic-hdl: TECH6-RIPE
notify: ***@gilat.net
mnt-by: AS12491-MNT
changed: ***@gilat.net 20060213
source: RIPE

% Information related to '81.199.62.0/23AS12491'

route: 81.199.62.0/23
descr: Gilat Satcom
origin: AS12491
mnt-by: AS12491-MNT
mnt-routes: AS12491-MNT
changed: **********@ripe.net 20060213
source: RIPE

_________________
Pith Helmet 10 Safari Safari Safari Safari Safari Safari Safari Safari Suitcase
40x Nigeria 4x South Africa 2x Ghana 2x Benin 10x Ivory Coast 34x United Kingdom 17x United States 9x Spain 1x Belgium 1x 6x European Union 4x Canada 1x New Zealand 6x Netherlands 1x pyramid 23x Cellphone Jolly Roger
Vcamera YMCA Vcamera Summer Holdiay + Bus Hijack

www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery
View user's profileSend private message
wallace
Not quite a Newb


Joined: 26 Jan 2006
Posts: 51
Location: the frozen north


PostPosted: Wed Jun 28, 2006 12:39 pm Reply with quoteBack to top

I once baited a marry williams at [email protected].
Then she was just running a standard 419 and her picture was very different.

_________________
"mind you that my name is Mr Yahaya not hahaha" - Mr Yohoho

"i'm not a SILLI BILLY my name is anthony kone" - Anthony Kone
View user's profileSend private message
Joe King
Not quite a Newb


Joined: 28 Jun 2006
Posts: 41
Location: California, United State, yo.


PostPosted: Wed Jun 28, 2006 12:44 pm Reply with quoteBack to top

Funky. And I just ran it through a spam database.

http://www.dnsstuff.com/tools/ip4r.ch?ip=81.199.62.132

And

http://tqmcube.com/cgi-bin/rbltqm?ip=81.199.62.132
View user's profileSend private message
Joe King
Not quite a Newb


Joined: 28 Jun 2006
Posts: 41
Location: California, United State, yo.


PostPosted: Wed Jun 28, 2006 2:55 pm Reply with quoteBack to top

She's back online currently, if anyone cares to give it another go. I'd love to see this one go down.
View user's profileSend private message
Scam Patroller
Baiting Guru


Joined: 08 Jul 2004
Posts: 11852
Location: UK


PostPosted: Wed Jun 28, 2006 3:02 pm Reply with quoteBack to top

Just checked she (he) is either off line or has blocked me from IM'ing them.

Quote:
marry williams appears to be offline and will receive your messages after signing in.

_________________
Pith Helmet 10 Safari Safari Safari Safari Safari Safari Safari Safari Suitcase
40x Nigeria 4x South Africa 2x Ghana 2x Benin 10x Ivory Coast 34x United Kingdom 17x United States 9x Spain 1x Belgium 1x 6x European Union 4x Canada 1x New Zealand 6x Netherlands 1x pyramid 23x Cellphone Jolly Roger
Vcamera YMCA Vcamera Summer Holdiay + Bus Hijack

www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery

Last edited by Scam Patroller on Wed Jun 28, 2006 3:03 pm; edited 1 time in total
View user's profileSend private message
Joe King
Not quite a Newb


Joined: 28 Jun 2006
Posts: 41
Location: California, United State, yo.


PostPosted: Wed Jun 28, 2006 3:03 pm Reply with quoteBack to top

I'm watching my father type to her on his computer at this moment. He just got buzzed for taking so long to reply.
View user's profileSend private message
Scam Patroller
Baiting Guru


Joined: 08 Jul 2004
Posts: 11852
Location: UK


PostPosted: Wed Jun 28, 2006 3:04 pm Reply with quoteBack to top

Damn, must have blocked me then Evil or Very Mad

_________________
Pith Helmet 10 Safari Safari Safari Safari Safari Safari Safari Safari Suitcase
40x Nigeria 4x South Africa 2x Ghana 2x Benin 10x Ivory Coast 34x United Kingdom 17x United States 9x Spain 1x Belgium 1x 6x European Union 4x Canada 1x New Zealand 6x Netherlands 1x pyramid 23x Cellphone Jolly Roger
Vcamera YMCA Vcamera Summer Holdiay + Bus Hijack

www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery
View user's profileSend private message
Joe King
Not quite a Newb


Joined: 28 Jun 2006
Posts: 41
Location: California, United State, yo.


PostPosted: Wed Jun 28, 2006 3:07 pm Reply with quoteBack to top

Well, that sucks. Makes me want to get a mentor.

Oh, and I've got a good (sad, actually) one for you. He's taken up using Yahoo's little matchmaker bit instead of Match.com's. He won't change his info for it, either.
View user's profileSend private message
Scam Patroller
Baiting Guru


Joined: 08 Jul 2004
Posts: 11852
Location: UK


PostPosted: Wed Jun 28, 2006 3:17 pm Reply with quoteBack to top

I just added her to my Usman Bello contacts, she called me a scammer Rolling Eyes

_________________
Pith Helmet 10 Safari Safari Safari Safari Safari Safari Safari Safari Suitcase
40x Nigeria 4x South Africa 2x Ghana 2x Benin 10x Ivory Coast 34x United Kingdom 17x United States 9x Spain 1x Belgium 1x 6x European Union 4x Canada 1x New Zealand 6x Netherlands 1x pyramid 23x Cellphone Jolly Roger
Vcamera YMCA Vcamera Summer Holdiay + Bus Hijack

www.scamwarners.com - www.scam-info-links.info - www.aa419.org - The Numpties Gallery
View user's profileSend private message
Joe King
Not quite a Newb


Joined: 28 Jun 2006
Posts: 41
Location: California, United State, yo.


PostPosted: Wed Jun 28, 2006 3:31 pm Reply with quoteBack to top

I'd imagine the leet speak (or so I assume it is) might scare them off?
View user's profileSend private message
Display posts from previous:      
This forum is locked: you cannot post, reply to, or edit topics.This topic is locked: you cannot edit posts or make replies.


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



** Find out information about your IP address **


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT