Rediff.com (rediffmail.com, etc) - lie about their spammers' terminations, harbor spammers! rediff.com, rediffmail.com, rediff.co.in, rediffmailpro.com, [202.54.124.0 - 202.54.124.255], [203.199.83.0 - 203.199.83.255]: Access denied! === The evidence of the Rediff's lying === Path: uni-berlin.de!fu-berlin.de!skynet.be!skynet.be!kibo.news.demon.net!demon!btnet-peer0!btnet-feed5!btnet!news.btopenworld.com!not-for-mail From: Gareth Robert Halfacree Newsgroups: news.admin.net-abuse.email Subject: [BLOCK] rediffmail.com = Blackhat Date: Mon, 21 Jul 2003 18:07:59 +0000 (UTC) Organization: BT Openworld Lines: 85 Message-ID: NNTP-Posting-Host: host213-122-178-21.in-addr.btopenworld.com Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Trace: hercules.btinternet.com 1058810879 27288 213.122.178.21 (21 Jul 2003 18:07:59 GMT) X-Complaints-To: news-complaints@lists.btinternet.com NNTP-Posting-Date: Mon, 21 Jul 2003 18:07:59 +0000 (UTC) X-Accept-Language: en User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4b) Gecko/20030507 Xref: uni-berlin.de news.admin.net-abuse.email:2030912 Got a 419 spam a day or so ago (I forget exactly when - it's in NANAS, subject "[email] URGENT PARTNERSHIP BUSINESS PROPOSAL") with a rediffmail.com dropbox. ajala8000@rediffmail.com, to be exact. So, SOP, LART abuse@rediffmail.com and postmaster@rediffmail.com. A while later, I get a response back saying they've terminated the user's account. Great, score one for the good guys. But, suspicious beggar[1] that I am, I decided to check. Using SamSpade's SMTP Verify feature, it showed ajala8000@rediffmail.com to be an active mailbox. Hey, perhaps they've just changed the password or something. Better yet, perhaps they're monitoring it and sending messages to people who reply saying "You were about to be conned". Sadly, not so. As a final check, I had my old friend Jim Taggart send a Hotmail message to ajala8000@rediffmail.com. Didn't bounce and didn't get any reply either. Until now. > Dear Friend, > > As regards your swift response i decided to give you additional information,I wish to explain that this transaction is 100% legal and genuine and the funds in question emanated from an over invoiced Contract that my Committee awarded to a Multinational Company.The contract was for the Contruction, Installation and Laying of Pipe in Port-Harcourt and Warri Refineries. Yup. That's right. He's replied. Which means that 'rediffmail.com' *lied* to me when they said they had terminated the account. Feel free to drop them at the routers, chaps. I know I will. Oh, and I'm still debating whether to LART the new address (wilson5000@mail2Nigeria.com) or to string him along for a bit - pretend to be the heir to the throne, or Santa Claus, or something. -Gareth "Would *I* lie to him?" Halfacree [1] - You can swap this for 'Brit' if you like. It still stands. Information for archival purposes: 07/21/03 19:05:57 whois rediffmail.com Registrant: Rediff.com India Ltd. (REDIFFMAIL-DOM) 1st fl, Mahalaxmi Engg Estate, Mahim Mumbai, Maharashtra 400016 IN Domain Name: REDIFFMAIL.COM Administrative Contact: Nishtala, Venki (VNY29) venki@REDIFF.CO.IN rediff.com India Limited 1st Floor Mahalaxmi Engg Estate L.J.Road, Mahim(w) Mumbai MH 4000016 IN +91-22-4449144 fax: +91-22-4455346 Technical Contact: Gothoskar, Bhushan (BGF146) bhushang@REDIFF.CO.IN rediff.com India Limited 1st Floor Mahalaxmi Engg Estate L.J.Road, Mahim(w) Mumbai MH 4000016 IN +91-22-4449144 fax: +91-22-4455346 Record expires on 14-Aug-2006. Record created on 18-Sep-2002. Database last updated on 21-Jul-2003 14:05:21 EDT. Domain servers in listed order: SERVER-15.DC.ABOVN.SPEEDERA.NET 208.185.54.23 SERVER-0.SJOSE.UUNET.SPEEDERA.NET 204.176.88.1 SERVER-99.NEWYORK.EXODUS.SPEEDERA.NET 64.15.251.221 07/21/03 19:05:57 dns rediffmail.com Mail for rediffmail.com is handled by mail1.rediffmail.com mail3.rediffmail.com mail2.rediffmail.com Canonical name: rediffmail.com Addresses: 202.54.124.154 203.199.83.5 203.199.83.131 === Replies - 1 === Path: uni-berlin.de!fu-berlin.de!gail.ripco.com!wasp.rahul.net!blue.rahul.net !not-for-mail From: axlq@spamcop.net (axlq) Newsgroups: news.admin.net-abuse.email Subject: Re: [BLOCK] rediffmail.com = Blackhat Date: Mon, 21 Jul 2003 18:54:43 +0000 (UTC) Organization: a2i network Lines: 13 Message-ID: References: NNTP-Posting-Host: violet.rahul.net X-Trace: blue.rahul.net 1058813683 7426 66.237.72.28 (21 Jul 2003 18:54:43 GMT) X-Complaints-To: support@rahul.net NNTP-Posting-Date: Mon, 21 Jul 2003 18:54:43 +0000 (UTC) X-Newsreader: trn 4.0-test76 (Apr 2, 2001) Xref: uni-berlin.de news.admin.net-abuse.email:2030955 In article , Gareth Robert Halfacree wrote: >Got a 419 spam a day or so ago (I forget exactly when - it's in NANAS, rediffmail.com is a large source of Nigerian 419 scam spams. They keep coming despite my complaints. I suspect they're in on the scam, since they do nothing about them. Oddly, I have actually gotten one legitimate mail from that domain; I had to whitelist his address so he could talk to me. -A === Replies - 2 === Path: uni-berlin.de!fu-berlin.de!peer01.cox.net!peer02.cox.net!cox.net !newsfeed2.easynews.com!newsfeed1.easynews.com!easynews.com!easynews !elnk-pas-nf1!newsfeed.earthlink.net!sn-xit-02!sn-xit-04!sn-xit-06!sn-post-01 !supernews.com!news.supernews.com!linford From: Steve Linford Newsgroups: news.admin.net-abuse.email Subject: Re: [BLOCK] rediffmail.com = Blackhat Date: Mon, 21 Jul 2003 20:35:59 +0100 Organization: The Spamhaus Project Message-ID: References: User-Agent: MT-NewsWatcher/3.3b1 (PPC Mac OS X) X-Complaints-To: abuse@supernews.com Lines: 21 Xref: uni-berlin.de news.admin.net-abuse.email:2030984 In article , axlq@spamcop.net (axlq) wrote: > In article , > Gareth Robert Halfacree wrote: > >Got a 419 spam a day or so ago (I forget exactly when - it's in NANAS, > > rediffmail.com is a large source of Nigerian 419 scam spams. They keep > coming despite my complaints. I suspect they're in on the scam, since > they do nothing about them. Rediffmail are India's largest email provider with 19 million users, they wouldn't be 'in' on any scams. They also use the SBL which may indicate they're not blackhats (not totally anyway, as we won't grant SBL zone transfer feeds to blackhats). I suspect the spammer may have got his account reinstated after promising to not spam anymore. -- Steve Linford The Spamhaus Project http://www.spamhaus.org === Follow up === Path: uni-berlin.de!fu-berlin.de!newsfeed.stueberl.de !newsr1.ipcore.viaginterkom.de!btnet-peer1!btnet-peer0!btnet-feed5!btnet !news.btopenworld.com!not-for-mail From: Gareth Robert Halfacree Newsgroups: news.admin.net-abuse.email Subject: Re: [BLOCK] rediffmail.com = Blackhat Date: Mon, 21 Jul 2003 20:07:52 +0000 (UTC) Organization: BT Openworld Lines: 12 Message-ID: References: NNTP-Posting-Host: dial81-135-65-9.in-addr.btopenworld.com Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Trace: sparta.btinternet.com 1058818072 18933 81.135.65.9 (21 Jul 2003 20:07:52 GMT) X-Complaints-To: news-complaints@lists.btinternet.com NNTP-Posting-Date: Mon, 21 Jul 2003 20:07:52 +0000 (UTC) In-Reply-To: X-Accept-Language: en User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4b) Gecko/20030507 Xref: uni-berlin.de news.admin.net-abuse.email:2031013 On 21/07/2003 20:35, Steve Linford wrote: > Rediffmail are India's largest email provider with 19 million users, > they wouldn't be 'in' on any scams. They also use the SBL which may > indicate they're not blackhats (not totally anyway, as we won't grant > SBL zone transfer feeds to blackhats). I suspect the spammer may have > got his account reinstated after promising to not spam anymore. He'd have to have been flamin' quick, then. I checked literally seconds after receiving the "We have terminated this customer's account" e-mail. -Gareth === And the flood of my own spam. My 1st complaint === From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Persistent illegal 419-Nigerian spammer (IL: NO LOSS)! [Fwd: URGENT & CONFIDENTIAL BUSINESS PROPOSAL] Date: Mon, 21 Jul 2003 08:00:35 +0300 User-Agent: KMail/1.5 X-KMail-Link-Message: 1707441 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas-sub@cybernothing.org, "Nigerian scam reports - USA" <419.fcd@usss.treas.gov>, abuse@icgcomm.com, postmaster@ameralinx.com, admin@ameralinx.net, abuse@rediffmail.com, postmaster@rediffmail.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200307210800.35340@2003.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: Persistent illegal 419-Nigerian spammer/scammer! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Spammer: dsc04-mik-mn-4-206.rasserver.net [204.31.61.206] Abused mailserver: mail.ameralinx.com [216.126.227.76] Mail from: ajala8000@rediffmail.com Collects replies to: Ajala8000@rediffmail.com ---------- Forwarded Message ---------- Received: from mail.ameralinx.net (mail.ameralinx.com [216.126.227.76]) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id h6L2VK4f021728 for ; Mon, 21 Jul 2003 05:31:41 +0300 Received: from Apple [204.31.61.206] by mail.ameralinx.net with ESMTP (SMTPD32-7.15) id AE5B646B0154; Sun, 20 Jul 2003 20:22:19 -0600 To: From: Subject: URGENT & CONFIDENTIAL BUSINESS PROPOSAL Date: Mon, 21 Jul 2003 03:20:43 -0500 Message-Id: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-AntiVirus: checked by AntiVir Milter 1.0.4; AVE 6.20.0.1; VDF 6.20.0.43 Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: From:Mr.Wilson Ajala Lagos-Nigeria. Attn:President/Ceo. STRICTLY CONFIDENTIAL BUSINESS PROPOSALRE: TRANSFER OF US$21.5 MILLION (TWENTY ONE MILLION,FIVE HUNDRED THOUSAND US DOLLARS ONLY). This letter is not intended to to cause any embarrassment but just to contact your esteem self-following the knowledge of your high repute and trustworthiness.By virtue of the nature of this transaction, I solicit for your confidentiality and secrecy.I know that the transaction of this magnitude will make one apprehensive and worried but I assure you that all will be well by the end of this transaction. I am a member of the Federal Government of Nigeria Contract Award and Monitoring Committee in the Nigeria National Petroleum Corporation (NNPC) Sometime ago, a contract was awarded to a foreign firm in NNPC by my Committee. This contract was over invoiced to the tune of US$21.5M.U.S.Dollars.This was done deliberately.The over-invoicing was a deal by my committee to benefit from the project.We now want to transfer this money which is in a suspense Account with NNPC into any Overseas Account which we expect you to provide for us. SHARE: - For providing the account where we shall remit the money into, you will be entitled to 20% of the money,75% will be for me and my partners while 5% has been mapped out from the total sum to cover any expenses that may be incurred by us during the course of this transfer, both locally and international expenses. It does not matter whether or not your company does contract projects of this nature described here.The assumption is that your company won the major contract and subcontracted it out to other companies. More often than not,big trading companies or firms of unrelated fields win major contracts and subcontracts to more specialized firms for execution of such contracts. We have strong reliable connections and contacts at the Central Bank of Nigeria, as well as the Federal Ministry of Finance and we have no doubt that all the money will be released and transferred if we get the necessary foreign partner to assist us in this deal. Therefore,when the business is successfully concluded we shall through our same connections withdraw all documents used from all the concerned Government Ministries for 100% security. We are ordinary civil servants and we will not want to miss this once in alifetime opportunity to get rich.We want this money to be transferred to the overseas Accounts for us, before the present Democratic Government starts Auditing all Federal Government ownedParastatals. Please contact me immediately through my email address whether or not you are interested in this deal.If you are not, it will enable me scout for another foreign partner to carry out this deal.But where you are interested,please contact me you as soon as possible in order for us to commence communication immediately as time is of the essence in this business. I wait in anticipation of your fullest co-operation. Yours Faithfully, Wilson Ajala. Email: Ajala8000@rediffmail.com ------------------------------------------------------- === My 2nd complaint === From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Persistent illegal 419-Nigerian spammer (IL: NO LOSS)! [Fwd: KINDLY ASSIST] Date: Tue, 22 Jul 2003 02:57:10 +0300 User-Agent: KMail/1.5 X-KMail-Link-Message: 1707494 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas-sub@cybernothing.org, "Nigerian scam reports - USA" <419.fcd@usss.treas.gov>, abuse@icgcomm.com, postmaster@ameralinx.com, admin@ameralinx.net, abuse@rediffmail.com, postmaster@rediffmail.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1252" Content-Transfer-Encoding: 8bit Content-Disposition: inline Message-Id: <200307220257.10860@2003.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: Yet another, the same spam from these persistent illegal 419-Nigerian spammers/scammers! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Spammer: dsc04-mik-mn-4-114.rasserver.net [204.31.61.114] Abused mailserver: mail.ameralinx.com [216.126.227.76] Mail from: abaha5000@rediffmail.com Collects replies to: ABACHA5000@REDIFFMAIL.COM ---------- Forwarded Message ---------- Received: from mail.ameralinx.net (mail.ameralinx.com [216.126.227.76]) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id h6LNlduL024001 for ; Tue, 22 Jul 2003 02:47:49 +0300 Received: from Apple [204.31.61.114] by mail.ameralinx.net with ESMTP (SMTPD32-7.15) id A9A084E70098; Mon, 21 Jul 2003 17:39:12 -0600 To: From: Subject: KINDLY ASSIST Date: Tue, 22 Jul 2003 00:37:46 -0500 Message-Id: MIME-Version: 1.0 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit X-AntiVirus: checked by AntiVir Milter 1.0.4; AVE 6.20.0.1; VDF 6.20.0.44 Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: URGENT BUSINESS RELATIONSHIP _______________________________________ This letter is not intended to to cause any embarrassment but just to contact your esteem self-following the knowledge of your high repute and trustworthiness I am Alhaji Mohammed Abacha, the son of the late Nigerian Head of State who died on the 8th of June 1998.If you are conversant with world news, you would understand better, while I got your contacts through my personal research .Please,I need your assistance to make this happen and please; do not undermine it because it will also be a source of upliftment to you also.You have absolutely nothing to loose in assisting us instead, you have so much to gain. The then head of state General Sani Abacha,transferred the money through a Lebanese businessman,Chagoury and a Jewish businessman,Mark Rissar to bank accounts overseas,Instead,he used PERSONAL IDENTIFICATION NUMBERS (PIN) and declared the contents as Bearer Bonds and Treasury Bills. Also the firm issued him with a certificate of deposit of the consignments notes, which I have these information in my custody now. You must have heard over the media reports and the Internet on the recovery of various huge sums of money deposited by my late father in different Banks and security firms abroad. Some of these banks and security firms willingly gave-/divulge their banking secrets and disclosed to the present civilian administration of Chief Olusegun Obasanjo,about my family's cash lodgement and monetary transactions with them. Please my dear,I repose great confidence in you and I hope you will not betray my confidence in you.I have secretly deposited the sum of $30,000,000.00 with a security firm abroad whose name is withheld for now until we open communications.The money is contained in a metal box consignment with Security Deposit Number 009GM. I shall be grateful if you could receive this fund into your Bank account for safekeeping. This arrangement is known to you and my junior brother (Abbas) only. So I will deal directly with you.I am proposing a 25% share of the fund to you for your kind assistance. I shall provide for you all the documents of the fund deposit with the security firm, and raise a power of attorney to enable you claim and receive this fund into your bank account.I have done a thorough homework and fine-tuned the best way to create you as the beneficiary to the funds and effect the transfer accordingly.Is rest assured that the modalities I have resolved to finalize the entire project guarantees our safety and the successful transfer of the funds.So, you will be absolutely right when you say that this project is risk free and viable.If you are capable and willing to assist, contact me at once via email: ABACHA5000@REDIFFMAIL.COM for more details. Also this transaction demands absolute confidentiality. On no condition must you disclose it to anybody irrespective of your relation with the person. Remember, Loose lips sinks ship. I am looking forward to your urgent and positive response via my email above. Best Regards, Alhaji Mohammed Abacha. View this website for more info: http://news.bbc.co.uk/hi/english/world/africa/newsid_909000/909972.stm http://news.bbc.co.uk/hi/english/world/africa/newsid_877000/877113.stm ------------------------------------------------------- === My 3rd complaint === From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Persistent illegal 419-Nigerian spammer (IL: NO LOSS)! [Fwd: KINDLY ASSIST] Date: Tue, 22 Jul 2003 03:00:20 +0300 User-Agent: KMail/1.5 X-KMail-Link-Message: 1707496 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas-sub@cybernothing.org, "Nigerian scam reports - USA" <419.fcd@usss.treas.gov>, abuse@icgcomm.com, postmaster@ameralinx.com, admin@ameralinx.net, abuse@rediffmail.com, postmaster@rediffmail.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1252" Content-Transfer-Encoding: 8bit Content-Disposition: inline Message-Id: <200307220300.20716@2003.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: And here is the THIRD, the same one just for today! ---------- Forwarded Message ---------- Received: from mail.ameralinx.net (mail.ameralinx.com [216.126.227.76]) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id h6LNuXuL024099 for ; Tue, 22 Jul 2003 02:56:36 +0300 Received: from Apple [204.31.61.114] by mail.ameralinx.net with ESMTP (SMTPD32-7.15) id ABE162DD0078; Mon, 21 Jul 2003 17:48:49 -0600 To: From: Subject: KINDLY ASSIST Date: Tue, 22 Jul 2003 00:47:13 -0500 Message-Id: MIME-Version: 1.0 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit X-AntiVirus: checked by AntiVir Milter 1.0.4; AVE 6.20.0.1; VDF 6.20.0.44 Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: URGENT BUSINESS RELATIONSHIP _______________________________________ This letter is not intended to to cause any embarrassment but just to contact your esteem self-following the knowledge of your high repute and trustworthiness I am Alhaji Mohammed Abacha, the son of the late Nigerian Head of State who died on the 8th of June 1998.If you are conversant with world news, you would understand better, while I got your contacts through my personal research .Please,I need your assistance to make this happen and please; do not undermine it because it will also be a source of upliftment to you also.You have absolutely nothing to loose in assisting us instead, you have so much to gain. The then head of state General Sani Abacha,transferred the money through a Lebanese businessman,Chagoury and a Jewish businessman,Mark Rissar to bank accounts overseas,Instead,he used PERSONAL IDENTIFICATION NUMBERS (PIN) and declared the contents as Bearer Bonds and Treasury Bills. Also the firm issued him with a certificate of deposit of the consignments notes, which I have these information in my custody now. You must have heard over the media reports and the Internet on the recovery of various huge sums of money deposited by my late father in different Banks and security firms abroad. Some of these banks and security firms willingly gave-/divulge their banking secrets and disclosed to the present civilian administration of Chief Olusegun Obasanjo,about my family's cash lodgement and monetary transactions with them. Please my dear,I repose great confidence in you and I hope you will not betray my confidence in you.I have secretly deposited the sum of $30,000,000.00 with a security firm abroad whose name is withheld for now until we open communications.The money is contained in a metal box consignment with Security Deposit Number 009GM. I shall be grateful if you could receive this fund into your Bank account for safekeeping. This arrangement is known to you and my junior brother (Abbas) only. So I will deal directly with you.I am proposing a 25% share of the fund to you for your kind assistance. I shall provide for you all the documents of the fund deposit with the security firm, and raise a power of attorney to enable you claim and receive this fund into your bank account.I have done a thorough homework and fine-tuned the best way to create you as the beneficiary to the funds and effect the transfer accordingly.Is rest assured that the modalities I have resolved to finalize the entire project guarantees our safety and the successful transfer of the funds.So, you will be absolutely right when you say that this project is risk free and viable.If you are capable and willing to assist, contact me at once via email: ABACHA5000@REDIFFMAIL.COM for more details. Also this transaction demands absolute confidentiality. On no condition must you disclose it to anybody irrespective of your relation with the person. Remember, Loose lips sinks ship. I am looking forward to your urgent and positive response via my email above. Best Regards, Alhaji Mohammed Abacha. View this website for more info: http://news.bbc.co.uk/hi/english/world/africa/newsid_909000/909972.stm http://news.bbc.co.uk/hi/english/world/africa/newsid_877000/877113.stm ------------------------------------------------------- ======= PREVIOUS SPAMS HEADERS ======= Received: from mail.ameralinx.net (mail.ameralinx.com [216.126.227.76]) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id h6L2VK4f021728 for ; Mon, 21 Jul 2003 05:31:41 +0300 Received: from Apple [204.31.61.206] by mail.ameralinx.net with ESMTP (SMTPD32-7.15) id AE5B646B0154; Sun, 20 Jul 2003 20:22:19 -0600 To: From: Subject: URGENT & CONFIDENTIAL BUSINESS PROPOSAL Date: Mon, 21 Jul 2003 03:20:43 -0500 Message-Id: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-AntiVirus: checked by AntiVir Milter 1.0.4; AVE 6.20.0.1; VDF 6.20.0.43 Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: Received: from mail.ameralinx.net (mail.ameralinx.com [216.126.227.76]) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id h6LNlduL024001 for ; Tue, 22 Jul 2003 02:47:49 +0300 Received: from Apple [204.31.61.114] by mail.ameralinx.net with ESMTP (SMTPD32-7.15) id A9A084E70098; Mon, 21 Jul 2003 17:39:12 -0600 To: From: Subject: KINDLY ASSIST Date: Tue, 22 Jul 2003 00:37:46 -0500 Message-Id: MIME-Version: 1.0 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit X-AntiVirus: checked by AntiVir Milter 1.0.4; AVE 6.20.0.1; VDF 6.20.0.44 Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: === My 4th complaint === From: Admin Reply-To: abuse@2003.dolphinwave.org Organization: Private person Subject: [email] Persistent illegal 419-Nigerian spammer (IL: NO LOSS)! [Fwd: KINDLY ASSIST] Date: Tue, 22 Jul 2003 03:13:19 +0300 User-Agent: KMail/1.5 X-KMail-Link-Message: 1707502 X-KMail-Link-Type: forward To: , uce@ftc.gov, nanas-sub@cybernothing.org, "Nigerian scam reports - USA" <419.fcd@usss.treas.gov>, abuse@icgcomm.com, postmaster@ameralinx.com, admin@ameralinx.net, abuse@rediffmail.com, postmaster@rediffmail.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1252" Content-Transfer-Encoding: 8bit Content-Disposition: inline Message-Id: <200307220313.19511@2003.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: And the FOURTH one! Spammer: dsc04-mik-mn-4-114.rasserver.net [204.31.61.114] Abused mailserver: mail.ameralinx.com [216.126.227.76] Mail from: abacha5000@rediffmail.com Collects replies to: ABACHA5000@REDIFFMAIL.COM ---------- Forwarded Message ---------- Received: from mail.ameralinx.net (mail.ameralinx.com [216.126.227.76]) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id h6M04ZuL024378 for ; Tue, 22 Jul 2003 03:04:39 +0300 Received: from Apple [204.31.61.114] by mail.ameralinx.net with ESMTP (SMTPD32-7.15) id AD976D2800DC; Mon, 21 Jul 2003 17:56:07 -0600 To: From: Subject: KINDLY ASSIST Date: Tue, 22 Jul 2003 00:54:42 -0500 Message-Id: MIME-Version: 1.0 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit X-AntiVirus: checked by AntiVir Milter 1.0.4; AVE 6.20.0.1; VDF 6.20.0.44 Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: URGENT BUSINESS RELATIONSHIP _______________________________________ This letter is not intended to to cause any embarrassment but just to contact your esteem self-following the knowledge of your high repute and trustworthiness I am Alhaji Mohammed Abacha, the son of the late Nigerian Head of State who died on the 8th of June 1998.If you are conversant with world news, you would understand better, while I got your contacts through my personal research .Please,I need your assistance to make this happen and please; do not undermine it because it will also be a source of upliftment to you also.You have absolutely nothing to loose in assisting us instead, you have so much to gain. The then head of state General Sani Abacha,transferred the money through a Lebanese businessman,Chagoury and a Jewish businessman,Mark Rissar to bank accounts overseas,Instead,he used PERSONAL IDENTIFICATION NUMBERS (PIN) and declared the contents as Bearer Bonds and Treasury Bills. Also the firm issued him with a certificate of deposit of the consignments notes, which I have these information in my custody now. You must have heard over the media reports and the Internet on the recovery of various huge sums of money deposited by my late father in different Banks and security firms abroad. Some of these banks and security firms willingly gave-/divulge their banking secrets and disclosed to the present civilian administration of Chief Olusegun Obasanjo,about my family's cash lodgement and monetary transactions with them. Please my dear,I repose great confidence in you and I hope you will not betray my confidence in you.I have secretly deposited the sum of $30,000,000.00 with a security firm abroad whose name is withheld for now until we open communications.The money is contained in a metal box consignment with Security Deposit Number 009GM. I shall be grateful if you could receive this fund into your Bank account for safekeeping. This arrangement is known to you and my junior brother (Abbas) only. So I will deal directly with you.I am proposing a 25% share of the fund to you for your kind assistance. I shall provide for you all the documents of the fund deposit with the security firm, and raise a power of attorney to enable you claim and receive this fund into your bank account.I have done a thorough homework and fine-tuned the best way to create you as the beneficiary to the funds and effect the transfer accordingly.Is rest assured that the modalities I have resolved to finalize the entire project guarantees our safety and the successful transfer of the funds.So, you will be absolutely right when you say that this project is risk free and viable.If you are capable and willing to assist, contact me at once via email: ABACHA5000@REDIFFMAIL.COM for more details. Also this transaction demands absolute confidentiality. On no condition must you disclose it to anybody irrespective of your relation with the person. Remember, Loose lips sinks ship. I am looking forward to your urgent and positive response via my email above. Best Regards, Alhaji Mohammed Abacha. View this website for more info: http://news.bbc.co.uk/hi/english/world/africa/newsid_909000/909972.stm http://news.bbc.co.uk/hi/english/world/africa/newsid_877000/877113.stm ------------------------------------------------------- === Some data (22-Jul-2003) === $ host 202.54.124.132 Host 132.124.54.202.in-addr.arpa not found: 3(NXDOMAIN) $ host 202.54.124.133 133.124.54.202.in-addr.arpa domain name pointer f1s1www.rediff.com. $ host 202.54.124.155 155.124.54.202.in-addr.arpa domain name pointer mail.rediffmail.com. $ host 202.54.124.156 156.124.54.202.in-addr.arpa domain name pointer www.maggiclub.com. $ host NS.REDIFFMAILPRO.COM NS.REDIFFMAILPRO.COM has address 202.54.124.166 $ host rediffmail.com rediffmail.com has address 203.199.83.5 rediffmail.com has address 203.199.83.131 rediffmail.com has address 202.54.124.154 $ host NS2.REDIFFMAILPRO.COM NS2.REDIFFMAILPRO.COM has address 203.199.83.166 $ host rediffmailpro.com rediffmailpro.com has address 203.199.83.201