[AMC-list] SCAMMERS! (updated for amcers)

["Eddie Stakes" <eddiestakes@xxxxxxxxxxxxxxxxxxxx>]

It has been awhole but figured would post this again for some of you who from time to probably get scammers emailing you saying they have what you looking for. This one below had same line of sh*t off a gmail.com account, while looks like gmail, with their lax security (used to be walla.com) has become the scammer choice of emails, right behind live.com except live.com is quick to terminate accounts once scammers reported. Gmail is slower than a rambler at indy.

So what do you do? Below is the scammers generic line of BS. Sometimes they actually almost know what they are talking about. 


----- Original Message ----- 
From: Gary Buchannan 
To: eddiestakes@xxxxxxxxxxxxxxxxxxxx 
Sent: Thursday, June 11, 2009 6:19 AM
Subject: Wanted: 67-68 Rebel convertible roof top frame. eddiestakes@xxxxxxxxxxxxxxxxxxxx or call me at 713-464-8825. 

      Hi Mate !

      My name is Gary Buchannan from London UK. I saw your Wanted Ad so I decided to write you as I have the item(s) in stock. Get back to me ASAP if you are still interested. What's your cell # ?

      Thanks,
      Gary Buchannan
      N17 9YA London UK
      +447024079228
      ================================

      Mate my ass, you are scammer! So what you do is right click your mouse on their email. A screen will pop up that says: PROPERTIES at the bottom. Click on PROPERTIES. Then click on DETAILS and COPY IT. Once copied, then paste it to the scammers email and forward it to their server, which usually shuts them down quickly, except gmail which is slow as hell. In the TO line always put abuse@ whoever.com and if you look really closely.....farther down the internet headers, 90% of the scammers have different REPLY TO email address, which means their initial email is forged, duh. If no REPLY  TO then simply forward it to the server shown. In this case it is yahoo, so email go to abuse@xxxxxxxxx Here are the internet headers off the scammers email one would forward:

      ============================== 

Return-Path: <gary.buchannan@xxxxxxxxx>
Delivered-To: eddiestakes@xxxxxxxxxxxxx
Received: (qmail 20687 invoked by uid 78); 11 Jun 2009 11:19:13 -0000
Received: from unknown (HELO ns-mr16.netsolmail.com) (205.178.146.50)
  by 0 with SMTP; 11 Jun 2009 11:19:13 -0000
Received: from n6a.bullet.mail.ac4.yahoo.com (n6a.bullet.mail.ac4.yahoo.com [76.13.13.69])
 by ns-mr16.netsolmail.com (8.13.6/8.13.6) with SMTP id n5BBJCkW013901
 for <eddiestakes@xxxxxxxxxxxxxxxxxxxx>; Thu, 11 Jun 2009 07:19:12 -0400
Received: from [76.13.13.25] by n6.bullet.mail.ac4.yahoo.com with NNFMP; 11 Jun 2009 11:19:12 -0000
Received: from [76.13.10.179] by t4.bullet.mail.ac4.yahoo.com with NNFMP; 11 Jun 2009 11:19:12 -0000
Received: from [127.0.0.1] by omp120.mail.ac4.yahoo.com with NNFMP; 11 Jun 2009 11:19:12 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 437352.76897.bm@xxxxxxxxxxxxxxxxxxxxxxxxx
Received: (qmail 33080 invoked by uid 60001); 11 Jun 2009 11:19:12 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1244719152; bh=cx/ywslVhRYfDrt0mxWdZ88wBDFI/RiGjJWdATAYh6E=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=0IJmSFXgRfaSa9mn3vA9/GsEa2bIXiEMOZODuJPBun0Y16eUbeXJVTx6thiDdoJFhZrMX3qD1F9/UsI4BKItLAT/ci4dsKMEgeaJzpeI06pS2ISxfrTaYMaeCJe3SHUiTTF1sjK/5xii9RBGZFSc2ZFTFJEoDruaiY5tS6xSlHE=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
  b=nkzYU/CXSzgGgez1LtBokJenDKPnC6YEgqYmjo6Mieagt29PIPcNwH8S4/QpAKcZH0NzzPmzPqqhvoSCFiButuDMC/4pumaQMoBS89BJ2TstpyAU8xV0y/44kcUJSXhQign18VK4JU++fYfAYFG9yzmAroyJFig4qrnATxSMG6U=;
Message-ID: <254807.31017.qm@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
X-YMail-OSG: slhPw2kVM1lYeP07eeMAQH8UxNeG0CPItzILRzDj4_7_lDF6CNPuy9W12_XM3nxkCJy6HZIoy9IQg9Ngb7Thm_SDT43SL_UD_F6oYpp.8OiOyVpH4OWgSJMG3ItFQ0pmaQSsvLK79CT8ZEhmo394bEsD5BnHXAUft6nG.n7rwYtLVvlMKQA7jvBESgtnmVSdf2o7Q7zPBDQHtpDOhnbhVXJxAX.mXADbcSaCyVMjDWjlYtuaF1B5PliEx0i.BoseNyFwrrSRxSS.Hj9tJChYKqc6K.vF.Afpet8hqN3wy_yJTQLnSuG2LX3a0n0xCGc6cNdlPp5hdjQOOPMpSsVy2kTeUz1wMWSBfAtkUOZTbxE8YCxHc_UbLTy2Mw--
Received: from [86.62.23.210] by web59912.mail.ac4.yahoo.com via HTTP; Thu, 11 Jun 2009 04:19:12 PDT
X-Mailer: YahooMailClassic/5.4.12 YahooMailWebService/0.7.289.15
Date: Thu, 11 Jun 2009 04:19:12 -0700 (PDT)
From: Gary Buchannan <gary.buchannan@xxxxxxxxx>
Subject: Wanted: 67-68 Rebel convertible roof top frame. eddiestakes@xxxxxxxxxxxxxxxxxxxx or call me at 713-464-8825. 
To: eddiestakes@xxxxxxxxxxxxxxxxxxxx
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1086123785-1244719152=:31017"

===============================
looks long but all emails have digital signature, even forged ones. So yahoo can quickly wipe out the scammers whole account. Unfortunately the scammers usually pop uplike bad case of herpes with other accounts, like this one did from gmail to yahoo, and as I write is probably opened up a hotmail account knowing their yahoo account terminated. Still you can protect yourself out there with scam emails so hopefull this will help some of you out who get stuff like this occasionally. 

Eddie Stakes
PS: a google.com search for a**hole nigerians (you have to add the ss in search) turns up a funny but obscure file on my site dealing with scammers, dead dictators, and kings who wish to share their $55 milllion with you.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://list.amc-list.com/pipermail/amc-list-amc-list.com/attachments/20090611/83c3c33c/attachment.htm>
_______________________________________________
AMC-list mailing list
AMC-list@xxxxxxxxxxxx
http://list.amc-list.com/listinfo.cgi/amc-list-amc-list.com