|
419 Scam Example: "CAPITAL AND RESOURCE MANAGEMENT LTD. / RAYMOND BROOKS"
"CAPITAL AND RESOURCE MANAGEMENT LTD. / RAYMOND BROOKS" are labels used by a gang in Nigeria for a fake lottery fraud (advance fee fraud, "419"). Victims are requested to send £4,170.00 to the criminals. Emails that give fake London postal addresses are actually sent from Nigeria.
The scammers have registered the following domains:
Email addresses:
Example of "CAPITAL AND RESOURCE MANAGEMENT LTD" scam email:
Another spam example:
ATTN: THIRD CATEGORY WINNER__Firstname Lastname REF:/GOF3-3/CRM-05/04/27/2005/ emailaddress Dear Prize Winner, This is to confirm that we have extensively verified your claims file on ref GOF3-3 and batch CMR-05 with the Lottery Firm (Games of Fortune UK) and found your winning details to be in order. As a result, payment of £1,800,000.00 being prize money from GAMES OF FORTUNE UK Third Category draws has been cleared by all authorities involved. Be informed that instruments of payment for the sum of £1,800,000.00 to you, is already in our possession and shall be processed upon meeting the requirements stated below. You are required to fill a "Claims Settlement Form" with all necessary details. Follow the link below to download the form http://www.crmltdonline.com/Lottery.htm After download, kindly print, fill, and send to us either by fax or as an email attachment. You will also be required to pay a fee of £4,170.00 (Four thousand one hundred and Seventy Great Britain Pounds), or its equivalent in your local currency. This payment is to cover transfer charges, Insurance of vital documents like prize claim certificate and other transfer documents, handling and opening of account charges. Note that your total prize claim of £1,800,000.00 has been insured to the real value and as such cannot be deducted from. This is in compliance with section 13(1)(n) of the national lottery act of the British Lottery Affairs Commission as adopted in 1993 and amended in 1998. This is to protect winners and to avoid misappropriation of funds. A certificate of prize claim along side other vital documents will be sent to you via Courier service immediately transfer of your winnings is effected. Note that your winnings will be transferred within 24hrs after the receipt of both requirements stated above. Congratulations once more, I shall be awaiting your filled Claims Settlement Form. sincerely, MR. RAYMOND BROOKS FOREIGN DEPARTMENT MANAGER, CAPITAL AND RESOURCE MANAGEMENT LTD. PHONE: +44-207-0601690 FAX: +44-207-0600503 EMAIL: claimssettlement@crm-ltd.net PRIMARY EMAIL:raymondbrooks3@financesource.com WEBSITE:http:www.crmltdonline.com Kindly be aware that the change in email address is to ensure that your details are secure. This email address is from a more secure server. NB: For further information about GAMES OF FORTUNE UK, feel free to contact them directly; WAYNE FOSTER LOTTERY COORDINATOR GAMES OF FORTUNE, 90 GAMES ACRE LONDON, ENGLAND WC2E 9RA Phone: +44-7040118053 Website:http://www.gofonline.com Message headers: Received: from 81.199.83.172 by by15fd.bay15.hotmail.msn.com with HTTP; Wed, 27 Apr 2005 10:35:34 GMT X-Originating-IP: [81.199.83.172] X-Originating-Email: [claimssettlement@crm-ltd.net] X-Sender: claimssettlement@crm-ltd.net From: "Raymond Brooks"
WHOIS details for sending network (IP 81.199.83.172):
netname: CIDR-COMMUNICATION-01
inetnum: 81.199.82.0 - 81.199.83.255
netname: CIDR-COMMUNICATION-01
descr: Internet service provider
country: NG
admin-c: TECH7-RIPE
tech-c: TECH7-RIPE
status: ASSIGNED PA
mnt-by: AS12491-MNT
source: RIPE
person: Tech Supernet300
address: 21 Mobolaji Bank
address: Anthony Way Ikeja
address: Lagos
address: Nigeria
phone: + 234 1 4976493
e-mail: admin@supernet300.com
nic-hdl: TECH7-RIPE
source: RIPE
WHOIS details for domain "crm-ltd.net": Request: crm-ltd.net connected to whois.crsnic.net [198.41.3.54:43] ... connected to whois.enom.com [66.151.151.170:43] ... Registration Service Provided By: Microsoft Contact: personal_address@css.one.microsoft.com Visit: http://support.msn.com/contactus.aspx?pk=PersonalAddress Domain name: crm-ltd.net Registrant Contact: richard parson richard parson (manager@crm-ltd.net) +1.9733735336 Fax: none 56 elmwood avenue irvington, NJ 07111 US Administrative Contact: richard parson richard parson (manager@crm-ltd.net) +1.9733735336 Fax: none 56 elmwood avenue irvington, NJ 07111 US Technical Contact: NOC MSN NOC MSN (MSN-PA-TECH@msn.com) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Billing Contact: NOC MSN NOC MSN (MSN-PA-BILL@MSN.COM) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Status: Locked Name Servers: pdomns1.msn.com pdomns2.msn.com Creation date: 28 Mar 2005 01:14:48 Expiration date: 28 Mar 2006 01:14:48
WHOIS details for domain "crmltdonline.com": Request: crmltdonline.com connected to whois.crsnic.net [198.41.3.54:43] ... connected to whois.schlund.info [195.20.224.146:43] ... % The data in the WHOIS database of Schlund+Partner AG is provided by % Schlund+Partner for information purposes, and to assist persons in % obtaining information about or related to a domain name registration % record. Schlund+Partner does not guarantee its accuracy. By submitting % a WHOIS query, you agree that you will use this data only for lawful % purposes and that, under no circumstances, you will use this data to % (1) allow, enable, or otherwise support the transmission of mass % unsolicited, commercial advertising or solicitations via E-mail % (spam); or % (2) enable high volume, automated, electronic processes that apply to % Schlund+Partner or its systems. % Schlund+Partner reserves the right to modify these terms at any time. % By submitting this query, you agree to abide by this policy. domain: crmltdonline.com created: 22-Jan-2005 last-changed: 22-Jan-2005 registration-expiration: 22-Jan-2006 nserver: ns29.1and1.com 217.160.224.2 nserver: ns30.1and1.com 217.160.228.2 status: CLIENT-TRANSFER-PROHIBITED registrant-firstname: Andrew registrant-lastname: Owen registrant-street1: 1001 West 36th St registrant-pcode: 10018 registrant-state: NY registrant-city: New York registrant-ccode: US registrant-phone: +1.2126065115 registrant-email: sholaprofit@yahoo.com admin-c-firstname: Andrew admin-c-lastname: Owen admin-c-street1: 1001 West 36th St admin-c-pcode: 10018 admin-c-state: NY admin-c-city: New York admin-c-ccode: US admin-c-phone: +1.2126065115 admin-c-email: sholaprofit@yahoo.com tech-c-firstname: Hostmaster tech-c-lastname: ONEANDONE tech-c-organization: 1&1 Internet Inc. tech-c-street1: 701 Lee Rd. tech-c-street2: Suite 300 tech-c-pcode: 19087 tech-c-state: PA tech-c-city: Chesterbrook tech-c-ccode: US tech-c-phone: +1.8774612631 tech-c-fax: +1.6105601501 tech-c-email: hostmaster@1and1.com bill-c-firstname: Hostmaster bill-c-lastname: ONEANDONE bill-c-organization: 1&1 Internet Inc. bill-c-street1: 701 Lee Rd. bill-c-street2: Suite 300 bill-c-pcode: 19087 bill-c-state: PA bill-c-city: Chesterbrook bill-c-ccode: US bill-c-phone: +1.8774612631 bill-c-fax: +1.6105601501 bill-c-email: hostmaster@1and1.com % See http://registrar.schlund.info for information about Schlund+Partner AG
WHOIS details for domain "gofonline.com":
WHOIS details for "crmltd-uk.com": Domain name: crmltd-uk.com Registrant Contact: richard antrobus richard antrobus (raymondbrooks@crmltd-uk.com) +1.917327391737 Fax: none 414b effey street santa cruz, CA 95062 US Administrative Contact: richard antrobus richard antrobus (raymondbrooks@crmltd-uk.com) +1.917327391737 Fax: none 414b effey street santa cruz, CA 95062 US Technical Contact: NOC MSN NOC MSN (MSN-PA-TECH@msn.com) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Billing Contact: NOC MSN NOC MSN (MSN-PA-BILL@MSN.COM) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Status: Locked Name Servers: pdomns1.msn.com pdomns2.msn.com Creation date: 19 Jan 2005 08:30:44 Expiration date: 19 Jan 2006 08:30:44 WHOIS details for "crmltd.org": Domain ID:D105599593-LROR Domain Name:CRMLTD.ORG Created On:19-Jan-2005 13:24:08 UTC Expiration Date:19-Jan-2006 13:24:08 UTC Sponsoring Registrar:Melbourne IT, Ltd. dba Internet Names Worldwide (R52-LROR) Status:TRANSFER PROHIBITED Registrant ID:C110613614006527 Registrant Name:richard antrobus Registrant Organization: Registrant Street1:414b effey street Registrant Street2: Registrant Street3: Registrant City:santa cruz Registrant State/Province:CA Registrant Postal Code:95062 Registrant Country:US Registrant Phone:+1.917327391737 Registrant Phone Ext.: Registrant FAX: Registrant FAX Ext.: Registrant Email:raymondbrooks@crmltd.org Admin ID:C110613614006524 Admin Name:richard antrobus Admin Organization: Admin Street1:414b effey street Admin Street2: Admin Street3: Admin City:santa cruz Admin State/Province:CA Admin Postal Code:95062 Admin Country:US Admin Phone:+1.917327391737 Admin Phone Ext.: Admin FAX: Admin FAX Ext.: Admin Email:raymondbrooks@crmltd.org Tech ID:C110613614006526 Tech Name:MSN NOC Tech Organization:Microsoft Tech Street1:One Microsoft Way Tech Street2: Tech Street3: Tech City:Redmond Tech State/Province:WA Tech Postal Code:98052 Tech Country:US Tech Phone:+1.4258828080 Tech Phone Ext.: Tech FAX: Tech FAX Ext.: Tech Email:MSN-PA-TECH@msn.com Name Server:PDOMNS1.MSN.COM Name Server:PDOMNS2.MSN.COM Here is another version of the scam:
WHOIS details for domain "capitalandresourcemgt.com": Request: capitalandresourcemgt.com connected to whois.melbourneit.com [203.27.227.114:43] ... Domain Name.......... capitalandresourcemgt.com Creation Date........ 2005-03-31 Registration Date.... 2005-03-31 Expiry Date.......... 2006-03-31 Organisation Name.... Kevin Stewart Organisation Address. 26 glenlee gaedens Organisation Address. Organisation Address. edinburgh Organisation Address. eh87hg Organisation Address. edinburgh Organisation Address. UNITED KINGDOM Admin Name........... Kevin Stewart Admin Address........ 26 glenlee gaedens Admin Address........ Admin Address........ edinburgh Admin Address........ eh87hg Admin Address........ edinburgh Admin Address........ UNITED KINGDOM Admin Email.......... raymond_brooks5@yahoo.co.uk Admin Phone.......... +1.01414231152 Admin Fax............ Tech Name............ YahooDomains TechContact Tech Address......... 701 First Ave. Tech Address......... Tech Address......... Sunnyvale Tech Address......... 94089 Tech Address......... CA Tech Address......... UNITED STATES Tech Email........... domain.tech@YAHOO-INC.COM Tech Phone........... +1.6198813096 Tech Fax............. +1.6198813010 Name Server.......... yns1.yahoo.com Name Server.......... yns2.yahoo.com
|