|
419 Scam – 419 scammers solicit funds for Hurricane victims
The same criminals who pose as email lotteries, corrupt bank employees, lawyers or family members of dead dictators in the "419" advance fee fraud were taking advantage of the 2005 hurricane disaster in New Orleans and the US gulf coast, just as they did after the 2004 Indian Ocean tsunami. Here we will collect examples of such scam emails.
Other charity scams:
"Norman Maneta"
NEW ORLEANS STATE DEPARTMENT NEW ORLEANS UNITED STATES OF Message headers: Received: from HELO c.plasa.com by out-mta1.plasa.com 47 with esmtps (SSLv3:DES-CBC3-SHA:168) id 1EIEX6-0000rT-3d; Thu, 22 Sep 2005 07:01:48 +0700 Received: from [213.185.125.114] (account deptneworleans@plasa.com) by b2.c.plasa.com (CommuniGate Pro WebUser 4.3.7) with HTTP id 2014487; Thu, 22 Sep 2005 05:52:42 +0700 From: "new orleans" <deptneworleans@plasa.com> Subject: HELP SAVE HURRICANE KATRINA VICTIMS X-Mailer: CommuniGate Pro WebUser Interface v.4.3.7 Date: Thu, 22 Sep 2005 05:52:42 +0700 Message-ID: <web-2014487@b2.c.plasa.com> MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-1"; format="flowed" Content-Transfer-Encoding: 8bit X-Brightmail: Message tested, results are inconclusive To: undisclosed-recipients:;
WHOIS details for sending network (IP 213.185.125.114):
inetnum: 213.185.96.0 - 213.185.127.255
org: ORG-IA67-RIPE
netname: UK-INTELSAT-20021129
descr: PROVIDER
descr: Intelsat
country: GB
admin-c: IRA4-RIPE
tech-c: IRTC1-RIPE
tech-c: AT1875-RIPE
tech-c: nd776-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: AS22351-MNT
mnt-routes: AS22351-MNT
source: RIPE # Filtered
organisation: ORG-IA67-RIPE
org-name: Intelsat
org-type: LIR
address: Chiswick Park, Building 3
566 Chiswick High Road
address: W45YA
address: London
address: United Kingdom
phone: +44 208 899 6035
phone: +1 202 944 6792
phone: +1 202 944 8548
fax-no: +1 202 944 6955
e-mail: nene.diallo@intelsat.com
admin-c: IRA4-RIPE
admin-c: IRTC1-RIPE
admin-c: ELAD1-RIPE
admin-c: nd776-RIPE
mnt-ref: AS22351-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role: Intelsat Ripe Admin
address: Intelsat Global Service Corporation
address: 3400 International Drive, NW
address: Washington, DC
address: 20008
address: USA
e-mail: noc@intelsat.com
e-mail: bgp@Intelsat.com
admin-c: AT1875-RIPE
admin-c: nd776-RIPE
tech-c: nd776-RIPE
nic-hdl: IRA4-RIPE
remarks:
remarks: *************************************************************
remarks: * *
remarks: * This is a generic ROLE object for an Intelsat Admin *
remarks: * Contact person for RIPE matters. Inquiries about RIPE *
remarks: * issues should be directed to the TAC or BGP email-boxes, *
remarks: * which will forward them appropriately. For operational *
remarks: * issues, send an Email or call the Intelsat NOC at: *
remarks: * *
remarks: * noc@intelsat.com *
remarks: * +1 202 944 6792 *
remarks: * *
remarks: * For BGP related issues, send an email to: *
remarks: * *
remarks: * bgp@intelsat.com *
remarks: * *
remarks: * For issues of network abuse, including spam, please send *
remarks: * email to Intelsat at: *
remarks: * *
remarks: * abuse@intelsat.com *
remarks: * *
remarks: *************************************************************
remarks:
source: RIPE # Filtered
role: Intelsat RIPE Technical Contact
address: Intelsat Global Service Corporation
address: 3400 International Drive, NW
address: Washington, DC
address: 20008
address: USA
e-mail: abuse@intelsat.com
e-mail: tac@intelsat.com
e-mail: bgp@Intelsat.com
e-mail: Nene.Diallo@Intelsat.com
e-mail: Augustin.Traore@Intelsat.com
admin-c: IRA4-RIPE
tech-c: nd776-RIPE
nic-hdl: IRTC1-RIPE
remarks:
remarks: *************************************************************
remarks: * *
remarks: * This is a generic ROLE object for an Intelsat Technical *
remarks: * Contact person for RIPE matters. Inquiries about RIPE *
remarks: * issues should be directed to the NOC or BGP email-boxes, *
remarks: * which will forward them appropriately. For operational *
remarks: * issues, send an Email or call the Intelsat NOC at: *
remarks: * *
remarks: * noc@intelsat.com *
remarks: * +1 202 944 6792 *
remarks: * tac@intelsat.com *
remarks: * For BGP related issues, send an email to: *
remarks: * *
remarks: * bgp@intelsat.com *
remarks: * *
remarks: * For issues of network abuse, including spam, please send *
remarks: * email to Intelsat at: *
remarks: * *
remarks: * abuse@intelsat.com *
remarks: * *
remarks: *************************************************************
remarks:
remarks:
source: RIPE # Filtered
person: Augustin Traore
address: 3400 International Drive NW,
Washington DC 20008-3006
phone: +703-944-7033
e-mail: augustin.traore@intelsat.com
nic-hdl: AT1875-RIPE
mnt-by: AS22351-MNT
source: RIPE # Filtered
person: nene diallo
address: Intelsat
3400 International Dr, NW
washington, DC 20008
phone: +1-202-944-8548
e-mail: nene.diallo@intelsat.com
nic-hdl: nd776-RIPE
mnt-by: AS22351-MNT
source: RIPE # Filtered
Here are a few other email addresses used in 419 scams from the same IP address (213.185.125.114). As you can see this address is the source of plenty of Nigerian scams:
2nd email from the criminal posing as "Norman Maneta": MY DEAR FIRSTNAME LASTNAME, Message headers:
WHOIS details for sending network (IP 213.181.83.82): inetnum: 213.181.64.0 - 213.181.95.255 org: ORG-BL4-RIPE netname: NG-BROADBANDTECH-20000327 descr: BT Limited descr: PROVIDER Local Registry country: NG admin-c: IO243-RIPE tech-c: IO243-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-routes: BT-LIMITED-MNT mnt-lower: BT-LIMITED-MNT source: RIPE # Filtered organisation: ORG-BL4-RIPE org-name: BT Limited org-type: LIR address: BT Limited address: 8B Ademola Street, address: Off Awolowo Road, address: S. W. Ikoyi, address: Lagos, Nigeria. phone: +234 1 2693192 fax-no: +234 1 2693192 e-mail: bt@micro.com.ng admin-c: IO243-RIPE admin-c: IO243-RIPE mnt-ref: BT-LIMITED-MNT mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT source: RIPE # Filtered person: Israel Oyeleke address: BT Limited address: 8B Ademola Street address: Ikoyi S.W. address: Lagos, Nigeria phone: +234 1 2673532 fax-no: +234 1 2673203 e-mail: i.oyeleke@moneynett.com nic-hdl: IO243-RIPE source: RIPE # Filtered
Email history for IP 213.181.83.82:
"caroline dicksn" (carolinedicksn@yahoo.com)
From: "caroline dicksn" <carolinedicksn@yahoo.com>
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||