by vonpaso xlura
Thu Jul 30, 2015 12:43 am
No, both of the completely different IP addresses belong to the same ISP called SAIX, and both of their reverse lookups end in "telkomadsl.co.za". That's what you'd expect if the scammer has an ADSL connection and turns off his computer when it's not in use. A proxy would be at a fixed address, or if it's Tor, it would wander randomly all over the world.
The writing also indicates that the scammer is a Niger-Congo speaker. There is less difference linguistically between Setswana and Douala than between Yoruba and Wolof. Certain traits characterize the writing of Africans from at least anywhere from Nigeria to South Africa when they write in English or French, and they are present in this scammer's writing.
... ni los estafadores heredarĂ¡n el reino de Dios. 1 Cor. 6:10