Forum Übersicht - 2.1. Klassische 419er Mails » Johnson Maxwell

Hallo zusammen

Viel Spass damit....

In Antwort auf:

---

> From: johnson maxwell <johnsonmaxwell@virgilio.it>
> Reply-To: johnson_maxwell2002@yahoo.co.in
> Subject: URGENT RESPONSE NEEDED
> Date: Fri, 27 Jan 2006 01:28:28 +0100 (GMT+01:00)
> MIME-Version: 1.0
> X-Originating-IP: 62.56.148.21
> Received: from vsmtp4.tin.it ([212.216.176.224]) by bay0-mc11-f3.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Thu, 26 Jan 2006 16:29:39 -0800
> Received: from vsmtp2.tin.it (192.168.70.222) by vsmtp4.tin.it (7.2.060.1) id 43D82FD1000F4287; Fri, 27 Jan 2006 01:29:57 +0100
> Received: from vsmtp21.tin.it (192.168.70.96) by vsmtp2.tin.it (7.2.060.1) id 43D82E720000452B; Fri, 27 Jan 2006 01:29:57 +0100
> Received: from pswm15.cp.tin.it (192.168.70.60) by vsmtp21.tin.it (7.2.060.1) id 43D8347A000F4E25; Fri, 27 Jan 2006 01:28:28 +0100
> X-Message-Info: 0Lct38uk7fNEdurLo5dSJ9YtaOscPUXQZC5lz67l4d8=
> Return-Path: johnsonmaxwell@virgilio.it
> X-OriginalArrivalTime: 27 Jan 2006 00:29:40.0086 (UTC) FILETIME=[C2AA5160:01C622D8]
>
> My name is mr Johnson Maxwell,THE EASERN DISTRICT MANAGER OF BARCLAYS
> BANK LONDON. There is a domiciliary account opened in this
> bank in
> September of 1980 in the name of Mr. Juan L. Garcia, an
> expatriate who
> then was the manager of a Petrol-Technical Support
> Services Company.
> Mr. Garcia died in an auto crash in June of 1990.
>
> After going through
> this account, I discovered that the account has
> been dormant since the
> death of Mr. Garcia. The account s next
> of kin is his wife who also
> died in the same auto crash and the
> account has no other beneficiary.
> This has made it impossible for
> anyone to lay claims to the funds in
> the account. The top echelons of
> the bank are also not aware of the
> details of this account because of
> its length of dormancy. The amount
> in the account is 42.5 MILLION BRITISH POUNDS STERLING . I have also
> observed that if nobody come to claim this
> money, it will be forfeited.
>
> I therefore want to transfer this money into a foreign account of an
> individual or corporate body for safekeeping and investments. Since
> the funds belong to a foreigner, it becomes imperative that only a
> foreigner can lay claims to it. This is where your co-operation and
> partnership is needed. And with my position and knowledge of the
> history of the account, the transaction would be a huge success.
>
> I
> propose a meeting between us as soon as you indicate your
> willingness
> to co-operate with me in this transaction and a sharing
> formula of 60%
> for me, 30% for you and 10% to reimburse incidental
> expenses in the
> course of the transaction. The transfer of the money
> to your mandated
> account will take about 72 hours.
>
> I look forward to your response by
> email.
>
> Best regards,
> Johnson Maxwell

---

62.56.148.21 IL ISRAEL - - IP PLANET NETWORKS LTD
Seh ich das richtig <??

Tschau mit Au

Annie

In Antwort auf:

---

62.56.148.21 IL ISRAEL - - IP PLANET NETWORKS LTD
Seh ich das richtig

---

Allerdings kann es in den Datenbanken zu Fehlern kommen.

Eine Mail mit der Absender-IP [81.199.2.67] steckte heute in meinem Honeypot. Es stammt vom selben Provider (IP PLANET NETWORKS LTD) und geht laut Whois: 81.199.2.67 ebenfalls nach Petach-Tikva.

Fragt man bei Ip2Location.com nach dieser IP, bekommt man als Antwort Togo! (Was zu stimmen scheint, da der Absender tatsächlich Togo angab.)

Laut Ip2Location.com gehört deine IP auch zu Israel - woran man zweifeln mag.

---
La prueba del pudín consiste en comer.

Das Traceroute geht ebenfalls nach Israel:

In Antwort auf:

---

Traceroute

Tracing route to 62.56.148.21.rmts.satcom-systems.net [62.56.148.21]...
hop rtt rtt rtt ip address fully qualified domain name
1 0 0 0 216.46.228.229 port-216-3073253-es128.devices.datareturn.com
2 0 0 0 64.29.192.145 port-64-1949841-zzt0prespect.devices.datareturn.com
3 0 0 0 64.29.192.226 daa.g921.ispb.datareturn.com
4 0 0 0 168.215.241.133 hagg-01-ae0-1001.dlfw.twtelecom.net
5 0 0 0 66.192.253.124 core-02-ge-3-1-0-504.dlfw.twtelecom.net
6 34 34 34 66.192.255.19 core-01-so-0-0-0-0.asbn.twtelecom.net
7 34 34 34 66.192.255.229 peer-01-so-0-0-0-0.asbn.twtelecom.net
8 80 34 34 66.192.252.214
9 152 153 152 195.22.218.225 pal5-pal7-racc1.pal.seabone.net
10 180 177 178 195.22.196.194 customer-side-goldenlines-1-il-pal5.seabone.net
11 181 181 182 212.199.28.65 fe-ta-212.199.28.65.012.net.il
12 192 188 187 212.199.28.206 su-ta-212.199.28.206.012.net.il
13 185 187 185 212.199.73.114
14 188 198 189 80.179.100.9 80.179.100.9.satcom-systems.net
15 * 206 * 213.31.188.252
16 * * *
17 * * *
18 * * *
19 * * *

Trace aborted

---

Goofy hat recht. Über Israel (Golden Line) gehen - verdächtig viele - der Mugu IP/Server Verbindungen.
Ist warscheinlich nur eine Sateliten-Station, aber ich kann mir nicht vorstellen,
dass die Isrelis nicht mitbekommen, was da los ist!
------------------
MfG - Scambaiter
"Horas non numero nisi serenas"


Homepage: http://www.freewebs.com/scambaiters
*******************************************