|
November 21, 2007 9:13 PM PST
Pet Scam Warning from: Susan at IL Lost & Found Dogs
WE RECENTLY CAME ACROSS SOME HEARTLESS PERSON PREYING ON UNSUSPECTING,
HEARTBROKEN LOST PET OWNERS WHO WILL DO ANYTHING TO GET THEIR BELOVED
PETS BACK.
PLEASE BEWARE OF THIS PERSON (S). IT INVOLVES A (FICTICIOUS) PLACE
CALLED PET VETCENTRE (P.VETCENTRE@YAHOO.COM).
THEY SAY THEY ARE A VET CENTER THAT HAS VETTED YOUR DOG AND ARE
LOCATED IN CAMEROON (AFRICA). THEY SAY THEY HAVE YOUR DOG AND WANT
YOU TO PAY TO GET HIM/HER BACK. THEY SAY THEY WILL SHIP THE DOG BACK
TO YOU IF YOU SEND THEM THE MONEY. DON'T DO IT!!!
November 20, 2007 3:21 PM PST
divine billa founder of the dog IP address from Cameroon, Africa: 195.24.212.90
| divine billa founder of the dog |
bar_divine_billa@yahoo.com |
Example email:
your shot cut dog is with me,dont boder elot i will give you back ,
i just take him to a pets show in cameroon.limbe south west province
IP Location: Cameroon Data Communication And International
IP Address: 195.24.212.90
Blacklist Status: Clear
Whois Record
inetnum: 195.24.192.0 - 195.24.223.255
org: ORG-AFNC1-RIPE
netname: AFRINIC-NET-TRANSFERRED-20050223
descr: This network has been transferred to AFRINIC
remarks: These IP addresses are assigned in the AFRINIC region.
remarks: Authoritative registration information for this network
remarks: is available for query and modification in
remarks: the AFRINIC whois database: whois.afrinic.net or
remarks: web site: http://www.afrinic.net
remarks: The routing registry information (route(6) objects)
remarks: may be published in any Routing Registry, including
remarks: RIPE Whois Database
country: EU # country is really somewhere in African Region
admin-c: AFRI-RIPE
tech-c: AFRI-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-routes: RIPE-NCC-RPSL-MNT
source: RIPE # Filtered
organisation: ORG-AFNC1-RIPE
org-name: African Internet Numbers Registry
org-type: RIR
address: see http://www.afrinic.net
e-mail:
admin-c: AFRI-RIPE
tech-c: AFRI-RIPE
remarks: For more information on AFRINIC assigned blocks, use
remarks: AFRINIC's whois database, whois.afrinic.net.
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role: The African Internet Numbers Registry
org: ORG-AFNC1-RIPE
address: AFRINIC, see http://www.afrinic.net
admin-c: AFRI-RIPE
tech-c: AFRI-RIPE
nic-hdl: AFRI-RIPE
e-mail:
remarks: For more information on AFRINIC assigned blocks, connect
remarks: to AFRINIC's whois database, whois.afrinic.net.
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
route: 195.24.192.0/19
descr: CAMEROON TELECOMMUNICATIONS
descr: CAMTEL Cidr block
descr: First IPv4 allocation
origin: AS15964
mnt-by: CAMNET
source: RIPE # Filtered
November 18, 2007 1:01 PM PST
And now it's Patrick with an originating IP address out of Lagos, Nigeria: 196.220.6.194
| Patrick |
pattanderson25@yahoo.com |
Example email:
Hello i am Patrick by name and i am mailing you concerning
your lost (they insert your dog's breed here). I found it and in
my possession right now and i will want you to get back to
me as soon as possible on pattanderson25@yahoo.com Hope to
read back from you soon. Patrick
IP Information for 196.220.6.194
IP Location: Nigeria Afrinic
Resolve Host: 196-220-6-194.netcomng.com
IP Address: 196.220.6.194
Blacklist Status: Clear
Whois Record
inetnum: 196.220.6.192 - 196.220.6.195
netname: NGLAES001-ES-PIPE
descr: IP Block Assigned to Site Expetech Services
country: NG
admin-c: DA6-AFRINIC
tech-c: DA6-AFRINIC
status: ASSIGNED PA
mnt-by: NAL-MNT
mnt-lower: NAL-IP-MNT
source: AFRINIC # Filtered
parent: 196.220.0.0 - 196.220.31.255
person: Dayo Akintola
address: Expetech Services
14 Babs Kazeem Street Obanikoro
Lagos, Nigeria.
phone: +234 1 473 2159
e-mail:
nic-hdl: DA6-AFRINIC
mnt-by: NAL-IP-MNT
remarks: The main contact person for IP Assigned to Expetech Services
source: AFRINIC # Filtered
October 9, 2007 9:39 AM PST
And next up we have John Smith with an originating IP address out of Nigeria via Lebanon: 80.89.176.36
| John Smith |
goldenscan4real@yahoo.com |
Example email:
Hello am from United States.. But right now am in Uk. i found
your dog some weeks back and i have treid tracing the owner but
i could not. so i took te dog with me down here to Uk because
i had no one to take care of him. I am an animal dentist,if you need
your dog back just send me an email and w shall know how to send your
dog to you back. but be advised that you will be incharged for the shiping
fee and ay other expenses. email me at goldenscan4real@yahoo.com
IP Information for 80.89.176.36
IP Location: Lebanon Cobranet
IP Address: 80.89.176.36
Blacklist Status: Clear
Whois Record
inetnum: 80.89.176.0 - 80.89.191.255
netname: LB-COBRANET-20050530
descr: Cobranet Limited
country: LB
org: ORG-CL34-RIPE
admin-c: ED758-RIPE
tech-c: ED758-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: COB-MNT
mnt-routes: COB-MNT
source: RIPE # Filtered
organisation: ORG-CL34-RIPE
org-name: Cobranet Limited
org-type: LIR
address: Cobranet Limited
Dima Saleh - Network Administrator
BASHA GARDENS BLDG JISR EL BASHA
BEIRUT
Lebanon
phone: +961 1 512 513
fax-no: +961 1 486 568
e-mail:
admin-c: DSA1978
admin-c: BT68-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: IDM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
person: Elie Dib
address: rafiu babatunde street plot 8, Lekki Phase 1, Lagos, Nigeria
e-mail:
phone: +9613235266
nic-hdl: ED758-RIPE
source: RIPE # Filtered
route: 80.89.176.0/21
descr: Cobranet
origin: AS35074
mnt-by: COB-MNT
source: RIPE # Filtered
route: 80.89.176.0/24
descr: Cobranet
origin: AS35074
mnt-by: COB-MNT
source: RIPE # Filtered
October 6, 2007 2:39 PM PST
And here we go again! Now using the name Rosemary with an IP address: 77.220.2.214 out of Kenya:
| rose marry |
rosemarry_pets@yahoo.com |
Example email:
"hello dear i saw your posting and i decided
to mail you and tell you that i saw this ad
when i was comming back from work one evening
so if still interested mail for more infors."
IP Information for 77.220.2.214
IP Location: Kenya Wash Noc First Network
IP Address: 77.220.2.214
Blacklist Status: Clear
Whois Record
OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
ReferralServer: whois://whois.ripe.net:43
NetRange: 77.0.0.0 - 77.255.255.255
CIDR: 77.0.0.0/8
NetName: 77-RIPE
NetHandle: NET-77-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
NameServer: NS.LACNIC.NET
NameServer: SUNIC.SUNET.SE
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 2006-08-29
Updated: 2006-09-07
== Additional Information From whois://whois.ripe.net:43 ==
inetnum: 77.220.0.0 - 77.220.15.255
netname: ACL-WASH-NET1
descr: Wash NOC First Network
country: KE
admin-c: NMC2005-RIPE
tech-c: NMC2005-RIPE
status: ASSIGNED PA
mnt-by: AFSAT-MNT
mnt-lower: AFSAT-MNT
mnt-routes: AFSAT-MNT
source: RIPE # Filtered
role: Network Management Center
address: Wilson Airport Langata Road
phone: +25420608617
fax-no: +25420608626
remarks: trouble:
admin-c: JN669-RIPE
tech-c: NMC2005-RIPE
nic-hdl: NMC2005-RIPE
remarks: Iway service
mnt-by: AFSAT-MNT
source: RIPE # Filtered
abuse-mailbox:
09/28/2007 01:33 PM PST
Here we go again.........The newest scam is an email out of Nigeria using the name and email address:
| Richard Smith |
richard.smith2007@yahoo.com |
They will request your information so they can buy the pet you have found:
Hello ,
greetings to you,My name is Richard,i saw your pet
placed on petfinder.com, and it suits what i have been
looking for a very long time,based on the description i have
decided to buy it from you, so i will like you to give
me all necessary details about the pet and the last
of it price .I will also like you to know that i am
presently not in the country. i am in west Africa on
a business trip,So i will like to ask you if you
accept to be payed with a check,money order,bankers drafts ?If that
is accepted by you,kindly mail me back with your details
HOME ADDRESS.....
POST CODE............
MOBILE NUMBER.........
LAST PRICE FOR THE PET...........
regards to your family.
Originating IP address: 196.207.10.122
IP Information for 196.207.10.122
IP Location: Nigeria Netcom Africa Limited
Resolve Host: 196-207-10-122.netcomng.com
IP Address: 196.207.10.122
Blacklist Status: Clear
Whois Record
inetnum: 196.207.10.120 - 196.207.10.123
netname: NGRVSI017-SI-ENOF
descr: IP Block Assigned to SITL - Enofmeans
country: NG
admin-c: JE3-AFRINIC
tech-c: JE3-AFRINIC
status: ASSIGNED PA
mnt-by: NAL-MNT
mnt-lower: NAL-IP-MNT
source: AFRINIC # Filtered
parent: 196.207.0.0 - 196.207.15.255
person: Joseph Edokpolo
address: SITL Nigeria Limited
Block A2-1 Sura Complex
Simpson Street Lagos, NG
phone: +234 803 329 1473
e-mail:
nic-hdl: JE3-AFRINIC
mnt-by: NAL-IP-MNT
remarks: The main contact person for IP Assigned SITL Clients
source: AFRINIC # Filtered
09/18/2007 07:00 PM PST
Same scam (found pet, flew it out of country, please send money), different name and email.
Scammers now targeting people in the UK using the following name and email addresses (read full story below):
| ngaliza_stock ngalizian |
ngaliza_stock@yahoo.com
deltair_manchester@yahoo.co.uk |
09/06/2007 12:01 AM PST
Beware of any email with the subject "I have seen your pet".
It is the same people listed below, they are now using the name and email address:
| hurg hurgens |
hurgens06@yahoo.com |
If you respond to the email, they will tell you that Mary Shipper rescued your pet and to contact her at mary_shipper@yahoo.com. She will then ask you for details about your pet to prove ownership, after you give her a
description, she will tell you it matches and inform you that she had to take your pet to Africa with her. At this point she will ask you to send a money order to Africa
so she can fly your pet back to you. It's not just dog owners, they are targeting cat owners too.
Originating IP address: 77.220.0.161
From: hurg hurgens [mailto:hurgens06@yahoo.com]
Sent: Wednesday, September 05, 2007 7:27 PM
Subject: i have seen your pet
IP Location: Kenya Wash Noc First Network
IP Address: 77.220.0.161
Blacklist Status: Clear
OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
ReferralServer: whois://whois.ripe.net:43
NetRange: 77.0.0.0 - 77.255.255.255
CIDR: 77.0.0.0/8
NetName: 77-RIPE
NetHandle: NET-77-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
NameServer: NS.LACNIC.NET
NameServer: SUNIC.SUNET.SE
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 2006-08-29
Updated: 2006-09-07
== Additional Information From whois://whois.ripe.net:43 ==
inetnum: 77.220.0.0 - 77.220.15.255
netname: ACL-WASH-NET1
descr: Wash NOC First Network
country: KE
admin-c: NMC2005-RIPE
tech-c: NMC2005-RIPE
status: ASSIGNED PA
mnt-by: AFSAT-MNT
mnt-lower: AFSAT-MNT
mnt-routes: AFSAT-MNT
source: RIPE # Filtered
role: Network Management Center
address: Wilson Airport Langata Road
phone: +25420608617
fax-no: +25420608626
remarks: trouble:
admin-c: JN669-RIPE
tech-c: NMC2005-RIPE
nic-hdl: NMC2005-RIPE
remarks: Iway service
mnt-by: AFSAT-MNT
source: RIPE # Filtered
abuse-mailbox:
08/24/2007 03:35 AM PST
Apparently, they have recruited someone in the US to help with this scam. Please be aware that they are using the email addresses and IP addresses below:
They are using two yahoo addresses:
mary_shipper@yahoo.com
greenanimal007@yahoo.com |
Originating email came from three US IP addresses : 172.20.118.142, 172.20.29.176 and 204.127.224.81
Details on these IP addresses are below:
172.20.118.142 - greenanimal007@yahoo.com
172.20.29.176 - mary_shipper@yahoo.com
OrgName: Internet Assigned Numbers Authority
OrgID: IANA
Address: 4676 Admiralty Way, Suite 330
City: Marina del Rey
StateProv: CA
PostalCode: 90292-6695
Country: US
NetRange: 172.16.0.0 - 172.31.255.255
CIDR: 172.16.0.0/12
NetName: IANA-BBLK-RESERVED
NetHandle: NET-172-16-0-0-1
Parent: NET-172-0-0-0-0
NetType: IANA Special Use
NameServer: BLACKHOLE-1.IANA.ORG
NameServer: BLACKHOLE-2.IANA.ORG
Comment: This block is reserved for special purposes.
Comment: Please see RFC 1918 for additional information.
Comment:
RegDate: 1994-03-15
Updated: 2002-09-12
OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: Internet Corporation for Assigned Names and Number
OrgAbusePhone: +1-310-301-5820
OrgAbuseEmail:
OrgTechHandle: IANA-IP-ARIN
OrgTechName: Internet Corporation for Assigned Names and Number
OrgTechPhone: +1-310-301-5820
OrgTechEmail:
204.127.224.81 - mary_shipper@yahoo.com
OrgName: AT&T WorldNet Services
OrgID: ATTW
Address: 200 S. Laurel AVE.
City: MIDDLETOWN
StateProv: NJ
PostalCode: 07748
Country: US
NetRange: 204.127.0.0 - 204.127.255.255
CIDR: 204.127.0.0/16
NetName: ATTPLS
NetHandle: NET-204-127-0-0-1
Parent: NET-204-0-0-0-0
NetType: Direct Allocation
NameServer: DS1.WORLDNET.ATT.NET
NameServer: DS2.WORLDNET.ATT.NET
NameServer: DS3.WORLDNET.ATT.NET
NameServer: DS4.WORLDNET.ATT.NET
Comment: __________________________________________
Comment: For matters pertaining to abuse, harassment
Comment: or spam, please contact
Comment: __________________________________________
RegDate:
Updated: 2005-05-25
RTechHandle: JC645-ARIN
RTechName: Craig, John
RTechPhone: +1-314-770-3395
RTechEmail:
08/10/2007 11:15 AM PST
If you have received an email from:
jacksonwhite@outgun.com OR kenedywhite@outgun.com concerning a dog found on the street in California, a dog sold at a pet show, a dog won in a contest or just a request for information about your dog, please be aware that this is a SCAM. They will tell you that they are Christian Missionaries that have taken your dog back to Africa with them, and then ask for money to return your dog. This is a scam with an IP address originating out of Cameroon, Africa with the intent to extort money from you. Do not believe these emails or respond. If you have been in contact with these people or paid them any money, please STOP ALL CONTACT and file a complaint with the http://www.ic3.gov/
Originating email came from five IP addresses : 41.204.72.98, 41.204.72.52, 41.204.72.4, 41.204.72.86 and 41.204.72.84
Blocked from Dog Detective on August 10th.
Details on this IP address are below:
inetnum: 41.204.64.0 - 41.204.95.255
org: ORG-IA6-AFRINIC
netname: CM-CAMTEL-20060602
descr: Data communication and international
descr: telecommunication of Cameroon
country: CM
admin-c: NED2-AFRINIC
tech-c: OF1-AFRINIC
tech-c: JN1000-AFRINIC
tech-c: TAJJ1-AFRINIC
status: ALLOCATED PA
mnt-by: AFRINIC-HM-MNT
mnt-lower: CAMTEL-MNT
source: AFRINIC # Filtered
parent: 41.0.0.0 - 41.255.255.255
|
Sign up for
