419 scammers, so-called after the Nigerian criminal code statute dealing with advance fee fraud, are getting smarter every day. Recently a friend sent this reporter the following email (personal details removed). This new development in 419 scamming techniques is significant. Notice the website and email domains mentioned:
—– Original Message —–
From: CAREER REVIEW COUNCIL (Engr. Kenneth Hager)
To: [omitted]
Sent: Sunday, December 30, 2007 12:07 PM
Subject: TOTAL LETTER OF EMPLOYMENT OFFER/ TERMS OF AGREEMENT FOR CONTRACT SERVICES
TOTAL LETTER OF EMPLOYMENT OFFER/ TERMS OF AGREEMENT FOR CONTRACT SERVICESJOB REF: TOTAL/NIG/ (OPL)/223-07
Dear [omitted]
The Human Resources Department were able to resolve the status of your application. On this note, We hereby congratulate you on the success of your application and as such we have attached to you the Appointment Letter/Terms of Agreement for Total Services that transcends any written document. You are therefore required to follow these procedures ASAP so as to complete your employment formalities with Total Petroleum Company: You are to Apply for Work-Permit Visa; Forward; i) Scanned International passport and passport No. details.ii) Your Appointment documents. to The Nigerian Immigration Consulate via Email attachment, Contact Person: Comptroller General. George Nnamani Email: workpermit-visa@nigeria-immigration-gov.com Tel: +234-803-966-9011 Also, if the Terms of Agreement attached herewith is in concord to your approval, kindly sign/endorse and return the last column to us immediately to Head Office via: info@totalpetroleumng.com and then furthermore, procure your travel papers from the Nigerian Immigration Consulate as highlighted above.We hereby once more congratulate you on the success of your application to work with TOTAL PETROLEUM PLC amongst many that had applied and thereby instruct you to expedite all requirements as aforementioned above in due time. Do get back to us with developments and updates regarding your most preferred relocation date.Regards,Engineer James Brown,Recruitment Terminal AgentRegional HR Divisional Manager,Career Review Council, P. M. B. 456Total Building, Wuse Mile 2, Abuja.enquiries@totalpetroleumng.com……………………………….C/O The Human Resources (HR) Department, Mr. Peter Clever- HR Principal ManagerTotal Petroleum Plc 4 Afribank Street, VI Lagos.Mobile: +2347032714320humanresources@totalpetroleumng.com 24hr Customer Care Line: 00923482495475Fax (09) 811-40 41, (09) 611-40 43
—
In the past, 419 scammers were easily identified by their use of free email hosts such as yahoo, gmail, etc., so it was easy to spot a scam email. However, these scammers are getting smarter, and they are also getting help from co-conspirators within the USA. These domains and websites are designed to harvest passport and identity documents from unsuspecting victims. Federal and international agencies around the world are investigating this new development.
Referenced in the above email are 2 domains worth noting. These domains are new, and in one case, only a few hours old and yet already being used to perpetrate fraud. There can be no doubt as to why these domains were created.
1: nigeria-immigration-gov.com – This domain is absolutely not a government owned and operated domain. Public records for this domain show the following information:
Domain Name………. nigeria-immigration-gov.com
Creation Date…….. 2007-12-02
Registration Date…. 2007-12-02
Expiry Date………. 2009-12-02
Organisation Name…. Scott Brown
Organisation Address. 25 Dunleavey Brook Rd
Organisation Address.
Organisation Address. Uxbridge
Organisation Address. 01569
Organisation Address. MA
Organisation Address. UNITED STATES
Admin Name……….. Scott Brown
Admin Address…….. 25 Dunleavey Brook Rd
Admin Address……..
Admin Address…….. Uxbridge
Admin Address…….. 01569
Admin Address…….. MA
Admin Address…….. UNITED STATES
Admin Email……….
Admin Phone………. +1.9897850398
Admin Fax…………
Tech Name………… Hostmaster Hostmaster
Tech Address……… 1375 Peachtree St.
Tech Address……… Level A
Tech Address……… Atlanta
Tech Address……… 30309
Tech Address……… GA
Tech Address……… UNITED STATES
Tech Email………..
Tech Phone……….. +1.8889321997
Tech Fax…………. +1.7177035107
Name Server………. dns2.earthlink.net
Name Server………. dns3.earthlink.net
2: totalpetroleumng.com – This is a bogus website that isn’t even finished. Public information for this domain is:
Domain Name………. totalpetroleumng.com
Creation Date…….. 2007-12-29
Registration Date…. 2007-12-29
Expiry Date………. 2008-12-29
Organisation Name…. Adriana Mejia
Organisation Address. 72 Sutter st.
Organisation Address.
Organisation Address. san jose
Organisation Address. 95110
Organisation Address. CA
Organisation Address. UNITED STATES
Admin Name……….. Adriana Mejia
Admin Address…….. 72 Sutter st.
Admin Address……..
Admin Address…….. san jose
Admin Address…….. 95110
Admin Address…….. CA
Admin Address…….. UNITED STATES
Admin Email……….
Admin Phone………. +1.408-297-1211
Admin Fax…………
Tech Name………… Microsoft Office Live
Tech Address……… One Microsoft Way
Tech Address………
Tech Address……… Redmond
Tech Address……… 98052
Tech Address……… WA
Tech Address……… UNITED STATES
Tech Email………..
Tech Phone……….. +1.8665915483
Tech Fax………….
Name Server………. ns1.officelive.com
Name Server………. ns2.officelive.com
This email came with very convincing, sophisticated documentation that might fool the unsuspecting into giving out their personal and private information. The documents use image files that cannot be easily modified by the average person, and the documents are in the Microsoft Word format. Be sure to check the validity of any offer before you send any information!
It’s not much of a fig leaf though is it? It’s an unsolicited email congratulations message from Nigeria for crying out loud!
I’ve been getting a lot of scam calls to my mobile recently. One today said I’d won a prize as I was a loyal customer from such-and-such a shop. I was asked to give my home address to receive the gift. I told the woman that I’d get it myself if she’d tell me where to pick it up. As I suspected, that was out of the question. Buh-bye!
naruwan’s last blog post..“No Flavour” dried tomatoes
naruwan » however, it named my friend personally. plus the attached documents looked very convincing. there was a contract that spells out the salary terms, and other very specific details. the whois report on the petroleum company returned to apparently an employee at MS. this is going to be very interesting.
we get scam calls from time to time. when my mobile phone rings i always answer in English. i never speak Chinese unless someone calls me by my name. when they start with “who is this?” i just hang up. last month i was getting calls from China at all hours. yesterday i got a few calls from Taipei. it just never ends.
btw, i did install Spam Karma 2 on your recommendation. it looks promising. thanks for the tip.
MJ, the Spam Karma tip was fili’s, not mine.
Enjoy the celebrations tonight. I’m going to pop along to the New Year bash being held at Chung Hsing uni campus.
naruwan’s last blog post..“No Flavour” dried tomatoes
naruwan » “MJ, the Spam Karma tip was fili’s, not mine.” oh, duh. sorry Fili!
i drank far too much, but there isn’t any plans to follow up on that, as i will be cutting way down on my drinking. let us know how it went at Chung Hsing! take care.
MJ I get a few of the really bad scam attempts like a millionaire died and you can collect a percentage of his money. The ones that you blogged on before and I enjoyed how you baited the guy along for a time.
They are pains in the ass and I feel sorry for the stupid people who fall for teh scams. You can say serve yourself right for being stupid. The sad thing is sometimes old niave people fall to these pieces of shite.
I am surprised at the level of this scam. A lot more professional than the other pathetic ones that have been running.
Brunty
Brunty’s last blog post..Thailand. Throwing rocks will get you 25 years in jail.
Brunty » that’s what is so scary about it Brunty. we’ve not see this kind of cooperation before. someone took my friend’s information from a job hunting website apparently, and then went fishing. thanks and take care.
MJ,
i really thank for your information. my uncle has that email too.
and he really interest with that email.
but please give me another information about this criminal because my uncle not sure with my explanation.
maybe you have another information to share.
thanks alot.
-fb-
feby »
many people got that email, and what makes it scary is the level of cooperation among all parties. if you want to complain, you can use the “whois” data to contact the domain owners. one of them is registered to Microsoft. i’m sure they wouldn’t appreciate someone in their office using office resources to set up domains to scam people.