|
419 Scam – "ROYAL STRIDE PROMO LOTTERY,ENGLAND / JACK FREEMAN"
"ROYAL STRIDE PROMO LOTTERY,ENGLAND / JACK FREEMAN" is the fake identity used by a gang of advance fee fraud ("419") scammers operating in Nigeria. (see one example scam email here).
Sample winning notification:
Message headers: Received: from [80.88.150.185] by www.zipmail.com.br with HTTP; Wed, 23 Feb 2005 23:54:55 -0300 Date: Thu, 24 Feb 2005 03:54:55 +0100 From: [email protected] Subject: =?iso-8859-1?Q?CONGRATULATION=20YOU=20ARE=20A=20WINNER=21=21=21?= To: [email protected] And another one a few days later:
Message headers: Received: from [80.88.150.184] by www.zipmail.com.br with HTTP; Sat, 26 Feb 2005 21:17:46 -0300 Date: Sun, 27 Feb 2005 01:17:46 +0100 From: [email protected] Subject: =?iso-8859-1?Q?CONGRATULATION=20YOU=20ARE=20A=20WINNER?= To: [email protected] And this is the reply from "MR. JACK FREEMAN": DEAR BENEFICIARY, Message headers: Received: from [80.88.150.184] by web90007.mail.scd.yahoo.com via HTTP; Mon, 28 Feb 2005 19:36:38 PST Date: Mon, 28 Feb 2005 19:36:38 -0800 (PST) From: freeman jack
WHOIS details for sending network (IP 80.88.150.184): inetnum: 80.88.150.176 - 80.88.150.191 netname: EMP-GLM01 descr: Network at EMP-GLM01 descr: Please report all abuse to network admin-c country: NG admin-c: OAM5-RIPE tech-c: EMP5-RIPE status: ASSIGNED PA remarks: - - - - - - - - - - - - - - - - - - remarks: Abuse address: [email protected] remarks: - or the admin-c of the network remarks: - - - - - - - - - - - - - - - - - - notify: [email protected] mnt-by: EMP-NOC-MNT changed: [email protected] 20030325 source: RIPE route: 80.88.144.0/20 descr: DK-EMPERION-20021031-ROUTE origin: AS21125 mnt-by: EMP-NOC-MNT changed: [email protected] 20021031 source: RIPE role: Emperion NOC Operator address: Emperion A/S address: Middelfartgade 7 address: 2100 Koebenhavn Oe address: DK phone: +45 3929 3530 e-mail: [email protected] trouble: [email protected] admin-c: KW6968-RIPE tech-c: KW6968-RIPE tech-c: SRL7-RIPE tech-c: AJ163-RIPE tech-c: GB1283-RIPE tech-c: FL497-RIPE nic-hdl: EMP5-RIPE notify: [email protected] mnt-by: EMP-NOC-MNT changed: [email protected] 20010906 changed: [email protected] 20020110 changed: [email protected] 20021107 source: RIPE person: Omezie A Molokwu address: Globalmicrocom Limited e-mail: [email protected] phone: +234-8033011975 phone: +234-1-4820201 notify: [email protected] mnt-by: EMP-NOC-MNT nic-hdl: OAM5-RIPE changed: [email protected] 20030325 source: RIPE
"bondtrustltd.net" (complaints to: [email protected])
WHOIS record for 419-scam domain "bondtrustltd.net" Request: bondtrustltd.net from whois.crsnic.net:43 [cached Wed Feb 16 01:41:25 2005 UTC] from whois.melbourneit.com:43 [cached Wed Feb 16 01:41:26 2005 UTC] Domain Name.......... bondtrustltd.net Creation Date........ 2005-02-03 Registration Date.... 2005-02-03 Expiry Date.......... 2006-02-03 Organisation Name.... Benjamin Berkowitz Organisation Address. 1400 Laurel Avenue Organisation Address. Organisation Address. Minneapolis Organisation Address. 55403 Organisation Address. MN Organisation Address. UNITED STATES Admin Name........... Benjamin Berkowitz Admin Address........ 1400 Laurel Avenue Admin Address........ Admin Address........ Minneapolis Admin Address........ 55403 Admin Address........ MN Admin Address........ UNITED STATES Admin Email.......... [email protected] Admin Phone.......... +1.6123331210 Admin Fax............ Tech Name............ MSN NOC Tech Address......... One Microsoft Way Tech Address......... Tech Address......... Redmond Tech Address......... 98052 Tech Address......... WA Tech Address......... UNITED STATES Tech Email........... [email protected] Tech Phone........... +1.4258828080 Tech Fax............. Name Server.......... pdomns1.msn.com Name Server.......... pdomns2.msn.com
"bondtrustlimited.com" (complaints to: [email protected])
WHOIS record for 419-scam domain "bondtrustlimited.com" Request: bondtrustlimited.com connected to whois.crsnic.net [198.41.3.54:43] ... connected to whois.enom.com [66.151.151.170:43] ... Registration Service Provided By: Microsoft Contact: [email protected] Visit: http://support.msn.com/contactus.aspx?pk=PersonalAddress Domain name: bondtrustlimited.com Registrant Contact: Benjamin Berkowitz Benjamin Berkowitz ([email protected]) +1.8186234544 Fax: none 116 vassar avenue canoga park, CA 91304 US Administrative Contact: Benjamin Berkowitz Benjamin Berkowitz ([email protected]) +1.8186234544 Fax: none 116 vassar avenue canoga park, CA 91304 US Technical Contact: NOC MSN NOC MSN ([email protected]) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Billing Contact: NOC MSN NOC MSN ([email protected]) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Status: Locked Name Servers: pdomns1.msn.com pdomns2.msn.com Creation date: 02 Feb 2005 16:13:30 Expiration date: 02 Feb 2006 16:13:30
WHOIS record for 419-scam domain "bondtrusltd.com" Request: bondtrusltd.com connected to whois.melbourneit.com [203.27.227.114:43] ... Domain Name.......... bondtrusltd.com Creation Date........ 2005-02-08 Registration Date.... 2005-02-08 Expiry Date.......... 2006-02-08 Organisation Name.... George Duncan Organisation Address. 122, griven avenue, Organisation Address. Organisation Address. excel Organisation Address. 36439 Organisation Address. AL Organisation Address. UNITED STATES Admin Name........... George Duncan Admin Address........ 122, griven avenue, Admin Address........ Admin Address........ excel Admin Address........ 36439 Admin Address........ AL Admin Address........ UNITED STATES Admin Email.......... [email protected] Admin Phone.......... +1.2023417989 Admin Fax............ Tech Name............ MSN NOC Tech Address......... One Microsoft Way Tech Address......... Tech Address......... Redmond Tech Address......... 98052 Tech Address......... WA Tech Address......... UNITED STATES Tech Email........... [email protected] Tech Phone........... +1.4258828080 Tech Fax............. Name Server.......... pdomns1.msn.com Name Server.......... pdomns2.msn.com
WHOIS record for 419-scam domain "bond-trust.com" Request: bond-trust.com connected to whois.enom.com [66.151.151.170:43] ... Registration Service Provided By: Microsoft Contact: [email protected] Visit: http://support.msn.com/contactus.aspx?pk=PersonalAddress Domain name: bond-trust.com Registrant Contact: williams Jones williams Jones ([email protected]) +1.7186123124 Fax: none 6567 baisely blvd jamaica, NY 11434 US Administrative Contact: williams Jones williams Jones ([email protected]) +1.7186123124 Fax: none 6567 baisely blvd jamaica, NY 11434 US Technical Contact: NOC MSN NOC MSN ([email protected]) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Billing Contact: NOC MSN NOC MSN ([email protected]) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Status: Locked Name Servers: pdomns1.msn.com pdomns2.msn.com Creation date: 21 Feb 2005 14:42:22 Expiration date: 21 Feb 2006 14:42:22
|