|
419 scam emails from Vic Biz (Nigeria)
Vic Biz Cyber Cafe in 7 Akpakpava street, Benin City, Edo State, Nigeria is the headquarters of a fraud gang run by Akin Aruloye and his brother Uyi Aruloye. It is the source of numerous scam emails, yet the Nigerian police does not dare touch them. The Aruloye brothers were sending victims to a check scammer based in Canada named Nosakhare Collins Aghayere (aka - Nosa Collins). Nosa was finally arrested by the Canadian police in the spring of 2007. Further arrests took place in Japan in the summer of that year. Since July 2004 we received fraudulent job offer spams that were part of a check fraud scheme run by criminals in Nigerian posing as various Chinese businesses. Respondents allowing themselves to be recruited were sent fake cashier's checks. When the new "employees" thought they were forwarding a payment by a customer to their employer they were really wiring their own funds abroad. After we received a tip-off about the Nigerian internet cafe from which this scam seems to originate, our website was visited from IP address 216.139.176.61, the IP address adjacent to 216.139.176.60 from which the job offer scams emails were sent. More recently the scam emails are sent via 216.139.176.62, which may be a proxy. On this page we will document further scams originating from the same source.
Emails sent from Vic Biz IP addresses:
Here are fake lottery scam emails connected to Vic Biz Cyber Cafe in Benin City, Nigeria:
Return-path: <bluestonelottery2004@swissinfo.org> Envelope-to: emailaddress Delivery-date: Fri, 04 Feb 2005 00:19:07 -0800 Received: from [146.159.4.92] (helo=md1.swissinfo.org) by host26.ipowerweb.com with esmtp (Exim 4.43) id 1CwygE-0000r7-KF for emailaddress; Fri, 04 Feb 2005 00:19:06 -0800 Received: from mail.swissinfo.org ([194.6.181.33]) by md1.swissinfo.org (phad1.swissinfo.org [146.159.6.9]) (MDaemon.PRO.v7.2.1.R) with ESMTP id 06-md50000278581.msg for emailaddress; Fri, 04 Feb 2005 09:15:11 +0100 Received: from [148.244.150.58] by mail.swissinfo.org with HTTP; Fri, 4 Feb 2005 07:57:54 +0100 Date: Fri, 4 Feb 2005 06:57:54 +0000 Message-ID: <4153942000056083@mail.swissinfo.org> From: "Bluestone Lottery International" <bluestonelottery2004@swissinfo.org> Subject: LOTTERY RESULT, contact claims agent MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Spam-Processed: phad1.swissinfo.org, Fri, 04 Feb 2005 09:15:11 +0100 (not processed: message from valid local sender) X-MDRemoteIP: 194.6.181.33 X-Return-Path: bluestonelottery2004@swissinfo.org X-MDaemon-Deliver-To: emailaddress X-MDAV-Processed: phad1.swissinfo.org, Fri, 04 Feb 2005 09:15:24 +0100 Status: R BLUESTONE LOTTERY INTERNATIONAL FROM: THE DESK OF THE LOTTO CHANCELLOR, INTERNATIONAL PROMOTIONS/PRIZE AWARD DEPARTMENT Ref. Number: 7487/4360/7700 Batch Number: 783902169-BO47 Sir/Madam, We are pleased to inform you of the result of the Bluestone Lottery Winners International programs held on the 1st of January, 2005. Your e-mail address attached to ticket number 887622334902-5674 with serial Number 1005-383 drew lucky numbers 2-16-14-25-34-42 which consequently won in the 1st category, you have therefore been approved for a lump sum pay out of 500,000.00 British Pounds (Five Hundred Thousand British Pounds). CONGRATULATIONS!!! Due to mix up in some numbers and names, we ask that you keep your winning information confidential until you file for your claim. This is part of our security protocol to avoid double claiming and unwarranted abuse of this program by some participants. All participants were selected through a computer ballot system drawn from over 15,000 companies and 20,000,000 individual e-mail addresses and names from all over the World. This promotional program takes place every year. This lottery was promoted and sponsored by some eminent personalities who do not wish to declare their identity for security reasons. To file for your claim, please contact your claims Agent: NAME: MR. PAUL DUBERRY EMAIL: greenwoodclaims@netscape.net TEL/FAX : +44-870-131-9022 Remember, all winnings must be filed not later than 15th of February, 2005 or when authentic proof is given for the delay of filing. Please note in order to avoid unnecessary delays and complications, remember to quote your reference number and batch numbers in all correspondence. Furthermore, should there be any change of address do inform our agent as soon as possible. Congratulations once more from our members of staff and thank you for being a Winner in our promotional program. Note: Anybody under the age of 18 years is automatically disqualified. Sincerely yours, Mrs. Patricia Mirren, PLEASE SEND EMAIL TO "greenwoodclaims@netscape.net". _______________________________________________________________________ Your Site for Swiss Maps: http://www.swissinfo-geo.org/ Here is a reply from that "lotto agent": Return-path: <claims_agent@greenwood-financial-consultants.net> Envelope-to: emailaddress Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Sun, 6 Feb 2005 03:34:00 -0800 Message-ID: <BAY1-F1F7F54D0551C5627204AAE1720@phx.gbl> Received: from 216.139.176.60 by by1fd.bay1.hotmail.msn.com with HTTP; Sun, 06 Feb 2005 11:33:32 GMT X-Originating-IP: [216.139.176.60] X-Originating-Email: [claims_agent@greenwood-financial-consultants.net] X-Sender: claims_agent@greenwood-financial-consultants.net From: "Mr. Paul Duberry" <claims_agent@greenwood-financial-consultants.net> To: emailaddress Bcc: Subject: Claims Processing Form Date: Sun, 06 Feb 2005 11:33:32 +0000 Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_5666_53dd_5915" X-OriginalArrivalTime: 06 Feb 2005 11:34:00.0948 (UTC) FILETIME=[C0F1EB40:01C50C3F] This is a multi-part message in MIME format. ------=_NextPart_000_5666_53dd_5915 Content-Type: text/plain; format=flowed Dear Award Winner, Please find attached the claims form you are to fill and send back by fax or email attachment for immediate processing of your Winnings. You are also required to send by fax or email attachment a copy of your valid International Passport or Drivers License. Thank you. Mr. Paul Duberry Greenwood Financial Consultants Fax: +44 870 131 9022 Tel: +44 704 010 4293 Here is another fake lottery scam received from Vic Biz Cyber Cafe in Nigeria:
Received: from wbox5.com (wbox5.com [66.98.178.17]) by integer.pobox.com (Postfix) with SMTP id 504BBE4FA2 for <jwspamspy@pobox.com>; Thu, 27 Jan 2005 20:34:07 -0500 (EST) Received: (qmail 21839 invoked by uid 48); 28 Jan 2005 02:24:20 -0000 Cc: recipient list not shown: ; Received: from 216.139.176.61 ([216.139.176.61]) by www.tsunamis-europe.org (IMP) with HTTP for <wins@tsunamis-europe.org@localhost>; Thu, 27 Jan 2005 20:24:17 -0600 Message-ID: <1106879057.41f9a25198f8c@www.tsunamis-europe.org> Date: Thu, 27 Jan 2005 20:24:17 -0600 From: wins@tsunamis-europe.org Subject: WINNING NOTICE. MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.1 X-Originating-IP: 216.139.176.61 X-SpamScore: 0.889 tests= NO_REAL_NAME SUBJ_ALL_CAPS FROM: GOVERNMENT ACCREDITED LICENSED LOTTERY PROMOTERS. WINNING NOTICE FOR CATEGORY \"A\" WINNERS Dear Lucky Winner, RE: BONUS LOTTERY PROMOTION PRIZE AWARDS WINNING NOTIFICATION. We are pleased to inform you of the result of the just concluded annual final draws of De Lotto Spanish International Lottery programs. The online cyber lotto draws was conducted from an exclusive list of 25,000 e-mail addresses of individual and corporate bodies picked by an advanced automated random computer search from the internet. No tickets were sold. After this automated computer ballot, your e-mail address emerged as one of two winners in the category \"A\" with the following: Ref Number: PC 390 ES 214 Batch Number: 26371545-LNI/2004 Ticket Number: PCP 002 871 You as well as the other winner are therefore to receive a cash prize of € 550,000.00. (FIVE HUNDRED AND FIFTY THOUSAND EURO ONLY) from the total payout. Your prize award has been insured with your e-mail address and will be transferred to you upon meeting our requirements, statutory obligations, verifications, validations and satisfactory report. To begin the claims processing of your prize winnings you are advised to contact our licensed and accredited claims agent for category \"A\" winners with the information below: Mr. John Morgan. Remittance Department Director, Spanish Development Finance Company [PCPOSTAL INCORPORATION], Kaye Silvia, #1, Madrid,Spain. E-mail: cordinator@lottopromo.allied-agro.com Tel/Fax: 0034653285895 NOTE: All winnings must be claimed not later than 20 days. After this date all unclaimed funds would be included in the next stake. Remember to quote your reference information in all correspondence. You are to keep all lotto information away from the general public especially your reference and ticket numbers. (This is important as a case of double claims will not be entertained). Members of the affiliate agencies are automatically not allowed to participate in this program. Thank you and congratulations!!! Yours faithfully, Mrs. Matha Agolise Games/Lottery Coordinator. De Lotto Spanish International www.lottopromo.allied-agro.com This email may contain information which is confidential and/or privileged. The information is intended solely for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents is prohibited.If you have received this electronic transmission in error, please notify the sender by telephone or return email and delete the material from your computer. Here is another one from the same IP (216.139.176.61): Attention: Name Return-path: <agentwillymiller@myway.com> Subject: CLAIM FORM Received: from [216.139.176.61] by mprdmailfe4.nwk.myway.com via HTTP; Thu, 03 Feb 2005 07:12:31 EST Reply-To: agentwillymiller@myway.com From: "William" <agentwillymiller@myway.com> MIME-Version: 1.0 X-Sender: agentwillymiller@myway.com X-Mailer: PHP
From: "hariet booker" <mike07@uk-agent.com> To: <undisclosed-recipients:> Sent: Friday, 25 February, 2005 6:53 Subject: UK N.L Information Service FROM:THE DESK OF THE DIRECTOR OF PROMOTION INTERNATIONAL PROMOTIONS/PRIZE AWARD DEPARTMENT UK NATIONAL LOTTO HEADQUATERS Macclesfield,United Kingdom. Customer's Service Center Ref Number: UK/910/16454 Batch Number:VC/32/ID1141 Dispatch date : 25/2/2005. Dear Sir/Madam We are pleased to inform you of the result of the Lottery Winners International programs held on the 2/1/2005 in ENGLAND AND WALES. Your e-mail address attached to ticket number 5224652456UT with serial number 0098/UK0204,batch number VC/32/ID1141,lottery ref number UK/910/16454 and drew lucky numbers 03-01-15-20-34-33-07 which consequently won in the 1st category, you have therefore been approved for a lump sum pay out of US$2.500,000.00 (TWO MILLION FIVE HUNDRED THOUSAND United States dollars)in cash credited to file KLTT/KTU/2004ETN.This is from a total cash prize of US$25 Million dollars, shared amongst the first TEN (10) lucky winners in this First category. CONGRATULATIONS!!! Due to mix up of some numbers and names, we ask that you keep your winning information confidential until your claims has been processed and your money Remitted to you. This is part of our security protocol to avoid double claiming and unwarranted abuse of this program by some participants. All participants were selected through a computer ballot system drawn from over 40,000 company and 20,000,000 individual email addresses and names from all over the world. This promotional program takes place every year. This lottery was promoted and sponsored by Association of software producers.To file for your claim,please contact our fiducial agent: ===================================================================== MR KELVIN GIBSON UK NATIONAL INC. Macclesfield,United Kingdom Email:claims@uk-lotterys.ws ===================================================================== Remember, all winning in this first category must be claimed not later than 31st of March,2005. After this date all unclaimed funds will be included in the next stake. Please note in order to avoid unnecessary delays and complications please remember to quote your reference number and batch numbers in all correspondence. Furthermore,should there be any change of address do inform our agent as soon as possible. Congratulations once more from our members of staff and thank you for being part of our promotional program.Note that you must contact your claims agent within one week of receipt of this notice. Note: Anybody under the age of 18 is automatically disqualified. Sincerely, MRS.HARIET BOOKER UK-LOTTO Co-ordinator. Message headers: Message-ID: <BAY1-F40933B974C3E1ED415F1DF2640@phx.gbl> Received: from [216.139.176.62] by by1fd.bay1.hotmail.msn.com with HTTP; Thu, 24 Feb 2005 21:53:32 GMT X-Originating-IP: [216.139.176.62] X-Originating-Email: [mike07@uk-agent.com]
WHOSIS details for "uk-agent.com": Request: uk-agent.com connected to whois.enom.com [66.151.151.170:43] ... Registration Service Provided By: Microsoft Contact: personal_address@css.one.microsoft.com Visit: http://support.msn.com/contactus.aspx?pk=PersonalAddress Domain name: uk-agent.com Registrant Contact: garry gate garry gate (notification@uk-agent.com) +1.5643546543 Fax: +1.6663 234 sunset drive avenue HYDE PARK, VT 05655 US Administrative Contact: garrygate garry gate (notification@uk-agent.com) +1.5643546543 Fax: +1.6663 234 sunset drive avenue HYDE PARK, VT 05655 US Technical Contact: NOCMSN NOC MSN (MSN-PA-TECH@msn.com) +1.4258828080 Fax: One Microsoft Way Redmond, WA 98052 US Billing Contact: NOCMSN NOC MSN (MSN-PA-BILL@MSN.COM) +1.4258828080 Fax: One Microsoft Way Redmond, WA 98052 US Status: Locked Name Servers: pdomns1.msn.com pdomns2.msn.com Creation date: 04 Feb 2005 08:03:26 Expiration date: 04 Feb 2006 08:03:26
UK NATIONAL INC. / UK N.L Information Service (Dr Garry Gate, MRS.HARIET BOOKER) From: <uknl0001@netscape.net> To: <undisclosed-recipients:> Sent: Thursday, 24 March, 2005 1:25 Subject: UK N.L Information Service FROM:THE DESK OF THE DIRECTOR OF PROMOTION INTERNATIONAL PROMOTIONS/PRIZE AWARD DEPARTMENT UK NATIONAL LOTTO HEADQUATERS Macclesfield,United Kingdom. Customer's Service Center Ref Number: UK/910/16454 Batch Number:VC/32/ID1141 Dispatch date : 23/3/2005. Dear Sir/Madam We are pleased to inform you of the result of the Lottery Winners International programs held on the 2/1/2005 in ENGLAND AND WALES. Your e-mail address attached to ticket number: 5224652456UT with serial number: 0098/UK0204,batch number: VC/32/ID1141,lottery ref number UK/910/16454 and drew lucky numbers 03-01-15-20-34-33-07 which consequently won in the 1st category, you have therefore been approved for a lump sum pay out of US$2.500,000.00 (TWO MILLION FIVE HUNDRED THOUSAND United States dollars) in cash credited to file KLTT/KTU/2004ETN.This is from a total cash prize of US$25 Million dollars, shared amongst the first TEN (10) lucky winners inthis First category. CONGRATULATIONS!!! Due to mix up of some numbers and names, we ask that you keep your winning information confidential until your claims has been processed and your money Remitted to you. This is part of our security protocol to avoid double claiming and unwarranted abuse of this program by some participants. All participants were selected through a computer ballot system drawn from over 40,000 company and 20,000,000 individual email addresses and names from all over the world. This promotional program takes place every year. This lottery was promoted and sponsored by Association of software producers.To file for your claim,please contact our fiducial agent: ====================================================================== Dr Garry Gate UK NATIONAL INC. Macclesfield,United Kingdom Email: info@uk-nl.org ====================================================================== Remember, all winning in this first category must be claimed not later than 31st of March,2005. After this date all unclaimed funds will be included in the next stake. Please note in order to avoid unnecessary delays and complications please remember to quote your reference number and batch numbers in all correspondence. Furthermore,should there be any change of address do inform our agent as soon as possible. Congratulations once more from our members of staff and thank you for being part of our promotional program.Note that you must contact your claims agent within one week of receipt of this notice. Note: Anybody under the age of 18 is automatically disqualified. Sincerely, MRS.HARIET BOOKER UK-LOTTO Co-ordinator. UK N.L Information Service NOTE: DO NOT REPLY THIS MAIL. YOU ARE TO CONTACT YOUR CLAIMS OFFICER __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register Message headers: Date: Wed, 23 Mar 2005 11:25:33 -0500 From: uknl0001@netscape.net Subject: UK N.L Information Service MIME-Version: 1.0 X-Mailer: Atlas Mailer 2.0 X-AOL-IP: 193.219.248.1 From: "salim ibrahim" <salim@salimunity.net> To: <undisclosed-recipients:> Sent: Monday, 09 May, 2005 20:46 Subject: YOU ARE GOD SENT Dear Friend, My name is SALIM IBRAHIM a merchant in Dubai, in the U.A.E.I have been diagnosed with Esophageal cancer It has defiled all forms of medical treatment, and right now I have only about a few months to live, according to medical experts. I have not particularly lived my life so well, as I never really cared for anyone (not even myself) but my business. Though I am very rich, I was never generous, I was always hostile to people and only focused on my business as that was the only thing I cared for. But now I regret all this as I now know that there is more to life than just wanting to have or make all the money in the world. I believe when God gives me a second chance to come to this world I would live my life a different way from how I have lived it. Now that God has called me, I have willed and given most of my property and assets to my immediate and extended family members as well as a few close friends. I want God to be merciful to me and accept my soul so, I have decided to give also to charity organizations, as I want this to be one of the last good deeds I do on earth. So far, I have distributed money to some charity organizations in the U.A.E, Algeria and Malaysia. Now that my health has deteriorated so badly, I cannot do this myself anymore. I once asked members of my family to close one of my accounts and distribute the money which I have there to charity organization in Bulgaria and Pakistan, they refused and kept the money to themselves. Hence, I do not trust them anymore, as they seem not to be contended with what I have left for them. The last of my money which no one knows of is the huge cash deposit of (Twenty million five hundred thousand u.s dollars) that I have with a finance/Security Company abroad. I will want you to help me collect this consignment and dispatched it to charity organizations. I have set aside 15% for you,then 5% for any expenses insured. God be with you. SALIM IBRAHIM NOTE: please my friend, becuase of security reasons kindly respond back to me via my most confidential email box ibmibrahim@care2.com I WOULD APPRECIATE YOUR URGENT RESPONSE. THANKS ALOT, MAY THE GOOD GOD BLESS YOU ABUNDANTLY Message headers: Received: from 216.139.176.62 by by15fd.bay15.hotmail.msn.com with HTTP; Mon, 09 May 2005 11:46:17 GMT X-Originating-IP: [216.139.176.62] X-Originating-Email: [salim@salimunity.net]
REQUEST FOR URGENT BUSINESS RELATIONSHIP (STRICTLY CONFIDENTIAL) Message headers: Received: from hotmail.com (bay5-dav20.bay5.hotmail.com [65.54.172.124]) by unix-01.compuking.co.za (8.11.6/8.11.6) with ESMTP id j620gfg22266 for <emailaddress>; Sat, 2 Jul 2005 02:42:42 +0200 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Fri, 1 Jul 2005 17:42:35 -0700 Message-ID: <BAY5-DAV205065BA754A54DBA772ED96E50@phx.gbl> Received: from 216.139.176.62 by BAY5-DAV20.phx.gbl with DAV; Sat, 02 Jul 2005 00:42:34 +0000 X-Originating-IP: [216.139.176.62] X-Originating-Email: [flashmail_otunbaolu@msn.com] X-Sender: flashmail_otunbaolu@msn.com From: "Director General in the Petroleum Ministry" <flashmail_otunbaolu@msn.com> Subject: Compliment Date: Sat, 2 Jul 2005 01:38:33 +0100
"JAMES HOUSTON HOUSING"
From: "MARTINS MARTINS" <martins@martinszone.org> Message headers: Received: from 216.139.176.62 by by15fd.bay15.hotmail.msn.com with HTTP; Thu, 07 Jul 2005 08:53:30 GMT X-Originating-IP: [216.139.176.62] X-Originating-Email: [martins@martinszone.org] X-Sender: martins@martinszone.org Reply-To: lampard@madrid.com From: "MARTINS MARTINS" <martins@martinszone.org> To: martins@martinszone.org Subject: KINDLY REPRESENT THE JHHC. Date: Thu, 07 Jul 2005 08:53:30 +0000
"Support Enyimba Football Club In Your Country"
FROM, Message headers: Received: from hotmail.com (bay15-f4.bay15.hotmail.com [65.54.185.4]) by icicle.pobox.com (Postfix) with ESMTP id C4313A93DD for <jwspamspy@pobox.com>; Mon, 8 Aug 2005 21:40:39 -0400 (EDT) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Mon, 8 Aug 2005 17:48:45 -0700 Message-ID: <BAY15-F4ED67CB26BE5DB61DE293F8BB0@phx.gbl> Received: from 216.139.176.61 by by15fd.bay15.hotmail.msn.com with HTTP; Tue, 09 Aug 2005 00:48:45 GMT X-Originating-IP: [216.139.176.61] X-Originating-Email: [enyimbafc@nice-football.com] X-Sender: enyimbafc@nice-football.com Reply-To: enyimbafcnfl@yahoo.co.uk From: "charles anyansi" <enyimbafc@nice-football.com> Subject: Support Enyimba Football Club In Your Country Date: Tue, 09 Aug 2005 00:48:45 +0000
WHOIS details for sending network (IP 216.139.176.60, 216.139.176.61, 216.139.176.62): OrgName: Vic Biz OrgID: VICBI-1 Address: 7 Akpakpava str City: Lagos StateProv: PostalCode: Country: NG NetRange: 216.139.176.56 - 216.139.176.63 CIDR: 216.139.176.56/29 NetName: QKON30 NetHandle: NET-216-139-176-56-1 Parent: NET-216-139-160-0-1 NetType: Reassigned Comment: RegDate: 2003-07-24 Updated: 2003-07-24 TechHandle: EJI-ARIN TechName: Jimoh, Ester TechPhone: 2348033248388 TechEmail: dstaal@qkon.com OrgTechHandle: EJI-ARIN OrgTechName: Jimoh, Ester OrgTechPhone: 2348033248388 OrgTechEmail: dstaal@qkon.com
WHOIS details for sending network (IP 193.219.248.1): inetnum: 193.219.248.0 - 193.219.248.63 netname: RCNG-NET-NG descr: ROYAL CHANTELLE NIGERIA LIMITED country: NG admin-c: OEK1-RIPE tech-c: SOB14-RIPE status: ASSIGNED PA remarks: --------------- remarks: T-IP-20041101 remarks: --------------- mnt-by: TAIDE-NOC notify: osajbruce@yahoo.com notify: sojiabraham@hotmail.com changed: registry@taide.net 20041101 source: RIPE route: 193.219.192.0/18 descr: TAIDE-NET origin: AS5377 mnt-by: TAIDE-NOC changed: registry@taide.net 20010402 source: RIPE person: Osaheni Ekhator address: 9 Aburime Street, New Benin address: Benin City Edo State, Nigeria phone: +234 8035444930 phone: +234 14976887 fax-no: +234 14976886 e-mail: osajbruce@yahoo.com nic-hdl: OEK1-RIPE changed: registry@taide.net 20041101 source: RIPE person: Soji Abraham address: 9 Aburime Street, New Benin address: Benin City Edo State, Nigeria phone: +234 8035444930 phone: +234 14976887 fax-no: +234 14976886 e-mail: sojiabraham@hotmail.com nic-hdl: SOB14-RIPE changed: registry@taide.net 20041101 source: RIPE
WHOIS information for IP 80.88.155.181, 80.88.155.185 inetnum: 80.88.155.176 - 80.88.155.191 netname: EMP-MUL01 descr: Network at EMP-MUL01 descr: Please report all abuse to the network admin-c country: NG admin-c: SE541-RIPE tech-c: EMP5-RIPE status: ASSIGNED PA remarks: - - - - - - - - - - - - - - - - - - remarks: Abuse address: abuse@emperion.net remarks: - or the admin-c of the network remarks: - - - - - - - - - - - - - - - - - - notify: noc@emperion.net mnt-by: EMP-NOC-MNT changed: sdi@Emperion.net 20030815 source: RIPE route: 80.88.144.0/20 descr: DK-EMPERION-20021031-ROUTE origin: AS21125 mnt-by: EMP-NOC-MNT changed: kmw@Emperion.net 20021031 source: RIPE role: Emperion NOC Operator address: Emperion A/S address: Middelfartgade 7 address: 2100 Koebenhavn Oe address: DK phone: +45 3929 3530 e-mail: noc@emperion.net trouble: kmw@emperion.net admin-c: KW6968-RIPE tech-c: KW6968-RIPE tech-c: SRL7-RIPE tech-c: AJ163-RIPE tech-c: GB1283-RIPE tech-c: FL497-RIPE nic-hdl: EMP5-RIPE notify: noc@emperion.net mnt-by: EMP-NOC-MNT changed: KMW@EMPERION.NET 20010906 changed: kmw@emperion.net 20020110 changed: kmw@emperion.net 20021107 source: RIPE person: Sunny Ejemai address: 106,Ekenwan road, Benin City, Edo State. Nigeria e-mail: multivisionltd@yahoo.com phone: +2348023383606 phone: +2348033253370 notify: noc@emperion.net mnt-by: EMP-NOC-MNT nic-hdl: SE541-RIPE changed: fla@Emperion.net 20030507 source: RIPE
WHOIS information for IP 216.139.164.99 OrgName: Qkon OrgID: QKON Address: No 8 Pieter Street Highveld Technopark City: Pretoria StateProv: PostalCode: Country: ZA NetRange: 216.139.164.96 - 216.139.164.103 CIDR: 216.139.164.96/29 NetName: QKON17 NetHandle: NET-216-139-164-96-1 Parent: NET-216-139-160-0-1 NetType: Reassigned Comment: RegDate: 2003-10-15 Updated: 2003-10-15 TechHandle: WBO2-ARIN TechName: Botha, Willem TechPhone: 234 8033027260 TechEmail: wbotha@qkon.com OrgTechHandle: SBR7-ARIN OrgTechName: Brits, Stadler OrgTechPhone: 234 8033027260 OrgTechEmail: stadlerbrits@hotmail.com This address was used for rep_services@rhinoimportandexport.com and cmiec-plc@teenmail.co.za, two emails in the "representative" check scam. CMIEC is a label used by the Aruloyo brothers / Vic Biz gang. In addition, rep_services@rhinoimportandexport.com was also used from 216.139.176.60, which is one of the Vic Biz IP addresses on QKON30. Therefore we conclude that QKON17 is probably also a Vic Biz net range. Sending IP address 216.139.164.27 is in Nigeria (country code +234): OrgName: Qkon OrgID: QKON Address: No 8 Pieter Street Highveld Technopark City: Pretoria StateProv: PostalCode: Country: ZA NetRange: 216.139.164.24 - 216.139.164.31 CIDR: 216.139.164.24/29 NetName: QKON35 NetHandle: NET-216-139-164-24-1 Parent: NET-216-139-160-0-1 NetType: Reassigned Comment: RegDate: 2003-08-01 Updated: 2003-08-01 TechHandle: WBO2-ARIN TechName: Botha, Willem TechPhone: 234 8033027260 TechEmail: wbotha@qkon.com OrgTechHandle: SBR7-ARIN OrgTechName: Brits, Stadler OrgTechPhone: 234 8033027260 OrgTechEmail: stadlerbrits@hotmail.com
|