| |
419 Scam – 419 scammers solicit funds for Hurricane victims
The same criminals who pose as email lotteries, corrupt bank employees, lawyers or family members of dead dictators in the "419" advance fee fraud were taking advantage of the 2005 hurricane disaster in New Orleans and the US gulf coast, just as they did after the 2004 Indian Ocean tsunami.
Here we will collect examples of such scam emails.
Other charity scams:
"Norman Maneta"
This spam was sent through a satellite provider in the UK, most likely via a customer in Nigeria:
NEW ORLEANS STATE DEPARTMENT NEW ORLEANS UNITED STATES OF
AMERICA.
Mr Norman Maneta,
secetary New Orleans
telephone-14256489007
fax-14-789-006-897
[email protected]
state department New Orleans,734
USA
DISASTER STRUCK THE NEW ORLEANS IN
UNITED STATE INCLUDING MISSISSIPPI,LOUISIANA AND ALABAMA
ON SUNDAY AUGUST 28TH 2005.THOUSANDS OF PERSONS LOST THIER
LIVES AND WERE RENDERED HOMELESS.POWER SUPPLY BROKE DOWN
IMMEDIATELY.SEVERAL AMERICAN COAST GUA(RESCUE
TEAMS)NUMBERING MORE THAN EIGTHEEN THOUSAND WERE DEPLOYED
BY PRESIDENT GEORGE BUSH TO NEW ORLEANS TO RESCUE THE
HURRICANE KATRINA VICTIMS WHO GOT STRANDED,THROUGH THE
ROOFS OF THEIR VARIOUS HOUSES BY HELIPCOTERS.PRESIDENT
GEORGE BUSH IN A STATEMENT IMMEDIATELY AFTER THE
DISASTER,SAID THAT THIS IS THE WORST HUMAN NATURAL
DISASTER EVER WITNESSED IN THE HISTORY OF AMERICA AND IS
THE LARGEST AIR LIFT ON AMERICAN SOIL.
THE MAYOR OF NEW ORLEANS RAY HAGAN ORDERED THE
IMMEDIATE EVACUATION OF THE ENTIRE AREA BEEN AFFECTED BY
THIS HURRICANE KATRINA,WHILE BUSH ORDERED THE DIPLOYMENT
OF PUBLIC HEALTH EMERGENCY TO NEW ORLEANS WITH VICTIMS
MOSTLY FROM AFRICAN/AMERICAN AND NEPAL.PROPERTIES WORTH
BILLIONS OF DOLLARS WERE DESTROYED.IT WILL TAKE SIX MONTHS
TO DRAIN OUT THE ENTIRE WATER IN THE AREA AND NINE MONTHS
TO REBIULD THE CITY AND TWO YEARS BEFORE PEOPLE OF NEW
ORLEANS CAN COME BACK TO THE CITY.
AMERICA HAD IN THE PAST DIVERTED HEAVY MONEY WORTH
TRILLIONS OF DOLLARS IN FIGTHING WAR ON TERRORISM AND
PEACE KEEPING IN VARIOUS PART OF THE WORLD.SO YOUR HUGE
FINANCIAL ASSISTANCE IS MOST NEEDED FOR THE WELFARE OF THE
RAVAGED,DEVASTATED AND WOUNDED PEOPLE OF THE HURRICANE
KATRINA VICTIMS.HELP BRING ANOTHER SIGH OF RELIEF IN THE
LIFES OF THESE PEOPLE ONCE AGAIN.SAVE LIFES OF THESE
PEOPLE NOW BY SENDING YOUR ASSISTANCE FINANCIALLY.PRAISES
MUST GO TO A CITIZEN NAMED CLARANCE HOLTON WHO ON
SEPTEMBER 3RD 2005 AFTER THE DISASTER CONTRIBUTED HIS
QUOTA BY FINANCIALLY CONTRIBUTING TO THIS HURRICANE
VICTIMS.YOUR SUPPORT TO THE PEOPLE OF NEW ORLEANS WILL BE
APPRECIATED BY GOD AND THE ENTIRE PEOPLE OF AMERICA AND
NEW ORLEANS IN PARTICULAR NO MATTER THE AMOUNT WEATHER
LITTLE OF LARGE CAN BE CONTRIBUTED TO THESE PEOPLE NOW
.HELP SEND SMILES,HAPPINESS AND JOY TO THIS VICTIMS
TODAY,TOMORROW AND FOREVER YOU WILL BE REMEMBERED FOR THE
HELP AND CONTRIBUTIONS.FOR YOUR POSITIVE RESPONSES AND
ASSISTANCE PLEASE SEND AN EMAIL
TO:[email protected] HELP SAVE THE LIFES OF
OVER A MILLION PEOPLE OF HURRICANE KATRINA VICTIMS
NOW.YOUR CONTRIBUTION CAN HELP SAVE A MILLION LIFE NOW.GOD
BE WITH NEW ORLEANS,AMERICA AND THE ENTIRE DEVASTATED
VICTIMS OF NEW ORLEANS AND GOD BLESS YOU AS YOU RESPOND
POSITIVELY TO SAVE THE SITUATION OF THESE PEOPLE.THANKS.
NORMAN MANETA
SECETARY
============================================================================
Semarakkan Ulang Tahun Kemerdekaan RI dengan mengikuti TelkomNet Netkuis 17-an
Dari 17-08-2005 s.d 17-09-2005. Dan dapatkan hadiahnya..!! hanya di http://netkuis.telkom.net
============================================================================
Message headers:
Received: from HELO c.plasa.com by out-mta1.plasa.com 47
with esmtps (SSLv3:DES-CBC3-SHA:168)
id 1EIEX6-0000rT-3d; Thu, 22 Sep 2005 07:01:48 +0700
Received: from [213.185.125.114] (account [email protected]) by
b2.c.plasa.com (CommuniGate Pro WebUser 4.3.7) with HTTP id
2014487; Thu, 22 Sep 2005 05:52:42 +0700
From: "new orleans" <[email protected]>
Subject: HELP SAVE HURRICANE KATRINA VICTIMS
X-Mailer: CommuniGate Pro WebUser Interface v.4.3.7
Date: Thu, 22 Sep 2005 05:52:42 +0700
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 8bit
X-Brightmail: Message tested, results are inconclusive
To: undisclosed-recipients:;
WHOIS details for sending network (IP 213.185.125.114):
inetnum: 213.185.96.0 - 213.185.127.255
org: ORG-IA67-RIPE
netname: UK-INTELSAT-20021129
descr: PROVIDER
descr: Intelsat
country: GB
admin-c: IRA4-RIPE
tech-c: IRTC1-RIPE
tech-c: AT1875-RIPE
tech-c: nd776-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: AS22351-MNT
mnt-routes: AS22351-MNT
source: RIPE # Filtered
organisation: ORG-IA67-RIPE
org-name: Intelsat
org-type: LIR
address: Chiswick Park, Building 3
566 Chiswick High Road
address: W45YA
address: London
address: United Kingdom
phone: +44 208 899 6035
phone: +1 202 944 6792
phone: +1 202 944 8548
fax-no: +1 202 944 6955
e-mail: [email protected]
admin-c: IRA4-RIPE
admin-c: IRTC1-RIPE
admin-c: ELAD1-RIPE
admin-c: nd776-RIPE
mnt-ref: AS22351-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role: Intelsat Ripe Admin
address: Intelsat Global Service Corporation
address: 3400 International Drive, NW
address: Washington, DC
address: 20008
address: USA
e-mail: [email protected]
e-mail: [email protected]
admin-c: AT1875-RIPE
admin-c: nd776-RIPE
tech-c: nd776-RIPE
nic-hdl: IRA4-RIPE
remarks:
remarks: *************************************************************
remarks: * *
remarks: * This is a generic ROLE object for an Intelsat Admin *
remarks: * Contact person for RIPE matters. Inquiries about RIPE *
remarks: * issues should be directed to the TAC or BGP email-boxes, *
remarks: * which will forward them appropriately. For operational *
remarks: * issues, send an Email or call the Intelsat NOC at: *
remarks: * *
remarks: * [email protected] *
remarks: * +1 202 944 6792 *
remarks: * *
remarks: * For BGP related issues, send an email to: *
remarks: * *
remarks: * [email protected] *
remarks: * *
remarks: * For issues of network abuse, including spam, please send *
remarks: * email to Intelsat at: *
remarks: * *
remarks: * [email protected] *
remarks: * *
remarks: *************************************************************
remarks:
source: RIPE # Filtered
role: Intelsat RIPE Technical Contact
address: Intelsat Global Service Corporation
address: 3400 International Drive, NW
address: Washington, DC
address: 20008
address: USA
e-mail: [email protected]
e-mail: [email protected]
e-mail: [email protected]
e-mail: [email protected]
e-mail: [email protected]
admin-c: IRA4-RIPE
tech-c: nd776-RIPE
nic-hdl: IRTC1-RIPE
remarks:
remarks: *************************************************************
remarks: * *
remarks: * This is a generic ROLE object for an Intelsat Technical *
remarks: * Contact person for RIPE matters. Inquiries about RIPE *
remarks: * issues should be directed to the NOC or BGP email-boxes, *
remarks: * which will forward them appropriately. For operational *
remarks: * issues, send an Email or call the Intelsat NOC at: *
remarks: * *
remarks: * [email protected] *
remarks: * +1 202 944 6792 *
remarks: * [email protected] *
remarks: * For BGP related issues, send an email to: *
remarks: * *
remarks: * [email protected] *
remarks: * *
remarks: * For issues of network abuse, including spam, please send *
remarks: * email to Intelsat at: *
remarks: * *
remarks: * [email protected] *
remarks: * *
remarks: *************************************************************
remarks:
remarks:
source: RIPE # Filtered
person: Augustin Traore
address: 3400 International Drive NW,
Washington DC 20008-3006
phone: +703-944-7033
e-mail: [email protected]
nic-hdl: AT1875-RIPE
mnt-by: AS22351-MNT
source: RIPE # Filtered
person: nene diallo
address: Intelsat
3400 International Dr, NW
washington, DC 20008
phone: +1-202-944-8548
e-mail: [email protected]
nic-hdl: nd776-RIPE
mnt-by: AS22351-MNT
source: RIPE # Filtered
Here are a few other email addresses used in 419 scams from the same IP address (213.185.125.114). As you can see this address is the source of plenty of Nigerian scams:
213.185.125.114 |
2005-06-30 18:46:07 UTC | [email protected] |
2005-08-01 07:45:06 UTC | [email protected] |
2005-08-01 07:46:46 UTC | [email protected] |
2005-08-01 14:56:02 UTC | [email protected] |
2005-08-03 03:27:51 UTC | [email protected] |
2005-08-04 19:55:18 UTC | [email protected] |
2005-08-04 22:40:30 UTC | [email protected] |
2005-08-05 00:13:06 UTC | [email protected] |
2005-08-05 02:42:14 UTC | [email protected] |
2005-08-05 18:05:34 UTC | [email protected] |
2005-08-05 18:34:15 UTC | [email protected] |
2005-08-06 11:00:57 UTC | [email protected] |
2005-08-06 14:21:04 UTC | [email protected] |
2005-08-07 17:49:23 UTC | [email protected] |
2005-08-08 10:06:20 UTC | [email protected] |
2005-08-08 10:36:28 UTC | [email protected] |
2005-08-08 10:37:06 UTC | [email protected] |
2005-08-09 01:22:39 UTC | [email protected] |
2005-08-09 01:23:34 UTC | [email protected] |
2005-08-09 01:27:54 UTC | [email protected] |
2005-08-09 01:30:19 UTC | [email protected] |
2005-08-09 01:30:50 UTC | [email protected] |
2005-08-09 11:22:01 UTC | [email protected] |
2005-08-10 06:46:08 UTC | [email protected] |
2005-08-10 08:00:24 UTC | [email protected] |
2005-08-11 03:47:42 UTC | [email protected] |
2005-08-11 04:36:18 UTC | [email protected] |
2005-08-11 08:57:26 UTC | [email protected] |
2005-08-11 19:03:51 UTC | [email protected] |
2005-08-11 19:05:29 UTC | [email protected] |
2005-08-11 19:05:52 UTC | [email protected] |
2005-08-11 19:06:41 UTC | [email protected] |
2005-08-12 08:11:18 UTC | [email protected] |
2005-08-12 09:05:39 UTC | [email protected] |
2005-08-12 21:12:04 UTC | [email protected] |
2005-08-12 21:35:42 UTC | [email protected] |
2005-08-12 21:36:10 UTC | [email protected] |
2005-08-13 03:45:18 UTC | [email protected] |
2005-08-13 17:15:15 UTC | [email protected] |
2005-08-13 20:08:21 UTC | [email protected] |
2005-08-15 13:28:07 UTC | [email protected] |
2005-08-16 10:15:55 UTC | [email protected] |
2005-08-16 14:10:04 UTC | [email protected] |
2005-08-16 14:23:42 UTC | [email protected] |
2005-08-17 11:47:00 UTC | [email protected] |
2005-08-18 13:28:36 UTC | [email protected] |
2005-08-18 20:49:20 UTC | [email protected] |
2005-08-19 01:02:58 UTC | [email protected] |
2005-08-19 02:14:19 UTC | [email protected] |
2005-08-19 02:19:02 UTC | [email protected] |
2005-08-19 19:39:20 UTC | [email protected] |
2005-08-20 00:40:44 UTC | [email protected] |
2005-08-20 17:33:59 UTC | [email protected] |
2005-08-21 19:44:32 UTC | [email protected] |
2005-08-21 19:53:40 UTC | [email protected] |
2005-08-22 16:40:35 UTC | [email protected] |
2005-08-22 22:04:24 UTC | [email protected] |
2005-08-23 00:30:28 UTC | [email protected] |
2005-08-23 07:58:31 UTC | [email protected] |
2005-08-23 08:35:16 UTC | [email protected] |
2005-08-23 08:35:26 UTC | [email protected] |
2005-08-23 10:23:24 UTC | [email protected] |
2005-08-25 01:39:56 UTC | [email protected] |
2005-08-25 01:54:18 UTC | [email protected] |
2005-08-25 16:03:38 UTC | [email protected] |
2005-08-27 03:10:51 UTC | [email protected] |
2005-08-30 07:35:08 UTC | [email protected] |
2005-08-30 13:30:06 UTC | [email protected] |
2005-08-30 19:02:39 UTC | [email protected] |
2005-08-31 00:54:17 UTC | [email protected] |
2005-08-31 23:12:48 UTC | [email protected] |
2005-09-01 00:53:02 UTC | [email protected] |
2005-09-02 00:42:05 UTC | [email protected] |
2005-09-02 00:44:15 UTC | [email protected] |
2005-09-02 00:56:20 UTC | [email protected] |
2005-09-02 02:12:58 UTC | [email protected] |
2005-09-02 10:38:20 UTC | [email protected] |
2005-09-03 11:40:41 UTC | [email protected] |
2005-09-03 12:47:18 UTC | [email protected] |
2005-09-04 02:01:17 UTC | [email protected] |
2005-09-05 10:30:59 UTC | [email protected] |
2005-09-05 16:00:48 UTC | [email protected] |
2005-09-05 16:58:07 UTC | [email protected] |
2005-09-05 17:30:57 UTC | [email protected] |
2005-09-05 23:41:55 UTC | [email protected] |
2005-09-06 10:13:38 UTC | [email protected] |
2005-09-07 00:34:13 UTC | [email protected] |
2005-09-07 01:15:13 UTC | [email protected] |
2005-09-07 01:46:07 UTC | [email protected] |
2005-09-07 09:28:51 UTC | [email protected] |
2005-09-07 10:52:47 UTC | [email protected] |
2005-09-10 04:21:53 UTC | [email protected] |
2005-09-10 12:31:13 UTC | [email protected] |
2005-09-13 15:40:48 UTC | [email protected] |
2005-09-13 18:34:59 UTC | [email protected] |
2005-09-14 23:24:52 UTC | [email protected] |
2005-09-15 19:53:42 UTC | [email protected] |
2005-09-17 01:28:28 UTC | [email protected] |
2005-09-18 15:49:54 UTC | [email protected] |
2005-09-19 23:59:05 UTC | [email protected] |
2005-09-20 07:57:50 UTC | [email protected] |
2005-09-20 09:48:50 UTC | [email protected] |
2005-09-21 01:35:07 UTC | [email protected] |
2nd email from the criminal posing as "Norman Maneta":
MY DEAR FIRSTNAME LASTNAME,
SORRY FOR REPLYING YOUR LETTER VERY LATE,THIS WAS DUE TO SOME OCCURANCES OF LOGISTICAL PROBLEMS IN NEW ORLEANS.WELL I AM VERY HAPPY THAT YOU INTERESTINGLY AGREED TO OFFER YOUR CONTRIBUTIONS TOWARDS SAVING THE LIFES OF NEW ORLEANS HURRICANE KATRINA VICTIMS.YOU CAN CONTRIBUTE YOUR OWN QUOTA BY SENDING ANY KIND OF FINANCIAL ASSISTANCE,WEATHER LITTLE OR BIG.SEND US YOUR PHONE NUMBER SO THAT WE CAN CALL YOU TO INFORM YOU ON THE DETAILS ON HOW TO SEND YOUR CONTRIBUTIONS.THANKS
NORMAN MANETA
SECETARY
Firstname Lastname <emailaddress> wrote:
Dear Sir,
I'd like offer my help. Let me know how I can contribute.
Best regards
Firstname Lastname
Message headers:
Received: from web86807.mail.ukl.yahoo.com
(web86807.mail.ukl.yahoo.com [217.12.13.49])
by mx.gmail.com with SMTP id h7si1334063wxd.2005.10.06.10.29.15;
Thu, 06 Oct 2005 10:29:17 -0700 (PDT)
Received-SPF: neutral (gmail.com: 217.12.13.49 is neither permitted
nor denied by domain of [email protected])
DomainKey-Status: good (test mode)
Received: (qmail 7585 invoked by uid 60001); 6 Oct 2005 17:18:42 -0000
Message-ID: <[email protected]>
Received: from [213.181.83.82] by web86807.mail.ukl.yahoo.com
via HTTP; Thu, 06 Oct 2005 18:18:41 BST
Date: Thu, 6 Oct 2005 18:18:41 +0100 (BST)
From: Peterson Macphason <[email protected]>
Subject: thanks for your positive resposne
To: emailaddress
WHOIS details for sending network (IP 213.181.83.82):
inetnum: 213.181.64.0 - 213.181.95.255
org: ORG-BL4-RIPE
netname: NG-BROADBANDTECH-20000327
descr: BT Limited
descr: PROVIDER Local Registry
country: NG
admin-c: IO243-RIPE
tech-c: IO243-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-routes: BT-LIMITED-MNT
mnt-lower: BT-LIMITED-MNT
source: RIPE # Filtered
organisation: ORG-BL4-RIPE
org-name: BT Limited
org-type: LIR
address: BT Limited
address: 8B Ademola Street,
address: Off Awolowo Road,
address: S. W. Ikoyi,
address: Lagos, Nigeria.
phone: +234 1 2693192
fax-no: +234 1 2693192
e-mail: [email protected]
admin-c: IO243-RIPE
admin-c: IO243-RIPE
mnt-ref: BT-LIMITED-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
person: Israel Oyeleke
address: BT Limited
address: 8B Ademola Street
address: Ikoyi S.W.
address: Lagos, Nigeria
phone: +234 1 2673532
fax-no: +234 1 2673203
e-mail: [email protected]
nic-hdl: IO243-RIPE
source: RIPE # Filtered
Email history for IP 213.181.83.82:
213.181.83.82 |
2005-01-08 13:14:29 UTC | [email protected] |
2005-01-12 13:12:45 UTC | [email protected] |
2005-01-16 21:01:20 UTC | [email protected] |
2005-01-29 13:09:30 UTC | [email protected] |
2005-02-02 20:28:18 UTC | [email protected] |
2005-02-12 11:59:25 UTC | [email protected] |
2005-02-18 12:50:35 UTC | [email protected] |
2005-02-22 18:44:54 UTC | [email protected] |
2005-02-28 20:53:34 UTC | [email protected] |
2005-03-11 09:41:54 UTC | [email protected] |
2005-03-26 14:10:06 UTC | [email protected] |
2005-03-26 14:16:00 UTC | [email protected] |
2005-03-31 02:57:27 UTC | [email protected] |
2005-03-31 03:41:54 UTC | [email protected] |
2005-04-07 02:13:17 UTC | [email protected] |
2005-04-13 01:28:12 UTC | [email protected] |
2005-04-13 01:31:04 UTC | [email protected] |
2005-04-13 18:09:40 UTC | [email protected] |
2005-04-21 02:23:15 UTC | [email protected] |
2005-04-22 23:57:08 UTC | [email protected] |
2005-04-27 04:51:23 UTC | [email protected] |
2005-05-04 00:34:21 UTC | [email protected] |
2005-05-04 12:30:53 UTC | [email protected] |
2005-05-04 12:31:44 UTC | [email protected] |
2005-05-04 12:46:20 UTC | [email protected] |
2005-05-04 21:36:04 UTC | [email protected] |
2005-05-07 14:50:35 UTC | [email protected] |
2005-05-10 02:10:57 UTC | [email protected] |
2005-06-04 00:53:04 UTC | [email protected] |
2005-06-09 15:29:41 UTC | [email protected] |
2005-06-10 13:18:42 UTC | [email protected] |
2005-06-12 13:28:04 UTC | [email protected] |
2005-06-13 23:13:44 UTC | [email protected] |
2005-06-14 02:00:17 UTC | [email protected] |
2005-06-14 02:17:40 UTC | [email protected] |
2005-06-17 08:32:44 UTC | [email protected] |
2005-06-17 08:37:23 UTC | [email protected] |
2005-06-17 08:37:34 UTC | [email protected] |
2005-06-29 21:26:12 UTC | [email protected] |
2005-06-29 23:14:41 UTC | [email protected] |
2005-08-25 04:19:48 UTC | [email protected] |
2005-08-26 01:15:02 UTC | [email protected] |
2005-08-27 02:36:43 UTC | [email protected] |
2005-09-06 10:27:52 UTC | [email protected] |
2005-09-14 22:53:19 UTC | [email protected] |
2005-09-27 13:02:25 UTC | [email protected] |
2005-09-27 13:06:33 UTC | [email protected] |
2005-09-29 12:34:39 UTC | [email protected] |
2005-09-30 00:45:27 UTC | [email protected] |
2005-09-30 10:06:34 UTC | [email protected] |
2005-10-01 01:31:36 UTC | [email protected] |
2005-10-06 17:18:41 UTC | [email protected] |
"caroline dicksn" ([email protected])
From: "caroline dicksn" <[email protected]>
Subject: HELP TO REBUILD NEW ORLEANS
Dear Companion,
My name is Madam Caroline Dickson; I am the Public Relation Officer of
the Hurricane Rebuilding Program Committee.
Now, as the months drag on, New Orleans, Louisiana has been removed
from the headlines. But homelessness, strained living conditions,
separation from friends and broken lives still bring day-by-day tears,
heartache and humiliation unimaginable to the non-Gulf Coast dweller.
The effort to rebuild New Orleans, Louisiana involves everyone. We
welcome your thoughts and ideas as the planning and design process of
recovery and rebuilding begins. The Hurricane Rebuilding is likely to take
up to five years, according to report from the American Institute of
Architects.
It is therefore our assignment to invite skillful organizations,
students, youth, unemployed men and women to take part in the Rebuilding of
Hurricane Affected Cities Program. As the Public Relation Officer of the
Hurricane Rebuilding Committee, I wish to bring to your knowledge that
we had been able to secure support from our partners, donors, and the
State Government of the United States. Flight tickets grant and visas
support will be render to international volunteers that require entry
visas to the United States.
If you are willing and ready to render a helping hand in the Rebuilding
of Hurricane Affected Cities Program, please contact Sandra Kelly at
[email protected] or fax: +1-914- 470-2394. Tell her you are been called
upon by Madam Caroline Dickson to be part of the hurricane-rebuilding
program.
Looking forward to your participation.
Yours faithfully,
Madam Caroline Dickson
For Hurricane Rebuilding Committee
|