Information on romance scams and scammers.
#58387 by Pandora_1975 Sun Jul 10, 2011 3:30 pm
Last email from my scammer...Sgt Steve Bowel deployed Afghanistan? Yeah right.

[email protected]

Hello my Darling

How are my kids doing over there and you my honnie?Hope everything is going on well?Have missed you alot hun......I told you haven't have much time here babe,i was bussy all day hun......I hate missing you,so please hun pay for the phoning so that we gonna call each other whenever we want ok......Have comfirmed how much is it from my commander and he said is gonna cost $200 USD.............Or you can email my commander for more detail.This is my commd email [email protected]..........Have a wonderful day long hun...Bye

Thinking about you

Steve


X-Apparently-To: REMOVED Thu, 07 Jul 2011 09:24:11 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: UqilZSsWLDuxY_uY8If1Sv8Bu2g2_KkzA4rb5cLQdHc7l60o 5zzdPQo1hnWiEltJimz6.YpgBQL8kWQADPQMsZB7aJ6nMJvT0lUvZxaR0L4J U6DVPAe1Hi7WloLac3I9cqj3WnZQ.gUE73FcYV_R.VLimVhSkEvetG6PROVN qt35YMYU.kSvdC5wmhjl14IL1Um96yjl.C_NaUhgcEzWq966uXJZkJPEMSYt K0270EYEOIc9UWh3fdH_T1xc9JvAMMwq02IXiL5FLest.Dae99PKr.DlRUgr 0nHQwOr.2UCZjCJMOG0UEl3wgUZRf0iKXHAB81UclUB0Iztw5jDOaS8gwAKS XjADl3DUcDX.QET4Lq9MEVMXNSaRCufFEUiuJxte4mRXAyMNNIqs5HU7CV9g 1pv.L8NfOUOMgDsOXATjSSOIq._tP4GpH.ujlOUi4op1iuymRN6umjE8XR5D 0XIJyQz0FUHxIE5u.e1DlFQe9BS5VEbi7N39Ywmer7KdUs4YR0d3QtGI57Y0 gMx92o_y2rzAQBAaWda_S12VRJt3P1QO4phGFr28bzPI0ZPUzzMhiNNPdB8a euT8D7HZ4TIig0B1P_s5XpdxupgWJ.aIQGQzQ7P3vNxGY6FREh3gc9vyREDv 3aRCmf0AuSGKHCmUCnoGc3e1e8gXpZBB76lu_EaH_zNWPJP6J9zK9q41qfP0 naCK3gj6y3qtKbiCViOOynB_tRI1JsWqHONtQ1NlPKlH4dnAg665h8c5FnhY LIEwQAcvPO1G_9nFYe7jbdyzvlFBXGEMBwspPjdvCNQ3CAU2NaeV4oMLt7ew KBqt97UeaO6n02wmwNErgtwFnp5dC_7Y1L50UIQbCf4WomLLim6iJsURhEu5 Lne198y2nwHsdzg4TYfvfRCbNrwQZeoByHrSdt5JQ4ciCDuUoCx5TMQBAGO8 XpiLlUWuW47B7SiOznQJ02z29iyh2GnkD41_eOjDsacuwQcF0rtR8L3aIyXI HYz7GPy_6U2fVt6.4JMTbsha4KsxmRJYEN7T4FBYubwT9CMkBl3UZnDoTV3t dL7sdFmXG9CjWU9PL3BxnHjZLpAlPfwms430flcSxw9DIoL1NXYQFCqEYPer v0UKh1aUh.2XPU_Jns2p_ieT9ONNH4hU4tXtgf5k3_wtlDEpieRZyqgHU2GT fX8wkM7m_Q--
X-Originating-IP: [98.138.91.17]
Authentication-Results: mta1232.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm1-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.17) by mta1232.mail.mud.yahoo.com with SMTP; Thu, 07 Jul 2011 09:24:11 -0700
Received: from [98.138.90.55] by nm1.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jul 2011 16:24:11 -0000
Received: from [98.138.88.238] by tm8.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jul 2011 16:24:11 -0000
Received: from [127.0.0.1] by omp1038.mail.ne1.yahoo.com with NNFMP; 07 Jul 2011 16:24:11 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 10394 invoked by uid 60001); 7 Jul 2011 16:24:11 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1310055850; bh=d7UdVhJMIH3dkbyTC8s74tOgE4zi63jJjfyf/lSJD2E=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=0qoM4MpdEQ4SIFeTSudXgx+EpB23rf8waDvhreJL3DaCZw8eNyVqTfxj31JontLZOALQVDYldxVq/Qa3BYLfO726mBK6bAw/4Po0uxKJsZq7HNVO5sFfMF09f1TUCyGqNo7Qief9D39QID8+3Iyhqogvsf2H6bsW4j4BfaoEg3s=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=pCQqkt43nJhmXxXQbqZqucRG/FRYKrZFfZ6KX+N7utaUyv1B4JmP3OBq0Gfyp7g8wta9VVXc3wzEy0aLTtnmtih1L0PICqw8K9t+E59L8lWqIZ6DBYHdnjdGZunbCdZt0mXSWC9tosoNyR4wSR+xe3/DjaSrKlGB+oKupkx8VlA=;
X-YMail-OSG: 3p.YgD8VM1lyKRKDE_B7i5XqbRvV_HKoEO4dVJ1KpQcgOlq CLAgAM7SDlbTWnj5L9suLc.nmTcoTp1k.qla73fDVfvPkqgdf8FYOli.rUxL Ls1sxhpafG9PCiREkiYBI8QfS671Ac.NNBez8LX8elQtemOxZU9pcWrWfqfI aT3d6KsKP25yfphbu1n8mLTasHnMVBwCdTeD1_0RVF9HlLpv7V7FbQD0MiJF bnBaF248OlnVa.esgb7RF.Dd.0jPctTm59o68FdNLd_5dRwwwDW9___47fK2 312WSHv55XRQ0.I3auUk82HMXitze.cmsrUeIK_jFjFWt91zw4VLbyLn9gyo eDMd7vkIe_w8.CQ--
Received: from [174.132.66.114] by web120917.mail.ne1.yahoo.com via HTTP; Thu, 07 Jul 2011 09:24:10 PDT
X-Mailer: YahooMailClassic/14.0.3 YahooMailWebService/0.8.112.307740
Message-ID: <[email protected]>
Date: Thu, 7 Jul 2011 09:24:10 -0700 (PDT)
From: This sender is DomainKeys verified Steven Bowel <[email protected]> Add sender to Contacts
Subject: HI
To: REMOVEDIn-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1619732423-1310055850=:1406"
Content-Length: 1556
Last edited by Pandora_1975 on Mon Jul 11, 2011 2:22 pm, edited 3 times in total.
Advertisement

#58445 by Bubbles Mon Jul 11, 2011 3:18 am
Welcome to ScamWarners Pandora_1975 . Thank you for posting up the "commander's" email address.
can you please post up the email address from "Mr. Bowels".

If you know how to find the Headers information, please post that up too.

I trust you have ceased communication with this scammer. This is particularly important when they have real life information about you, including your real email address.

We are glad you are here. Thank you for adding to the information here.

Bubbles, former Scamwarners moderator.

Rest in Peace 24 June 2015.

Gone, but never forgotten.
#58503 by Pandora_1975 Mon Jul 11, 2011 2:29 pm
Bubbles wrote:Welcome to ScamWarners Pandora_1975 . Thank you for posting up the "commander's" email address.
can you please post up the email address from "Mr. Bowels".

If you know how to find the Headers information, please post that up too.

I trust you have ceased communication with this scammer. This is particularly important when they have real life information about you, including your real email address.

We are glad you are here. Thank you for adding to the information here.



Ok, so I hope I added everything needed.
P- :=)
#58505 by jolly_roger Mon Jul 11, 2011 2:43 pm
Well done Pandora. From the header comes
Originating IP 174.132.66.114
Provider THEPLANET.COM INTERNET SERVICES
City Houston
Country United States
Domain Softlayer.com
If you look at the header, you will see NNFMP contained within it. This is a yahoo thing that usually (but not always) indicates a fraudulant email.
#58510 by jolly_roger Mon Jul 11, 2011 3:17 pm
This is what yahoo says about the 'commander'
commd.thsley90

Current status: Offline
Name: Thomas Kingsley
Gender: Male
Location: Hollywood
State: Florida
Country: USA
Yahoo ember since: 04/07/2011
#58566 by Pandora_1975 Tue Jul 12, 2011 8:11 am
jolly_roger wrote:I find this distressing. The scammer going by the name of s.bowel1977 is using the photo of a deceased US soldier.
If you go here http://www.dailykos.com/story/2008/7/12 ... 476/550756 and scroll approximately half way down.

I went to the above site this morning from my PC at home. That is the picture used by the scammer on the social site and on the IM. How sad these people use our fallen heroes for such scams.
#58725 by missie Wed Jul 13, 2011 10:51 am
Hi i have been contacted by this person to requesting money to do a phone connection as i had my suspicions on this i never paid anything and kept giving him excuses so he would stop asking. He even added my friend to his yahoo acc and pretended that he was some other guy his best friend and tried telling me that they were in seperate rooms and that his friend was getting transfered to afghanistan as they are in iraq ramadi and for his friend not to go my friend would need to request a leave for him when i found that out i knew then that was a scammer as i know non military cannot request that.I still have all his details if they are needed he still contacts me as well thinking he is going to get something out of all this what an idiot he is a tryer but how manyh other woman is this guy doing it to if he can be stopped it woould be good..
#58730 by Katharina Wed Jul 13, 2011 11:10 am
Welcome missie,
I'm so glad the scammer couldn't fool you. :=)

Infortunately, there is no way to arrest him. He is sending his emails from an anonymous internet café in a country where police are corrupt and the police of your country can't get him. The only way to stop him is getting as much information on the internet as possible. If he gave you a phone number, an address, and photos, please post them, that would help a lot.
#58757 by missie Wed Jul 13, 2011 6:35 pm
ok he has not given me phone number or address but i do have some photo's of hima nd 2 other males is there an address i can send the photo's to?
#58777 by Bubbles Thu Jul 14, 2011 12:19 am
The photos will not be of the actual scammer. They are pictures used to try to make their lies credible.

You can post the photos here in our Fake documents & photos forum. Be sure to follow the directions and mark on the photos that they have been used by a scammer.

Welcome here and I too am glad you spotted the scam. :D

Bubbles, former Scamwarners moderator.

Rest in Peace 24 June 2015.

Gone, but never forgotten.
#59130 by Pandora_1975 Sun Jul 17, 2011 2:39 pm
New message received 7/17

Re: HI Sunday, July 17, 2011 9:34 AM
From: This sender is DomainKeys verified"Steven Bowel" <[email protected]>Add sender to ContactsTo: "Removed" <[email protected]>Hey Removed
What a fu***** hell r u talking about and why would u say that to me.......U r still in my heart..,.............How r u and kids doing over there?Well i hope all is well.....Bye


Re: HISunday, July 17, 2011 9:34 AM
From Steven Bowel Sun Jul 17 13:34:38 2011
X-Apparently-To: [email protected] via 98.138.87.75; Sun, 17 Jul 2011 06:34:39 -0700
Return-Path: <[email protected]>
X-YahooFilteredBulk: 98.138.91.67
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: mtkEV2MWLDtN55_ka_irSIFJrb.A0sUnsZlghwEZCg43CbBE oa3r7eU7s1GBb2Vho.JI3YGZLnTXAzZCI95ZnO3SYOxxjr8b1rLj3iEymcKm Cd10MOWe1.TR9Gdj.4LqmKxItHDtYIaYd4xSTmTqjtZDhG9raO5YQrqpe4de 0X8gwPjW7Llid08WmFvltpsMaSXr4zjcH8MwuoJvkQPJg19qILkYLFn0ErjT MBiA8qrwWhRaFyu903Su3oqJDfGyFdvkbXo.0DRE9BULqzq7uHa.y0yfQEMq L9PaD8e6PvRY0P4eJDEcPUOqqXh4a32AhBzJz7bWAS3iT4cPw0m35E_4Jcox .1agxIIEtzKqG1l1XzX79ahJG03ts5_2fnoRg.TysWsJ7OmFHMybcHybd6Uw JYa_0l3cg0QMMHJrl7UDbrFDD3_44pJJ7HMqdkw7Ljn1g4tRJOiScJvbfpA9 5PLycO_LV.cEQlXpQPVSdqtrm.eP7ii0FjJ8eRg.8ASYU8Gx5eVbrr13PyRl gIo9yaPJ25_ZJiBA_FG3A_a0AnOFzWdxDZarUw1OOA.v0_.H9NpC9IoM01vn 48JMUWlRMRXn452kLDvd0c0POHKUagmZvM8NdkG7HBa9rNvzU6C3Q9wrCHOH 1sCJXrZZ4XwMSOA6xYR0uHIQydSxfHQvqfKKImFi6LLRNktUGkSH6sJSLCQn VfS__Mjj8XuQn6QV8D9653uBgBSY39NysK_FXcDVJLP04ZNrslbfCw2tpv1F 9tVy1pZU0QBbgDd4kGHE8FPZmfyqfSzZW63tdpmIPlf8oQuO9NwVCHMrhq0D mEo6_15978s3fQMGPcx5sPAF0AzYi5GR9175cJ5bo.hc5iK2Cp6Sd36Uaq5a uA4WUCCyUxO6IKL9SBRulMvaYKiVYtcQ1tkz3thCfG4Gh5cu.j9RA7V0hp64 EQSaaFbPK_z.8eMXdJSfWiMrLShQT0E45XPxzInvPA3TBxe2jF3vEakzJEto .4yB.Pefc6o_Y4NqVSsiO.iN.143VLOD.c8mfo82Orp6NJgsF6Y.zv6DwN5_ wqBPLA1kOoWUkNzDINh2YPFySAsTMUL.Q87CTpH1CbicYp_xPg--
X-Originating-IP: [98.138.91.67]
Authentication-Results: mta1016.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm9-vm0.bullet.mail.ne1.yahoo.com) (98.138.91.67) by mta1016.mail.mud.yahoo.com with SMTP; Sun, 17 Jul 2011 06:34:39 -0700
Received: from [98.138.90.48] by nm9.bullet.mail.ne1.yahoo.com with NNFMP; 17 Jul 2011 13:34:38 -0000
Received: from [98.138.89.244] by tm1.bullet.mail.ne1.yahoo.com with NNFMP; 17 Jul 2011 13:34:38 -0000
Received: from [127.0.0.1] by omp1058.mail.ne1.yahoo.com with NNFMP; 17 Jul 2011 13:34:38 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 9932 invoked by uid 60001); 17 Jul 2011 13:34:38 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1310909678; bh=fnW1GyLIHFpcXyM636fDTD0zK68E82X8yReI45iu20s=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=IoqsWeRNp7XDTgaD0NcQr5As1gUIUBkN52h3wECIdYmMlvSPj+oW4Us0p8DmY+ybxi0FF1YnA0K3qf6nE/UqnaH0KqAnwHuXAMzAgUZb0CWfOa+hE7EytZR90jtorUSNmv9yYraIZj40o70pS2yEu14ViEBoY3/zWuf4UHtoWVs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=l5zOrqOqGOfsg/va/uCnYqJ9l+3UMKrWlXq8U+PNtC1264DUwMq0w6jH/7CliebmGh3Y3adMFvd1H1i6PA3ET2S88rjw5K0gOn/IqIjDXgL/y7hYJkdFAQuW7KE6B9dZKy0O76fbKuM8sG+u/o+nv4LTMKcPvXLBUuJdA3SkwK4=;
X-YMail-OSG: tXTP9aEVM1loACA24Ie14qSLXNHlEFu729JjfS1Dcu4Mqod gejS6G17V4zIHayvWbuACD2A29TRN0SzjqpWBBLtmG8G1YIiThatTF60e7Rd MmVfYG6iA7DHFDUfZOgLjGZKa0LkyoRdXvvdmB4mPXDxGvJ8S_j.j8nvoaAA jYrjGNPGDRLRB92IP0bm75Pp8KjgrsR7iX617zjOHi0k3.aRA7Z8rA91wshr wmqcmzNSIJJNoinuYMb2AP4Zbx3v7ub3id_SXHOUJ.sfOfUu._ELLzohif4z 2w3AgS2Cb6qaOoIrh8TcESgtxSojFTSBzUHO_ESrhI18.e.bC3D4kWGvyqe0 ZSdWNpnrXLZa.
Received: from [74.54.240.138] by web120916.mail.ne1.yahoo.com via HTTP; Sun, 17 Jul 2011 06:34:38 PDT
X-Mailer: YahooMailClassic/14.0.3 YahooMailWebService/0.8.112.307740
Message-ID: <[email protected]>
Date: Sun, 17 Jul 2011 06:34:38 -0700 (PDT)
From: This sender is DomainKeys verified Steven Bowel <[email protected]> Add sender to Contacts
Subject: Re: HI
To: Removed <[email protected]>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1462001211-1310909678=:86501"
Content-Length: 698

Who is online

Users browsing this forum: No registered users and 31 guests