PDA

View Full Version : Subject: Authorized Certified Bank Draft./41.219.217.26


antiphishing7
4 November 2007, 01:05
canonical name gator266.hostgator.com.
aliases
addresses 74.53.29.2
Domain Name: HOSTGATOR.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.HOSTGATOR.COM
Name Server: NS2.HOSTGATOR.COM
Status: ok
Updated Date: 26-oct-2007
Creation Date: 22-oct-2002
Expiration Date: 22-oct-2015

canonical name covenantinvestments.biz.
aliases
addresses 74.53.29.2
Name Server: NS531.HOSTGATOR.COM
Name Server: NS532.HOSTGATOR.COM

OrgName: ThePlanet.com Internet Services, Inc.
OrgID: TPCM
NetRange: 74.52.0.0 - 74.54.255.255
CIDR: 74.52.0.0/15, 74.54.0.0/16

-----------------------------------------------

canonical name dial-pool56.lg.starcomms.net.
aliases
addresses 41.219.217.26

http://www.starcomms.net.
inetnum: 41.219.192.0 - 41.219.255.255
netname: SA57-20070717
descr: Provider Local Registry
descr: Starcomms Nigeria (v4 allocation)
country: NG
parent: 41.0.0.0 - 41.255.255.255
inetnum: 83.229.0.0 - 83.229.127.255
org: ORG-SGN1-RIPE
netname: UK-SKYVISION-20040513
descr: SkyVision Holdings Ltd.
country: GB

IP address: 41.219.217.26
Reverse DNS: dial-pool56.lg.starcomms.net.
Reverse DNS authenticity: [Could be forged: hostname dial-pool56.lg.starcomms.net. does not exist]
ASN: 0
ASN Name: IANA-RSVD-0
IP range connectivity: 0
Registrar (per ASN): Unknown
Country (per IP registrar): NG [Nigeria]
Country Currency: Unknown
Country IP Range: 41.219.192.0 to 41.219.255.255
Country fraud profile: High
City (per outside source): Unknown
Country (per outside source): NG [Nigeria]
Private (internal) IP? No
IP address registrar: whois.afrinic.net
Known Proxy? No
Link for WHOIS: 41.219.217.26

SPAMCOP LISTED (127.0.0.2) TXT= "Blocked - see http://www.spamcop.net/bl.shtml?41.219.217.26 2100 seconds 172 m
SPAMHAUS PBL2 LISTED (127.0.0.11) TXT= http://www.spamhaus.org/query/bl?ip=41.219.217.26 1800 seconds 1687 m

11 296 268 280 65.192.29.102 skyvision-gw.customer.alter.net
12 379 381 390 83.229.96.217 -
13 379 380 391 83.229.96.218 -
14 380 380 390 196.3.60.197 lahq-hq-c7206-i-w-02.starcomms.net
15 Timed out Timed out Timed out -

Return-Path: <p.anderson10@yahoo.dk>
Delivered-To: spamcop-net-antihotmail@spamcop.net
Received: (qmail 21237 invoked from network); 3 Nov 2007 23:02:50 -0000
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on blade4
X-Spam-Level: ****
X-Spam-Status: hits=4.3 tests=DEAR_FRIEND,MISSING_HEADERS version=3.2.3
Received: from unknown (192.168.1.108)
by blade4.cesmail.net with QMQP; 3 Nov 2007 23:02:50 -0000
Received: from mx53.cesmail.net (216.154.195.53)
by mx71.cesmail.net with SMTP; 3 Nov 2007 23:02:49 -0000
X-RocketMail: 00000001;R---------------;5908
X-RocketUID: 0000000000
X-RocketYMUMID: AEt5/NgAAL/3Ryz9tQTwuGURbHU
X-RocketMIF: 1194130869;2967;
X-Apparently-To: sgtpepper_1967@yahoo.com via 216.252.121.75; Sat, 03 Nov 2007 16:01:09 -0700
X-RocketRCL: 1444;1;2965631815;1483
X-Rocket-Track: <removed>
X-Originating-IP: [74.53.29.2]
Authentication-Results: mta411.mail.re4.yahoo.com from=yahoo.dk; domainkeys=neutral (no sig)
Received: from popgate2.cesmail.net [192.168.1.107]
by mx53.cesmail.net with POP3 (fetchmail-6.2.1)
for antihotmail@spamcop.net (single-drop); Sat, 03 Nov 2007 19:02:49 -0400 (EDT)
Received: from 74.53.29.2 (EHLO gator266.hostgator.com) (74.53.29.2)
by mta411.mail.re4.yahoo.com with SMTP; Sat, 03 Nov 2007 16:01:08 -0700
Received: from cinvest by gator266.hostgator.com with local (Exim 4.63)
(envelope-from <p.anderson10@yahoo.dk>)
id 1IoRyl-0007xm-4w; Sat, 03 Nov 2007 18:00:35 -0500
Received: from 41.219.217.26 ([41.219.217.26])
(SquirrelMail authenticated user dominique@covenantinvestments.biz)
by covenantinvestments.biz with HTTP;
Sat, 3 Nov 2007 18:00:35 -0500 (CDT)
Message-ID: <2036.41.219.217.26.1194130835.squirrel@covenantinvestments.b iz>
Date: Sat, 3 Nov 2007 18:00:35 -0500 (CDT)
Subject: Authorized Certified Bank Draft.
From: "Mr James Longman" <p.anderson10@yahoo.dk>
Reply-To: p.anderson101@yahoo.dk
User-Agent: SquirrelMail/1.4.9a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator266.hostgator.com
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [32105 32107] / [47 12]
X-AntiAbuse: Sender Address Domain - yahoo.dk
Content-Length: 1444
X-SpamCop-Checked:
X-SpamCop-Disposition: Blocked SpamAssassin=4

Compensation Head Office.

Dear Friend,

I am using this opportunity to thank you for your great effort to our
unfinished transfer of fund into your account due to one reason or the
other best known to you.But I want to inform you that I have successfully
transferred the Cheque out of the company to someone else who was capable
of assisting me in this great venture.

Due to your effort, sincerity, courage and trust worthiness you showed at
the course of the transaction I want to compensate you and show my
gratitude to you with the sum of $500,000.00 (FIVE HUNDRED THOUSAND UNITED STATES DOLLARS)

I have authorized the finance house where I deposited my money to issue you international certified bank draft cashable at your bank.

The name and contact address of the Person with it is Mr Mr Paul Anderson
is as follows.

CONTACT AGENT Mr PAUL ANDERSON.
EMAIL:p.anderson101@yahoo.dk
Telephone Number:+234-80-8056-3786.

At the moment, I am very busy here because of the investment projects
which myself and my new partner are having at hand. Finally,remember that
I have forwarded instruction to the finance house on your behalf to send
the bank draft to you as soon as you contact them without delay. Please I
will like you to accept this token with good faith as this is from the
bottom of my heart.Contact Mr Paul Anderson now Thanks and God bless you
and your family.

Hope to hear from you soon.

Best Regards
Mr James Longman.

Curious Nelly
14 November 2007, 16:09
Same scam email posted using different From names, email addresses and IP addresses.
Note: above posted email is from P. Anderson and below posted email is from James Longman. Appears to be the same scammer in both emails.

http://www.419legal.org/search.php?searchid=14633
From Mr James Longman Mon Oct 22 19:43:56 2007
Date: Tue, 23 Oct 2007 02:43:56 -0000 (GMT)
Subject: Contact Your Agent Urgently.
From: "Mr James Longman" <p.anderson05@yahoo.dk
Reply-to: p.anderson100@yahoo.dk
CONTACT AGENT Mr PAUL ANDERSON.
EMAIL .anderson100@yahoo.dk
Telephone Number:+234-80-8056-3786.