|
419 Scam Example: "ELECTRONIC LOTTERY / Macurly Clary / Macurly Pablo"
"ELECTRONIC LOTTERY / Macurly Clary / Macurly Pablo" is a label used by a gang in the Netherlands for a fake lottery fraud (advance fee fraud, "419"). All phone numbers used in the scam are Dutch mobile phones. The scam appears to be connected to another Dutch lottery scam, "ADS LOTTERY / Paul Zimmerman" as the claims agents of boths scams send responses from the same IP address.
The same Dutch cell phone number has been attributed to "Macurly Clary" and "Macurly Pablo" who are likely just different aliases used by the same person(s). "Macurly Pablo" is supposedly the claims agent for "ADS LOTTERY PROMOTIONS", as is "Paul Zimmerman". Emails from all three aliases are sent from the same Dutch IP address.
Example of "Macurly Clary" scam email: From: "macurly clary" <macurlyc1@yahoo.com.au> Message headers: Received: from [80.56.80.155] by web42107.mail.yahoo.com via HTTP; Sat, 05 Feb 2005 10:04:11 EST Date: Sat, 5 Feb 2005 10:04:11 +1100 (EST) From: macurly clary The attached JPG file "electronij form.JPG" is marked "PROPERTY OF GULF ATLANTIC SA".
Emails by "Macurly Clary" are sent from the same IP address at the same Dutch provider as emails in the "ADS LOTTERY / Paul Zimmerman" scam (IP 80.56.80.155):
inetnum: 80.56.0.0 - 80.57.255.255
org: ORG-CB6-RIPE
netname: NL-CHELLO-20000509
descr: Provider Local Registry
country: NL
admin-c: GM3659-RIPE
tech-c: HTK1-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: CHELLO-MNT
mnt-routes: CHELLO-MNT
changed: hostmaster@ripe.net 20000509
changed: hostmaster@ripe.net 20010516
changed: lir-help@ripe.net 20011211
source: RIPE
route: 80.56.0.0/16
descr: UPC.nl Network Services
descr: Chello Customers
descr: The Netherlands
origin: AS8209
notify: registry@upc.nl
notify: hostmaster@chello.at
mnt-by: CHELLO-MNT
changed: hostmaster@chello.at 20010622
source: RIPE
organisation: ORG-CB6-RIPE
org-name: Chello Broadband
org-type: LIR
address: Chello Broadband N.V.
boeing avenue 101
1119pe schiphol rijk
The Netherlands
phone: +31 20 7788200
fax-no: +31 20 7788203
e-mail: hostmaster@chello.com
admin-c: GM3659-RIPE
admin-c: RM2527-RIPE
admin-c: AK991-RIPE
admin-c: SB9000-RIPE
admin-c: MH392-RIPE
admin-c: MG872-RIPE
admin-c: HTK1-RIPE
admin-c: MS2509-RIPE
mnt-ref: CHELLO-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20040415
changed: bitbucket@ripe.net 20040617
changed: bitbucket@ripe.net 20041112
changed: bitbucket@ripe.net 20050201
source: RIPE
role: Hostmaster Telekabel Wien
address: UPC Telekabel Wien GmbH
address: Erlachgasse 116
address: A-1100 Vienna
address: Austria
phone: +43 1 96068 5000
fax-no: +43 1 96068 5666
e-mail: hostmaster@chello.at
trouble: help@chello.at
admin-c: AK991-RIPE
tech-c: SB666-RIPE
tech-c: AK991-RIPE
tech-c: MS2509-RIPE
nic-hdl: HTK1-RIPE
notify: hostmaster@chello.at
mnt-by: CHELLO-MNT
changed: hostmaster@chello.at 20040609
source: RIPE
person: Gary Mendel
address: Koningin Wilhelminaplein 2-4
address: 1062 HK Amsterdam
address: The Netherlands
phone: +31 20 355-2777
fax-no: +31 20 355-2755
e-mail: hostmaster@chello.com
nic-hdl: GM3659-RIPE
notify: hostmaster@chello.at
mnt-by: CHELLO-MNT
changed: hostmaster@chello.at 20010212
source: RIPE
|