William Brown Esq

Any information or research into the rampant "Nigerian Scam" messages.

William Brown Esq

Postby kabo0m » Thu Jun 10, 2010 9:01 pm

I have a question. Did this scammer actually email from his real email address or can email addresses redirect like links do?

Delivered-To: k****@*******.com
Received: by 10.231.14.2 with SMTP id e2cs336065iba;
Wed, 2 Jun 2010 22:36:31 -0700 (PDT)
Received: by 10.231.176.75 with SMTP id bd11mr11311169ibb.22.1275543390070;
Wed, 02 Jun 2010 22:36:30 -0700 (PDT)
Return-Path: <willambrwnesq@aol.com>
Received: from super.fastservercore.com (super.fastservercore.com [67.227.173.62])
by mx.google.com with ESMTP id l6si15064857ibb.25.2010.06.02.22.36.29;
Wed, 02 Jun 2010 22:36:30 -0700 (PDT)
Received-SPF: neutral (google.com: 67.227.173.62 is neither permitted nor denied by domain of willambrwnesq@aol.com) client-ip=67.227.173.62;
Authentication-Results: mx.google.com; spf=neutral (google.com: 67.227.173.62 is neither permitted nor denied by domain of willambrwnesq@aol.com) smtp.mail=willambrwnesq@aol.com
Message-Id: <4c073f5e.0616e70a.3fde.ffffe70bSMTPIN_ADDED@mx.google.com>
Received: from static-66-15-50-134.bdsl.verizon.net ([66.15.50.134]:37607 helo=User)
by super.fastservercore.com with esmtpa (Exim 4.69)
(envelope-from <willambrwnesq@aol.com>)
id 1OK34L-0002SU-Em; Thu, 03 Jun 2010 01:34:18 -0400
Reply-To: <williambrwnesq@aol.com>
From: "Mr.William Brown"<willambrwnesq@aol.com>
Subject: Do you received My mail
Date: Wed, 2 Jun 2010 22:34:18 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - super.fastservercore.com
X-AntiAbuse: Original Domain - ******.com (My site! It found my email through a dictionary attack going by my domain name)
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - aol.com

Acknowledge

With all due respect, My name is William Brown and an attorney by profession, in my quest to find a reliable trustee to manage the assets/estate of my late client valued at only US$11,000,000.00 (Eleven Million United States Dollars), I contacted you and it is the only reason why you are receiving this email from me

I shall be willing to supply you with more detailed information concerning this business project upon hearing back from you.

I have no intention whatsoever to delve into your private life considering the fact that you have never had any communication with me in the past, but due to the nature of this business project based on the fact that I lack the locus-stand to assume the role of the trustee or appoint any of my relation to become the trustee by virtue of the facts and circumstances surrounding this project, I am left with no other choice, but to carry out a discreet search for a reputable person outside the shores of my country and consequently seek your stewardship.

If you wish to render your selfless service, but very rewarding, do provide me with your telephone numbers and home address via email.

I shall provide you with more detailed information upon hearing back from you. Thank you, all inconvenience is regretted.

Best regards,
William Brown Esq.


I checked to see if the email he is using is valid but it isn't ..

So I did a search and only got this result:

http://www.google.com/search?q=willambrwnesq%40aol.com

Courier Usage Report - Network: 74.125.83

May 26 06:15:42 bugs courieresmtpd: error,relay=::ffff:74.125.83.179,from=<willambrwnesq@aol.com>,to=<boes@ccaonline.com>: 550 User unknown. ...
http://mail.ccaonline.com/smtperrbynet/2.html

Courier Usage Report - Network: 209.85.222

May 26 05:51:00 bugs courieresmtpd: error,relay=::ffff:209.85.222.171,from=<willambrwnesq@aol.com>,to=<db22@ccaonline.com>: 550 User unknown. ...
http://mail.ccaonline.com/smtperrbynet/4.html


What does that mean? Anything?
User avatar
kabo0m
Spam Reporter
 
Posts: 154
Joined: Sun Mar 21, 2010 4:36 pm

Re: William Brown Esq

Postby Red Dwarf » Thu Jun 10, 2010 10:34 pm

Received: from static-66-15-50-134.bdsl.verizon.net ([66.15.50.134]:37607 helo=User)

The originating IP address 66.15.50.134 on Verizon appears elsewhere on InBoxRevenge, in another scam

viewtopic.php?f=22&t=3754&p=46193&hilit=66.15.50.134#p46193

Note that it is a "static" address, so the user (called "user") should be easily traced by the owning ISP.

Send the message with headers intact to
OrgAbuseName: Verizon Abuse Dept
OrgAbusePhone: +1-214-513-6711
OrgAbuseEmail: abuse@verizon.net
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: William Brown Esq

Postby kabo0m » Thu Jun 10, 2010 11:45 pm

Red Dwarf wrote:
Received: from static-66-15-50-134.bdsl.verizon.net ([66.15.50.134]:37607 helo=User)

The originating IP address 66.15.50.134 on Verizon appears elsewhere on InBoxRevenge, in another scam

viewtopic.php?f=22&t=3754&p=46193&hilit=66.15.50.134#p46193

Note that it is a "static" address, so the user (called "user") should be easily traced by the owning ISP.

Send the message with headers intact to
OrgAbuseName: Verizon Abuse Dept
OrgAbusePhone: +1-214-513-6711
OrgAbuseEmail: abuse@verizon.net


Thx Red. Looking at it again I can't believe I didn't see the 2nd IP. I mean I looked and looked but they all looked the same to me (damn dyslexia :roll: ).

Reported via email. Thx.

Got automated reply so far:
This is an automated response to confirm receipt of your email to the Verizon Abuse email box. Please do not reply to this message.

Unfortunately, we cannot investigate or respond to each email that we receive, but we will attempt to identify and review those emails where we think action is needed.

If your email relates to child pornography or child exploitation, please note that you can also make a report directly to the National Center for Missing and Exploited Children through its CyberTipline located at www.cybertipline.org.

If your email relates to copyright or trademark issues, please visit our website at http://www22.verizon.com/terms/ and follow the directions there for submitting a report relating to possible instances of infringement.

If your email relates to an Internet website or service not offered by Verizon, please contact the provider of that website or service directly; Verizon is unlikely to be able to assist with matters relating to another provider’s service.

Helpful Information: To help protect yourself against phishing and identity theft scams, Verizon Online strongly advises that you never click on links offered in email messages you receive. Instead, manually type the URl (link address) into a new web browser window. This will help protect you from being diverted to a hidden website that is not the one you intended to go to. For more information about online safety, please visit our Safety and Security page at http://netservices.verizon.net/portal/link/main/safety.

Thank you for sending your report.

Sincerely,
Verizon Online Security
http://www2.verizon.net/policies/tos.asp
http://www.verizon.net/security
User avatar
kabo0m
Spam Reporter
 
Posts: 154
Joined: Sun Mar 21, 2010 4:36 pm


Return to Advance-Fee Fraud [419 Fraud]

Who is online

Users browsing this forum: No registered users and 2 guests