voila.fr - anonymyzing web mail, abused by spammers (no way to get the spammer's IP out of the headers)! voila.fr, [193.252.22.160 - 193.252.22.175], [195.101.94.0 - 195.101.94.255]: Access deied! === My complaint === From: Admin Reply-To: abuse-Mar@2004.dolphinwave.org Organization: Private person Subject: [email] Persistent illegal 419-Nigerian spammers (IL: NO LOSS)! [Fwd: URGENT ASSISTANCE.] Date: Mon, 8 Mar 2004 14:59:36 +0200 User-Agent: KMail/1.5 X-KMail-Link-Message: 1730629 X-KMail-Link-Type: forward To: uce@ftc.gov, nanas@killfile.org, "Nigerian scam reports - USA" <419.fcd@usss.treas.gov>, abuse@voila.fr, postmaster@voila.fr, fr-mail-abuse@yahoo-inc.com X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200403081459.36154@2004.dolphinwave.org> Status: RO X-Status: S X-KMail-EncryptionState: X-KMail-SignatureState: Persistent illegal 419-Nigerian spammer/scammer! Please, terminate the spammer's accounts as soon as possible! Thanks! ======= Spammer (anonymous mailserver): smtp1.voila.fr [193.252.22.174] Mail from: emmanuel_dom201@voila.fr Collects replies to: emmanuel_dom201@voila.fr emmanuel_dom101@yahoo.fr ---------- Forwarded Message ---------- Received: from mwinf4002.voila.fr (smtp1.voila.fr [193.252.22.174]) by mail.dolphinwave.org (8.12.8/8.12.8) with ESMTP id i28CacxX022361 for ; Mon, 8 Mar 2004 14:36:40 +0200 Received: from wwinf4001 (wwinf4001 [172.22.157.28]) by mwinf4002.voila.fr (SMTP Server) with ESMTP id 5588118003A4; Mon, 8 Mar 2004 13:36:30 +0100 (CET) Message-ID: <2294923.1078749390333.JavaMail.www@wwinf4001> From: emmanuel_dom201 Reply-To: emmanuel_dom201@voila.fr To: emmanuel_dom202@voila.fr Subject: URGENT ASSISTANCE. Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 7bit Date: Mon, 8 Mar 2004 13:36:30 +0100 (CET) X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.24.0.6; VDF 6.24.0.42 X-Loop: dev.null@dolphinwave.org Status: R X-Status: N X-KMail-EncryptionState: X-KMail-SignatureState: FROM THE DESK OF MR EMMANUEL DOM. ARAB BANK DU BENIN,(A.B.B). BENIN REPUBLIC COTONUO-WEST AFRICA. TELEPHONE-00229-88-93-70. ALTERNATIVE EMAIL:emmanuel_dom101@yahoo.fr DEAR FRIEND, I am a staff of Arab bank du benin, I got your contact through an internet business proposal so i decide to contact you on this business opportunity. In my department I discovered an abandoned sum of $10m US dollars (ten Million US dollars) . In an account that belongs to one of our foreign customer who died along with his entire family Mr Edmund Miller from mississippi in 31st october 1999 in a plane crash. Since I got information about his death, i have been expecting his next of kin to come over and claim his money because the bank cannot release it unless somebody applies for it as next of kin or relation to the deceased as indicated in our banking guidelines but unfortunately i learnt that all his supposed next of kin or relation died alongside with him at the plane crash leaving nobody behind for the claim. It is therefore upon this discovery that I decided to make you for this businness proposal and work out for the bank to release the money to you as the next of kin or relation to the deceased for safety and subsequent disbursement since nobody is coming for it and I don`t want this money to go into the Bank treasury as an unclaimed Bill. The Banking law and guideline here stipulates that if such money remained unclamed after seven years, the money will be transfered into the Bank treasury as unclaimed fund. The request of foreigner as next of kin in this business is occasioned by the fact that the customer was a foreigner and a Beninois cannot stand as next of kin to a foreigner. I agree that 30 % of this money will be for you as foreign partner, in respect to the provision of a foreign account, 10 % will be set aside for expenses incured during the business and 60 % would be for me. There after I will visit your country for disbursement accoding to the percentages indicated. Therefore to enable the immediate transfer of this fund to you as arranged,the major problem is that the fund have stayed long in the bank and secondly the bank will ask us to reactivate the account first to be current before the bank can transfer it your account.We should understand that we will make some expences before achieving this fund.You must apply first to the bank as relations or next of kin of the deceased indicating your bank name, your private telephone and fax number for easy and effective communication and location where in the money will be remitted.Please as a banker i will make sure that i guide and protect you till we merit the fund.Our bank also have websites.The deceased customer have a websites also for you to verify. Upon receipt of your reply, I will send to you by fax or email the text of the application. I will not fail to bring to your notice that this transaction is hitch free and that you should not entertain any atom of fear as all required arrangements have been made for the transfer . You should contact me immediately as soon as you receive this letter. Trusting to hear from you immediately. best regards. MR EMMANUEL DOM. ------------------------------------------ Faites un voeu et puis Voila ! www.voila.fr ------------------------------------------------------- === Data === $ host smtp.voila.fr smtp.voila.fr has address 193.252.22.164 $ jwhois 193.252.22.164 [Querying whois.ripe.net] [whois.ripe.net] <...> inetnum: 193.252.22.160 - 193.252.22.175 netname: MAIL-ESSENTIALS-VOILA descr: Projet Mail Essentials country: FR admin-c: CtDf1-RIPE tech-c: CtDf1-RIPE status: ASSIGNED PA remarks: for hacking, spamming or security problems send mail to remarks: abuse@voila.fr mnt-by: FT-BRX changed: gestionip.ft@francetelecom.com 20030908 source: RIPE route: 193.252.0.0/18 descr: France Telecom descr: FTI origin: AS3215 mnt-by: FT-BRX changed: gestionip.ft@francetelecom.fr 20001018 source: RIPE role: Contact technique Domaines france6 Wanadoo Portails address: 48, rue Camille Desmoulin, 92791 ISSY LES MOULINEAUX Cedex 9 address: FR phone: +33 1 58 88 65 00 e-mail: domaines.portails@wanadoo.com remarks: for hacking, spamming or security problems send mail to remarks: abuse@voila.fr admin-c: CtDf1-RIPE tech-c: CtDf1-RIPE nic-hdl: CtDf1-RIPE mnt-by: FT-BRX changed: gestionip.ft@francetelecom.com 20030908 source: RIPE $ host voila.fr voila.fr has address 195.101.94.80 $ jwhois 195.101.94.80 [Querying whois.ripe.net] [whois.ripe.net] <...> inetnum: 195.101.94.0 - 195.101.94.255 netname: FR-ECHO descr: Socite ECHO country: FR admin-c: CR308-RIPE tech-c: CR308-RIPE status: ASSIGNED PA notify: addr-reg@rain.fr mnt-by: RAIN-TRANSPAC changed: noc@rain.fr 19970514 source: RIPE route: 195.101.94.0/24 descr: ECHO origin: AS8891 mnt-by: OLEANE-NOC changed: hostmaster@oleane.net 19980929 source: RIPE person: Christophe RUELLE address: ECHO address: 20 Parc des hautes Technologies address: 06250 MOUGINS phone: +33 4 92 28 32 00 fax-no: +33 4 92 28 32 01 e-mail: ruelle@echo.fr nic-hdl: CR308-RIPE notify: addr-reg@rain.fr mnt-by: RAIN-TRANSPAC changed: nathalie@rain.fr 20000324 source: RIPE