@David

% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '41.184.16.0 - 41.184.31.255'

inetnum: 41.184.16.0 - 41.184.31.255
netname: IPNXNG5
descr: ipNX NIGERIA LIMITED
country: NG
admin-c: NI6-AFRINIC
admin-c: ipNX1-AFRINIC
tech-c: NI6-AFRINIC
tech-c: ipNX1-AFRINIC
status: ASSIGNED PA
mnt-by: NETCO-SERVICES-MNT
remarks: Data has been registered for ipNX Telecommunications
source: AFRINIC # Filtered
parent: 41.184.0.0 - 41.184.255.255

role: ipNX LIR Operations
address: ipNX Nigeria Limted
4, Balarabe Musa Crescent,
Victoria Island,
Lagos, Nigeria.
phone: +234-1-4619943
phone: +234-1-4619944
phone: +234-1-4619945
phone: +234-1-4619946
fax-no: +234-1-2614633
e-mail: ipservices@ipnxnigeria.net
admin-c: AAA38-AFRINIC
tech-c: VU40-AFRINIC
nic-hdl: ipNX1-AFRINIC
mnt-by: NETCO-SERVICES-MNT
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered

person: Najite Ikutegbe
address: ipNX Nigeria Limited
4, Balarabe Musa Crescent
Victoria Island,
Lagos State, Nigeria.
phone: +234-1-4619943
phone: +234-1-4619944
phone: +234-1-6280022
phone: +234-1-6280025
fax-no: +234-1-2614633
e-mail: nikutegbe@ipnxnigeria.net
nic-hdl: NI6-AFRINIC
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered

@David
Second Ip analysis


% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '41.214.0.0 - 41.214.127.255'

inetnum: 41.214.0.0 - 41.214.127.255
netname: SN-SONATEL-20080326
descr: SONATEL Societe Nationale Des Telecommunications Du Senegal
country: SN
admin-c: AM2490-AFRINIC
tech-c: AM2490-AFRINIC
org: ORG-SNDT1-AFRINIC
status: ALLOCATED PA
mnt-by: AFRINIC-HM-MNT
mnt-lower: SMM-MNT
mnt-domains: SMM-MNT
source: AFRINIC # Filtered
parent: 41.0.0.0 - 41.255.255.255

organisation: ORG-SNDT1-AFRINIC
org-name: SONATEL Societe Nationale Des Telecommunications Du Senegal
org-type: LIR
country: SN
address: Societe Nationale Des Telecommunications Du Senegal
address: 6 Rue Wagane
address: Diouf
address: BP 69 Dakar
address: Dakar
e-mail: modyndiaye@sentoo.sn
phone: +221 869 9715
fax-no: +221 860 0164
admin-c: BAW1-AFRINIC
admin-c: AM2490-AFRINIC
admin-c: SBT7-AFRINIC
admin-c: MN1281-AFRINIC
tech-c: AM2490-AFRINIC
tech-c: MN1281-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: SMM-MNT
mnt-by: AFRINIC-HM-MNT
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered

person: Alpha Mbodj
nic-hdl: AM2490-AFRINIC
address: Sonatel
address: Direction des Reseaux
address: 6 Rue Wagane DIOUF
address: BP 69 Dakar
address: SENEGAL
address: Dakar
address: Senegal
e-mail: alpha.mbodj@orange-sonatel.com
phone: +221 33 879 3222
fax-no: +221 822 92 20
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered

Thanks wanwan and anonymous from Germany.

YES I ALSO RECIVED PHOTO OF VIVAN LIZA,BEARCLAWW11OR LOWISA MOTHER IN PURLE..BOY I WOULD LOVE TO LOOK IN THE EYES OF WHO EVER OR WHAT EVER THE HEARTLESS THING WHO IS THE CAUSE THIS SITE SO WHAT EVER HELP IS NEEDED I HERE FOR US.

does any body knows that woman?


Keywords:

does any body knows that woman?


Keywords:

tiger12 e-mail her at lowisagirl@ yahoo

2009-10-25, 18:36:13
anonymous from Greece

A little more info would help. Name and so forth.

@anonymous from Greece

Give more information and we can find out who is that girl in reallity!
Email header would be very helpful

Not sure how ro even trace this one and who to report him to. Gmail doesn't have an abuse team like yahoo does. Also I noticed his email address is different from the first email he sent.

from     addo john <generaladdo20@gmail.com>
to    
date     Fri, Oct 23, 2009 at 4:17 PM
mailed-by     gmail.com
signed-by     gmail.com
   
hide details Oct 23 (3 days ago)
   
Dear Beloved,
I am Alex Thomas, I'm 18 years old and I live in the BUJIBORAN REFUGEE
CAMP here in Accra Ghana, I lost my parents during the war in my country
and i was among the kids rescued to Ghana by UN Forces to Ghana as
refugees. I have my inheritance boxes here in Ghana which my late father,
Thomas Johnson of Kreo Community in Liberia deposited here for safekeeping
purpose due to the war situation in my country over the years.
The 2 boxes contain $20 million USD dollars and 75kg of uncut diamonds
respectively, wish my late father friend stand to help me get the boxes
out of the security company to be deliver to him in the states so that he
can send for me to come over and start a new life over there with him but
it was God's work i most say, because it was so unfortunate that my
Father's friend was planing with with my late father,s barrister to take
all the money and run away but my barrister was so Godly to tell me
everything my late father's friend was planing against us.that is why my
barrister ought to advice us to look for a God fearing and a trustworthy
citizen that can handle this for us, During our search we came across your
contact and we strongly believe you can assist us to handle this.
But my questions are these below:
1. Please can you receive these boxes for us as our foreign guardian and
trustee?
2. Can we trust you in helping us?
3. Will 35% be ok for you?
I took this bold step with great faith in God, the boxes are with the
diplomat over there in John F.Kennedy International Airport New York. i
want you to know that the document are with the diplomat over there at
John F.Kennedy International Airport New York, if you are really
interested in helping me receive the boxes please reply with your full
contact for fast communication to my personal email address below.
I pray that soon we will be together as one large family with Joy among us.
Email:thomas.alexthomas.alex@gmail.com
Phone No:00233540684941
Our sincere regards to your family.
Respectfully


Delivered-To:
Received: by 10.224.28.77 with SMTP id l13cs22665qac;
Tue, 27 Oct 2009 08:14:04 -0700 (PDT)
Received: by 10.231.5.79 with SMTP id 15mr699273ibu.7.1256656443308;
Tue, 27 Oct 2009 08:14:03 -0700 (PDT)
Return-Path: <generaladdo20@gmail.com>
Received: from mail-iw0-f105.google.com (mail-iw0-f105.google.com [209.85.223.105])
by mx.google.com with ESMTP id 36si109369iwn.59.2009.10.27.08.14.02;
Tue, 27 Oct 2009 08:14:02 -0700 (PDT)
Received-SPF: pass (google.com: domain of generaladdo20@gmail.com designates 209.85.223.105 as permitted sender) client-ip=209.85.223.105;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of generaladdo20@gmail.com designates 209.85.223.105 as permitted sender) smtp.mail=generaladdo20@gmail.com; dkim=pass (test mode) header.i=@gmail.com
Received: by iwn3 with SMTP id 3so16106iwn.16
for <com>; Tue, 27 Oct 2009 08:14:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:received-spf:received:dkim-signature
: domainkey-signature:mime-version:received:in-reply-to:refereerences
:date:message-id:subject:from:to:content-type;
bh=6paE6lFoqzQXO7mbRnKoPOd5Bs1rkSMW/0wng3VC9Co=;
b= EnCaghsYHUOiuKPfSKm4ox4DmvJTDKgfUIv92thxuyxYOrC9/sD0j/U/8GI8GIG22pUiM
G3LVRD5On1FEdQFi8yLIjTgk8PW9CF LuBp3yDmAS8TeAvlxkIUX4P7T9vlpwlpweK1it0R
DRZ47OlKJUHwS+TVsVxN5JXfPwGzEMy0SyklA=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=received-spf:authentication-results:dkim-signature
: domainkey-signature:mime-version:in-reply-to:references:dateate
:message-id:subject:from:to:content-type;
b= j6Hv4L6rQqP4v3SBmMd7ZyjE3+bCBEho7SrF4uy7J5IyZkG7uHlH2jZlYcIYcIIUHAiz1
QIZKXu5dNlGe0hQ4srKVIH0O/ 9ei+ldbQs0zcs6XGgR3RZ22iog5A+/G64wk/wk/7g7Stpp
H6XQAjq8PDVnPXYHJsvABwOze17WIlVGxn8t4=
Return-Path: <generaladdo20@gmail.com>
Received-SPF: pass (google.com: domain of generaladdo20@gmail.com designates 10.231.28.143 as permitted sender) client-ip=10.231.28.143;
Received: from mr.google.com ([10.231.28.143])
by 10.231.28.143 with SMTP id m15mr3247604ibc.23.1256656441500 (num_hops = 1);
Tue, 27 Oct 2009 08:14:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h= domainkey-signature:mime-version:received:in-reply-to:referferences
:date:message-id:subject:from:to:content-type;
bh=6paE6lFoqzQXO7mbRnKoPOd5Bs1rkSMW/0wng3VC9Co=;
b= wFQsSKngnBHU8ayZCibUwFtit1daozSrC0u3BO59iCekIBPqr4O49uFv1sm1smgWzorqL
eU8UM7wIg7DCKN65ZckVNbE53bPpOm NguRF1aVRtSDc0DFuNNMINWgcnFeNveNvBkJDHaK
JYy8DoCJRFeAuMUjEFhgT5skNkyI1B/74/f6c=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h= mime-version:in-reply-to:references:date:message-id:subjectect:from:to
:content-type;
b= YfzO2CcXKJyFOiOhlAu9QytreHA9MmTK0AjTjmLJ12Zx82fB8Z9I7fml8zx8zx4+uhPvH
3ri1D1Nbw7AP1jz/ oDfJrcnZqQglm1z0xy8e7nMbnmmBpXEqMFXEhNEhE95O+5O+VVaEALb
m11gI8/hs+9qiCnfel06fmR5GTndG2PD3YNEw=
MIME-Version: 1.0
Received: by 10.231.28.143 with SMTP id m15mr3247604ibc.23.1256656441482; Tue,
    27 Oct 2009 08:14:01 -0700 (PDT)
In-Reply-To: <2e51de850910260435q3201a4a5tfc50ff3a4ee68feb@mail.gmail.com>
References: <2e51de850910231637l6163babfl490f8730803857fd@mail.gmail.com>
    <3d3fb5a0910232104p1fb98ddbha59c5a2e0b480709@mail.gmail.com>
    <2e51de850910241648g1cff1fe2y39f2f2f7d24940ed@mail.gmail.com>
    <3d3fb5a0910241706l1b63f75cn5ce46a8e697d8357@mail.gmail.com>
    <2e51de850910260435q3201a4a5tfc50ff3a4ee68feb@mail.gmail.com>
Date: Tue, 27 Oct 2009 15:14:01 +0000
Message-ID: <2e51de850910270814r6bdc1a82m23107d356103657@mail.gmail.com>
Subject: GET BACK TO ME
From: generaladdo20 <generaladdo20@gmail.com>

Content-Type: multipart/mixeboundary= 00151774126
ccca05b0476ec2086
--00151774126ccca05b05b0476ec2086
Content-Type: text/plain; charset=ISO-8859-1

    generaladdo20 <generaladdo20@gmail.com>
to    
date     Tue, Oct 27, 2009 at 8:14 AM
subject     GET BACK TO ME
mailed-by     gmail.com
signed-by     gmail.com
   
hide details 8:14 AM (1 hour ago)
   
ATTENTION

WELL I THANK YOU VERY MUCH FOR YOUR UNDERSTANDING, MAY GOD BLESS YOU
FOR HELPING ME.

WELL I ATTACH MY REFUGEE ID CARD AND THE DEPOSITE SLIP WHICH MY LATE
FATHER USE TO DEPOSITE THE MONEY AND THE GOLD IN THE SECURITY COMPANY,
AND ALSO THE DEPOSITE SLIP SHOW THAT I AM THE NEXT OF KING TO COLLECT
ALL THE GOLD AND THE MONEY.

PLEASE I WANT YOU TO REPLY ME WITH YOUR FULL INFORMENTION, AND I ALSO
WANT YOU TO REPLY ME WITH YOUR PHONE NUMBER SO THAT I CAN CALL YOU TO
KNOW YOU MORE BETTER.

I WILL BE WAITING FOR YOUR REPLY SO THAT WE CAN PROCEED IN THIS TRANSACTION,

SEND MY GREETINGS TO YOUR FAMILY,

FAITH FULL
ALEX THOMAS


Keywords:

@David

Here

''



Sender


IP Address Country Region City Latitude/
Longitude ZIP Code Time Zone
209.85.223.105 UNITED STATES CALIFORNIA MOUNTAIN VIEW 37.3956
-122.076 94043 -07:00
Net Speed ISP Domain
DIAL GOOGLE INC google.com

IDD Code Area Code Weather Station
1 650 (USCA0746) MOUNTAIN VIEW


**
He has forged his sender IP address.

@Anonymous
2009-10-27, 12:12:55


I want to remind about posting IMPROPRIATE pictures at this site.
For me is that picture NUDE...you only need a picture of face infact that
identify somebody...

PLEASE think of women and other sensitive people who comes
to this site and reads the threads also...


@Anonymous
2009-10-27
17:09:43

I saw the links you posted here ...there is impropriate pictures ...

NO NUDE AND NO PORN PICTURES ARE ALOUD ON THIS SITE..!!!

Every NUDE and IMPROPRIATE picture will be removed immediately!!!!

Regards //MISS MARPLE//

This email wound up in my inbox even though it wasn't addressed to me. It was meant for some guy named Harald. I emailed the guy letting him know it's a scam. Maybe I helped or maybe he already knows. Either way I helped a little I hope.

Delivered-To:
Received: by 10.224.28.77 with SMTP id l13cs41339qac;
Tue, 27 Oct 2009 14:14:17 -0700 (PDT)
Received: by 10.115.102.38 with SMTP id e38mr8127509wam.207.1256678057263;
Tue, 27 Oct 2009 14:14:17 -0700 (PDT)
Return-Path: <comfortdelight@yahoo.com>
Received: from n4-vm1.bullet.mail.gq1.yahoo.com (n4-vm1.bullet.mail.gq1.yahoo.com [67.195.9.86])
by mx.google.com with SMTP id 29si856081pxi.4.2009.10.27.14.14.16;
Tue, 27 Oct 2009 14:14:17 -0700 (PDT)
Received-SPF: pass (google.com: domain of comfortdelight@yahoo.com designates 67.195.9.86 as permitted sender) client-ip=67.195.9.86;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of comfortdelight@yahoo.com designates 67.195.9.86 as permitted sender) smtp.mail=comfortdelight@yahoo.com; dkim=neutral (body hash did not verify) header.i=@yahoo.com
Received: from [67.195.9.83] by n4.bullet.mail.gq1.yahoo.com with NNFMP; 27 Oct 2009 21:14:16 -0000
Received: from [67.195.9.105] by t3.bullet.mail.gq1.yahoo.com with NNFMP; 27 Oct 2009 21:14:16 -0000
Received: from [127.0.0.1] by omp109.mail.gq1.yahoo.com with NNFMP; 27 Oct 2009 21:14:16 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 727147.5225.bm@omp109.mail.gq1.yahoo.com
Received: (qmail 25204 invoked by uid 60001); 27 Oct 2009 21:14:16 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1256678056; bh=j8z85iBWjw73uxDoUS2oEzYLgz/4g5whdQbcVlwREYAh= Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:ct:To:MIME-Version:Content-Typb= w6nK/i1/9HQuYMsJgEkW3Pg1io6ellQuC8mKmdPiIM4F5gO6VGKr2E6qrcmUaLk538IxIDm88nADv2GggyiPYAyQEBbloSTJa8H0b3ntPg4Q1Y+ bfkRQnING+ LWB+Fg6PYOkcXA7MXeTVjvjGkB3TVSTtCDRbgpVPK5ZIdhodkc=
DomaimainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com; h= Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:ct:To:MIME-Version:Content-Type; b= APyYKz8CwnBASuB6BP1BcI00txdtw23vqjA1guhmuGWOYJ9oPJhVaK2EyUkaQYFIHQ1iiLlCAVXPpFG2fdXjYsbIq/ ljyKe07tG8+pYDwK0uPhbqzLZ1FeKvcG2B0KJhnPteQDQuqO9Cq0dZMvHqaf1DLU0kJxdfFPveLDQYkFs= ;
Messessage-ID: <476902.24251.qm@web112914.mail.gq1.yahoo.com>
X-YMail-OSGS0mb8CcVM1nlEopJ_8_zaJaczl57yI 2QZG4kwmDENHH9uqSeICBJc0aRtGX6GX6KYPfewYcaYnnZgPq9wi2YOb0CdSJmaOP.wDYnaNoCaMnqpAEo8WrUmZYO. YV0r9OwnS8MgK9pAcr5gQF_aaXqoDR73JYoeZtt6M81hHnnfGAueN8v7iXZxXZxXQCFhmdgCPxOh. 8F2PuNYRNruaD0mC0sqCywgdVvfUGCGVpkr_fhYUbJ4_DGSqGYQEykZWBor5or5Qs1g0Kx7lmzdiI23tib57KmF.b45rQWc0xj7L.nwBPbDbocAEMIXlNmrR
Received: from [41.208.166.84] by web112914.mail.gq1.yahoo.com via HTTP; Tue, 27 Oct 2009 14:14:16 PDT
X-Mailer: YahooMailClassic/8.0.7 YahooMailWebService/0.7.347.3
Date: Tue, 27 Oct 2009 14:14:16 -0700 (PDT)
From: comfortdelight nhanyi <comfortdelight@yahoo.com>
Subject: Hello Dearest,

MIME-Version: 1.0
Content-Type: multipart/alternative; boundary='0-1274252121-1256678056=:24251'


from     comfortdelight nhanyi <comfortdelight@yahoo.com>

date     Tue, Oct 27, 2009 at 2:14 PM
subject     Hello Dearest,
mailed-by     yahoo.com
   
hide details 2:14 PM (21 hours ago)
   
Hello Dearest,

Good day to you.
How are you doing over there my dear, I hope that you are feeling so fine and healthy. Well, my name is comfort delight nhanyi from South Sudan . I am a young pretty single 24 years old girl; I hope that I will match your type, if you can give me the chance I would like to know you better, since religion, distance and age doesn’t matter to me. I will send you my picture for you to see how I look like.

I know you will be surprise when you will receive this letter on how do I got your Email ID, but I don’t want you to be afraid, well I got your Email ID through penpal after I have pray for two weeks to Almighty Allah to show me an honest and sincere person who will help me out in this situation I am into here in senegal as result of Refugee Camp. And Allah review to me that you are the right person who can help me out.

However, I hope you are feeling fine? I am cool over here in senegal. As I said earlier my names comfort delight nhanyi , I am 24 years old from South Sudan in Africa and presently I am residing in the refugee camp here in senegal as a result of the civil war going on in my country Sudan .

My father Dr.. nonai nhanyi was the former Minister for SPLA Affairs and Special Adviser to President Salva Kiir of South Sudan for Decentralization before the rebels attacked our house one early morning and killed my parents.
I was the only survivor of the family since I was the only child of my parents and I managed to make my way to the nearby country senegal where I am leaving now, I would like to know more about you. Your likes and dislikes, your hobbies and what you are doing presently. I will tell you more about myself in my next mail. Please I also want to know how you look like, so please send me your picture. Kindly get back to me, so that I will tell you more about myself and for us to discuss urgent business proposal..

Before the dead of my Daddy he deposited the sum of Twelve Million Five Hundred Thousand Dollars ($12, 500, 000, 00 Million Dollar) in the bank in london . I have informed the bank about my plans to claim this money and the Branch manager of the Bank whom I contacted by email told me that my father's instruction to the bank was that before the money will be release to me only when I am married or present a trustee who will help me and invest the money overseas.
They told me that I cannot withdraw the money in London due to the law guiding in their bank, and they also told me to look for a foreign partner who will stand on my behalf as my Husband or Trustee before the money can be released and transfer to he or her. You will have 25% of the total money by helping me and 5% will be for any expenses may be occur during the transfer of the money in your country and the remaining money will be managed by me with your help in any business over there in your country, since I am still young to manage the money alone.

In this regards I will like you to contact the bank immediately after I receive your response I will send you the bank contact for you to contact them. Hence you are assuring me that you will not cheat or betrayed me, you will tell them that you are my Husband or my Trustee and that you want to know the possibilities of assisting me transfer my ($12.5 Million Dollars) deposited by my late father of which I am the next of kin to my father’s bank account, for more information's contact me with this e-mail address comfortdelight@yahoo.com

Hoping to hear from you soonest,

Yours Faithfully

Miss comfort delight Nhany






Keywords:

@DAVID
2009-10-28, 12:53:46 (updated: 2009-10-28, 13:08:18)


% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '41.208.166.0 - 41.208.166.255'

inetnum: 41.208.166.0 - 41.208.166.255
netname: BAS3
descr: SONATEL
country: SN
admin-c: MN1281-AFRINIC
tech-c: FN4-AFRINIC
status: ASSIGNED PA
mnt-by: SMM-MNT
mnt-lower: SMM-MNT
source: AFRINIC # Filtered
parent: 41.208.128.0 - 41.208.191.255

person: Mody Ndiaye
address: SOCIETE NATIONALES DES TELECOMMUNICATIONS
address: Sonatel
address: Dakar
address: Senegal
e-mail: modyndiaye@sentoo.sn
phone: +221 8392337
fax-no: +221 8233698
nic-hdl: MN1281-AFRINIC
mnt-by: SMM-MNT
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC # Filtered

person: Fatoumata Ndiaye
address: Sonatel
address: Direction des Reseaux
address: Direction des Operations Reseaux
address: Technopole
address: SENEGAL
phone: +221 8793223
fax-no: +221 8330026
nic-hdl: FN4-AFRINIC
e-mail: fatoumata.ndiaye@orange-sonatel.com
source: AFRINIC # Filtered


Kind regards Clark Kent!!!!!

Thanks Clark from Germany. I knew it was a scammer as there is no one in a refugee camp with money. At least not millions of dollars. Also I have learned there is not really any electricity there so there could be no internet services.