|
419 Scam – 419 scammers solicit funds for Hurricane victims
The same criminals who pose as email lotteries, corrupt bank employees, lawyers or family members of dead dictators in the "419" advance fee fraud were taking advantage of the 2005 hurricane disaster in New Orleans and the US gulf coast, just as they did after the 2004 Indian Ocean tsunami. Here we will collect examples of such scam emails.
Other charity scams:
"Norman Maneta"
NEW ORLEANS STATE DEPARTMENT NEW ORLEANS UNITED STATES OF Message headers: Received: from HELO c.plasa.com by out-mta1.plasa.com 47 with esmtps (SSLv3:DES-CBC3-SHA:168) id 1EIEX6-0000rT-3d; Thu, 22 Sep 2005 07:01:48 +0700 Received: from [213.185.125.114] (account deptneworleans@plasa.com) by b2.c.plasa.com (CommuniGate Pro WebUser 4.3.7) with HTTP id 2014487; Thu, 22 Sep 2005 05:52:42 +0700 From: "new orleans" <deptneworleans@plasa.com> Subject: HELP SAVE HURRICANE KATRINA VICTIMS X-Mailer: CommuniGate Pro WebUser Interface v.4.3.7 Date: Thu, 22 Sep 2005 05:52:42 +0700 Message-ID: <web-2014487@b2.c.plasa.com> MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-1"; format="flowed" Content-Transfer-Encoding: 8bit X-Brightmail: Message tested, results are inconclusive To: undisclosed-recipients:;
WHOIS details for sending network (IP 213.185.125.114): inetnum: 213.185.96.0 - 213.185.127.255 org: ORG-IA67-RIPE netname: UK-INTELSAT-20021129 descr: PROVIDER descr: Intelsat country: GB admin-c: IRA4-RIPE tech-c: IRTC1-RIPE tech-c: AT1875-RIPE tech-c: nd776-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-lower: AS22351-MNT mnt-routes: AS22351-MNT source: RIPE # Filtered organisation: ORG-IA67-RIPE org-name: Intelsat org-type: LIR address: Chiswick Park, Building 3 566 Chiswick High Road address: W45YA address: London address: United Kingdom phone: +44 208 899 6035 phone: +1 202 944 6792 phone: +1 202 944 8548 fax-no: +1 202 944 6955 e-mail: nene.diallo@intelsat.com admin-c: IRA4-RIPE admin-c: IRTC1-RIPE admin-c: ELAD1-RIPE admin-c: nd776-RIPE mnt-ref: AS22351-MNT mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT source: RIPE # Filtered role: Intelsat Ripe Admin address: Intelsat Global Service Corporation address: 3400 International Drive, NW address: Washington, DC address: 20008 address: USA e-mail: noc@intelsat.com e-mail: bgp@Intelsat.com admin-c: AT1875-RIPE admin-c: nd776-RIPE tech-c: nd776-RIPE nic-hdl: IRA4-RIPE remarks: remarks: ************************************************************* remarks: * * remarks: * This is a generic ROLE object for an Intelsat Admin * remarks: * Contact person for RIPE matters. Inquiries about RIPE * remarks: * issues should be directed to the TAC or BGP email-boxes, * remarks: * which will forward them appropriately. For operational * remarks: * issues, send an Email or call the Intelsat NOC at: * remarks: * * remarks: * noc@intelsat.com * remarks: * +1 202 944 6792 * remarks: * * remarks: * For BGP related issues, send an email to: * remarks: * * remarks: * bgp@intelsat.com * remarks: * * remarks: * For issues of network abuse, including spam, please send * remarks: * email to Intelsat at: * remarks: * * remarks: * abuse@intelsat.com * remarks: * * remarks: ************************************************************* remarks: source: RIPE # Filtered role: Intelsat RIPE Technical Contact address: Intelsat Global Service Corporation address: 3400 International Drive, NW address: Washington, DC address: 20008 address: USA e-mail: abuse@intelsat.com e-mail: tac@intelsat.com e-mail: bgp@Intelsat.com e-mail: Nene.Diallo@Intelsat.com e-mail: Augustin.Traore@Intelsat.com admin-c: IRA4-RIPE tech-c: nd776-RIPE nic-hdl: IRTC1-RIPE remarks: remarks: ************************************************************* remarks: * * remarks: * This is a generic ROLE object for an Intelsat Technical * remarks: * Contact person for RIPE matters. Inquiries about RIPE * remarks: * issues should be directed to the NOC or BGP email-boxes, * remarks: * which will forward them appropriately. For operational * remarks: * issues, send an Email or call the Intelsat NOC at: * remarks: * * remarks: * noc@intelsat.com * remarks: * +1 202 944 6792 * remarks: * tac@intelsat.com * remarks: * For BGP related issues, send an email to: * remarks: * * remarks: * bgp@intelsat.com * remarks: * * remarks: * For issues of network abuse, including spam, please send * remarks: * email to Intelsat at: * remarks: * * remarks: * abuse@intelsat.com * remarks: * * remarks: ************************************************************* remarks: remarks: source: RIPE # Filtered person: Augustin Traore address: 3400 International Drive NW, Washington DC 20008-3006 phone: +703-944-7033 e-mail: augustin.traore@intelsat.com nic-hdl: AT1875-RIPE mnt-by: AS22351-MNT source: RIPE # Filtered person: nene diallo address: Intelsat 3400 International Dr, NW washington, DC 20008 phone: +1-202-944-8548 e-mail: nene.diallo@intelsat.com nic-hdl: nd776-RIPE mnt-by: AS22351-MNT source: RIPE # Filtered Here are a few other email addresses used in 419 scams from the same IP address (213.185.125.114). As you can see this address is the source of plenty of Nigerian scams:
2nd email from the criminal posing as "Norman Maneta": MY DEAR FIRSTNAME LASTNAME, Message headers: Received: from web86807.mail.ukl.yahoo.com (web86807.mail.ukl.yahoo.com [217.12.13.49]) by mx.gmail.com with SMTP id h7si1334063wxd.2005.10.06.10.29.15; Thu, 06 Oct 2005 10:29:17 -0700 (PDT) Received-SPF: neutral (gmail.com: 217.12.13.49 is neither permitted nor denied by domain of help4neworleanshk@yahoo.co.uk) DomainKey-Status: good (test mode) Received: (qmail 7585 invoked by uid 60001); 6 Oct 2005 17:18:42 -0000 Message-ID: <20051006171841.7583.qmail@web86807.mail.ukl.yahoo.com> Received: from [213.181.83.82] by web86807.mail.ukl.yahoo.com via HTTP; Thu, 06 Oct 2005 18:18:41 BST Date: Thu, 6 Oct 2005 18:18:41 +0100 (BST) From: Peterson Macphason <help4neworleanshk@yahoo.co.uk> Subject: thanks for your positive resposne To: emailaddress
WHOIS details for sending network (IP 213.181.83.82): inetnum: 213.181.64.0 - 213.181.95.255 org: ORG-BL4-RIPE netname: NG-BROADBANDTECH-20000327 descr: BT Limited descr: PROVIDER Local Registry country: NG admin-c: IO243-RIPE tech-c: IO243-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-routes: BT-LIMITED-MNT mnt-lower: BT-LIMITED-MNT source: RIPE # Filtered organisation: ORG-BL4-RIPE org-name: BT Limited org-type: LIR address: BT Limited address: 8B Ademola Street, address: Off Awolowo Road, address: S. W. Ikoyi, address: Lagos, Nigeria. phone: +234 1 2693192 fax-no: +234 1 2693192 e-mail: bt@micro.com.ng admin-c: IO243-RIPE admin-c: IO243-RIPE mnt-ref: BT-LIMITED-MNT mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT source: RIPE # Filtered person: Israel Oyeleke address: BT Limited address: 8B Ademola Street address: Ikoyi S.W. address: Lagos, Nigeria phone: +234 1 2673532 fax-no: +234 1 2673203 e-mail: i.oyeleke@moneynett.com nic-hdl: IO243-RIPE source: RIPE # Filtered
Email history for IP 213.181.83.82:
"caroline dicksn" (carolinedicksn@yahoo.com)
From: "caroline dicksn" <carolinedicksn@yahoo.com>
|