Spam 419/Nigeria Online fraud jwSpamSpy Contact
Email Spam Filter: |
|
|
Wedding photographer paid by large cashier's check
- Fraud: Car buyer with large cashier's check
- Fraud: Bike seller uses bogus escrow service, Western Union
- Overseas Horse Buyer Scam
- Cashier's cheque scam targetting dance studios / dance teachers
- Fraud: mailorder shipping to Nigeria
- ALABA STREET, MUSHIN, LAGOS
- About "419" scams
This scam that targets professional photographers in the UK, US and maybe other countries is run by criminals in West Africa. It is a variation of a similar scam involving cars and other big ticket items sold in classified ads. The criminal poses as someone arranging a wedding. He contacts a professional photographer to book him for a wedding. Then he/she sends a large cashier's check as payment. The check is larger than the amount of the photography package.
The photographer is asked to cash the check and wire the extra amount to a third party, supposedly a wedding planner, a band or other entity associated with the wedding. The check is fake and the victim wires several thousand dollars of his own money to the criminals if he falls for this scam.
Please send us any such emails you may have received and we will publish them (withholding your name and email address, of course) to warn other photographers and to assist law enforcement investigating such cases.
How to display message headers in Apple Mail (OS X)
Select View / Message / Long Header. This will display information of where the email originated. Please forward that information to us along with any samples of fraud email.
|
Example email:
From: Fred williams [[email protected]] To: photographer Sent: Friday, April 15, 2005 1:49 PM Subject: My wedding photographer ! Good day, I am Mr Fred Williams from oxfordshire UK i am getting married to Miss Helen Christy next month on the 27 0f may 2005 at de vere hotel & leisure 2100 Daresbury Park and i needed a special photographer who will take a place at the event next month i will like to know all what it will cost you to get to my location here and the actual amount to take a covarage of 7hour from the chucrh to the recption i really need to know this so that i can contact my father in-law about this cos he his the one paying for this coverage await your response immedaitely. Thanks & God bless Mr Louis Molls
Message headers:
Received: from [82.206.246.154] by web26901.mail.ukl.yahoo.com via HTTP; Fri, 15 Apr 2005 13:49:06 BST Date: Fri, 15 Apr 2005 13:49:06 +0100 (BST) From: Fred williams <[email protected]> Subject: My wedding photographer !
From: Fred williams <[email protected]> To: Firstname Lastname Sent: Monday, April 18, 2005 1:48 PM Subject: payment ! Firstname Lastname , thanks for the mail, we would pay £3000 for the wedding photographer , any other payment will be made after the wedding , payment will be made for bookings for the day , well my father in-law has issued a cheque of £7000 for the wedding photographer and wedding planner and right now he his out of location and we need to be booked for the photographer , well cheque will be made out to you and the balance will be for the wedding planner .i will like you to get back to me with this detais to make out payment . Name on cheque . Full postal address Zip code phone number for easy contact and other arrangement . Thanks
Message headers:
Received: from [81.199.84.130] by web26909.mail.ukl.yahoo.com via HTTP; Mon, 18 Apr 2005 13:48:12 BST Date: Mon, 18 Apr 2005 13:48:12 +0100 (BST) From: Fred williams <[email protected]> Subject: payment !
"committe wedding [mailto:[email protected]]"
This email was sent from the same IP at the same provider in Nigeria as in the second "Fred williams" scam email above and in the "Desmond Powel" scam email below.
From: committe wedding [mailto:[email protected]] To: photographer Sent: Friday, April 08, 2005 12:26 AM Subject: photographer Hi, I am Linda Bryann,the secretary of a wedding committe that has been constituted to see to the smooth running of my boss's son's wedding ceremony. I am saddled with the responsibilty of locating and arranging for a good and experienced wedding photographer and videographer. So,i searched through the net and found you appropriate for the photography of the wedding ceremony. The details of the wedding are as follows: Date of the wedding: 15th of May 2005 Type of wedding: social venue of the wedding:[Church and reception will be held in the same place, london] Time of wedding: 10 A.M. Every other necessary details will be forwarded to you as soon as they are available. So, how much will your service cost me including your transport fare. Lest i forget, our payment is by cheque.So,after telling me the price and your availability, i will need your details to write the cheque. Thanks in anticipation of your favourable response. Bryann.
From: Van Kennedy [mailto:[email protected]] To: photographer Sent: Wednesday, March 23, 2005 1:51 PM Subject: Your Photographic Service Is Needed Hello, my name is Van Kennedy. I reside in Amsterdam, Netherlands. The reason am contacting you is that my daughter will be getting married soon in the state, on the 7th of May 2005 and I would like you to take care of the Photographs. I came across your advert on the Internet and am impressed with your services. All expenses would be taken care off; perhaps you can give me the total/Quotes charges,plus the Flight cost for you to down to Amsterdam, Netherlands. Hotel accommodation would also be gladly attended to. Please I want the best services from you, because this is my only daughter so I want the best for her. So your best is needed at this occasion. I will like to know where you are currently residing as at now, so that I could start the preparation on how you would be coming down. I look forward to your response. Best Regards
From: scott collins [mailto:[email protected]] To: Firstname Lastname Sent: Thursday, March 24, 2005 11:46 AM Subject: date ,venue & payment Firstname Lastname , thanks for the mail the date you are needed is 7th of may 2005 at Till mouth park country house hotel Cornhill-on-Tweed,Scottish Borders, Northumberl. i wil like to knwo the actual price it will cost you to come over there .payment will be made via certified cashiers cheque .i need this details for payment. Name on cheque postal address and zip code phone number for furher arrangement
Later email:
From: scott collins [mailto:[email protected]] To: Firstname Lastname Sent: Friday, March 25, 2005 9:43 AM Subject: payment Firstname Lastname , thanks for the mail, hotel resevation will be made by us , we are will willing to pay you the sum of 2500 pounds for the wedding photographs , well i need all the details to make out payment. Thanks
Here comes the cheque:
From: scott collins [mailto:[email protected]] To: Firstname Lastname Sent: Saturday, March 26, 2005 11:44 AM Subject: Re: payment Firstname Lastname , Thanks for the mail , i just contacted my wife about the payment details , she told me that my father in-law has already issued a cheque of 6000 pounds before traveling for his business trip of the photgrapher arrangment and the wedding planner based in U.S since we need to be booked for our photo album, the cheque will be sent to you immedaitely after sending this mail to you , the balance will be sent to wedding planner as intructd by my father in-law , sorry fo the inconviniences. Thanks and await your response S.collins
From: "John Morgan" <[email protected]> To: "Firstname Lastname" <emailaddress> Sent: Saturday, March 19, 2005 12:00 PM Subject: INFORMATION NEEDED !!!!!!!!!! Hello, Thanks alot for the mail.and i have spoke with my friend that want to pay for the charges and he agree with the Silver Wedding Package 2 Four hours coverage One hundred and fifty photographs taken One Handmade Wedding Album Thirty prints 10 x 8 One 10 x 8 enlargement in mount Price £1,380.00 For the payment of the charges,i have told you in my first mail that the payment will be made out by cheque and my friend are now prepare to made out the cheque of £4,500 for you on my behalf and the excess funds is for my secretary that will come and pick you to the wedding venue and as soon as you received the cheque you will deduct your cost of the charges and the excess funds is for you and the secretary transport that will come and pick you in your location.Do e-mail me with your FULL NAME,FULL CONTACT ADDRESS,PHONE NUMBER,so that i can forward it to my friend to issue out the cheque on my behalf and i will be waiting for the mail.. Regards. John..
From: "Henry Joe" <[email protected]> To: "Firstname Lastname" <emailaddress> Sent: Sunday, February 27, 2005 10:43 PM Subject: payment information!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Firstname Lastname, Thanks for the mail response and also thanks for your kind gesture towards this transaction and i really appreciate it.As regard the excess payment i will like you to deduct £400 out the funds and do make sure you send the excess payment to the videography via western union money tranfer not by cheque to him.So he can be able to received the funds in cash.So here is the information for you to transfer the funds to him TUNDE AJAYI. 253 SILVER RIDGE DRIVE, DALLAS GA, 30157 USA After the money has been sent to him,you will send me a copy of the transfer details such as, SENDERS NAME AND ADDRESS: RCECEIVERS NAME AND ADDRESS: TEXT QUESTION AND ANSWER{MY NAME?ANSWER HENRY JOE. AMOUNT SENT {MINUS D CHARGES FROM WESTERN UNION} REFERENCE NUMBER {MTCN} I will be expecting to read from you very soon. ONCE AGAIN THANKS FOR BEING HONEST WITH THIS TRANSACTION AND I WANT YOU TO GET BACK TO ME WITH YOUR MOBILE PHONE FOR BEST CONTACT.
From: "Tobey Farrell" <[email protected]> To: <emailaddress> Sent: Tuesday, October 19, 2004 6:47 PM Subject: Photographer needed Hello, My name is Tobey Farrell.My wife Lisa and i are planning to have our wedding on December 18th,2004 at St Paul's Church Bow Common Burdett Road,. I am looking for the best photographer who will come and snapshot on the D-day and when i came across your advert i was impressed. Let me know your charges for your required services if you are to work for at most 6 Hours on that day.We want about 150 copies of different photos in both black and white and in coloured both in the church and reception and of both the bride and the bridegroom,their parents,the officiating ministers and our guests. We will want you to work for at least 6 Hours at the occasion and if you are out of London,we will pay the transportation charges to and from the party venue so indicate in your email if you are out of London what it will costs either via Plane or through Car transport to get to the party company.Also,we will have the photographs snapped at the wedding forwarded to the Publisher of a Magazine Company in Germany so they could feature it in their celebrity journal. At this moment,my wife and i are on our way to Holland for a 4 weeks prewedding honeymoon and will try get in touch with you personally when we return. However,I will be making the payment by means of a Cheque.Let me have your full names,Address,Phone Number,Cellular Number where a Cheque will be mailed to for the payment.Moreso,should you be out of London,the Hotel accomodation will be provided for by me.Waiting to read from you soon as regards this. Best regards, Tobey Farrell. -- _____________________________________________________________ Web-based SMS services available at http://www.operamail.com. From your mailbox to local or overseas cell phones. Powered by Outblaze
Later email:
From: "Tobey Farrell" <[email protected]> To: "Firstname Lastname" <emailaddress> Sent: Thursday, November 18, 2004 11:19 AM Subject: Re: Wedding Planner's Mistake. Firstname, Am sorry for the mix up,the cheque you've received was drawn on The Royal Bank of Scotland for £5,000.The mistake in the amount the cheque was drawn for is as a result of my wedding planner mistake.I guess she got worked due to the work load,cos the wedding it's going be a big affair. The rest of the funds is meant for payment of the services of the Magazine Company that will feature the Photographys snapped on the Dday in the celebrity column of the Magazine. Please cash the cheque and help transfer the remaining £3,237.50 minus the transfer charges to the Publisher of the Magazine company via Western Union Money Transfer in the details below: MR UZOMA STANLEY IFEANYI HAFKORT 619 1102 LA AMSTERDAM ZUID HOLLAND. Below are western union money transfer outlet close to you 1, THE MONEY SHOP 71 B GEORGE STREET OXFORD , OXFORDSHIRE OX1 2BQ Tel: (44 ) (186) 5242299 2, GOING PLACES 6-8 GEORGE STREET OXFORD , OXFORDSHIRE OK1 2BO Tel: (44 ) (186) 5726727 3, LUNN POLY 44 WESTGATE OXFORD , OXFORDSHIRE OX1 1PD Tel: ( ) (44 ) 1865295165 Please get back to me with the transfer details in the manner below: 1,Sender's name and address 2,Receiver's name and address 3,Amount sent 4,Test question/Code word 5,MTCN/Control Number Waiting to read from you soon. Tobey.
The following scam targeted a US photographer:
On Apr 2, 2005, at 10:16 PM, scott williams wrote:
Hello and good day,i came across your work and it was quite impressive,so i decided that i will be needing you services in my forth coming wedding i will want to know how much are your charges and also if it will be possible for you to come over. Thanks
On Apr 4, 2005, at 10:05 AM, scott williams wrote:
Hello and thanks for your mail,well the wedding will be taken place in the U.K on the 28th of may,i will want to know if it will be possible for you to make it,and also what are your charges like. Thanks Scott
On Apr 4, 2005, at 12:48 PM, scott williams wrote:
Hello an thanks for your mail,well i will be takeing charge of your travelling fee so i will need you to include it to the total cost i will be paying you for everything. Thanks Scott
On April 8, 2005 1:29:03 PM EDT, scott williams <[email protected]> wrote:
Hello and goodday,i am yet to read from you will am
expecting you to get back to me so that we can proceed,
you know i dont have much time on me.
Thanks
Scott
Received: from [66.178.82.211] by web50107.mail.yahoo.com via HTTP; Fri, 08 Apr 2005 10:29:03 PDT From: scott williams <[email protected]> Date: April 8, 2005 1:29:03 PM EDT To: Photographer <emailaddress> Subject: wedding shooting..........................
Hello and thanks for your mail,pls i will need you to sned
me this details not as an attached file cos i am finding it
difficult to asses it.
Thanks
Scott
Hello and thanks for your mail,well i am okay with your
price ,but what i will do is that i will pay you half of
the monay and on delivery of the images i will give you
the other half of the moeny i am sure that will be fine
by you,if so then you can send a me a name and address
that the check for the payment will be sent ,so that i
can arrange for you to receive the check for the for
the payment.
Thanks
Scott
Hello and thanks for your mail,well the check for the
payment has being sent out so should expect to receive
it anytime from now,concerning the final arrangements my
wedding planner will be coming over to the states so the
both of you will discuss the details,i am sure as soon
as you notify me that you have received the check i will
have him come over to meet you.
Thanks
Best Regards
Hello and good day,pls i will want to know if you have
gotten the check for the payment so that i can have
mywedding planner come over to meet you and the both
of you will be coming over for the wedding.
Thanks
Scott
Hello and thanks for your mail,its like you have not
received the check for the payment cos i am yet to read
from you,well just a reminder that the amount on the
check you will receive is just half part of the paymewnt
on delivery of the images you will receive the other
balance of the payment.i have spoken with my wedding
planner,he will be coming over meet with you before
you come over for the wedding,get back to me if theres
any further details you need.
Thanks
Best Regards
Hello and good day,please i will want to know if you have
received the check for the payment cos i am concerned
about you having your payment before i ask my wedding
planner to come over to your place to discuss the final
movement.
Thanks
Scott
hanks for the comfirmation of payment..I spoke with my
wedding planner today and told him to startup with the
arrangments fast but he will require the funds to make
fast arrangments.i will Advice you send the funds today
to my wedding planner to this name and address unfalling
today..Here is the name and address of my wedding planner
to send the funds via western union.
Mr KABBA BEN
60 ARSENAL ROAD,
ELTHAM,LONDON, SE 9 1JY
UNITED KINGDOM
Pls firstname,
As soon you get the transfer done you will have to forward
me with the following details of the transfer for
security purpose..
1)sender`s name and address........
2)money transfer control number(mtcn).....
3)text question and answer.........
4) amount sent to my wedding planner......
Pls email me with the following details as soon as you
have transfer the funds so that i can be able to forward
it to my weeding planner to pickup the funds and make fast
arrangments.Looking forward to your kind reply..
Regards,
Scott
Here you can get intouch with the wedding planners ok..
([email protected]) pls make sure the $3000 funds
is sent to them before midnight so that they can startup
with all the necessary arrangments concerning our tip to london..
Regards,
Scott
Will like you email me with the details of transfer so
that i can email them to my wedding planner.pls get back
am still online for the details of transfer.
Thanks,
Scott.
Hello and good day,thanks for your mail,well i undertsand
the fact that you will have to send the funds in two
transaction thats okay by me ,i have spoken with the wedding
planner and he has accepted that its okay by him,so you can
go ahead and send him the funds this morning,as soon as you
have sent the funds i will need you to send both me and the
wedding planner the western union details,so that he can pick
up the funds and come over to your place to meet with you
this weekend i am sure that will be okay by you,get back to me.
Thanks
SCOTT
Its 6.5 here in the Uk.
We appreciate your urgent mail..Yea We are the wedding
planners. We have been introduce by Mr Scott Williams to
collect some amount of money fro you to make all necessary
documentation papers that will be needed for the trip to
the uk for you (photographer and Mr scott william).so we will
greatrfull if we can receive the funds this morning here
in the uk and make urgent arrangments and maybe by tommorow
saturday everything will be ready then cos we still have
some necessary arrangments will need money to make before
tommorow..Pls kindly get back immidiately to know how soon
the funds will be ready what time today and date so that
arrangments can proceed immidiately.
Good day,
Manager,
Mr Kabba ben..
We are still waiting for the details of the transfer before
midnight so that we can startup with all necessary arrangments..
Best regards,
Kabba ben..
"Desmond Powel: PHOTOGRAPHER NEEDED URGENTLY"
The following scam email targeted photographers in the USA.
Domain "desmondpowel.com" is a MSN Personal Address domain registered on the same day the spam was sent (technically, the following day, but that is only because of the time zones of the registrar and the spam recipient). The same name also appeared in a scam targetting British photographers.
Emails were sent from the same IP at the same provider in Nigeria as in the "Wedding Committee" scam email above.
From: "Desmond Powel" <[email protected]> Date: March 9, 2005 4:49:18 PM EST Subject: PHOTOGRAPHER NEEDED URGENTLY Reply-To: [email protected] Hi, My name is Mr. Desmond Powell .I am planning to have my wedding ceremony on April 9, 2005 at Holy Trinity Parish Hall, Marshfield Missouri, 515 East Washington Street, Marshfield MO 65706 . I am looking for a good photographer who will come and do the snap shots on the D-day. I came accross your listing on the net and decided to contact you. I want to know your charges for the following required services if you are to work for between 6 and 8 Hours on that day. We will select the best 100 copies of different snaps photos in both black and white and coloured and in Two main sizes and dimensions which is required for my personal use at home, 1)16" x 12" (405 x 305mm) approx. including post and packaging 2)12" x 10" (305 x 204mm) approx. including post and packaging 3) I want just one Panoramic images size 18" x 6.5" (457mm x165mm) 30 10x8 prints in album.coloured Snapped in the church and at the reception.I want is for me and my wife, Our parents, the officiating ministers and our guests. I will be requiring your service for atleast 6 Hours at both occasions (church and at the reception). The church is Holy Trinity Catholic Church - Marshfield Missouri 515 East Washington Street, Marshfield MO 65706 . If you are out of Missouri, I will pay the transportation charges to and from the party venue so I want you to indicate in your email if you are out of Missouri and state what it will cost you to get transport to Marshfield Missouri so that we both can work it out and also the total amount you will receive for the whole services at the occasion. We will have the photographs snapped at the wedding forwarded to the Publisher of a Magazine Company in U.S so they could feature it in their celebrity journal so due to this, I want the pictures neat and nice. However,I will be making the payment by means of a Check. Let me have your full Names, Address, Phone Number, where the Cheque will be mailed to for the payment.Moreso, should you be out of state, the Hotel accomodation will be provided for by me. Waiting to read from you soon as regards this. Thanks and have nice day. Regards. Desmond Powell
The gang running this scam operates from IP address 81.199.84.130. See the following scam bait on http://419eater.com for more emails, some of which mention "Desmond Powel's" wedding:
- "Kelvin Klutz - In Need Of Photographer!" (419eater.org)
"Desmond Powel"
Dear Firstname,
Thanks for the acknowledgement of the receipt of the check, I am sorry
for not replying earlier.I have been very busy as the new date is 4th
June. Firstly now I want you to send the money to the Musician/Band
today or first thing tomorrow because they are disturbing me for a
deposit for their payment.
They have instructed that their money be sent to their head office in
Netherlands. I have provided the detailed information below so please
kindly make sure you send the money tomorrow morning as soon as you
receive confirmation that it has cleared your bank.
The information is:
NAME: ROBINSON WILLIAMS
ADDRESS: KRALENEEK 78
1104KJ
AMSTERDAM ZUIDOOST
NETHERLANDS
I want you to provide the following information as soon as you are
through with the money transfer via WESTERN UNION MONEY TRANSFER.
i) MTCN (10 Digit number which will be provided by the agent)
ii)SENDER'S NAME AND ADDRESS.
iii}EXACT AMOUNT SENT AFTER DEDUCTING WESTERN UNION CHARGES
These details are very important for the Band to be able to pick up the
money as soon as possible.
About the Your accomodation,I have secured an accomodation for you in a
very near hotel and that will be if you want to arrive 2 days before
the wedding but I will surgest a day before the wedding as I will
prefare so before wedding snap shots and then early in the morning
while my wife to be is getting ready for church. Please don't hesitate
to get back to me if you need any explanation but please the Band thing
is very important ok.
I will be expecting your email to confirm the receipt of this
mail.Thanks and have a nice day.
Desmond Powel.
"rick benson"
Hello, am Mr Rick the best man to be and wedding consultant for mr Mark which is to take place 21st of next month.So all i need from you is to let me know how much it cost for 900 pieces of black and white and cloloured pics on the wedding day and also if u can come over to United Sates of America for the wedding.so i will like u to total the cost of traveling down here and the cost of the cost of everything.where it is taken place is Grayson United Methodist Church 555 Grayson Parkway Grayson, GA 30017 NB i will like to see your current pics you have taken in a wedding. THANKS. Rick
Message headers:
Received: from [81.199.84.130] by ws5-9.us4.outblaze.com with http for [email protected]; Thu, 28 Apr 2005 08:26:38 +0800 From: "rick benson" <[email protected]> To: Date: Thu, 28 Apr 2005 08:26:38 +0800 Subject: wedding phortographer X-Originating-Ip: 81.199.84.130
IP addresses used for photographer check scams
WHOIS details for sending network (IP 82.206.246.154):
inetnum: 82.206.246.0 - 82.206.246.255
netname: INTELSAT-GXS-FUS-CUSTBAS3-20040830
descr: FUS BAS Pool at FUS T'port
country: US
admin-c: IRA4-RIPE
tech-c: IRTC1-RIPE
remarks: INFRA-AW
status: ASSIGNED PA
remarks: *************************************************************
remarks: * *
remarks: * For issues of abuse related to this IP address block, *
remarks: * including spam, please send email to Intelsat at: *
remarks: * *
remarks: * [email protected] *
remarks: * *
remarks: *************************************************************
mnt-by: AS22351-MNT
mnt-lower: AS22351-MNT
mnt-routes: AS22351-MNT
source: RIPE # Filtered
role: Intelsat Ripe Admin
address: Intelsat Global Service Corporation
address: 3400 International Drive, NW
address: Washington, DC
address: 20008
address: USA
e-mail: [email protected]
e-mail: [email protected]
admin-c: AT1875-RIPE
tech-c: CQ37-RIPE
nic-hdl: IRA4-RIPE
remarks:
remarks: *************************************************************
remarks: * *
remarks: * This is a generic ROLE object for an Intelsat Admin *
remarks: * Contact person for RIPE matters. Inquiries about RIPE *
remarks: * issues should be directed to the NOC or BGP email-boxes, *
remarks: * which will forward them appropriately. For operational *
remarks: * issues, send an Email or call the Intelsat NOC at: *
remarks: * *
remarks: * [email protected] *
remarks: * +1 202 944 6792 *
remarks: * *
remarks: * For BGP related issues, send an email to: *
remarks: * *
remarks: * [email protected] *
remarks: * *
remarks: * For issues of network abuse, including spam, please send *
remarks: * email to Intelsat at: *
remarks: * *
remarks: * [email protected] *
remarks: * *
remarks: *************************************************************
remarks:
source: RIPE # Filtered
role: Intelsat RIPE Technical Contact
address: Intelsat Global Service Corporation
address: 3400 International Drive, NW
address: Washington, DC
address: 20008
address: USA
e-mail: [email protected]
e-mail: [email protected]
e-mail: [email protected]
e-mail: [email protected]
e-mail: [email protected]
admin-c: IRA4-RIPE
tech-c: CQ37-RIPE
nic-hdl: IRTC1-RIPE
remarks:
remarks: *************************************************************
remarks: * *
remarks: * This is a generic ROLE object for an Intelsat Technical *
remarks: * Contact person for RIPE matters. Inquiries about RIPE *
remarks: * issues should be directed to the NOC or BGP email-boxes, *
remarks: * which will forward them appropriately. For operational *
remarks: * issues, send an Email or call the Intelsat NOC at: *
remarks: * *
remarks: * [email protected] *
remarks: * +1 202 944 6792 *
remarks: * *
remarks: * For BGP related issues, send an email to: *
remarks: * *
remarks: * [email protected] *
remarks: * *
remarks: * For issues of network abuse, including spam, please send *
remarks: * email to Intelsat at: *
remarks: * *
remarks: * [email protected] *
remarks: * *
remarks: *************************************************************
remarks:
source: RIPE # Filtered
| 2005-03-24 11:46:39 UTC | [email protected] |
| 2005-04-15 12:49:06 UTC | [email protected] |
WHOIS details for sending network (IP 81.199.84.130):
inetnum: 81.199.84.0 - 81.199.87.255
netname: CIDR-COMMUNICATION-01
descr: Internet service provider
country: NG
admin-c: TECH7-RIPE
tech-c: TECH7-RIPE
status: ASSIGNED PA
mnt-by: AS12491-MNT
source: RIPE # Filtered
person: Tech Supernet300
address: 21 Mobolaji Bank
address: Anthony Way Ikeja
address: Lagos
address: Nigeria
phone: + 234 1 4976493
e-mail: [email protected]
nic-hdl: TECH7-RIPE
source: RIPE # Filtered
| 2005-04-06 04:47:43 UTC | [email protected] |
| 2005-04-07 16:22:05 UTC | [email protected] |
| 2005-04-07 23:26:29 UTC | [email protected] |
| 2005-04-18 12:48:12 UTC | [email protected] |
WHOIS details for sending network (IP 66.178.82.211):
OrgName: Turner Technologies
OrgID: TURNE-4
Address: 8 Lateef Salami St
City: Ajao
StateProv: Lagos
PostalCode:
Country: NG
NetRange: 66.178.82.192 - 66.178.82.255
CIDR: 66.178.82.192/26
NetName: TURNER-CHNOLOGIES
NetHandle: NET-66-178-82-192-1
Parent: NET-66-178-0-0-1
NetType: Reassigned
Comment:
RegDate: 2004-09-20
Updated: 2004-09-20
OrgTechHandle: KAD3-ARIN
OrgTechName: Adejuyigbe, Kenn
OrgTechPhone: 234 1 816 1185
OrgTechEmail: [email protected]
This IP seems to be used by a major criminal enterprise, based on its email footprint:
| 2005-04-05 22:52:01 UTC | [email protected] |
| 2005-04-05 22:53:59 UTC | [email protected] |
| 2005-04-06 00:10:29 UTC | [email protected] |
| 2005-04-06 01:47:24 UTC | [email protected] |
| 2005-04-06 09:31:21 UTC | [email protected] |
| 2005-04-06 09:33:14 UTC | [email protected] |
| 2005-04-06 09:53:17 UTC | [email protected] |
| 2005-04-06 09:55:25 UTC | [email protected] |
| 2005-04-06 13:46:08 UTC | [email protected] |
| 2005-04-06 15:40:10 UTC | [email protected] |
| 2005-04-06 15:40:40 UTC | [email protected] |
| 2005-04-07 00:25:37 UTC | [email protected] |
| 2005-04-07 00:58:21 UTC | [email protected] |
| 2005-04-07 01:02:52 UTC | [email protected] |
| 2005-04-07 02:32:51 UTC | [email protected] |
| 2005-04-07 07:21:17 UTC | [email protected] |
| 2005-04-07 08:05:48 UTC | [email protected] |
| 2005-04-07 15:36:33 UTC | [email protected] |
| 2005-04-07 17:12:38 UTC | [email protected] |
| 2005-04-10 20:32:25 UTC | [email protected] |
| 2005-04-11 11:46:32 UTC | [email protected] |
| 2005-04-11 17:37:35 UTC | [email protected] |
| 2005-04-12 00:32:18 UTC | [email protected] |
| 2005-04-12 03:41:45 UTC | [email protected] |
| 2005-04-12 18:38:26 UTC | [email protected] |
| 2005-04-12 23:17:58 UTC | [email protected] |
| 2005-04-12 23:18:20 UTC | [email protected] |
| 2005-04-13 02:25:11 UTC | [email protected] |
| 2005-04-13 10:56:03 UTC | [email protected] |
| 2005-04-13 12:03:26 UTC | [email protected] |
| 2005-04-13 13:13:31 UTC | [email protected] |
| 2005-04-13 13:42:20 UTC | [email protected] |
| 2005-04-13 15:20:54 UTC | [email protected] |
| 2005-04-13 16:02:49 UTC | [email protected] |
| 2005-04-13 18:38:56 UTC | [email protected] |
| 2005-04-13 23:39:42 UTC | [email protected] |
| 2005-04-14 10:57:57 UTC | [email protected] |
| 2005-04-14 15:45:20 UTC | [email protected] |
| 2005-04-14 18:25:01 UTC | [email protected] |
| 2005-04-14 18:44:43 UTC | [email protected] |
| 2005-04-14 20:02:39 UTC | [email protected] |
| 2005-04-15 15:03:06 UTC | [email protected] |
| 2005-04-15 15:44:33 UTC | [email protected] |
| 2005-04-16 11:30:51 UTC | [email protected] |
| 2005-04-16 14:02:13 UTC | [email protected] |
| 2005-04-16 14:03:17 UTC | [email protected] |
| 2005-04-16 14:53:50 UTC | [email protected] |
| 2005-04-16 23:30:13 UTC | [email protected] |
| 2005-04-17 15:44:49 UTC | [email protected] |
| 2005-04-17 16:07:09 UTC | [email protected] |
| 2005-04-18 14:35:09 UTC | [email protected] |
| 2005-04-18 15:11:46 UTC | [email protected] |
| 2005-04-19 08:55:01 UTC | [email protected] |
| 2005-04-19 09:52:04 UTC | [email protected] |
| 2005-04-19 10:42:29 UTC | [email protected] |
| 2005-04-19 14:16:26 UTC | [email protected] |
| 2005-04-19 14:17:41 UTC | [email protected] |
| 2005-04-19 17:22:54 UTC | [email protected] |
| 2005-04-20 17:15:13 UTC | [email protected] |
| 2005-04-20 17:56:20 UTC | [email protected] |
| 2005-04-21 02:22:33 UTC | [email protected] |
| 2005-04-21 05:32:52 UTC | [email protected] |
| 2005-04-21 17:16:00 UTC | [email protected] |
| 2005-04-22 02:21:12 UTC | [email protected] |
| 2005-04-22 03:17:34 UTC | [email protected] |
| 2005-04-22 05:01:19 UTC | [email protected] |
| 2005-04-23 08:29:32 UTC | [email protected] |
| 2005-04-23 10:03:48 UTC | [email protected] |
| 2005-04-23 10:05:21 UTC | [email protected] |
| 2005-04-23 19:36:30 UTC | [email protected] |
| 2005-04-24 18:26:54 UTC | [email protected] |
| 2005-04-24 20:43:53 UTC | [email protected] |
| 2005-04-25 10:00:35 UTC | [email protected] |
| 2005-04-25 23:45:13 UTC | [email protected] |
| 2005-04-26 01:56:06 UTC | [email protected] |
| 2005-04-27 02:17:21 UTC | [email protected] |
| 2005-04-27 02:17:44 UTC | [email protected] |
| 2005-04-27 02:23:49 UTC | [email protected] |
| 2005-04-27 03:03:00 UTC | [email protected] |
| 2005-04-27 03:40:30 UTC | [email protected] |
| 2005-04-27 10:48:47 UTC | [email protected] |
| 2005-04-27 13:18:52 UTC | [email protected] |
| 2005-04-27 14:07:31 UTC | [email protected] |
| 2005-04-28 11:05:41 UTC | [email protected] |
| 2005-04-28 17:21:15 UTC | [email protected] |
| 2005-04-28 17:21:52 UTC | [email protected] |
| 2005-04-29 03:14:32 UTC | [email protected] |
| 2005-04-29 04:22:52 UTC | [email protected] |
| 2005-04-29 04:39:39 UTC | [email protected] |
| 2005-04-29 08:37:11 UTC | [email protected] |
| 2005-04-29 08:39:36 UTC | [email protected] |
| 2005-04-29 08:40:45 UTC | [email protected] |
| 2005-04-29 08:43:32 UTC | [email protected] |
| 2005-04-29 11:34:11 UTC | [email protected] |
| 2005-04-29 23:58:15 UTC | [email protected] |
| 2005-04-30 00:54:11 UTC | [email protected] |
| 2005-04-30 02:57:22 UTC | [email protected] |
| 2005-04-30 03:12:41 UTC | [email protected] |
| 2005-04-30 13:29:23 UTC | [email protected] |
| 2005-04-30 15:45:52 UTC | [email protected] |
| 2005-04-30 15:46:26 UTC | [email protected] |
| 2005-04-30 15:46:56 UTC | [email protected] |
| 2005-04-30 15:47:05 UTC | [email protected] |
| 2005-04-30 16:05:36 UTC | [email protected] |
| 2005-04-30 23:16:47 UTC | [email protected] |
| 2005-04-30 23:26:15 UTC | [email protected] |
| 2005-05-01 00:31:32 UTC | [email protected] |
| 2005-05-01 00:33:05 UTC | [email protected] |
| 2005-05-01 16:42:03 UTC | [email protected] |
| 2005-05-01 19:04:15 UTC | [email protected] |
| 2005-05-01 20:27:31 UTC | [email protected] |
| 2005-05-02 01:36:05 UTC | [email protected] |
| 2005-05-02 04:27:54 UTC | [email protected] |
| 2005-05-02 23:39:05 UTC | [email protected] |
| 2005-05-02 23:50:36 UTC | [email protected] |
| 2005-05-03 04:55:16 UTC | [email protected] |
| 2005-05-03 11:06:15 UTC | [email protected] |
| 2005-05-03 18:56:24 UTC | [email protected] |
| 2005-05-04 12:09:04 UTC | [email protected] |
| 2005-05-04 14:16:43 UTC | [email protected] |
| 2005-05-05 05:06:24 UTC | [email protected] |
| 2005-05-05 17:46:21 UTC | [email protected] |
| 2005-05-05 22:22:40 UTC | [email protected] |
| 2005-05-05 22:22:57 UTC | [email protected] |
| 2005-05-06 10:57:22 UTC | [email protected] |
| 2005-05-06 14:08:48 UTC | [email protected] |
| 2005-05-06 14:43:08 UTC | [email protected] |
| 2005-05-07 19:20:03 UTC | [email protected] |
| 2005-05-10 21:50:37 UTC | [email protected] |
| 2005-05-10 23:49:09 UTC | [email protected] |
| 2005-05-12 12:45:22 UTC | [email protected] |
| 2005-05-12 13:27:19 UTC | [email protected] |
| 2005-05-16 15:22:04 UTC | [email protected] |
| 2005-05-18 02:00:07 UTC | [email protected] |
| 2005-05-18 11:30:27 UTC | [email protected] |
| 2005-05-18 23:06:59 UTC | [email protected] |
| 2005-05-20 02:01:23 UTC | [email protected] |
| 2005-05-20 13:40:43 UTC | [email protected] |
| 2005-05-20 18:10:35 UTC | [email protected] |
| 2005-05-21 10:26:59 UTC | [email protected] |
| 2005-05-21 12:57:37 UTC | [email protected] |
| 2005-05-21 13:48:28 UTC | [email protected] |
| 2005-05-21 22:59:30 UTC | [email protected] |
| 2005-05-21 23:01:34 UTC | [email protected] |
| 2005-05-21 23:03:52 UTC | [email protected] |
| 2005-05-21 23:05:29 UTC | [email protected] |
| 2005-05-21 23:15:26 UTC | [email protected] |
| 2005-05-23 10:27:44 UTC | [email protected] |
| 2005-05-23 10:31:35 UTC | [email protected] |
| 2005-05-24 09:49:50 UTC | [email protected] |
| 2005-05-24 09:50:02 UTC | [email protected] |
| 2005-05-24 18:43:45 UTC | [email protected] |
| 2005-05-25 09:59:13 UTC | [email protected] |
| 2005-05-25 10:07:03 UTC | [email protected] |
| 2005-05-25 10:17:28 UTC | [email protected] |
| 2005-05-26 04:52:47 UTC | [email protected] |
| 2005-05-26 16:42:50 UTC | [email protected] |
| 2005-05-26 17:06:22 UTC | [email protected] |
| 2005-05-26 18:29:38 UTC | [email protected] |
| 2005-05-26 23:40:53 UTC | [email protected] |
| 2005-05-26 23:41:11 UTC | [email protected] |
| 2005-05-26 23:42:59 UTC | [email protected] |
| 2005-05-26 23:43:02 UTC | [email protected] |
| 2005-05-26 23:44:44 UTC | [email protected] |
| 2005-05-26 23:44:47 UTC | [email protected] |
| 2005-05-27 04:22:31 UTC | [email protected] |
| 2005-05-27 16:39:24 UTC | [email protected] |
| 2005-05-27 16:42:27 UTC | [email protected] |
| 2005-05-27 16:50:14 UTC | [email protected] |
| 2005-05-28 04:24:49 UTC | [email protected] |
| 2005-05-28 04:36:44 UTC | [email protected] |
WHOIS details for domain "desmondpowel.com":
Request: desmondpowel.com connected to whois.melbourneit.com [203.27.227.114:43] ... Domain Name.......... desmondpowel.com Creation Date........ 2005-03-10 Registration Date.... 2005-03-10 Expiry Date.......... 2006-03-10 Organisation Name.... Desmond Powel Organisation Address. 20, meridith trace Organisation Address. Organisation Address. sharpsburg Organisation Address. 30277 Organisation Address. GA Organisation Address. UNITED STATES Admin Name........... Desmond Powel Admin Address........ 20, meridith trace Admin Address........ Admin Address........ sharpsburg Admin Address........ 30277 Admin Address........ GA Admin Address........ UNITED STATES Admin Email.......... [email protected] Admin Phone.......... +1.4408573483 Admin Fax............ Tech Name............ MSN NOC Tech Address......... One Microsoft Way Tech Address......... Tech Address......... Redmond Tech Address......... 98052 Tech Address......... WA Tech Address......... UNITED STATES Tech Email........... [email protected] Tech Phone........... +1.4258828080 Tech Fax............. Name Server.......... pdomns1.msn.com Name Server.......... pdomns2.msn.com
The following "wedding committe" sent its email for a wedding in London via a satellite ISP that servers customers in Nigeria and other African countries.
From: "Ms Shantelle Moore" <[email protected]>
To: <[email protected]>
Sent: Monday, 11 July, 2005 13:30
Subject: YOUR SERVICES IS NEEDDED!!!
My name is, Ms Shantelle ,the secretary of a wedding
committe that has been
constituted to see to the smooth running of my
boss's son's wedding
ceremony.
I am saddled with the responsibilty of locating and
arranging for a
good and experienced wedding entertainer and
wedding videographer.
So,i searched through the internet and found you
appropriate for the
wedding entertainer of the wedding ceremony.
The details of the wedding are as follows:
Date of the wedding: 5TH OF AUGUST 2005
Type of wedding: social
venue of the wedding:[Church and reception will be
held in the same
place, LONDON ]the details of the venue will be
passed accross to you as
soon as i finish with the bookings and signed the
necessary papers.
Time of wedding: 10AM ( 4 Hours.)
Every other necessary details will be forwarded to
you as soon as
they are available. So, how much will your service
cost me
including your transport fare.
Lest i forget, our payment is by cheque.So,after
telling me the
price and your availability, i will need your
details to write the
check. Thanks in anticipation of your favourable
response.
Warm Regards
Ms Shantelle
--
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://www.mail.com/?sr=signup
Message headers:
Received: from [212.247.93.242] by ws1-1.us4.outblaze.com with http for [email protected]; Sun, 10 Jul 2005 23:30:13 -0500 From: "Ms Shantelle Moore" <[email protected]> To: emailaddress Subject: YOUR SERVICES IS NEEDDED!!! X-Originating-Ip: 212.247.93.242
WHOIS details for sending network (IP 212.247.93.242):
inetnum: 212.247.93.0 - 212.247.93.255
netname: SE-QUARK-NET2
descr: Quark Telecom Consulting Constellation Networks
####################################
In case of improper use, please mail
or
####################################
country: SE
admin-c: TM1360-RIPE
tech-c: TM1360-RIPE
status: ASSIGNED PA
mnt-by: SWIPNET-LIR-MNT
mnt-lower: SWIPNET-LIR-MNT
source: RIPE # Filtered
person: Timothy Mahoney
address: Quark Telecom Consulting Constellation Networks
address: Virkesvagen 13
address: 238 37 Oxie
address: Sweden
e-mail: [email protected]
phone: +46 40 529441
nic-hdl: TM1360-RIPE
source: RIPE # Filtered
% Information related to 'TM1360-RIPE'
route: 212.247.0.0/16
descr: SWIPNET
#####################################################
In case of improper use originating from our network,
please mail or
####################################################
origin: AS1257
mnt-by: AS1257-MNT
source: RIPE # Filtered
"cole smith" hiring a musician using a fake check issued by qchex
A similar scam targets musicians instead of photographers. Here is one such email:
From: "cole smith" <[email protected]>
To: <emailaddress>
Sent: Sunday, 31 July, 2005 6:18
Subject: the info
emailaddress,
i have been told that you have just received the check been sent to you by mine client through a qchex company but please there is a mistake that occour for now which i want to explain to you now the check that was send to you has an excess funds on it which is meant for the magazine company(videographer) in holland for the coverage of the party for their celebrity magazine As i told you earlier on . also the funds is meant for the preparation to come for the coverage of the party And to feature the events of the party in their celebrity magazine and also they would be able to booked me down and send the receipt to me as soon as possible. And the check of $7000 was send to you cos mine client made a mistake of sending both your fee for your service together with the fees for the videographer
please i will be very glad if you can help me sort out the situation by helping me this way by deducting the charges for your show from which you will deduct it from the check you have receive for your services, when you receive the check you are to send the remaining ones to the MANAGER FOR THE MAGAZINE COMPANY IN HOLLAND . which they have given me their WESTERN UNION INFORMATION TO TRANSFFERRED THE FUNDS TO THEM .But right now i have been told by the manager that he would be travelling out of the country for an assignment for their company and he would not be able to receive the funds so he asked me to send the funds to his personal assistant in one of this african country which he is currently running out the project for their company Please i am very sorry for the mistake been made and for this inconvinences been made .So deduct the funds for your charges and help me send the remaining ones to the magazine company because they have given me a call to pay for their servicess so this will enable them to start preparaing towards the party.
this is the western union money transffer to the personal assistant to the manager for the magazine company in the african country he is now as below:
MR EDUN ADETAYO
50 BAPTIST CHURCH ROAD,
ITOKU,
ABEOUKUTA
OGUN STATE 23439
NIGERIA
After the transfer of the funds to them please furnish me back with this western union details back to me soon please deduct western union charges from the funds you will be sending back to MR EDUN ADETAYO and let me have the details as below:
SENDERS NAME AND ADDRESS
RECEIVERS NAME AND ADDRESS
AMOUNT SENT TO MR EDUN ADETAYO
MTCN CONTROL NUMBER (MONEY TRANSFER CONTROL NUMBER)
TEST QUESTION AND ANSWER? QUESTION IS COLOUR ANSWER IS RED
I will be very happy if the transfered can be made as soon as possible
please i will be grateful if this is been taking care of by you.
please give me a call as oon as possible.
waiting to hear from you .
thanks
Message headers:
Received: from [195.166.235.66] by web33910.mail.mud.yahoo.com via HTTP; Sat, 30 Jul 2005 14:18:26 PDT Date: Sat, 30 Jul 2005 14:18:26 -0700 (PDT) From: cole smith <[email protected]> Subject: the info
WHOIS details for sending network (IP 195.166.235.66):
inetnum: 195.166.224.0 - 195.166.255.255
org: ORG-LNL1-AFRINIC
netname: NG-LINKSERVE-971217
descr: Linkserve Nigeria Limited
descr: PROVIDER
country: NG
admin-c: CO445-AFRINIC
tech-c: OC5192-AFRINIC
status: ALLOCATED PA
notify: [email protected]
notify: [email protected]
mnt-by: AFRINIC-HM-MNT
mnt-lower: MNT-LKS-AS8770
mnt-domains: MNT-LKS-AS8770
changed: [email protected] 19971022
changed: [email protected] 20040706
changed: [email protected] 20040922
changed: [email protected] 20040922
changed: [email protected] 20040927
changed: [email protected] 20041122
changed: [email protected] 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
organisation: ORG-LNL1-AFRINIC
org-name: Linkserve Nigeria Limited
country: NG
org-type: LIR
address: Plot 308 Adeola Odeku Street
address: N/A
address: Victoria Island
address: Nigeria
phone: +234 1 2623900
phone: +234 1 2623901
fax-no: +234 1 2623906
e-mail: [email protected]
admin-c: CO445-AFRINIC
admin-c: OC5192-AFRINIC
mnt-ref: AS8770-MNT
mnt-ref: AFRINIC-HM-MNT
mnt-ref: MNT-LKS-AS8770
notify: [email protected]
mnt-by: AFRINIC-HM-MNT
changed: [email protected] 20040415
changed: [email protected] 20040514
changed: [email protected] 20040820
changed: [email protected] 20040903
changed: [email protected] 20040903
changed: [email protected] 20040903
changed: [email protected] 20040906
changed: [email protected] 20040922
changed: [email protected] 20040922
changed: [email protected] 20040927
changed: [email protected] 20040927
changed: [email protected] 20041005
changed: [email protected] 20041006
changed: [email protected] 20041007
changed: [email protected] 20041012
changed: [email protected] 20041012
changed: [email protected] 20041012
changed: [email protected] 20041022
changed: [email protected] 20041117
changed: [email protected] 20041117
changed: [email protected] 20041117
changed: [email protected] 20041201
changed: [email protected] 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
person: chima onyekwere
address: Linkserve plot 308 adeola Odeku street, Victoria Island
notify: [email protected]
phone: +234 1 262 3900
nic-hdl: co445-AFRINIC
changed: [email protected] 20041117
changed: [email protected] 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
person: Obinna Chukwujekwu
address: 308 Adeola Odeku Street
phone: +234 1 2624802
nic-hdl: OC5192-AFRINIC
mnt-by: MNT-LKS-AS8770
changed: [email protected] 20040927
changed: [email protected] 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
Here is another wedding photography scam format that has been going around:
From: david smith <[email protected]>
Date: Mon, 30 Oct 2006 09:23:32 -0500
To: VICTIMEMAILADDRESS
Subject: PHOTOGRAPHER SERVICE NEEDED...
Hello
How is Business?
My name is David Smith. I reside in
UK. The reason am contacting you is that my daughter will be
getting married soon in the United State on the 25th of NOV 2006
and I will like you to take care of the Photographs. I came across
your advert on the Internet and am impressed with your services.
All expenses would be taken care of;/perhaps
you can give me the total/Quotes charges, plus the transportation
cost for you down to VENUE @ The Catholic Diocese-
421 Main St, Youngstown, PA 15696
Please I want the best services from you, because this is my only
daughter so I want the best for her. So your best effort is needed
at this occasion.Pls Let me know the charges for your service if
you are to work for at most 2 Hours on that day,10 am to 12 noon.
We want about 60 beautiful wedding different photos in coloured
form in the church and reception and of both
the bride and the bridegroom, their parents, the officiating
ministers and our guests.We will want you to work for 2 Hours at
the occasion,so kindly get back to me with the total cost
including transportation charges to and from the venue.Also,we will have the photographs snapped at the wedding forwarded to the Publisher of a Magazine Company in United Kingdom so they could feature it in their celebrity journal. At
this moment,.
I look forward to your response.
David Smith
|