| 
 
 | 
 419 Scam – 419 scammers solicit funds for Hurricane victims
 The same criminals who pose as email lotteries, corrupt bank employees, lawyers or family members of dead dictators in the "419" advance fee fraud were taking advantage of the 2005 hurricane disaster in New Orleans and the US gulf coast, just as they did after the 2004 Indian Ocean tsunami. Here we will collect examples of such scam emails. 
 Other charity scams: 
 
 
"Norman Maneta" 
 NEW ORLEANS STATE DEPARTMENT NEW ORLEANS UNITED STATES OF Message headers: Received: from HELO c.plasa.com by out-mta1.plasa.com 47 with esmtps (SSLv3:DES-CBC3-SHA:168) id 1EIEX6-0000rT-3d; Thu, 22 Sep 2005 07:01:48 +0700 Received: from [213.185.125.114] (account deptneworleans@plasa.com) by b2.c.plasa.com (CommuniGate Pro WebUser 4.3.7) with HTTP id 2014487; Thu, 22 Sep 2005 05:52:42 +0700 From: "new orleans" <deptneworleans@plasa.com> Subject: HELP SAVE HURRICANE KATRINA VICTIMS X-Mailer: CommuniGate Pro WebUser Interface v.4.3.7 Date: Thu, 22 Sep 2005 05:52:42 +0700 Message-ID: <web-2014487@b2.c.plasa.com> MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-1"; format="flowed" Content-Transfer-Encoding: 8bit X-Brightmail: Message tested, results are inconclusive To: undisclosed-recipients:; 
WHOIS details for sending network (IP 213.185.125.114): 
     inetnum:        213.185.96.0 - 213.185.127.255
     org:            ORG-IA67-RIPE
     netname:        UK-INTELSAT-20021129
     descr:          PROVIDER
     descr:          Intelsat
     country:        GB
     admin-c:        IRA4-RIPE
     tech-c:         IRTC1-RIPE
     tech-c:         AT1875-RIPE
     tech-c:         nd776-RIPE
     status:         ALLOCATED PA
     mnt-by:         RIPE-NCC-HM-MNT
     mnt-lower:      AS22351-MNT
     mnt-routes:     AS22351-MNT
     source:         RIPE # Filtered
     
     organisation:   ORG-IA67-RIPE
     org-name:       Intelsat
     org-type:       LIR
     address:        Chiswick Park, Building 3
                     566 Chiswick High Road
     address:        W45YA
     address:        London
     address:        United Kingdom
     phone:          +44 208 899 6035
     phone:          +1 202 944 6792
     phone:          +1 202 944 8548
     fax-no:         +1 202 944 6955
     e-mail:         nene.diallo@intelsat.com
     admin-c:        IRA4-RIPE
     admin-c:        IRTC1-RIPE
     admin-c:        ELAD1-RIPE
     admin-c:        nd776-RIPE
     mnt-ref:        AS22351-MNT
     mnt-ref:        RIPE-NCC-HM-MNT
     mnt-by:         RIPE-NCC-HM-MNT
     source:         RIPE # Filtered
     
     role:           Intelsat Ripe Admin
     address:        Intelsat Global Service Corporation
     address:        3400 International Drive, NW
     address:        Washington, DC
     address:        20008
     address:        USA
     e-mail:         noc@intelsat.com
     e-mail:         bgp@Intelsat.com
     admin-c:        AT1875-RIPE
     admin-c:        nd776-RIPE
     tech-c:         nd776-RIPE
     nic-hdl:        IRA4-RIPE
     remarks:
     remarks:        *************************************************************
     remarks:        *                                                           *
     remarks:        *  This is a generic ROLE object for an Intelsat Admin      *
     remarks:        *  Contact person for RIPE matters.  Inquiries about RIPE   *
     remarks:        *  issues should be directed to the TAC or BGP email-boxes, *
     remarks:        *  which will forward them appropriately.  For operational  *
     remarks:        *  issues, send an Email or call the Intelsat NOC at:       *
     remarks:        *                                                           *
     remarks:        *                     noc@intelsat.com                      *
     remarks:        *                     +1 202 944 6792                       *
     remarks:        *                                                           *
     remarks:        *  For BGP related issues, send an email to:                *
     remarks:        *                                                           *
     remarks:        *                     bgp@intelsat.com                      *
     remarks:        *                                                           *
     remarks:        *  For issues of network abuse, including spam, please send *
     remarks:        *  email to Intelsat at:                                    *
     remarks:        *                                                           *
     remarks:        *                    abuse@intelsat.com                     *
     remarks:        *                                                           *
     remarks:        *************************************************************
     remarks:
     source:         RIPE # Filtered
     
     role:           Intelsat RIPE Technical Contact
     address:        Intelsat Global Service Corporation
     address:        3400 International Drive, NW
     address:        Washington, DC
     address:        20008
     address:        USA
     e-mail:         abuse@intelsat.com
     e-mail:         tac@intelsat.com
     e-mail:         bgp@Intelsat.com
     e-mail:         Nene.Diallo@Intelsat.com
     e-mail:         Augustin.Traore@Intelsat.com
     admin-c:        IRA4-RIPE
     tech-c:         nd776-RIPE
     nic-hdl:        IRTC1-RIPE
     remarks:
     remarks:        *************************************************************
     remarks:        *                                                           *
     remarks:        *  This is a generic ROLE object for an Intelsat Technical  *
     remarks:        *  Contact person for RIPE matters.  Inquiries about RIPE   *
     remarks:        *  issues should be directed to the NOC or BGP email-boxes, *
     remarks:        *  which will forward them appropriately.  For operational  *
     remarks:        *  issues, send an Email or call the Intelsat NOC at:       *
     remarks:        *                                                           *
     remarks:        *                     noc@intelsat.com                      *
     remarks:        *                     +1 202 944 6792                       *
     remarks:        *                     tac@intelsat.com                      *
     remarks:        *  For BGP related issues, send an email to:                *
     remarks:        *                                                           *
     remarks:        *                     bgp@intelsat.com                      *
     remarks:        *                                                           *
     remarks:        *  For issues of network abuse, including spam, please send *
     remarks:        *  email to Intelsat at:                                    *
     remarks:        *                                                           *
     remarks:        *                    abuse@intelsat.com                     *
     remarks:        *                                                           *
     remarks:        *************************************************************
     remarks:
     remarks:
     source:         RIPE # Filtered
     
     person:       Augustin Traore
     address:      3400 International Drive NW,
                   Washington DC 20008-3006
     phone:        +703-944-7033
     e-mail:       augustin.traore@intelsat.com
     nic-hdl:      AT1875-RIPE
     mnt-by:       AS22351-MNT
     source:       RIPE # Filtered
     
     person:         nene diallo
     address:        Intelsat
                     3400 International Dr, NW
                     washington, DC 20008
     phone:          +1-202-944-8548
     e-mail:         nene.diallo@intelsat.com
     nic-hdl:        nd776-RIPE
     mnt-by:         AS22351-MNT
     source:         RIPE # Filtered
Here are a few other email addresses used in 419 scams from the same IP address (213.185.125.114). As you can see this address is the source of plenty of Nigerian scams: 
 
 
 
2nd email from the criminal posing as "Norman Maneta": MY DEAR FIRSTNAME LASTNAME, Message headers: 
WHOIS details for sending network (IP 213.181.83.82): inetnum: 213.181.64.0 - 213.181.95.255 org: ORG-BL4-RIPE netname: NG-BROADBANDTECH-20000327 descr: BT Limited descr: PROVIDER Local Registry country: NG admin-c: IO243-RIPE tech-c: IO243-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-routes: BT-LIMITED-MNT mnt-lower: BT-LIMITED-MNT source: RIPE # Filtered organisation: ORG-BL4-RIPE org-name: BT Limited org-type: LIR address: BT Limited address: 8B Ademola Street, address: Off Awolowo Road, address: S. W. Ikoyi, address: Lagos, Nigeria. phone: +234 1 2693192 fax-no: +234 1 2693192 e-mail: bt@micro.com.ng admin-c: IO243-RIPE admin-c: IO243-RIPE mnt-ref: BT-LIMITED-MNT mnt-ref: RIPE-NCC-HM-MNT mnt-by: RIPE-NCC-HM-MNT source: RIPE # Filtered person: Israel Oyeleke address: BT Limited address: 8B Ademola Street address: Ikoyi S.W. address: Lagos, Nigeria phone: +234 1 2673532 fax-no: +234 1 2673203 e-mail: i.oyeleke@moneynett.com nic-hdl: IO243-RIPE source: RIPE # Filtered 
Email history for IP 213.181.83.82: 
 
"caroline dicksn" (carolinedicksn@yahoo.com) 
 From: "caroline dicksn" <carolinedicksn@yahoo.com> 
 
 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||