The Nigerian president wants to give me money!

[AVGWarhawk]

Originally Posted by Brag

I am more modest. I offer you to triple your money in one week. Send me $300 and receive back $1,000 on a Friday that is followed by a Thursday.

If you give me a hamburger today I will pay you next Tuesday.

[Brag]

Boombah, boombah. Me for da:

THE PRESIDENCY

[StdDev]

Originally Posted by Blacklight

And Nigeria doesn't really have any laws against it. It exists in a "grey area" that skirts around enforcable law there... and the law is usually paid off by a good chunk of change from the spammer's profits. That's one of the reason these guys mostly work out of Nigeria.

There are laws against this.. Section 419 of the Nigerian penal code addresses "Advance Fee Fraud". But.. as you say.. the law is difficult to enforce.
For some amusing reading go to http://www.419eater.com/ and check out some of the Letter Archives... funny funny stuff there!

[StarFox]

I just won the Micorsoft email lottery.....yay!!! $1,000,000!!!

Wonder how hard it would be to scam a scammer, make them pay you some fake fine via western Union or something for scamming. May have to look into that some time lol

[Kapitan_Phillips]

Originally Posted by StarFox

I just won the Micorsoft email lottery.....yay!!! $1,000,000!!!

Wonder how hard it would be to scam a scammer, make them pay you some fake fine via western Union or something for scamming. May have to look into that some time lol

I got one to book a 5 star room for two weeks in Nigeria

The 'booking confirmation' was most likely fake, however.

[Tango589]

Hey Zayphod, I found out the following header information for you from AOL, hope its useful...

Return-Path: <fmf@oued.org>
Received: from rly-me08.mx.aol.com (rly-me08.mail.aol.com [172.20.83.42]) by air-me07.mail.aol.com (v121.4) with ESMTP id MAILINME073-9d347bb1e40390; Tue, 19 Feb 2008 13:22:12 -0500
Received: from main.brightideasproductions.com (main.brightideasproductions.com [72.51.34.31]) by rly-me08.mx.aol.com (v121.4) with ESMTP id MAILRELAYINME087-9d347bb1e40390; Tue, 19 Feb 2008 13:21:52 -0500
Received: from [81.91.227.14] (helo=User)
by main.brightideasproductions.com with esmtpa (Exim 4.68)
(envelope-from <fmf@oued.org>)
id 1JQwsE-0007MA-Ag; Sun, 17 Feb 2008 19:40:58 -0800
Reply-To: <fmfgov.ng@gmail.com>
From: "INTERNATIONAL CREDIT SETTLEMENT"<fmf@oued.org>
Subject: ATTENTION BENEFICIARY..
Date: Mon, 18 Feb 2008 04:40:50 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - main.brightideasproductions.com
X-AntiAbuse: Original Domain - aol.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - oued.org
X-Source:
X-Source-Args:
X-Source-Dir:
X-AOL-IP: 72.51.34.31
X-AOL-SCOLL-SCORE:0:2:214792464:9395240
X-AOL-SCOLL-URL_COUNT:
X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_helo : n
X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_822_from : n
Message-ID: <200802191321.9d347bb1e40390@rly-me08.mx.aol.com


Good luck with this!

Originally Posted by Tango589

Hey Zayphod, I found out the following header information for you from AOL, hope its useful...

Return-Path: <fmf@oued.org>
Received: from rly-me08.mx.aol.com (rly-me08.mail.aol.com [172.20.83.42]) by air-me07.mail.aol.com (v121.4) with ESMTP id MAILINME073-9d347bb1e40390; Tue, 19 Feb 2008 13:22:12 -0500
Received: from main.brightideasproductions.com (main.brightideasproductions.com [72.51.34.31]) by rly-me08.mx.aol.com (v121.4) with ESMTP id MAILRELAYINME087-9d347bb1e40390; Tue, 19 Feb 2008 13:21:52 -0500
Received: from [81.91.227.14] (helo=User)
--SNIP--
Good luck with this!

http://network-tools.com/default.asp?prog=trace&host=81.91.227.14


81.91.227.14 is from Benin(BJ) in region Africa
TraceRoute to 81.91.227.14 [unitec14.intnet.bj]


Benin is just two countries east of Nigeria. At work, we have just about all of Benin blocked off at the router level because of the huge amounts of credit card fraud coming from there. Lots of Nigerians work out of there because so much of Nigeria's IP space is being blocked by ISP admins tired of the fact that nothing legitimate comes out of that country. Benin is definately where this originated from.


BTW oued.org in the return path looks pretty bogus as well.

http://network-tools.com/default.asp?prog=express&host=oued.org

Hosted in the USA but not much to it, just a log-in page. Created back on Oct 2005, registered to someone in what looks like Egypt.


(main.brightideasproductions.com [72.51.34.31]) was used as a relay, just in case AOL had decided to block the 81.91.*.* group of IP's. Send the e-mail with headers to abuse@serverbeach.com so they can get that mail server locked down. BTW, brightideasproductions.com is what added those "abuse info" lines to the headers.

[Pisces]

3 of those 'relatives' you won't be hearing of for a while:

http://www.ultrascan.nl/html/419_justice_in_court.html

[Blacklight]

Hmmmm... Almost all the spam I'm getting is coming from Columbia, Spain, Argentina, or Thailand. :hmm:

The Nigerians must not be interested in me anymore. I havn't gotten a good "Nigerian Letter" in a long time.

Originally Posted by Blacklight

Hmmmm... Almost all the spam I'm getting is coming from Columbia, Spain, Argentina, or Thailand. :hmm:

The Nigerians must not be interested in me anymore. I havn't gotten a good "Nigerian Letter" in a long time.

Probably for Viagra, right? There's a bot-net spamvertising like crazy for it right now, mostly for domain names created with stolen credit cards with questionable "whois" info. DNS servers seem to be hosted in China, of all places. Bot-nets doing this, especially concerning Storm (which created most of this bot-net in the first place) is most likely associated with the Russian Mafia.

[Tango589]

I dont know if it's because I keep my details fairly private or because I am using AOL or Mcafee security centre, but I don't seem to get any of these spam emails apart from the one I showcased at the start of this thread. Anyone know what I am doing right?

[Jimbuna]

Originally Posted by Tango589

I dont know if it's because I keep my details fairly private or because I am using AOL or Mcafee security centre, but I don't seem to get any of these spam emails apart from the one I showcased at the start of this thread. Anyone know what I am doing right?

I'm not sure....but when you find out, let me know

[Tango589]

Don't hold your breath for a technical answer Jimbuna, I can barely work this bloody machine...epecially after a few pints inside me!!

[Jimbuna]

Originally Posted by Tango589

Don't hold your breath for a technical answer Jimbuna, I can barely work this bloody machine...epecially after a few pints inside me!!

No prob mate.....it's just that I'm sick of sending money over to Nigeria and hearing nothing more

[nikimcbee]

Originally Posted by Tango589

Don't hold your breath for a technical answer Jimbuna, I can barely work this bloody machine...epecially after a few pints inside me!!

I could answer, but it would be an algebraic equation