|
| |
The "company representative" scam - check fraud by Nigerian gangs
Introduction
We have received some many unsolicited emails from companies, often claiming to be in China, looking for representatives to establish a business presence in other countries and for transferring payments. Recipients of such mails are typically promised 10% of those payments from customers. In reality, this is a check fraud scam that can work on a massive scale, causing damages from thousands to hundreds of thousands of dollars. In some cases, names of legitimate companies are abused for the scam. In other cases no real company by that name exists.
The scammers are not Chinese (or even Asian) but Nigerian. They mail their "representatives" fake checks from "customers" to deposit in their personal or business accounts. Often these are written on blank check forms stolen from legitimate businesses. Provided the business whose check is abused has sufficient funds in its account, the check will initially clear (it will usually only bounce when the business receives the deposited check that it never wrote). When the check clears the "representatives" wire the amount to a bank account in another country, such as Japan, Taiwan, China, the Netherlands or the UK. By the time the fake check bounces (which can take a month), the money is already out of the country and the representative is left to pick up the losses, often tens of thousands of dollars.
|
IMPORTANT NOTICE: All names of companies and individuals listed on this page are fake. The criminals either abuse names of legitimate companies or persons or they invent names. All of the existing companies whose names appear on this page (e.g. CMIEC, Shipro Kasei) are victims of the criminals and are not connected in any way to the illegal activity committed in their name.
|
If you have been recruited or if you have examples of such spam not listed here then please contact us.
If you have a few minutes, here is a little extra that you can do to help us:
- Create a free account at Yahoo.com or Yahoo.ca under an assumed name
- Start composing a new message in Yahoo.
- Click "reply" in your email program. Copy and paste the quoted spam text into the new message window in Yahoo, as if you had received the message in the Yahoo account. Add some text at the beginning to express your interest in the offer.
- If a specific address is listed as a contact address in the spam then address the message to that email account instead of the spam sender address.
- Click "Send".
- It typically takes a day or two to get a reply. Once you get a reply in your new Yahoo account, click on the arrow on the right hand side of the "Forward" button and select "as attachment". Mark the subject
[419] rep scam company name
and send it to 419@419scam.org.
Thank you!
A superficially similar scam is run by Eastern European organized crime rings, who move money from eBay fraud or phishing scams.
In the United States this type of crime is investigated by the Secret Service.
Aliases and company names used in "representative" check fraud scams
Any company or person listed here which/who actually exists is a victim of identity theft. The criminals do not operate under their own real names!
- Liu Peijin (CMIECHN)
- Liu Peijin (CMEC HUBEI CO.)
- Liu Peijin (CMEC HUBEI CO.)
- "Liu Peijin, (CMEC HUBEI CO)
- Mr Ahemd Danladin, hang industrial raw materials(HIRM)
- Karnavati Dyoung (CMIEC)
- Karnavati / BEZOAR EXPORT
- "Eliza Thambo, DELETED Import and Export company"
- "greg tievey, DELETED Import and Export company"
- "Mr CRAIG BRUCE, MAJORBIZ LIMITED"
- "Jason Scott, MAJORBIZ INT'L" (Vic Biz)
- "MR JOHN COLE, LEGENDBIZ LIMITED"
- "MR JOHN COLE, LEGENDBIZ LIMITED"
- "FATI HIDERO, FHIDERO HOLDINGS"
- "Yo chang lee, China National Arts & Crafts imp./Exp. Corp."
- Mr.Benson Phillips, WBC
- Mr.Benson Phillips, WBC Inc
- Mr. Benson Phils, WBC
- Mr.Benson Phillips, President/CEO, WBC Inc
- Christopher Bagio, WBC, Spain
- "Dr Phillippe Doudou, Import Export Company WBC"
- Mike Brown, WBC (UK)
- "DR KASIM AHMED, ZEANS INTERNATIONAL PLC"
- "Dr.Peter Ukwa, Zeans Plc"
- "Okakura Sawao, Shipro Kasei Kaisha, Ltd"
- Mr. Okakura Sawao
- "Yoshimori Tada, Shiraishi Kasei Ltd"
- "Yoshimori Tada, Shiraishi Kasei Ltd"
- "Osato Takase, Shiraishi Kasei Kadan"
- "Abraham Kalu, Export du Allied LTD"
- Leu Cheng
- Leu Cheng
- "leu cheng, CMIEC CH"
- "Mr.Cheng, chenleu112@excite.com"
- Arthur Meyer
- Frank Wilcox, Global Mineral Limited
- William Douglas, Petro-Chem Co. Ltd, Mauritius
- Kofi nana, Ghana
- "Lee Chen, China National Arts & Crafts Import./Export. Corp." (Canada)
- "Yung Jun"
- "Mr. Richard Beechey, Clyde Agriculture Limited"
- "CHUNG BOTERO, HUAMAO ARTS AND CRAFTS IMPORT./EXPORT. CORP.(HMARTS) China"
- "SHAWN MONET, HUAMAO ARTS AND CRAFTS"
- "HENRY MACPEPPLE, [CEO] ADAMAC GROUP OF COMPANY."
- "Dr.Lucas Fernaldo, Rodreguez Import/Export inc."
- Mr.Xiao jun, Solenoids Industrial Co Ltd."
- "Mr. Yang Xiaolin of CMIEC"
- "Mr.Wankeng zhang, CMIEC
- "Mr Nobushige Kondo, NITTOKU ENGINEERING CO., LTD."
- "Jonn lee Cheung, BLUE SEAL OIL & GAS LTD"
- "Yo Chang Lee, JPARTS / Biglobe Inc."
- "Takahashi Yamamoto, Japan Arts & Crafts Biglobe inc."
- "David Boyd, Clyde Agriculture Limited"
- "Shan L. Wang, cmiec ch"
- "Jun L. Wang, cmiec ch"
- "Woo Lui, CHINA METALLURGICAL IMPORT AND EXPORT COMPANY"
- "Lee Chan, CHINA METALLURGICAL IMPORT & EXPORT CORPORATION"
- "Mr.Andrew Van, Gold Field Company South Africa"
- "MR. IBRAHIM TASSAN, AL-TASSAN COMPANY"
- "Mr Iris Castillo"
- Peter Chang
- "Peter Chang, Solenoids Industrial Co Ltd"
- "Peter Chang, Solenoids Industrial Co Ltd"
- "Peter Chang, Solenoids Industrial Co Ltd"
- "Peter Chang, Solenoids Industrial Co Ltd"
- "Mr.Gerard Van Dijk, UNITED RAW MATERIAL SOLUTION INC"
- "Dr Robert Johnson, Greymouth Petroleum Limited"
- "Dennis Mills, ZIBO LINZI FURICH ARTS & CRAFTS CO., LTD"
- "mark williems, GRAND IMPORT AND EXPORT"
- "GREEN DEREK, OANDO Oil&Gas PLC"
- "GREEN DEREK, OANDO Oil&Gas PLC"
- "Steve Howard, Oando company PLC"
- "Mr Paul William, Con Oil and Gas Ltd"
- "Lin Zao, Wan Group of Companies (WGC)"
- "GLEEN PARKER, TOGO METALLURGICAL IMPORT & EXPORT CORPORATION, ( CMIEC)"
- "BRIAN CLARKE, U K Metallurgical Import and Export Company U K"
- "William Mirkovich, FARGOS Import/Export co."
- "MAXWELL OTERI, South Export and International Trade"
- "BRIGHT WILSON, SOUTH EXPORT INTERNATIONAL TRADE"
- "Harry Van Berg, SOUTH EXPORT INTERNATIONAL TRADE"
- "Trevor Mbeki, SOUTH EXPORT INTERNATIONAL TRADE"
- "Xiang Cho, Farukawa Metal Copper Strip Manufacturing Co"
- "Xiang Cho, Farukawa Metal Copper Strip Manufacturing Co"
- "Dr. Ashok Hooli, Ages National Arts & Crafts- Import/Export Coporation"
- "wang Kim Sung, Eco Power Hong kong"
- "Mrs.Sun Zhang, ARTS AND CRAFTS IMPORT / EXPORT"
- "Zakari David, OMEGA FOOD MANUFACTURING COMPANY NIG LIMITED"
- "Wesley Woods, ALPHA Import and Export Company"
- "CHARLES SONO (Accra, Ghana)"
- "Woo fang, China metallurgical import and export company"
- "Richard Blakes, ATLANTIC IMPORT AND EXPORT COMPANY PLC"
- "Sohail Ajmal, SED Internatioanl"
- "Lance Smith, Smithy Group/Equitorial Guinea"
- "wilson dennis, Dockers line ltd"
- "Wonghi Nanfang, GONGYI DINGFENG MINERAL & METALLURGICAL COMPANY LTD"
- "Nicholas Smith, Stargate International"
- "Ben Cray, Schoutteet exsport Truck"
- "surachart annaphathana, Pacific Fish Processing Company Limited"
- "Jun Shan, Gallery of China"
- "chun xhing, Nanjing Textiles Import & Export Corp., Ltd"
- Art Scene China
Here is a typical spam example, that immediately raised several red flags, see below:
Dear Sir/Madam,
I am Mr.Liu Peijin ,managinig director of China Metallurgical Import & Export Henan Company(CMIECHN). we are a company who deal on Furniture,plastic and export into the Canada/America and Europe.
We are searching for representatives who can help us establish a medium of getting to our customers in the Canada/America and Europe as well as making payments through you to us.
Please if you are interested in transacting business with us we will be glad. Please contact us for more information,Subject to your satisfaction you will be given the opportunity to negotiate
your mode of which we will pay for your services as our representative in Canada/America and Europe.
Please if you are interested forward to us your phone number/fax and your full contact addresses.
Thanks in advance
Mr.liu peijin
managing Director
CMIEC HN
Here's what immediately caught my eye:
- The sender address uses a free web mail provider. For less than $35 you can register your own domain. Which serious company wouldn't?
- No company address is given.
- These guys harvested addresses off websites. We know, because we received two copies of this mail, one to a currently unused email address still mentioned on one of our sites, the other from another of our sites. Both sites are closely linked, making it highly probable that address harvesters that visit one soon sweep the other.
Why would any company transfer payments through a third party, when they can open a bank account or use direct wire transfers? This doesn't make sense. If you perform a Google search for some phrases, you end of with numerous hits, some of which point directly at Nigerian scammers:
Here is another version with full mail headers which reveal the real source of these spams:
Received: from [213.229.186.124] (helo=mailings.ccrtvi.com)
by mxeu9.kundenserver.de with ESMTP (Nemesis),
id 0MKt64-1Cj1RK2VMV-0000wp; Mon, 27 Dec 2004 21:26:02 +0100
Received: from localhost (localhost [127.0.0.1])
by mailings.ccrtvi.com (Postfix) with ESMTP
id 940F32F9C5; Mon, 27 Dec 2004 20:10:48 +0100 (CET)
Received: from mailings.ccrtvi.com ([127.0.0.1])
by localhost (mail1 [127.0.0.1]) (amavisd-new, port 10024) with LMTP
id 13532-02-2; Mon, 27 Dec 2004 20:10:27 +0100 (CET)
Received: from webmail1.ccrtvi.com (webmail1.pub.ccrtvi.com [192.168.1.80])
by mailings.ccrtvi.com (Postfix) with ESMTP
id 49EC52F815; Mon, 27 Dec 2004 17:54:27 +0100 (CET)
Received: from 3xl.net (localhost [127.0.0.1])
by webmail1.ccrtvi.com (8.12.8/8.12.8) with SMTP id iBRGr4L6028447;
Mon, 27 Dec 2004 17:53:04 +0100
Received: from 216.139.176.60
(SquirrelMail authenticated user liu.p@3xl.net)
by correu.3xl.net with HTTP;
Mon, 27 Dec 2004 17:54:25 +0100 (CET)
Message-ID: <1509.216.139.176.60.1104166465.squirrel@correu.3xl.net>
Date: Mon, 27 Dec 2004 17:54:25 +0100 (CET)
Subject: REPRESENTATIVE REQUIRED
From:
To:
X-Mailer: SquirrelMail (version 1.2.7)
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-SpamScore: 0.889
tests= NO_REAL_NAME SUBJ_ALL_CAPS
Dear Sir/Madam,
I am Mr.Liu Peijin,managinig Hubei Machinery&equipment Import& Corporation
(CMEC HUBEI CO.) we are a company who deal on mechanical equipment,
hardware and minerals, electrical products, Medical & Chemicals,light
industrial products and office equipment, and export into the
Canada/America and Europe.We are searching for representatives who can
help us establish amedium of getting to our costumers in the
Canada/America and Europe as well as making payments through you to
us.Please if you are interested in transacting business with us we will
be glad. Please contact us for more information,Subject to your
satisfaction you will be given the opportunity to negotiate your mode of
which we will pay for your services as our representative in
Canada/America and Europe.
Please if you are interested forward to us your phone number/fax and
your full contact addresses .
Thanks in advance
Mr.liu Peijin
Managing Director
Another "Liu Peijin" spam from Vic Biz internet cafe in Nigeria:
Received: from [216.139.176.62](IP may be forged by CGI script)
by infong74.kundenserver.de with HTTP; Thu, 17 Mar 2005 01:48:14 +0100
Date: Thu, 17 Mar 2005 01:48:14 +0100
Precedence: bulk
To:
Subject: Agent Required.
From: liu <liu_pejin22@mail2world.com>
X-Priority: 3 (Normal)
Cc:
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: RLSP Mailer
Message-Id: <messageid>
X-Provags-ID: kundenserver.de abuse@kundenserver.de sender-info:13450342@infong74
Dear Sir/Madam,
I am Mr.Liu Peijin ,managinig Hubei Machinery&equipment Import&export
Corporation (CMEC HUBEI CO.) we are a company who deal on mechanical
equipment,hardware and minerals, electrical products, Medical & Chemicals,
light industrial products and office equipment, and export into the
Canada/America and Europe.We are searching for representatives who can
help us establish a medium of getting to our ostumers in the Canada/America
and Europe as
well as making payments through you to us.
Please if you are interested in transacting business with us we will be
glad.Please contact us for more information,Subject to your satisfaction
you will be given the opportunity to negotiate your mode of which we will
pay for your services as our representative in Canada/America and
Europe.
Please if you are interested forward to us your phone number/fax and
your full contact addresses.
Thanks in advance
Mr.liu peijin
managing Director
CMEC HUBEI CO.
___________________________________________________________________________
Mail sent from WebMail service at http://www.lan.szene-fichtelgebirge.de
"Liu Peijin, CMEC HUBEI CO
Ref:234/U,
First i must thank you for picking up the consideration to be our payment
officer via our costumers who are already and able to pay some of the
outstanding bills,surphise to say that your role in this endeavoure is to
serve as our agent to get to our customers who buys our product and helping
us collecting their outstanding money which they owe to our comapany,you
will be be given a commission of 10% for any payment made to you and you
will be given instruction on how to remit the balance funds to us in turn.
Importantly,we are a coporate company and we do not require your out of
pocket money instead we pay you for your servicies hence this partnership.
Please be adviced that we will have to begin the necessary process of
approving you as our agent/partner on our receipt of your understanding and
your sincere abilities.
On our receipt of your mail we will inform you on the next step to follow as
regards our approval for you to being our representative in your province.
Please reconfirm to us your full names/Contact address and phone number.
Note:Endeavour to indicate your reference number as above in all of your
correspondence with us.
Thanks in advance.
Mr.Liu Peijin
Managing Director
(CMEC HUBEI CO)
_________________________________________________________________
FREE pop-up blocking with the new MSN Toolbar - get it now!
http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/
Message headers:
Received: from 80.88.155.181 by by2fd.bay2.hotmail.msn.com
with HTTP; Thu, 19 May 2005 16:39:43 +0000 (GMT)
Date: Fri, 20 May 2005 00:39:43 +0800
From: Liu Peijin <liu_peijin54@hotmail.com>
Subject: FURTHER DETAILS
X-Originating-IP: [80.88.155.181]
X-Sender: liu_peijin54@hotmail.com
WHOIS information for IP 80.88.155.181, 80.88.155.185
These IP addresses by the Danish satellite ISP Emperion are used by the Vic Biz Cyber Cafe in Benin City, Nigeria.
inetnum: 80.88.155.176 - 80.88.155.191
netname: EMP-MUL01
descr: Network at EMP-MUL01
descr: Please report all abuse to the network admin-c
country: NG
admin-c: SE541-RIPE
tech-c: EMP5-RIPE
status: ASSIGNED PA
remarks: - - - - - - - - - - - - - - - - - -
remarks: Abuse address: abuse@emperion.net
remarks: - or the admin-c of the network
remarks: - - - - - - - - - - - - - - - - - -
notify: noc@emperion.net
mnt-by: EMP-NOC-MNT
changed: sdi@Emperion.net 20030815
source: RIPE
route: 80.88.144.0/20
descr: DK-EMPERION-20021031-ROUTE
origin: AS21125
mnt-by: EMP-NOC-MNT
changed: kmw@Emperion.net 20021031
source: RIPE
role: Emperion NOC Operator
address: Emperion A/S
address: Middelfartgade 7
address: 2100 Koebenhavn Oe
address: DK
phone: +45 3929 3530
e-mail: noc@emperion.net
trouble: kmw@emperion.net
admin-c: KW6968-RIPE
tech-c: KW6968-RIPE
tech-c: SRL7-RIPE
tech-c: AJ163-RIPE
tech-c: GB1283-RIPE
tech-c: FL497-RIPE
nic-hdl: EMP5-RIPE
notify: noc@emperion.net
mnt-by: EMP-NOC-MNT
changed: KMW@EMPERION.NET 20010906
changed: kmw@emperion.net 20020110
changed: kmw@emperion.net 20021107
source: RIPE
person: Sunny Ejemai
address: 106,Ekenwan road, Benin City, Edo State. Nigeria
e-mail: multivisionltd@yahoo.com
phone: +2348023383606
phone: +2348033253370
notify: noc@emperion.net
mnt-by: EMP-NOC-MNT
nic-hdl: SE541-RIPE
changed: fla@Emperion.net 20030507
source: RIPE
|
| | 80.88.155.181 |
| 2005-05-03 01:50:06 UTC | wenkang3000@enterate.com.ar |
| 2005-05-03 03:20:57 UTC | wenkang3000@enterate.com.ar |
| 2005-05-03 03:58:22 UTC | wenkang1000@enterate.com.ar |
| 2005-05-03 04:11:50 UTC | wenkang1000@enterate.com.ar |
| 2005-05-10 10:10:38 UTC | hariet@uk-promo.org |
| 2005-05-13 06:19:36 UTC | uklottery2005@tiscali.dk |
| 2005-05-13 23:25:36 UTC | martinwalker@tiscali.dk |
| 2005-05-13 23:46:53 UTC | martinwalker@tiscali.dk |
| 2005-05-19 16:39:43 UTC | liu_peijin54@hotmail.com |
"Mr Ahemd Danladin, hang industrial raw materials(HIRM)"
Here's another "representative" scam by the Aruloye family (Nosa, Uyi and Akin) of the Vic Biz internet cafe:
Dear Sir/Madam,
it is a pleasure to write to you in respect of our
company hang industrial raw materials(HIRM) we are
expertize in the sale of raw materials, we export into
the canada/america/parts europe
We are searching for representatives who can help us
establish a medium of getting our funds from
our costumers in the canada/america/europe as well as
making payments through you to us.
Please if interested in transacting business in view
helpings us,so our clients could make
payment to you being a representative for us we will
be very glad.compensations will be given and other
benefits as follows Please contact us for more
information.
Subject to your satisfaction you will be given the
opportunity to negotiate your mode of which we
will pay for your services as our representative in
canada/america/europe
if interested forward to us your phone number/fax and
your full contact addresses.
for futher informations you could write to Mr Ahemd Danladin
or d_ladin2000@yahoo.co.uk
Thanks,
secterary
Mr Ahemd Danladin
Received: from 216.139.176.62 by by15fd.bay15.hotmail.msn.com with HTTP;
Tue, 03 May 2005 15:34:30 GMT
X-Originating-IP: [216.139.176.62]
X-Originating-Email: [info@hirmworld.com]
X-Sender: info@hirmworld.com
From: "Ahemd Danladin" <info@hirmworld.com>
WHOIS details for domain "hirmworld.com":
Request: hirmworld.com
connected to whois.enom.com [66.151.151.170:43] ...
Registration Service Provided By: Microsoft
Contact: personal_address@css.one.microsoft.com
Visit: http://support.msn.com/contactus.aspx?pk=PersonalAddress
Domain name: hirmworld.com
Registrant Contact:
Ahemd Danladin
Ahemd Danladin (info@hirmworld.com)
+1.775735323929
Fax: none
3 richardson way
austin, TX 78753
US
Administrative Contact:
Ahemd Danladin
Ahemd Danladin (info@hirmworld.com)
+1.775735323929
Fax: none
3 richardson way
austin, TX 78753
US
Technical Contact:
NOC MSN
NOC MSN (MSN-PA-TECH@msn.com)
+1.4258828080
Fax: none
One Microsoft Way
Redmond, WA 98052
US
Billing Contact:
NOC MSN
NOC MSN (MSN-PA-BILL@MSN.COM)
+1.4258828080
Fax: none
One Microsoft Way
Redmond, WA 98052
US
Status: Locked
Name Servers:
pdomns1.msn.com
pdomns2.msn.com
Creation date: 03 May 2005 10:56:16
Expiration date: 03 May 2006 10:56:16
Asking "whois.arin.net" about "net-216-139-176-56-1":
OrgName: Vic Biz
OrgID: VICBI-1
Address: 7 Akpakpava str
City: Lagos
StateProv:
PostalCode:
Country: NG
NetRange: 216.139.176.56 - 216.139.176.63
CIDR: 216.139.176.56/29
NetName: QKON30
NetHandle: NET-216-139-176-56-1
Parent: NET-216-139-160-0-1
NetType: Reassigned
Comment:
RegDate: 2003-07-24
Updated: 2003-07-24
TechHandle: EJI-ARIN
TechName: Jimoh, Ester
TechPhone: 2348033248388
TechEmail: dstaal@qkon.com
OrgTechHandle: EJI-ARIN
OrgTechName: Jimoh, Ester
OrgTechPhone: 2348033248388
OrgTechEmail: dstaal@qkon.com
This postal address almost correct: "7 Akpakpava str" is actually located in Benin City, not Lagos.
The Vic Biz tip-off
As you can see, the above emails were sent from Nigeria. We were curious about what kind of business "Vic Biz" is, until we came across the following tip-off:
Subject: Scammer Liu Peijin
The Chinese scammer stealing money from so many people over the internet is
really a Nigerian from Benin City in Edo State Nigeria, by the name of Uyi
Aruloye who does these scams with the help of his Brother Nosa Aruloye. They do
it from thier gang headquarters in Vic Biz Cyber Cafe in Benin City and they
work for a Nigerian Monster in the Netherlands called Rafiu Otono. They are
currently having their victims send the money from their counterfeit checks to a
Bank in Japan:
Bank Name:Chiba Kogyo Bank.
Branch: Narashino branch
Bank Code: 440
Bank Acct #: 1003430
Bank Address : Narashino Shi Okubo 4-1-22
Swift code : CHIKJPJP
Bank Tel # 047-472-7111
Beneficiary:M.F System
"Lui Peijin" emails:
Vic Biz is watching this page!
See the following logs from our website for some revealing Google searches performed at Vic Biz (IP address 216.139.176.61) that caused them to visit this page on 2005-01-24. As a result of that we received the following mail.
Email from "Barrister Andrew Alade", a "legal silicitor" according to his email address, on behalf of the Otono family (2005-04-05):
Hello,
A relative of Rafiu Otono happens to be one of my Clients and the said
person has his name related to scam issues in your site. This is an
issue that has just come to my knowledge and i would like to have a
concrete information on the issue.
Now if at all this Rafiu is related, i would like a proof of his
relationship with the said crime as i know that a corporation with
your integrity will not post implicating files on-line without a prove
of those crimes. I have been assigned by my client to investigate on
the issue. I will be of immense help in providing any valuable document
in my possession to you.
Please, your reply is earnestly expected as this issue has eaten deep
into the family of my Client.
Sincerely,
Barrister Alade
--------------------------------------------------------------------------------
Do you Yahoo!?
Better first dates. More second dates. Yahoo! Personals
Message headers:
Received: from [192.116.119.147] by web42110.mail.yahoo.com
via HTTP; Tue, 05 Apr 2005 05:13:59 PDT
Date: Tue, 5 Apr 2005 05:13:59 -0700 (PDT)
From: Andrew Alade <legal_silicitors@yahoo.com>
Subject: Scam
To: joewein@pobox.com, gmail-abuse@google.com
The sender address of this Rafiu Otono "lawyer" email is very interesting, because it is quite close to IP address 192.116.119.135 which was the source of the Benson Philips / WBC representative scam, it came from the same provider.
Two months later we got some hate mail from Nigeria. That email arrived from IP 195.166.240.195, which was used by the "huamao_botero@msn.com" rep scam, adjacent to IP 195.166.240.195 which was the source for "huamaoarts_craft@unshawmail.net" and "info@wbc-importexportcompany.net", another "WBC" themed rep scam.
Answer by the scammers to a response from a spam recipient:
Hello Firstname,
Thanks for your response to our proposal.I am in receipt of your mail.
This organisation, is a registered public liability company with directors and board of management, our mode of operation is basically according to our client specification. we have workers that we deal with directly from the local set up where we handle the buying and selling of our products.We sell these products to our customers in Canada/America/Europe on credit basis.What we requesting personally is that, based on the scope of this organization and the mode of transaction with our client, we want you to act as our payment officers ,as your location shall determine.As at the moment we cannot be paying you as one of our regular staff but you will be strictly on comission basis, you will be entitled to 10% of any amount that you receive from our customers on our behalf.
You are required to fill the Representative form below (attached),subject to our satisfaction you will be appointed immediately.Return the already completed form scan and attach.
We anticipate your earliest response
Regards
Karnavati Dyoung
China Metallurgical Import $ Export Corporation (CMIEC)
Message headers:
Received: from web8410.mail.in.yahoo.com (HELO web8410.mail.in.yahoo.com)
(202.43.219.158) by ############ (mx060) with SMTP; 08 Jan 2005 14:14:31 +0100
Received: (qmail 63635 invoked by uid 60001); 8 Jan 2005 13:14:29 -0000
Message-ID: <20050108131429.63633.qmail@web8410.mail.in.yahoo.com>
Received: from [213.181.83.82] by web8410.mail.in.yahoo.com
via HTTP; Sat, 08 Jan 2005 13:14:29 GMT
Date: Sat, 8 Jan 2005 13:14:29 +0000 (GMT)
From: Karnavati Dyoung <karnavatidyoung@yahoo.co.in>
Subject: Representation
WHOIS details for sending network:
inetnum: 213.181.64.0 - 213.181.95.255
org: ORG-BL4-RIPE
netname: NG-BROADBANDTECH-20000327
descr: BT Limited
descr: PROVIDER Local Registry
country: NG
admin-c: IO243-RIPE
tech-c: IO243-RIPE
status: ALLOCATED PA
notify: bt@micro.com.ng
mnt-by: RIPE-NCC-HM-MNT
mnt-routes: BT-LIMITED-MNT
mnt-lower: BT-LIMITED-MNT
changed: hostmaster@ripe.net 20000327
changed: hostmaster@ripe.net 20001003
changed: hostmaster@ripe.net 20010507
changed: hostmaster@ripe.net 20010704
changed: lir-help@ripe.net 20011214
changed: hostmaster@ripe.net 20020419
changed: hostmaster@ripe.net 20020423
changed: hostmaster@ripe.net 20020613
changed: hostmaster@ripe.net 20030211
changed: hostmaster@ripe.net 20040406
source: RIPE
organisation: ORG-BL4-RIPE
org-name: BT Limited
org-type: LIR
address: BT Limited
address: 8B Ademola Street,
address: Off Awolowo Road,
address: S. W. Ikoyi,
address: Lagos, Nigeria.
phone: +234 1 2693192
fax-no: +234 1 2693192
e-mail: bt@micro.com.ng
admin-c: IO243-RIPE
admin-c: IO243-RIPE
mnt-ref: BT-LIMITED-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20040415
source: RIPE
person: Israel Oyeleke
address: BT Limited
address: 8B Ademola Street
address: Ikoyi S.W.
address: Lagos, Nigeria
phone: +234 1 2673532
fax-no: +234 1 2673203
e-mail: i.oyeleke@moneynett.com
nic-hdl: IO243-RIPE
notify: i.oyeleke@moneynett.com
changed: ifiok@btlimited.com 20010605
changed: ifiok_moses@yahoo.com 20030917
source: RIPE
| 213.181.83.82 |
| 2005-01-08 13:14:29 UTC | karnavatidyoung@yahoo.co.in |
| 2005-01-12 13:12:45 UTC | karnavatidyoung@yahoo.co.in |
| 2005-01-16 21:01:20 UTC | claimofficer@coolgoose.com |
| 2005-01-29 13:09:30 UTC | tompeter@edsamail.com.ph |
| 2005-02-02 20:28:18 UTC | tompeter@edsamail.com.ph |
| 2005-02-12 11:59:25 UTC | elgordolottery@teenmail.co.za |
| 2005-02-18 12:50:35 UTC | wjonathanmills@netscape.net |
| 2005-02-22 18:44:54 UTC | lottery.winnerspromo@tsamail.co.za |
| 2005-02-28 20:53:34 UTC | smith101robinson@zipmail.com.br |
| 2005-03-11 09:41:54 UTC | notification@uknationallottrey.net |
| 2005-03-26 14:10:06 UTC | johnsonwerner@bill-exchange-department.com |
| 2005-03-26 14:16:00 UTC | johnsonwerner@bill-exchange-department.com |
| 2005-03-31 02:57:27 UTC | waterpeters@terra.com.mx |
| 2005-03-31 03:41:54 UTC | waterpeters@terra.com.mx |
| 2005-04-07 02:13:17 UTC | national_lottery@uk-promo.net |
| 2005-04-13 01:28:12 UTC | marketing_dept@sharp-electronicsworld.com |
| 2005-04-13 01:31:04 UTC | marketing_dept@sharp-electronicsworld.com |
| 2005-04-13 18:09:40 UTC | wang_qin@hang-seng-bank.com |
| 2005-04-21 02:23:15 UTC | lottery-notification@tsamail.co.za |
| 2005-04-22 23:57:08 UTC | malo_1961@hotmail.com |
| 2005-04-27 04:51:23 UTC | notification@ukloterywinners.com |
| 2005-05-04 00:34:21 UTC | kim222liang@tsamail.co.za |
| 2005-05-04 12:30:53 UTC | notification@swisswinners.com |
| 2005-05-04 12:31:44 UTC | notification@swisswinners.com |
| 2005-05-04 12:46:20 UTC | notification@swisswinners.com |
| 2005-05-04 21:36:04 UTC | notification@swiss-winners.com |
| 2005-05-07 14:50:35 UTC | lottery_results@swisswinners.org |
| 2005-05-10 02:10:57 UTC | winnings@swisswinners.org |
| 2005-06-04 00:53:04 UTC | denis@denisdurbartey.com |
| 213.181.87.90 |
| 2005-05-19 17:37:13 UTC | hellenmaytripplehorn@tiscali.co.uk |
| 2005-05-20 16:27:45 UTC | courierexpressdserviceltd@yahoo.co.uk |
| 2005-05-23 23:14:14 UTC | douglasrspencer@tiscali.co.uk |
| 2005-06-04 16:03:58 UTC | simon_gloria@claudeimportandexportcompany.com |
And another one from the very same source, IP address [213.181.83.82]:
From: <karnavati@ibatam.com>
To: none
Sent: Saturday, 25 December, 2004 8:01
Subject: Attn:Representative
GREETINGS FROM BEZOAR EXPORT CORPORATION LIMITED!
HELLO FRIEND,
WE ARE GROUP OF BUSINESS ASSOCIATES IN EQUATORIAL GUINEA WE DEAL IN RAW
MATERIALS(COCOA,RUBBER e.t.c) AND WE EXPORT THESE RAW MATERIALS INTO
AMERICA, EUROPE,AND AUSTRALIA.
WE ARE SEARCHING FOR RELIABLE REPRESENTATIVES WHO WILL LIKE TO GO INTO
PARTNERSHIP WITH US AND ALSO HELP US ESTABLISH A MEDIUM OF GETTING TO OUR
CUSTOMERS IN EUROPE/AMERICA/AUSTRALIA AS WELL AS MAKE PAYMENTS THROUGH TO
US.
WE WILL BE VERY GLAD IF YOU BE WILLING TO GO INTO PARTNERSHIP WITH US.FEEL
FREE TO CONTACT US VIA MAIL FOR MORE INFORMATIONS.
YOU WILL HAVE TO SEND IN YOUR CREDENTIALS, SO WE CAN KNOW YOUR
COMPETENCE.SUBJECT TO OUR SATISFACTION,YOU WILL BE GIVEN MORE INSIGHT ON
WHAT ROLE YOU WE BE PLAYING AS WE GO INTO PARTNERSHIP AS OUR
REPRESENTATIVE IN EUROPE / AMERICA/AUSTRALIA AND YOU WILL ALSO BE GIVEN
THE OPPURTUNITY TO NEGOTIATE YOUR MODE OF WHICH WE WILL PAY FOR YOUR
SERVICES.
WE CAN ASSURE YOU THAT THIS PROPOSAL IS 100% LEGAL.
PLEASE IF YOU ARE INTERESTED FORWARD TO THIS
E-MAIL:karn_exporter@hotmail.com
1)YOUR FULL NAMES
2) PHONE NUMBER/FAX
3) CONTACT ADRESSES,
4)ANY FORM OF IDENTITY/INTERNATIONAL PASSPORT.
5)AGE
IN THIS FORMAL APPLICATION A MESSAGE WILL BE SENT TO YOU AS REGARDS
APPOINTMENT.
THANKS.
FAITHFULLY,
MRS SARAH DOUGLAS,
SECRETARY,
BEZOAR EXPORT.
YUKINORI SASAKI.
C.E.O
BEZOAR EXPORT.
-----------------------------------------
Kunjungi pusat informasi Batam.
http://www.ibatam.com/
Message headers:
Received: from unknown (HELO ibatam.com) (127.0.0.1)
by 0 with SMTP; 24 Dec 2004 23:01:51 -0000
Received: from 213.181.83.82
(SquirrelMail authenticated user karnavati)
by mail.ibatam.com with HTTP;
Fri, 24 Dec 2004 16:01:51 -0700 (GMT+7)
"DELETED Import and Export company"
From: "Deleted Import and Export" <rep_services@deletedimportandexport.com>
Sent: Friday, 22 October, 2004 21:22
Subject: HELLO REP-NEEDED!!!
DELETED IMPORT AND EXPORT COMPANY
Mr.Standford:
I represent Deleted import and export company based in the Uk
My company exports cocoa and other goods/services for world trade.
We are looking for representatives in europe and America that can
help my company in clearing our money ,because most of our customers
pay with checks and we don,t have an account in your country that will
clear this money.As our representative you will receive 10% of any money
you clear for the company, that will be how you will be paid by the
c! ompany the rest of the money will be paid into an account we will
provide for you. If you are interested in our offer please send your
name contact address and telephone number and please contact our
procurement officer, Standford Walker: Email: w_standford@myway.com
Phone:(+44)704 0110-836.
.looking forward to hear from you.
Very Respectfully,
Firstname Lastname, President
DELETED Import and Export company
Goods for Import / Export & Freight Fwdg. Svcs.
--------- and ---------------
President , COMPANYNAME
Import / Export & Freight Fwdg. Svcs.
WHOIS details for domain "deletedimportandexport.com":
Request: deletedimportandexport.com
connected to whois.melbourneit.com [203.27.227.114:43] ...
Domain Name.......... deletedimportandexport.com
Creation Date........ 2004-10-22
Registration Date.... 2004-10-22
Expiry Date.......... 2005-10-22
Organisation Name.... Deleted Import and Export
Organisation Address. 28 garrison rd apt#4
Organisation Address.
Organisation Address. marietta
Organisation Address. 30008
Organisation Address. GA
Organisation Address. UNITED STATES
Admin Name........... Deleted Import and Export
Admin Address........ 28 garrison rd apt#4
Admin Address........
Admin Address........ marietta
Admin Address........ 30008
Admin Address........ GA
Admin Address........ UNITED STATES
Admin Email.......... rep_services@deletedimportandexport.com
Admin Phone.......... +1.4045027392
Admin Fax............
Tech Name............ MSN NOC
Tech Address......... One Microsoft Way
Tech Address.........
Tech Address......... Redmond
Tech Address......... 98052
Tech Address......... WA
Tech Address......... UNITED STATES
Tech Email........... MSN-PA-TECH@msn.com
Tech Phone........... +1.4258828080
Tech Fax.............
Name Server.......... pdomns1.msn.com
Name Server.......... pdomns2.msn.com
- rep_services@deletedimportandexport.com
- w_stanford@deletedimportandexport.com
- angela_paulson@deletedimportandexport.com
[2005-05-19]
Here is a reply regarding a job enquiry:
Dear Firstname Lastname,
Thank you very much for your response and your interest in
this transaction.
I appreciate the fact that you are ready to represent this
company in your country. You should not have anything to worry
about as there shall be no financial requirements from your side.
Firstly, I will want to know the type of occupation that you
do and how old you are so as to ascertain the type of customers
to assign you to. You should note that this kind of business
transaction is based on reputation. As we have not met before,
we have to develope trust for each other to see this through.
This is how it works, all our customers within your jurisdiction
will be directed to you for payment. Note that they pay in cheques
and your work as our representative is to cash these cheques,
deduct your percentage from it and the balance made payable into
our designated account that will be availed to you later.
However, you are to provide us with your contact details stating
your full names, postal/residential address and your phone number
and any form of identification .These should be sent via email.
These details will be given to our different customers for the
necessary contact for payment.
We will start giving your contact information to our customers
as soon as you provide us with the above mentioned information.
An acknowledgement of this mail would be appreciated.
Thank you once again.
best regard
Firstname lastname
--------------------------------------------------------------------------------
Yahoo! Messenger - want a free & easy way to contact your friends online?
Message headers:
Received: from [192.116.119.144] by web26001.mail.ukl.yahoo.com
via HTTP; Thu, 19 May 2005 19:29:11 BST
Date: Thu, 19 May 2005 19:29:11 +0100 (BST)
From: firstname lastname <initial_lastname01@yahoo.co.uk>
Subject: RE:THANKS
2005-02-01
From: "RIEC" <riec@tsamail.co.za>
Sent: Tuesday, 01 February, 2005 9:16
Subject: REPRESENTATIVE NEEDED
DELETED IMPORT AND EXPORT COMPANY
CLEARWATER COURT
VASTERN ROAD
READING RG3 9DB
U.K
phone:(44)704-011-0836 Fax:(44)709-284-4230
Dear sir,
We are a group of business men who
deal on raw materials and export into america/europe.
We are searching for representatives who can help us
establish a medium of getting to our costumers in
america/europe as well as making payments through you to
us.Please if you are interested in transacting business with
us we will be very glad.
Please contact our procurement officer,Mr Charles Bush for
more information : bcharles_riec@fastermail.com
Subject to your satisfaction you will be given the
opportunity to negotiate your mode of which we will pay for
your services as our representative in america/europe.
Please if you are interested forward to us your phone
number/fax and your full contact addresses.
Very Respectfully,
Firstname Lastname, President
DELETED Import and Export company
Goods for Import / Export & Freight Fwdg. Svcs.
--------- and ---------------
President , COMPANYNAME
Import / Export & Freight Fwdg. Svcs.
___________________________________________________________________________
Mail sent from WebMail service at PHP-Nuke Powered Site
- http://optinsurplus.com
2005-02-05
Here is a spam in this series sent from IP 216.139.176.60 at Vic Biz Cybercafe, clearly linking this scam to the gang behind the "Liu Pejin" spams (thanks to cockbadgers.co.uk where this spam was found: http://www.cockbadgers.co.uk/mugu/?p=browse&id=1432).
Received: from 216.139.176.60 by by23fd.bay23.hotmail.msn.com with HTTP;
Sat, 05 Feb 2005 11:41:25 GMT
X-Originating-IP: [216.139.176.60]
From: "Deleted Import and Export" <rep_services@deletedimportandexport.com>
Subject: GOODDAY!
Date: Sat, 05 Feb 2005 11:41:25 +0000
To: undisclosed-recipients: ;
* DELETED IMPORT AND EXPORT COMPANY *
/CLEARWATER COURT// /
/ //VASTERN ROAD// /
/ READING RG3 9DB /
/ U.K /
/ phone:(44)704-011-0836 Fax:(44)709-284-4230 /
We are a group of business men who deal on raw materials and export into
America, Europe and Canada. We are searching for representatives who can help us
establish a medium of getting to our costumers in America Europe and Canada, as
well as making payments through you to us.
Please if you are interested in transacting business with us we will be very glad.
Please contact our procurement officer, Stanford Walker
for more information @
w_stanford@deletedimportandexport.com
Subject to your satisfaction you will be given the opportunity to negotiate your
mode of which we will pay for your services as our representative in America
Europe and Canada.
Please if you are interested forward to us your phone
Number/fax and your full contact addresses.
/Very Respectful//
/ Firstname Lastname, President/
/ DELETED Import and Export company /
/ Goods for Import / Export & Freight Fwdg. Svcs. //
"Eliza Thambo, DELETED Import and Export company"
This spam email was abusing the name of a legitimate company, which we have removed to protect its identity.
From: "thambo" <thambo007@computermail.net>
Sent: Monday, 30 May, 2005 18:33
Subject: Reply
I,Mrs.Eliza Thambo
I represent Deleted import and export company based in
Nigeria My company exports cocoa and other
goods/services for world trade.
We are looking for representatives in europe and
America that can help my company in clearing our money
because most of our customers pay with checks and we
don,t have a foreign account that will clear this
money.As our representative you will receive 10% of
any money you clear for the company, that will be how
you will be paid by the company,and the rest of the
money will be paid into an account we will provide for
you.
If you are interested in our offer please send your
NAME, CONTACT ADDRESSS and TELEPHONE NUMBER.
Looking forward to hear from you.
Very Respectfully,
Eliza Thambo, President
DELETED Import and Export company
Goods for Import / Export & Freight Fwdg. Svcs.
--------- and ----------
President , COMPANYNAME
Import / Export & Freight Fwdg. Svcs.
Reply to Email: thambo007@computermail.net
"greg tievey, DELETED Import and Export company"
This spam email was abusing the name of a legitimate company, which we have removed to protect its identity.
From: greg tievey <mr_g_tievey25@hotmail.com>
To: mr_g_tievey25@hotmail.com
Sent: Wednesday, June 01, 2005 11:51 AM
Subject: Mr G. Tievey
From the desk of Mr G. Tievey
DELETED Import and Export company
Jhb, South Africa
I represent Deleted import and export company based in South Africa My company
exports Gold and other goods/services for world trade.
We are looking for representatives in europe and America that can help my
company in clearing our money because most of our customers pay with checks
and we don,t have a foreign account that will clear this money.As our
representative you will receive 10% of any money you clear for the company,
that will be how you will be paid by the company,and the rest of the money
will be paid into an account we will provide for you.
If you are interested in our offer please send your
NAME, CONTACT ADDRESSS and TELEPHONE NUMBER.
Looking forward to hear from you.
Very Respectfully,
Mr G. Tievey President
DELETED Import and Export company
Goods for Import / Export & Freight Fwdg. Svcs.
"Joshi Sitaram, DELETED Import and Export company"
This spam email was abusing the name of a legitimate company, which we have removed to protect its identity.
From: "Joshi Sitaram" <joshi007@planetdeletedimportandexport.org>
To: <undisclosed-recipients:>
Sent: Monday, 06 June, 2005 0:44
Subject: Let US Work Together !
Joshi Sitaram
I represent Deleted import and export company based in
Nigeria My company exports cocoa and other
goods/services for world trade.
We are looking for representatives in europe and
America that can help my company in clearing our money,
because most of our customers pay with checks and we
don,t have a foreign account that will clear this
money.As our representative you will receive 10% of
any money you clear for the company, that will be how
you will be paid by the company,and the rest of the
money will be paid into an account we will provide for
you.
If you are interested in our offer please send your
NAME, CONTACT ADDRESSS and TELEPHONE NUMBER.
Looking forward to hear from you.
Very Respectfully,
Joshi Sitaram, President
DELETED Import and Export company
Goods for Import / Export & Freight Fwdg. Svcs.
--------- and ----------
President , COMPANYNAME
Import / Export & Freight Fwdg. Svcs.
Message headers:
Received: from 195.44.170.98 by by15fd.bay15.hotmail.msn.com
with HTTP;
Sun, 05 Jun 2005 15:44:07 GMT
X-Originating-IP: [195.44.170.98]
X-Originating-Email: [joshi007@planetdeletedimportandexport.org]
X-Sender: joshi007@planetdeletedimportandexport.org
From: "Joshi Sitaram" <joshi007@planetdeletedimportandexport.org>
Subject: Let US Work Together !
WHOIS details for sending network (IP 195.44.170.98):
inetnum: 213.181.64.0 - 213.181.95.255
org: ORG-BL4-RIPE
netname: NG-BROADBANDTECH-20000327
descr: BT Limited
descr: PROVIDER Local Registry
country: NG
admin-c: IO243-RIPE
tech-c: IO243-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-routes: BT-LIMITED-MNT
mnt-lower: BT-LIMITED-MNT
source: RIPE # Filtered
organisation: ORG-BL4-RIPE
org-name: BT Limited
org-type: LIR
address: BT Limited
address: 8B Ademola Street,
address: Off Awolowo Road,
address: S. W. Ikoyi,
address: Lagos, Nigeria.
phone: +234 1 2693192
fax-no: +234 1 2693192
e-mail: bt@micro.com.ng
admin-c: IO243-RIPE
admin-c: IO243-RIPE
mnt-ref: BT-LIMITED-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
person: Israel Oyeleke
address: BT Limited
address: 8B Ademola Street
address: Ikoyi S.W.
address: Lagos, Nigeria
phone: +234 1 2673532
fax-no: +234 1 2673203
e-mail: i.oyeleke@moneynett.com
nic-hdl: IO243-RIPE
source: RIPE # Filtered
WHOIS details for domain "planetdeletedimportandexport.org":
Request: planetdeletedimportandexport.org
whois server for *.org is whois.publicinterestregistry.net ...
connected to whois.publicinterestregistry.net [129.33.96.137:43] ...
Domain ID:D106525280-LROR
Domain Name:PLANETDELETEDIMPORTANDEXPORT.ORG
Created On:05-Jun-2005 14:43:39 UTC
Expiration Date:05-Jun-2006 14:43:39 UTC
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:1EF501756D8D54DB
Registrant Name:Suling Hsu
Registrant Organization:Suling Hsu
Registrant Street1:11SilverHollow
Registrant Street2:
Registrant Street3:
Registrant City:NorthBrunswick
Registrant State/Province:NJ
Registrant Postal Code:08902
Registrant Country:US
Registrant Phone:+1.7328213456
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:joshi007@planetdeletedimportandexport.org
Admin ID:61C58B4112D7B8BB
Admin Name:Suling Hsu
Admin Organization:Suling Hsu
Admin Street1:11SilverHollow
Admin Street2:
Admin Street3:
Admin City:NorthBrunswick
Admin State/Province:NJ
Admin Postal Code:08902
Admin Country:US
Admin Phone:+1.7328213456
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:joshi007@planetdeletedimportandexport.org
Tech ID:64F401BB67A64D01
Tech Name:NOC MSN
Tech Organization:NOC MSN
Tech Street1:One Microsoft Way
Tech Street2:
Tech Street3:
Tech City:Redmond
Tech State/Province:WA
Tech Postal Code:98052
Tech Country:US
Tech Phone:+1.4258828080
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:MSN-PA-TECH@msn.com
Name Server:PDOMNS1.MSN.COM
Name Server:PDOMNS2.MSN.COM
From: brown_lee <brown_lee@jumpy.it>
To: none
Sent: Tuesday, 09 November, 2004 10:40
Subject: REPRESENTATIVE NEEDED
Dear Friend,
I am Mr.Brown Lee,managinig director of HUAMAO ARTS AND CRAFTS
IMPORT./EXPORT. CORP.(HMARTS) China.
we are a group of business men who deal on Art and Craft and export
into the Canada/America and Europe.
We are searching for representatives who can help us establish a
medium of getting to our customers in the Canada/America and Europe
as well as making payments through you to us.Please if you are
interested in transacting business with us, we will be very glad.
Please contact us for more information.
Subject to your satisfaction you will be given the opportunity to
negotiate your mode of which we will pay you for your services as our
representative in Canada/America and Europe Please if you are
interested forward to us your phone number/fax and your full contact
address.
Thanks In advance
Managing Director,
Mr.Brown Lee.
Pleace contact me through this private email address
brown_lee@3xl.net
___________________________________________________________________________
Mail sent from WebMail service at PHP-Nuke Powered Site eliteut.comr
- http://eliteut.com
"Mr CRAIG BRUCE, MAJORBIZ LIMITED"
From: "majorbiz" <majorbiz@codehot.co.uk>
To: none
Sent: Friday, 12 November, 2004 18:12
Subject: REQUEST FOR REPRESENTATIVES !
MAJORBIZ LIMITED.
PO. BOX 1010 LIVERPOOL
FAX:+448701334412.
Dear Sir/Madam,
We will be very glad if you can represent us in your country and earn 10% of every payment made through you to us.
For more information ,please contact us through email.
Kind Regards,
CEO:MAJORBIZ LIMITED
Mr CRAIG BRUCE.
___________________________________________________________________________
Mail sent from WebMail service at PHP-Nuke Powered Site
- http://www.club-der-wirren.de
This posting was made through an insecure PHP-Nuke installation. The sender address is fake.
UK phone number in the 08701 range are from the "special services range". It's not a regular area code. See http://www.ukphoneinfo.com/cgi-bin-Phones/nng?GNG=08701334412&Submit=Submit
We received another, very similar one sent via an insecure PHP-Nuke installation in Indonesia:
From: majorbiz2004 <craigbrc@yahoo.com>
To: none
Sent: Mon, 22 Nov 2004 07:10:38 +0000
Subject: ***REPRESENT OUR COMPANY, WE GUARANTEE YOU GREAT PROFITS***
MAJORBIZ LIMITED.
PO. BOX: 1010 LIVERPOOL
FAX:+448701334412.
Dear Sir/Madam,
We will be very glad if you can represent us in your
country and earn 10% of every payment made through you
to us.
For more information,
please contact :
Mr Craig Bruce.
CEO:MAJORBIZ LIMITED
Thanks and have a great day!
CEO:MAJORBIZ LIMITED
Mr CRAIG BRUCE.
___________________________________________________________________________
Mail sent from WebMail service at Bogor Linux- http://bogor.linux.or.id
"Jason Scott, MAJORBIZ INT'L" (Vic Biz)
MAJORBIZ INT'L
112,Benton Road,
Tottenham,UK
TEL/FAX +448701310585
Dear Sir/Madam,
We will be very glad if you can be our representative
in your country and earn 10% of every payment made
through you to us.For more information,contact us
through email.
Kind Regards,
Email:majorbiz_jasonscott@yahoo.co.uk
Mr.Jason Scott(CEO)
Message headers:
Received: from 216.139.176.61 by by15fd.bay15.hotmail.msn.com with HTTP;
Mon, 13 Jun 2005 00:02:39 GMT
X-Originating-IP: [216.139.176.61]
X-Originating-Email: [jason_scott@majorbiznation.net]
X-Sender: jason_scott@majorbiznation.net
From: "Jason Scott" <jason_scott@majorbiznation.net>
"MR JOHN COLE, LEGENDBIZ LIMITED"
This is the same scam as "Mr CRAIG BRUCE, MAJORBIZ LIMITED" (same phone number).
From:"john cole" <legendbiz2005@yahoo.com>
Dear Firstname Lastname,
Compliments of the day to you.
We recieved your email.
We thank you for the interest shown to my proposal.
LEGENDBIZ LIMITED is a premier enterprise engaged in International
Trade to serve the needs of the Wholesalers, the Retailers and the
Industry across the Continental United States and Canada.
LEGENDBIZ is a company which deals on raw materails like timber,
rubber,cocoa etc.
LEGENDBIZ exports these raw materials to companies situated
in Europe, America and Asia.
LEGENDBIZ exports these raw materails to companies that produce
home and office furnitures,plastic items, tyre for cars,beverages
and drinks etc.
We are searching for GOD fearing representative who can help
us establish a medium of getting to our costumers in Europe, America
and Asia as well as making payments through you to us.
Remember,Like I said earlier,you will be entitled to 10% of
everypayment made through you to us.
Please forward to us the following Requirements for your application:
1). FULL NAMES:_______________________________________
2). DATE OF BIRTH:_____________________________________
3). GENDER:________________________
4). MARITAL STATUS:_____________________________________
5).FULL POSTAL ADDRESS:___________________________________
6).TELEPHONE NUMBER:________________________________________
7).OCCUPATION:_______________________________________________
8).BRIEF DESCRIPTION OF COMPANY/INDIVIDUAL:____________________
Have alovely day.
Warm Regards,
CEO:LEGENDBIZ LIMITED
MR JOHN COLE
PRESIDENT
LEGENDBIZ LIMITED,
23 LEGEND HOUSE, COLLING WOOD ROAD SUTTON SURREY,
PO. BOX: 9005 LONDON,
TELEFAX: +448701334412.
_____________________________________________________
Copyright © 2005 Legendbiz! Inc. All rights reserved
"MR JOHN COLE, LEGENDBIZ LIMITED"
Received through Alibaba.com:
From: legendbizltd009
Subject: OFFICE MAIL (EARN 10% )
Date: 2005-05-26 20:56:33
Dear Sir/Madam,
We the management,members and staff of legendbiz limited will be very
glad if you can represent us in your country and earn 10% of every
payment made through you to us.
For more information,
Please contact :
MR JOHN COLE.
CEO:LEGENDBIZ LIMITED.
Thanks and have a great day!
LEGENDBIZ LIMITED.
23 LEGEND HOUSE, COLLING WOOD ROAD SUTTON SURREY,
PO. BOX: 9005 LONDON
TELEFAX: +448701334412
"JOHN COLE, LEGENDBIZ LIMITED"
From: "JOHNCOLE" <info_legendbizlimited@yahoo.co.uk>
Sent: Friday, 27 May, 2005 12:51
Subject: OFFICE MAIL (EARN 10% )
Dear Sir/Madam,
We the management,members and staff of legendbiz limited will be very
glad if you can represent us in your country and earn 10% of every
payment made through you to us.
For more information,
Please contact :
MR JOHN COLE.
CEO:LEGENDBIZ LIMITED.
Thanks and have a great day!
LEGENDBIZ LIMITED.
23 LEGEND HOUSE, COLLING WOOD ROAD SUTTON SURREY,
PO. BOX: 9005 LONDON
TELEFAX: +448701334412
____________________________________________________
Copyright @ 2005 Legendbiz! Inc. All rights reserved.
___________________________________________________________________________
Servizio WebMail offerto da www.barzellette.tv
"CHRISTOPHER HARKINS, LEGENDBIZ LIMITED"
From: "Christopher Harkins" <info@harkinsinternational.net>
Sent: Wednesday, 03 August, 2005 10:28
Subject: OFFICE MAIL !!!
Dear Sir/Madam,
We the management,members and staff of legendbiz limited will be very glad
if you can represent us in your country and earn 10% of every payment made
through you to us.
For more information,
Please contact :
MR CHRISTOPHER HARKINS.
CEO:LEGENDBIZ LIMITED.
Thanks and have a great day!
LEGENDBIZ LIMITED.
23 LEGEND HOUSE, COLLING WOOD ROAD SUTTON SURREY,
PO. BOX: 9005 LONDON
TELEFAX: +447031947253
"FATI HIDERO, FHIDERO HOLDINGS"
Received through Alibaba.com:
From: hidero
Subject: REPRESENTATIVE NEEDED
Date: 2005-05-26 21:51:34
Dear Sir/Madam,
I am Mrs. FATI HIDERO,chief administrative officer
of FHIDERO HOLDINGS,an establishment that deals
on raw materials such as Cocoa,Rubber,Cassava,Cotton
etc,and export them into the U.K,Canada,and America.
We are searching for representatives who can help us
establish a medium of getting to our costumers
in Canada,America and Europe,as well as making payments through you to us.
subject to your satisfaction, you will be given the
opportunity to negotiate your mode of payment and earn
10% of every transaction for your services, as our representative.
If you are interested,please fill in the blank spaces below:
1.Your Full Names.............................................
2.Your Full Contact Address...................................
3.Your E.Mail address.........................................
4.State/Country...............................................
5.Your Phone/Fax Numbers......................................
And send to the Sales Manager,
Rasheed Sadiq
sadiq_rasheed@excite.com
Thanks
Yours truly,
Mrs.Fati Hidero
"Yo chang lee, China National Arts & Crafts imp./Exp. Corp."
See also:
Scam email:
From: <yochanglee@ilse.nl>
To: none
Sent: Monday, 15 November, 2004 12:13
Subject: Job Opportunity Based on Commission!!!
I am Mr.Yo chang lee ,managinig director of a China National Arts &
Crafts imp./Exp. Corp.
we are a group of business men who deal on Art and Craft and export
into the Canada/America and Europe We are searching for representatives
who can help us establish a medium of getting to our costumers in the
Canada/America and Europeans as well as making payments through you to
us.Please if you are interested in transacting business with us we will
be very glad. Please contact us for more information.
Subject to your satisfaction you will be given the opportunity to
negotiate your terms of contract for your services as our
representative in Canada/America and Europe.
Please if you are interested forward to us your phone number/fax and
your full contact addresses.And your correspondence Or reply should be
via my alternative email box:hmarts@fastermail.com
Thanks In advance.
Mr.Yo Chang Lee.
(anaging Director).
"Shan L. Wang, cmiec ch"
From: "shanlee" <shan_lee@walla.com>
Sent: Sunday, 03 April, 2005 12:59
Subject: HI,
CHINA METALLURGICAL IMPORT & EXPORT CORPORATION
Dear Friend,
Top of the day to you,
My name is Shan L.Wang, CEO.(cmiec ch) China.
We are a group of business men who deal on import and export raw
materials.
We are looking for a representative who can help our company collect
money been owed by our customer in, Europe,America,and Canada.
If you are interested in reperesenting cmiec, we are willing to give
you10% for any payment you collect on our company's behalf. Mail us
back, so we can discuss in details.
Best regards,
Shan L. Wang
CEO.(cmiec ch)
China
"Jun L. Wang, cmiec ch"
From: "wang7" <wang.l@jmail.co.za>
Sent: Sunday, 22 May, 2005 12:56
Subject: REPRESENTATIVE NEEDED..................
Dear Friend,
Top of the day to you,
My name is Jun L. Wang, CEO.(cmiec ch) China.
We are a group of business men who deal on import and export raw
materials into Canada, America and Europe.
We are looking for a representative who can help our company collect
money been owed by our customer in, Europe,America,and Canada.
Please if you are interested in transacting business with our company
subject to your satisfaction and in view of helping us, we will be very
glad.
Contact us for more information, If this proposal is acceptable to you,
forward to us this information:
CONTACT ADDRESS:
FULL NAME:
PHONE AND FAX NUMBER:
Best regards,
Jun L. Wang
CEO.(cmiec ch)
China
"Woo Lui, CHINA METALLURGICAL IMPORT AND EXPORT COMPANY"
From: woolui <woolui@cmiecs.com>
To: none
Sent: Thursday, 25 November, 2004 4:12
Subject: PROJECTMAIL/REPRESENTATIVE NEEDED
COMPANYADDRESS:338,YINGZEAVENUE,
YINGZE TAIYUAN,
SHANXI, CHINA.
CHINA METALLURGICAL IMPORT AND EXPORT COMPANY
ATTN: Sir/Madam,
I am Mr.Woo Lui.of (CMIEC) a company that deals on import
and export of various metallurgical products, equipments, spare parts,
mechanical and electrical products, as well as metallurgical technology
into the Canada,America and Europe.
We are searching for representatives who can help us establish
a medium of getting to our costumers in the Canada, America and Europe
as well as making payments through you to us.
Subject to your satisfaction you will be given the opportunity to
negotiate your mode of which we will pay for your services as our
representative in Canada,America and Europe.
Please if you are interested forward to us your phone number/fax
and your full contact addresses for contact.
Regards
Managing Director(cmiec).
Mr.Woo Lui
"Lee Chan, CHINA METALLURGICAL IMPORT & EXPORT CORPORATION"
From: "lee chan" <leechan@leechancmiec.com>
Sent: Sunday, 22 May, 2005 6:25
Subject: URGENT FROM CMIEC
CHINA METALLURGICAL IMPORT & EXPORT CORPORATION
Dear Friend,
Compliments of the season. it is a pleasure to write to you in respect
of our company china metallurgical import and export we are expertize
in the sale of raw materials, we export into the canada/america/parts
of europe.
We are searching for representatives who can help us establish a medium
of getting our funds from our costumers in the canada/america/europe as
well as making payments through you to us. Please if interested in transacting
business in view helpings us,so our clients could make payment to you
being a representative for us we will be very glad.and adequate compensations
will be given and other benefits as follows Pleasecontact us for more
information.
38, YINGZE AVENUE,
YINGZE,TAIYUAN,
SHANXI. CHINA.
Subject to your satisfaction you will be given the opportunity to
negotiate your mode of which we will pay for your services as our
representative in canada/america/europe. if interested forward to us
your phone number/fax and your full contact addresses.
Regards,
Mr Lee Chan
Message headers:
Received: from 195.166.240.195 by BAY15-DAV13.phx.gbl with DAV;
Sat, 21 May 2005 13:25:46 +0000
X-Originating-IP: [195.166.240.195]
X-Originating-Email: [leechan@leechancmiec.com]
X-Sender: leechan@leechancmiec.com
Reply-To: "lee chan" <lee_chan6@yahoo.com.cn>
From: "lee chan"
Subject: URGENT FROM CMIEC
Date: Sat, 21 May 2005 14:25:37 -0700
WHOIS details for sending network (IP 195.166.240.195):
inetnum: 195.166.224.0 - 195.166.255.255
org: ORG-LNL1-AFRINIC
netname: NG-LINKSERVE-971217
descr: Linkserve Nigeria Limited
descr: PROVIDER
country: NG
admin-c: CO445-AFRINIC
tech-c: OC5192-AFRINIC
status: ALLOCATED PA
notify: chima@linkserve.net
notify: obinna@linkserve.net
mnt-by: AFRINIC-HM-MNT
mnt-lower: MNT-LKS-AS8770
mnt-domains: MNT-LKS-AS8770
changed: hostmaster@ripe.net 19971022
changed: hostmaster@ripe.net 20040706
changed: hostmaster@ripe.net 20040922
changed: hostmaster@ripe.net 20040922
changed: hostmaster@ripe.net 20040927
changed: hostmaster@ripe.net 20041122
changed: hostmaster@afrinic.net 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
organisation: ORG-LNL1-AFRINIC
org-name: Linkserve Nigeria Limited
country: NG
org-type: LIR
address: Plot 308 Adeola Odeku Street
address: N/A
address: Victoria Island
address: Nigeria
phone: +234 1 2623900
phone: +234 1 2623901
fax-no: +234 1 2623906
e-mail: chima@linkserve.net
admin-c: CO445-AFRINIC
admin-c: OC5192-AFRINIC
mnt-ref: AS8770-MNT
mnt-ref: AFRINIC-HM-MNT
mnt-ref: MNT-LKS-AS8770
notify: obinna@linkserve.net
mnt-by: AFRINIC-HM-MNT
changed: hostmaster@ripe.net 20040415
changed: bitbucket@ripe.net 20040514
changed: bitbucket@ripe.net 20040820
changed: bitbucket@ripe.net 20040903
changed: hostmaster@ripe.net 20040903
changed: bitbucket@ripe.net 20040903
changed: bitbucket@ripe.net 20040906
changed: bitbucket@ripe.net 20040922
changed: hostmaster@ripe.net 20040922
changed: bitbucket@ripe.net 20040927
changed: bitbucket@ripe.net 20040927
changed: bitbucket@ripe.net 20041005
changed: bitbucket@ripe.net 20041006
changed: bitbucket@ripe.net 20041007
changed: bitbucket@ripe.net 20041012
changed: bitbucket@ripe.net 20041012
changed: bitbucket@ripe.net 20041012
changed: bitbucket@ripe.net 20041022
changed: bitbucket@ripe.net 20041117
changed: bitbucket@ripe.net 20041117
changed: bitbucket@ripe.net 20041117
changed: bitbucket@ripe.net 20041201
changed: hostmaster@afrinic.net 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
person: chima onyekwere
address: Linkserve plot 308 adeola Odeku street, Victoria Island
notify: chima@linkserve.net
phone: +234 1 262 3900
nic-hdl: co445-AFRINIC
changed: hostmaster@ripe.net 20041117
changed: hostmaster@afrinic.net 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
person: Obinna Chukwujekwu
address: 308 Adeola Odeku Street
phone: +234 1 2624802
nic-hdl: OC5192-AFRINIC
mnt-by: MNT-LKS-AS8770
changed: obinna@linkserve.net 20040927
changed: hostmaster@afrinic.net 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
"Chang Lee, CHINA METALLURGICAL IMPORT & EXPORT CORPORATION"
From: "CHINA-IMPORT-EXPORT" <chinaimportandexport@lycos.co.uk>
Sent: Sunday, 05 June, 2005 16:04
Subject: REPRESENTATIVE REQUIRED
38, YINGZE AVENUE,
YINGZE,TAIYUAN,
SHANXI. CHINA.
CHINA METALLURGICAL IMPORT & EXPORT CORPORATION
Dear Sir/madam
Compliments of the season. it is a pleasure to write to
you in respect of our company china Metallurgical Import and
Export we are expertise in the sale of raw materials, we
export into the Canada,America,parts Europe, We are searching
for representatives who can help us establish a medium of
getting our funds from our Customers in the Canada,America,
Europe as well as making payments through you to us. Please
if interested in transacting business in view helpings us,so
our clients could make payment to you being a representative
to us We will be very glad and adequate compensations will be
given and other benefits as follows, Please contact us for
more information.
Subject to your satisfaction you will be given the opportunity
to negotiate your mode of which we will pay for your services
as our representative in canada,america,europe. if interested
forward to us your phone number,fax and your full contact
addresses. I look forward to your Prompt response to this
proposal.
Regards,
[CEO]Mr Chang Lee
NB:Kindly reply us via my email Address:
"chinaimportandexport@lycos.co.uk "
As I will be the one incharge of this "fair Request
From: ArthurMeyerr [mailto:arthurmeyerr1@web-mail.co.ar]
Sent: Friday, December 31, 2004 2:49 AM
Subject: REPRESENTATIVE NEEDED
Importance: High
Good day,
I am Mr. Arthur Cheung Meyer.We are a group of businessmen
who deal on raw materials and export into Canada,America/Europe.
We are searching for representatives who can help us establish a
medium of getting to our costumers in America/Europe as well as
making payments through you to us.
If you are interested in transacting business with us we
will be very
glad.Kindly contact us.
Subject to your satisfaction you will be given the opportunity to
negotiate your mode of which we will pay for your services as our
representative in America/Europe.
If your interest to this proposal is affirmative forward to us
1.Full names
2.Detailed mailing address
3.Contact telephone/fax numbers
Thanks you.
Mr.Arthur Cheung Meyer
CHAIRMAN/CEO
GREATVISTA CHEMICALS LTD
___________________________________________________________________________
Asocine Email
Please compare the following spam with a later version that reveals the source of the spam:
From: "mike_cole" <petjunmba@yahoo.com>
Sent: Tuesday, 11 January, 2005 12:13
Subject: SINCERE REPRENSENTATIVE NEEDED...
Dear Sir/Madam,
I am Mr.Benson Phillips ,Managing Director WBC.We are a company
who deals on mechanical equipment,hardware and minerals,
electrical products, Medical & Chemicals,
light industrial products and office equipment, and export into the
Canada/America and Europe.
We are searching for representatives who can help us establish a
medium of getting to our customers in the Canada/America and Europe as
well as making payments through you to us.
Please if you are interested in transacting business with us we will
be glad.
Please contact us for more information,Subject to your satisfaction you
will be given the opportunity to negotiate your mode of which we
will pay for your services as our representative in Canada/America
and Europe.Please if you are interested forward to us your phone
number/fax and your full contact addresses.
Thanks in advance
please fillinn the blank spaces below:
1.Your Full
Names.....................................................
2.Your Full Contact
Address......................................
3.State/Country........................................................
4.Your Phone/Fax
Numbers......................................
And send details to: agroexim@post.cz
Mr.Benson Phillips
Managing Director
Wbc
From: "cmiec" <cmiec01@yahoo.com.hk>
Sent: Tuesday, 11 January, 2005 13:02
Subject: REPRESENT OUR COMPANY, WE GUARANTEE YOU GREAT PROFITS.
CHINA METALLURGICAL IMPORT AND EXPORT COMPANY
Dear Sir/Madam,
We are a import and export company searching for representatives in
Canada, America and Europe who can help us establish a medium of getting
to our custumers from Canada, America and Europe, as well as making
payments through you to us.
If you are interested in transacting business with us,contact us for
more information through:
Email: xiaolin@cmiecs.com
CHINA METALLURGICAL IMPORT AND EXPORT COMPANY(CMIEC).
COMPANY ADDRESS: 338, YINGZE AVENUE, YINGZE,TAIYUAN, SHANXI, CHINA.
TEL: 0351406202
FAX: 0351404324
Subject to your satisfaction you will be given the opportunity to negotiate
your mode of which we will pay for your services as our representative in
Canada,America and Europe.
Thanks,
Mr.Yang Xiaolin.
General Manager.
"wbcincorporated.net" (formerly hosted MSN, now shut down)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Mon, 24 Jan 2005 07:09:02 -0800
Message-ID: <BAY21-F2799D1A08B8F2962C82EF1A4850@phx.gbl>
Received: from 192.116.119.135 by by21fd.bay21.hotmail.msn.com with HTTP;
Mon, 24 Jan 2005 15:08:51 GMT
X-Originating-IP: [192.116.119.135]
X-Originating-Email: [customerservice@wbcincorporated.net]
X-Sender: customerservice@wbcincorporated.net
From: "wbc incorporated" <customerservice@wbcincorporated.net>
Bcc:
Subject: FOREIGN REPRESENTATIVE NEEDED
Date: Mon, 24 Jan 2005 15:08:51 +0000
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 24 Jan 2005 15:09:02.0272 (UTC)
FILETIME=[A35CFC00:01C50226]
Dear Friend,
I am Dr Benson Phillip,CEO and Owner of WBC (a company based in France). A
Company that is specialized in Import and Export of Machinery &
equipment,Communication Accessories and Household Appliances. We are a
company who deal on mechanical equipment,hardware and minerals, electrical
products, Medical & Chemicals,light industrial products and office
equipment, and export into the Canada/America and Europe, being a General
Merchantile Company.
I am currently running my business from my United Kingdom Office where I
am
located for now.We are searching for representatives who can help us
establish a medium of getting to our customers in the Canada/America and
Europe as well as making payments through you to us.
Please if you are interested in transacting business with us we will be
glad
to be your partners.Please contact us for more information,Subject to your
satisfaction you will be given the opportunity to negotiate your mode of
which we will pay for your services as our representative in
Canada/America
and Europe.
Please if you are interested forward to us your phone number/fax and your
full contact addresses. Please note that your areas of specialization or
occupation is of no relevance to resolve to assisting us.
Thanks in advance
Dr Benson Phillip
President / CEO
WBC.
FOR SAFETY AND CONFIDENTIAL REASONS PLEASE SEND YOUR RESPONSE TO ONLY MY
DIRECT AND CONFIDENTAIL EMAIL ADDRESS AT
bensonphilips@wbcincorporated.net
THANKS.
The domain was registered at the time and hosted by MSN (it is already shut down):
Registration Service Provided By: Microsoft
Contact: pdenomcs@microsoft.com
Visit: http://support.msn.com/contactus.aspx?pk=PersonalAddress
Domain name: wbcincorporated.net
Registrant Contact:
benson philips
benson philips (bensonphilips@wbcincorporated.net)
+1.2125365393
Fax: none
34 oak lane brooklyn
new york, NY 11212
US
Administrative Contact:
benson philips
benson philips (bensonphilips@wbcincorporated.net)
+1.2125365393
Fax: none
34 oak lane brooklyn
new york, NY 11212
US
Technical Contact:
NOC MSN
NOC MSN (MSN-PA-TECH@msn.com)
+1.4258828080
Fax: none
One Microsoft Way
Redmond, WA 98052
US
Billing Contact:
NOC MSN
NOC MSN (MSN-PA-BILL@MSN.COM)
+1.4258828080
Fax: none
One Microsoft Way
Redmond, WA 98052
US
Status: Locked
Name Servers:
pdomns1.msn.com
pdomns2.msn.com
Creation date: 11 Jan 2005 03:56:15
Expiration date: 11 Jan 2006 03:56:15
The email was sent through Gilat, a satellite ISP in Israel that provides connectivity for Nigeria (IP address 192.116.119.135, 192.116.119.147):
inetnum: 192.116.119.0 - 192.116.119.255
netname: GILAT-SATCOM-BLOCK-3
descr: Gilat-Satcom
remarks: For abuse issues related to Gilat, email abuse-gilat@012.net.il
notify: abuse-gilat@012.net.il
country: GB
admin-c: GS3350-RIPE
tech-c: GS3350-RIPE
status: ASSIGNED PA
mnt-by: AS9116-MNT
mnt-lower: AS9116-MNT
changed: lir@linux.goldenlines.net.il 20050102
source: RIPE
route: 192.116.64.0/18
descr: Goldenlines
remarks: For addressing issues, email lir@linux.goldenlines.net.il
remarks: For abuse issues, email abuse@012.net.il
origin: AS9116
mnt-by: AS9116-MNT
changed: lir@linux.goldenlines.net.il 20041121
source: RIPE
role: Gilat Support
address: Gilat Satcom
address: 21D Yagia Kapaim st. Petach-Tikva, Israel
phone: +972 3 9255000
fax-no: +972 3 9217938
admin-c: DR5299-RIPE
admin-c: GE2074-RIPE
tech-c: DR5299-RIPE
tech-c: GE2074-RIPE
trouble: abuse-gilat@012.net.il
e-mail: customer@gilat.net
nic-hdl: GS3350-RIPE
mnt-by: AS9116-MNT
changed: hank@att.net.il 20040909
source: RIPE
Maybe the domain above (wbcincorporated.net) got suspended by MSN, because little over a week later an almost identical spam went out using a new maildrop address:
From: "Mr Benson Phillips" <wbcincorpration@outgun.com>
Sent: Wednesday, 02 February, 2005 21:23
Subject: Dear Friend
Dear Friend,
I am Mr. Benson Phils ,CEO and Owner of WBC (a company based in France). A Company that is specialized in Import and Export of Machinery & equipment,Communication Accessories and Household Appliances.
We are a company who deal on mechanical equipment,hardware and minerals, electrical products, Medical & Chemicals,light industrial products and office equipment, and export into the Canada/America and Europe, being a General Merchantile Company.
I am currently running my business from my United Kingdom Office where I am located for now.We are searching for representatives who can help us establish a medium of getting to our customers in the Canada/America and Europe as well as making payments through you to us.
Please if you are interested in transacting business with us we will be glad to be your partners.
Please contact us for more information,Subject to your satisfaction you will be given the opportunity to negotiate your mode of which we will pay for your services as our representative
in Canada/America and Europe.
Please if you are interested forward to us your phone number/fax and your full contact addresses. Please note that your areas of specialization or occupation is of no relevance to resolve to
assisting us.
Thanks in advance
Mr. Benson Phils
President / CEO
WBC.
FOR SAFETY AND CONFIDENTIAL REASONS PLEASE SEND YOUR RESPONSE TO ONLY MY DIRECT AND CONFIDENTAIL EMAIL ADDRESS:Benson_phillips@outgun.com
THANKS.
The following reply was received ("Received: from unknown (192.116.119.135) by rediffmail.com via HTTP; 05 feb 2005 10:49:50 -0000") after contacting Benson_phillips@outgun.com:
From: "Benson Phillips" >wbcincorpration@rediffmail.com>
To: <emailaddress>
Sent: Saturday, 05 February, 2005 19:49
Subject: Attn:Firstname Lastname
Your Ref:2810/04/TF-WBC
First I must thank you for picking up the consideration to be our agent via our costumers who are already and able to pay some of our outstanding bills.
Surprise to say that your role in this endeavour is to serve as our agent to get to our customers who has been indebted to us over a considerable lenght of time and help stand as an agent through which they will make such payments to us.
Your reward for helping us collect such an outstanding debt will be 5% of whatever money that is being paid to our Company through your Account.
You will be given adequate coordinates and banking instructions through which you will remit our balance 95% from your Account to us.
Please be advised that we will have to begin the necessary process of approving you as our
agent/partner on our receipt of your understanding, transparency, honesty and your sincere
abilities.
The main reason why we are sourcing for your help as our Agent is because we are currently having tax problems with the government and as a result all our Company Accounts worldwide are under strict watch and scrutiny, based on an unecessarily high progressive taxation rate which is politically motivated by masterminds in the government which our Company has fallen out of favour with.
On our receipt of your understanding/mail we will need some vital information from you that will enable us legitimise the process of this transaction, by drafting a Power of Appointment creating an Agency for the relationship of a Principal and Agent, also stating your benefits by way of Fiduciary gains or commission for your Fiduciary services.
Please send down the needed information;
Company name as a legal entity or your personal name acting in your personal capacity in the eyes of the law.
Contact Address, email address and tel/fax numbers.
Age, occupation and position in the Company (if you belong to a company).
A valid mode of Identification (e.g Drivers License, passport etc.)
to this email id.
We will inform you on the next step to follow as regards our approval for you to be our representative, upon getting the above information from you and will also forward my own
valid form of identification to you.
Note: Endeavour to indicate your reference number as above in all of your correspondence with us. I await your immediate response and a customer will soon make payment through you to us.
Thanks in advance.
Mr.Benson Phillips
President/CEO, WBC Inc
"Christopher Bagio, WBC, Spain"
Dear Friend,
I am Dr Christopher Bagio,CEO and Owner of WBC (a company based in Madrid,
Spain).
A Company that is specialized in Import and Export of Machinery &
equipment,Communication Accessories and Household Appliances.
We are a company who deal on mechanical equipment,hardware and minerals,
electrical products, Medical & Chemicals,light industrial products and
office equipment, and export into the Canada/America and Europe, being a
General Merchantile Company. I am currently running my business from my
madrid Office where I am located for now.We are searching for
representatives who can help us establish a medium of getting to our
customers in the Canada/America and Europe as well as making payments
through you to us.
Please if you are interested in transacting business with us we will be glad
to be your partners. Please contact us for more information,Subject to your
satisfaction you will be given the opportunity to negotiate your mode of
which we will pay for your services as our representative in Canada/America
and Europe.
Please if you are interested forward to us your phone number/fax and your
full contact addresses. Please note that your areas of specialization or
occupation is of no relevance to resolve to assisting us.
Thanks in advance Dr Christopher Bagio. President / CEO WBC. FOR SAFETY AND
CONFIDENTIAL REASONS PLEASE SEND YOUR RESPONSE TO ONLY MY DIRECT AND
CONFIDENTAIL EMAIL
ADDRESS AT:
christopher@wbc-world.com
THANKS
Message headers:
Received: from 216.139.181.214 by by21fd.bay21.hotmail.msn.com
with HTTP; Wed, 23 Mar 2005 20:34:23 GMT
X-Originating-IP: [216.139.181.214]
X-Originating-Email: [chris_bagio@wbc-world.com]
X-Sender: chris_bagio@wbc-world.com
From: "WBC World Company"
Bcc:
Subject: REP'S NEEDED URGENTLY !!
Date: Wed, 23 Mar 2005 20:34:23 +0000
WHOIS details for sending network (IP 216.139.181.211, 216.139.181.214):
OrgName: Global Communicaton Network NetExpress
OrgID: GCNN
Address: Plot 287 Ajose Adeogun Street
City: Lagos
StateProv:
PostalCode:
Country: NG
NetRange: 216.139.181.128 - 216.139.181.255
CIDR: 216.139.181.128/25
NetName: NETEXPRESS1
NetHandle: NET-216-139-181-128-1
Parent: NET-216-139-160-0-1
NetType: Reassigned
Comment:
RegDate: 2002-10-04
Updated: 2002-10-04
TechHandle: TIK-ARIN
TechName: Ikoko, Tekena
TechPhone: 234-84-237-536
TechEmail: tikoko@onebox.com
OrgTechHandle: ETI2-ARIN
OrgTechName: Timitimi, Ebibomo
OrgTechPhone: 2341-262-0934
OrgTechEmail: ebibomo@yahoo.com
Domain registration details for "wbc-world.com":
Request: wbc-world.com
connected to whois.crsnic.net [198.41.3.54:43] ...
connected to whois.enom.com [66.151.151.170:43] ...
Registration Service Provided By: Microsoft
Contact: personal_address@css.one.microsoft.com
Visit: http://support.msn.com/contactus.aspx?pk=PersonalAddress
Domain name: wbc-world.com
Registrant Contact:
WBC Company
WBC Company (christopher@wbc-world.com)
+1.5592917520
Fax: none
7031 West 750 North
Winamac, IN 46996
US
Administrative Contact:
WBC Company
WBC Company (christopher@wbc-world.com)
+1.5592917520
Fax: none
7031 West 750 North
Winamac, IN 46996
US
Technical Contact:
NOC MSN
NOC MSN (MSN-PA-TECH@msn.com)
+1.4258828080
Fax: none
One Microsoft Way
Redmond, WA 98052
US
Billing Contact:
NOC MSN
NOC MSN (MSN-PA-BILL@MSN.COM)
+1.4258828080
Fax: none
One Microsoft Way
Redmond, WA 98052
US
Status: Locked
Name Servers:
pdomns1.msn.com
pdomns2.msn.com
Creation date: 02 Mar 2005 13:53:04
Expiration date: 02 Mar 2006 13:53:04
"Mike Brown, WBC (UK)"
From: "mike brown" <info@webmail-uk.org>
To: <undisclosed-recipients:>
Sent: Friday, 20 May, 2005 7:04
Subject: COMPANY REPRESENTATIVE NEEDED!
Dear Friend,
I am Dr. Mike Brown,Foreign Transaction Officer of WBC
(a company based in the UK). A Company that is specialized
in Import and Export of Machinery & equipment, Communication
Accessories and Household Appliances. We are a company who
deal on mechanical equipment,hardware and minerals,
electrical products, Medical & Chemicals,light industrial
products and office equipment,and export into Canada/America and
Europe, being a General Merchantile Company.
We are currently running our business from our United
Kingdom Office where we are located for now.We are searching for
representatives who can help us establish a medium of getting
to our customers in Canada/America and Europe as well as making
payments through you to us.
Please if you are interested in transacting business with
us we will be glad to be your partners.Please contact us for more
information,Subject to your satisfaction you will be given
the opportunity to negotiate your mode of which we will pay for your
services as our representative in Canada/America and Europe.
Please if you are interested, forward to us your phone
number/fax and your full contact addresses. Please note that
your areas of specialization or occupationis of no relevance to
resolve to assisting us.
Thanks in advance
Dr. Mike Brown
(Foreign Transaction Officer)
WBC.
FOR SAFETY AND CONFIDENTIAL REASONS PLEASE SEND YOUR
RESPONSE TO ONLY MY DIRECT AND CONFIDENTAIL EMAIL ADDRESS
AT: wbcukinc@yahoo.co.in
THANKS.
Message headers:
Received: from 66.250.69.6 by by15fd.bay15.hotmail.msn.com
with HTTP;
Thu, 19 May 2005 22:04:42 GMT
X-Originating-IP: [66.250.69.6]
X-Originating-Email: [info@webmail-uk.org]
X-Sender: info@webmail-uk.org
From: "mike brown" <info@webmail-uk.org>
Subject: COMPANY REPRESENTATIVE NEEDED!
Date: Thu, 19 May 2005 22:04:42 +0000
WHOIS details for sending network (IP 66.250.69.6):
NetName: COGENT-NB-0001
OrgName: Cogent Communications
OrgID: COGC
Address: 1015 31st Street, NW
City: Washington
StateProv: DC
PostalCode: 20007
Country: US
ReferralServer: rwhois://rwhois.cogentco.com:4321/
NetRange: 66.250.0.0 - 66.250.255.255
CIDR: 66.250.0.0/16
NetName: COGENT-NB-0001
NetHandle: NET-66-250-0-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: AUTH1.DNS.COGENTCO.COM
NameServer: AUTH2.DNS.COGENTCO.COM
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
Comment:
Comment: ********************************************
Comment: Reassignment information for this block is
Comment: available at rwhois.cogentco.com port 4321
Comment: ********************************************
RegDate: 2002-03-20
Updated: 2003-12-01
TechHandle: ZC108-ARIN
TechName: Cogent Communications
TechPhone: 877-875-4311
TechEmail: noc@cogentco.com
OrgAbuseHandle: COGEN-ARIN
OrgAbuseName: Cogent Abuse
OrgAbusePhone: 877-875-4311
OrgAbuseEmail: abuse@cogentco.com
OrgNOCHandle: ZC108-ARIN
OrgNOCName: Cogent Communications
OrgNOCPhone: 877-875-4311
OrgNOCEmail: noc@cogentco.com
OrgTechHandle: IPALL-ARIN
OrgTechName: IP Allocation
OrgTechPhone: 877-875-4311
OrgTechEmail: ipalloc@cogentco.com
WHOIS details for domain "webmail-uk.org":
Domain ID:D106319964-LROR
Domain Name:WEBMAIL-UK.ORG
Created On:15-May-2005 12:49:42 UTC
Expiration Date:15-May-2006 12:49:42 UTC
Sponsoring Registrar:Melbourne IT, Ltd. dba Internet Names Worldwide (R52-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:D111615418782217
Registrant Name:Joshua Culpepper
Registrant Organization:
Registrant Street1:150 Longview Dr.
Registrant Street2:
Registrant Street3:
Registrant City:Athens
Registrant State/Province:GA
Registrant Postal Code:30605
Registrant Country:US
Registrant Phone:+1.7065499893
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant Email:info@webmail-uk.org
Admin ID:D111615418782214
Admin Name:Joshua Culpepper
Admin Organization:
Admin Street1:150 Longview Dr.
Admin Street2:
Admin Street3:
Admin City:Athens
Admin State/Province:GA
Admin Postal Code:30605
Admin Country:US
Admin Phone:+1.7065499893
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin Email:info@webmail-uk.org
Tech ID:D111615418782216
Tech Name:MSN NOC
Tech Organization:Microsoft
Tech Street1:One Microsoft Way
Tech Street2:
Tech Street3:
Tech City:Redmond
Tech State/Province:WA
Tech Postal Code:98052
Tech Country:US
Tech Phone:+1.4258828080
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech Email:MSN-PA-TECH@msn.com
Name Server:PDOMNS1.MSN.COM
Name Server:PDOMNS2.MSN.COM
"DR KASIM AHMED, ZEANS INTERNATIONAL PLC"
Received: from [194.65.158.15] (helo=servicos.te.pt)
by mxeu9.kundenserver.de with ESMTP (Nemesis),
id 0MKt64-1CxNjJ0anJ-0003La; Sat, 05 Feb 2005 12:03:57 +0100
Received: from servicos.te.pt (localhost.localdomain [127.0.0.1])
by servicos.te.pt (8.12.8/8.12.8) with ESMTP id j15B3LNf028578;
Sat, 5 Feb 2005 11:03:21 GMT
Received: (from apache@localhost)
by servicos.te.pt (8.12.8/8.12.8/Submit) id j15B3AcQ028567;
Sat, 5 Feb 2005 11:03:10 GMT
Date: Sat, 5 Feb 2005 11:03:10 GMT
Message-Id: <200502051103.j15B3AcQ028567@servicos.te.pt>
X-Authentication-Warning: servicos.te.pt: apache set sender to
z_plc@jovem.te.pt using -f
From: "ZEANS INTERNATIONAL PLC" <z_plc@jovem.te.pt>
To:
Reply-To: z_plc101@yahoo.com, z_plc@myway.com, zwaplc@hotmail.com
Subject: BE OUR COMMISSION AGENT
X-Mailer: NeoMail 1.22
X-IPAddress: 217.20.243.165
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
X-SpamScore: 0.551
tests= REPLY_TO_ULINE_NUMS SUBJ_ALL_CAPS
ZEANS INTERNATIONAL PLC
REF NO:4324
RC NUMBER:3101
KUWAIT
ATTN:SIR/MADAM
WE ARE MEMBERS OF THE DEPARTMENT OF FOREIGN DEBTS AND
REMITTANCE.WE ARE LOOKING FOR COMPANIES OR INDIVIDUALS THAT
WILL ASSIST US AND BECOME A COMMISSION AGENTS TO OUR ORGANISATION.
WE HAVE BEEN OWED LARGE SUMS OF MONEY BY COMPANIES OVERSEA,SO
WE WANT YOU TO BE A COMMISSION AGENTS TO HELP US CLAIM
SOME OF OUR MONEY BEEN OWED US BY FOREIGN COMPANIES.WE WILL
COMPENSATE YOU BY GIVING YOU 10% OF ANY DEBTS CLAIMED BY YOU.
SO WE WILL WANT YOU TO SEND US YOUR COMPANY NAME/YOUR FULL
NAME,KIND OF FIRM OR OCCUPATION,RESIDENTIAL AND OFFICE
ADDRESS,TELEPHONE AND FAX NUMBERS,AND A COPY OF ANY OF YOUR
IDENTITY.WE ARE ASKING FOR THIS TO ENABLE US REGISTER YOUR
COMPANY OR NAME AS AN AGENT OF OUR COMPANY.
WE HOPE TO GET YOUR QUICK RESPONSE TO THIS LETTER BY
ACKNOWLEDGING THE LETTER BY REPLYING TO THE ABOVE EMAIL
ADDRESS:z_plc01@yahoo.com,z_plc@myway.com,zwaplc@hotmail.com
BEST REGARDS
DR KASIM AHMED
CHAIRMAN
ZEANS INTERNATIONAL PLC
IP 217.20.243.165 belongs to "Microchip-Tech" in Nigeria (via Redwing Satellite Solutions):
inetnum: 217.20.243.160 - 217.20.243.191
netname: Microchip-Tech
descr: Microchip Technoliges Internet from
descr: Redwing Satellite Solutions
country: NG
admin-c: JD1480-RIPE
tech-c: rt868-RIPE
status: ASSIGNED PA
remarks: INFRA-AW
remarks: ------------------------------
remarks: Please email abuse to:
remarks: abuse@redwingsat.com
remarks: ------------------------------
notify: support@redwingsat.com
mnt-by: REDWING-MNT
mnt-lower: REDWING-MNT
mnt-routes: REDWING-MNT
changed: dbell@redwingsat.com 20030929
source: RIPE
role: redwing tech
address: Redwing Satellite Solution Ltd
Transmission Station
Great North Road
Brookmans Park
Herts.
AL9 6NE
United Kingdom
remarks: --------------------------------------------------
Please do NOT e-mail abuse to the contacts given
here, e-mail them to abuse@redwingsat.com instead.
--------------------------------------------------
** Contact by E-Mail ONLY. ***
--------------------------------------------------
e-mail: support@redwingsat.com
admin-c: db977-ripe
tech-c: mm7279-ripe
nic-hdl: rt868-RIPE
changed: support@redwingsat.com 20030217
mnt-by: REDWING-MNT
source: RIPE
person: Joshua Denila
address: 3 Ekabor Street
address: off Kosini Street
address: Warri
address: Delta State
address: Nigeria
phone: +234 8033 836341
phone: +234 8042 129641
mnt-by: REDWING-MNT
notify: support@redwingsat.com
e-mail: joshuadenila@hotmail.com
fax-no: +1 425 790 4839
nic-hdl: JD1480-RIPE
changed: support@redwingsat.com 20030929
source: RIPE
"Dr.Peter Ukwa, Zeans Plc"
This scam is related to the "MR. IBRAHIM TASSAN, AL-TASSAN COMPANY" scam.
Zeans Plc
123 church road,
Johannesburg,
South Africa.
Tel:+27837594356
Fax:+27112197033
Email:zeanspls@myway.com
Dear Friend,
I am Dr Peter Ukwa,Foreign Transaction Officer of Zeansplc
(a company based in South Africa ). A Company that is specialized
in Import and Export of Machinery & equipment, Communication
Accessories and Household Appliances. We are a company who
deal on mechanical equipment,hardware and minerals,
electrical products, Medical & Chemicals,light industrial
products and office equipment,and export into Canada/America and
Europe, being a General Merchantable Company.
We are currently running our business from our South Africa
Office where we are located for now.We are searching for
representatives who can help us establish a medium of getting
to our customers in Canada/America and Europe as well as making
payments through you to us.
WE are been owed large sums of money by companies based overseas,We
are looking for companies/Person's to be a commission agent to help us
claim the money.
Any payment been made through you/ your company,you are entitled to
ten percent(10%) of the total sum of money.
Please if you are interested in transacting business with
us we will be glad to be your partners.Please contact us for more
information,Subject to your satisfaction you will be given
the opportunity to negotiate your mode of which we will pay for your
services as our representative in Canada/America and Europe.
Please if you are interested, forward to us your phone
number/fax and your full contact addresses. Please note that
your areas of specialization or occupations of no relevance to
resolve to assisting us.
Thanks in advance
Dr.Peter Ukwa
(Foreign Transaction Officer)
Zeansplc.
FOR SAFETY AND CONFIDENTIAL REASONS PLEASE SEND YOUR
RESPONSE TO ONLY MY DIRECT AND CONFIDENTIAL EMAIL ADDRESS
AT:
zeansplc2005@myway.com
THANKS.
Message headers:
Received: from [216.147.157.52] (account zeansplc2005@tsamail.co.za)
by mail01.infosat.net (CommuniGate Pro WebUser 4.1.8)
with HTTP id 732777119; Wed, 04 May 2005 02:35:11 +0200
From: "zeans plc" <zeansplc2005@tsamail.co.za>
Subject: BE OUR COMPANY'S AGENT.
X-Mailer: CommuniGate Pro WebUser Interface v.4.1.8
Date: Wed, 04 May 2005 02:35:11 +0200
Message-ID: <web-732777119@mail01.infosat.net>
The same IP address is the source of the the "MR. IBRAHIM TASSAN, AL-TASSAN COMPANY" representative scam.
WHOIS details for sending network (IP 216.147.157.52):
OrgName: Lyman Bros Inc.
OrgID: OKCC
Address: 10288 South Jordan Gateway #K
City: South Jordan
StateProv: UT
PostalCode: 84095
Country: US
NetRange: 216.147.128.0 - 216.147.159.255
CIDR: 216.147.128.0/19
NetName: LYMANBROS-1
NetHandle: NET-216-147-128-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.GLOBALSAT.NET
NameServer: NS2.GLOBALSAT.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 1998-12-17
Updated: 2002-01-03
"Okakura Sawao, Shipro Kasei Kaisha, Ltd"
Shipro Kasei Kaisha Ltd. is a legitimate Japanese chemical company whose name was abused by the criminals for this scam (see disclaimer).
From: "osawok" <osworkwork@yahoo.com>
Sent: Wednesday, 09 February, 2005 6:07
Subject: REPRESENTATIVE NEEDED FOR OUR PRODUCTS
REPRESENTATIVE NEEDED FOR OUR PRODUCTS
Mr. Okakura Sawao
Shipro Kasei Kaisha, Ltd,
North 7 West 4, Sapporo,
Hokkaido 060-8628,
Japan.
Tel/Fax: +81-344964662
EMAIL:osawaomd@myway.com
Dear Sir/Madam,
I am Mr.Okakura Sawao ,Managing Director of Japan Shipro Kasei Kaisha,
Ltd. We are a company who
dealS on UV Absorbers, Antioxidants, Corrosion Inhibitors and Plastics.
We export into The United States, Canada and parts of Europe.
We are searching for competent representatives who can help us
establish a medium of getting to our costumers in the USA, Canada and
Europe as well as making payments through you to us.
Please if you are interested in transacting business with us we will be
glad and would be willing to give a good percentage for this. Please
contact us for more information on the above email,Subject to your
satisfaction you will be given the opportunity to negotiate your mode
of which we will pay for your services as our representative.
Please if you are interested forward to us your contact information.
Thanks in advance
Mr.Okakura Sawao
managing Director
PLEASE REPLY TO:osawaomd@myway.com
___________________________________________________________________________
Mail sent from WebMail service at PHP-Nuke Powered Site
- http://www.pariseoboricua.com
In October/November 2004 the criminals used email address "yoshimoritada@netscape.net" to send email from various providers in the Netherlands, directing victims to make wire transfers to a bank account in the Netherlands. Here is the sender history for those IPs:
|
| | 62.163.37.210 |
| 2004-11-30 17:33:03 UTC | yoshimoritada@netscape.net |
| 62.177.147.104 |
| 2004-10-28 15:08:10 UTC | yoshimoritada@netscape.net |
| 62.195.79.253 |
| 2004-11-22 18:57:07 UTC | yoshimoritada@netscape.net |
| 82.169.144.2 |
| 2004-11-15 11:04:52 UTC | yoshimoritada@netscape.net |
| 2005-01-17 17:44:48 UTC | magoorafarms@tsamail.co.za |
| 2005-02-07 18:29:00 UTC | rr_estella@handbag.com |
| 213.148.228.55 |
| 2004-11-09 12:13:10 UTC | yoshimoritada@netscape.net |
| 2004-11-26 09:44:54 UTC | yoshimoritada@netscape.net |
| 2005-01-06 17:15:18 UTC | nanantional@handbag.com |
| 2005-01-06 17:37:52 UTC | nanantionalll@handbag.com |
| 2005-01-11 13:43:42 UTC | estherbush@handbag.com |
| 213.148.236.60 |
| 2004-11-25 17:38:36 UTC | yoshimoritada@netscape.net |
"Okakura Sawao, Shipro Kasei Kaisha, Ltd"
Shipro Kasei Kaisha Ltd. is a legitimate Japanese chemical company whose name was abused by the criminals for this scam (see disclaimer).
From: "management2" <frn_world@yahoo.com>
Sent: Saturday, 12 February, 2005 23:29
Subject: REPRESENTATIVE NEEDED FOR OUR PRODUCTS
REPRESENTATIVE NEEDED FOR OUR PRODUCTS
Mr. Okakura Sawao
Shipro Kasei Kaisha, Ltd,
North 7 West 4, Sapporo,
Hokkaido 060-8628,
Japan.
Tel/Fax: +81-344964662
Emails:okakurasawao@asiamail.com;
okakura_sawao@myway.com
Dear Sir/Madam,
I am Mr.Okakura Sawao ,Managing Director of
Japan Shipro Kasei Kaisha, Ltd.
We are a company who
dealS on UV Absorbers, Antioxidants, Corrosion
Inhibitors and Plastics. We
export into The United
States, Canada and parts of Europe.
We are searching for competent representatives
who can help us establish a
medium of getting to our
costumers in the USA, Canada and Europe as well
as making payments through
you to us.
Please if you are interested in transacting
business with us we will be glad
and would be willing to give a
good percentage for this. Please contact us for
more information on the
above email,Subject to your
satisfaction you will be given the opportunity
to negotiate your mode of
which we will pay for your
services as our representative.
Please if you are interested forward to us your
contact information.
Thanks in advance
Mr.Okakura Sawao
managing Director
___________________________________________________________________________
Mail sent from WebMail service at PHP-Nuke Powered Site
- http://www.pariseoboricua.com
This company claims to be based in Sapporo, but the phone number listed is a Tokyo number. The real Shipro Kasei Kaisha, Ltd. (http://www.shipro.co.jp) is a legitimate company based in Osaka and it has no connection to the scam, as you can see from this FRAUDULENT EMAILS ALERT on their website. The criminals actually made a copy of the real company's website (http://www.shiraishikasei.com) for another version of this scam:
"Yoshimori Tada, Shiraishi Kasei Ltd"
Shiraishi is the surname of the president of Shipro Kasei Kaisha Ltd., a legitimate Japanese chemical company whose name was abused by the criminals for this scam (see disclaimer).
From: "shira" <marketting_shira@yahoo.com>
Sent: Friday, 15 April, 2005 21:24
Subject: REPRSENTATIVE NEEDED FOR OUR PRODUCT
Mr. Yoshimori Tada
Shiraishi Kasei Ltd,
North 7 West 4, Sapporo,
Hokkaido 060-8628,
Japan.
Tel/Fax: +81-344964662
Email:marketting@shiraishikasei.com
Email:yoshimoritada@mailasia.com
Dear Sir/Madam,
I am Mr.Yoshimori Tada , a Director at Shiraishi Kasei Ltd. We are a
company who dealS on UV Absorbers, Antioxidants, Corrosion Inhibitors
and Plastics. We export into The United States, Canada and parts of Europe.
We are searching for competent representatives who can help us establish
a medium of getting to our costumers in the USA, Canada and Europe as
well as making payments through you to us.
Please if you are interested in transacting business with us we will
be glad and would be willing to give a good percentage for this.
Please contact us for more information on the above email,Subject to
your satisfaction you will be given the opportunity to negotiate your
mode of payment of which we will pay for your services as our
representative. For further information about our goods and services
please visit our website on www.shiraishikasei.com
Please if you are intrested forward to us your contact information.
Thanks in advance
Mr.Yoshimori Tada
Director
Shiraishi Kasei Ltd
N/B Please send replies to the above E-mail addresses.
___________________________________________________________________________
Mail sent from WebMail service at Jahad Nasr Kerman
- http://j-nasrkerman.com
WHOIS details for fake domain "shiraishikasei.com":
Request: shiraishikasei.com
connected to whois.OnlineNIC.com [218.107.207.4:43] ...
Registrant:
PAUL MARTIN sitehosting2004@yahoo.com +91.31645968612
ICEGLD.COM
13 Harriet Freezersraat Holland
DEN HAAG,NL,NL 1109
Domain Name:shiraishikasei.com
Record last updated at 2005-04-08 05:33:33
Record created on 2005/4/8
Record expired on 2006/4/8
Domain servers in listed order:
ns1.webcomindia.net ns3.webcomindia.net
Administrator:
Name-- PAUL MARTIN
EMail-: (sitehosting2004@yahoo.com)
tel --: +91.31645968612
org: ICEGLD.COM
13 Harriet Freezersraat Holland
DEN HAAG,NL,NL 1109
Technical Contactor:
Name-- PAUL MARTIN
EMail-: (sitehosting2004@yahoo.com)
tel --: +91.31645968612
org: ICEGLD.COM
13 Harriet Freezersraat Holland
DEN HAAG,NL,NL 1109
Billing Contactor:
Name-- PAUL MARTIN
EMail-: (sitehosting2004@yahoo.com)
tel --: +91.31645968612
org: ICEGLD.COM
13 Harriet Freezersraat Holland
DEN HAAG,NL,NL 1109
Registration Service Provider:
name: Webcom Systems
tel: +91.116910358
fax: +91.116910358
web:http://www.webcomindia.net
The registration details provide interesting information. First of course they show this website is not linked to any Japanese company - the address listed is in the Netherlands, where Nigerian mobster Rafiu Otono is based, the man handling the setup of bank account in the Far East for this scam. The second interesting fact is the link to the Barnby lottery scam / "Icegld.com" (Ice Gold) scam:
|