Deadbeats' Hall of Lame
2009 419 Scam Edition

WARNING!

This page created on January 1, 2009 for 419'ers in 2009

Subject: How Can I Invest In Your Country?
Date:        1/1/2009 15:41
Received:    1/1/2009 15:57
From:        Alhaji Mustapha Kamaradin, alhaji.kamaradin1@hotmail.co.uk
To:          undisclosed-recipients:;

See the spam

Pushing crap through Bahrain via American proxy rape. Spammer hails itself as
a Morrocan based in Nigeria, and is Muslim, and this is why he has problems.
No, the problem is that the spammer is a criminal, the rest is irrelevant.
But when it becomes time to make a Nigeria page, since he claims it, it will
get linked to there. Hotmail UK drop. Lots of bad behavior in just one spam.

See the lookups

UPDATE: January 2, 2008: Hotmail indicates they have taken action. I don't personally
believe them, but I will log it anyways.

See the lookups

Subject: WITH DUE RESPECT.
Date:        1/5/2009 06:53
Received:    1/5/2009 14:00
From:        maliki_ab@centrum.cz
To:          no To-header on input, unlisted-recipients:;

See the spam

Spam from Burkina Faso and going through a Czech server. No respect shown to me.

See the lookups

And this same rogue ISP from Burkino Faso is getting more attention as I am posting
proof that one of their AFRINIC WHOIS listed addreses is not valid.

See the denial

However, not to be outdone, the contact in the RIPE WHOIS for the Czech network
is also invalid.

See the denial

Subject: Investment Contract Offer
Reply-to: robertclark@web2mail.com
Date:        1/28/2009 06:47
Received:    1/28/2009 11:37
From:        Barr. Robert Clark, robertclark@chambers.com
Reply-To:    robertclark@web2mail.com
To:          undisclosed-recipients:;

See the spam

Investment variant on the 419 scam theme. Nigeria origination and a disposable webmail.

See the lookups

Subject:  Respond Immediately
Date:        1/31/2009 09:51
Received:    1/31/2009 15:01
From:        Martha Pettway, mpettway@alasu.edu
To:          undisclosed-recipients:;

See the spam

419'er raping a blind school server. Yahoo drop, but in Taiwan, claiming a reputable bank in Vietnam.
There is no such thing as a reputable bank in Vietnam except having a reputation for corruption.

See the lookups

Yahoo gets a denial as their forwarding for Taiwan Yahoo complaints is unknown. Hey,
that's an internal problem, not me making a mistake.

See the denial

Subject:  Dear Friend,     Good day and how are you doing today, I am Mr Ken Jonathan a staff of Royal Bank Of Scotland,Manchester,United Kingdom and I have a business proposal for you worth 12.5 Million Pounds. If you are interested, please get back to me via my private email address below: mrkenjonathan04@live.com
Date:        2/7/2009 19:22
Received:    2/7/2009 19:19
From:        Mr.Ken, rocco23@cox.net
Reply-To:    mrrichardssmith02@jmail.co.za
To:          undisclosed-recipients:;

See the spam

Sent via Cox from a blind server on FDC. Live.com drop. Entire scam in the subject field.

See the lookups

Subject: From: Laarnie .E. Enriquez!!!
Date:        2/7/2009 22:20
Received:    2/7/2009 22:19
From:        qlaarnieeph07, qlaarnieeph07@gmail.com
Reply-To:    qlaarnieeph@yahoo.com.hk
To:          undisclosed-recipients:;

See the spam

Wow, so excited, this self-claimed Filipino douchebag lies and sends garbage through
the blind Google/Gmail service with Gmail and Yahoo Hong Kong drops.

See the lookups

Subject: reply to peterwwong01@gmail.com
Date:        2/11/2009 10:28
Received:    2/11/2009 10:42
From:        Mr Peter Wong, bluhrs@iastate.edu

See the spam

Ah, a liar claiming to not be a liar because he has the "Fear of God". What a load of crap.
This guy has the fear of getting caught, and he will be caught. Well, probably not. I bet
he's in Africa, but gladly raping a United States school to flaunt his Gmail drop.

See the lookups

Subject: ATTENTION
Date:        2/26/2009 14:32
Received:    2/26/2009 14:28
From:        RICHARD CHOONG, jct226@cox.net
Reply-To:    richardchoong101@gmail.com
To:          undisclosed-recipients:;

See the spam

Idiot claming to be from Malaysia, spamming via COX with a Gmail drop.

See the lookups

Subject: VERY URGENT MESSAGE PLEASE GET BACK TO ME SOON
Date:        2/27/2009 01:14
Received:    2/27/2009 11:41
From:        officefail@centrum.cz
To:          no To-header on input, unlisted-recipients:;

See the spam

PanAmSat ones again appears on the radar providing spam support services to this
Hotmail using dirtbag who is raping a Czech server.
Spammer wants to be from the Arab Emirates.

See the lookups

And a pair of denials wraps it up nicely as the actual netblock contact is non-existant
as well as the drop for the server's netblock

See the denial
See the denial

Subject: Remain Blessed,
Date:        3/4/2009 00:46
Received:    3/4/2009 19:29
From:        REV MARK, rmark23@ig.com.br
To:          undisclosed-recipients:;

See the spam

419'er protected by 

See the lookups

Subject: Attention Please,
Date:        3/5/2009 18:30
Received:    3/5/2009 18:27
From:        eze peter, mikeike2009@yahoo.com.
Reply-To:    emmaokafor@hotmail.fr
To:          webmaster@studio42.com

See the spam

419'er abusing a blind system. Wants to get replies via French Hotmail, but wants to send
with a Yahoo drop.

See the lookups

Subject: Dear Beneficiary....
Date:        3/6/2009 00:49
Received:    3/6/2009 10:57
From:        ENGR. DAVID HERITAGE, mrveronrice@hotmail.com
Reply-To:    mrsdorajohnson@gmail.com
To:          undisclosed-recipients:;

See the spam

419'er zombie raping in the UK to relay via another server. Spammer not locatable.
Spammer does use Hotmail as their prefered drop and forged Gmail as his sending address.

See the lookups

Subject: Dear Beneficiary....
Date:        3/5/2009 23:29
Received:    3/6/2009 12:16
From:        ENGR. DAVID HERITAGE, mrveronrice@hotmail.com
Reply-To:    mrsdorajohnson@gmail.com
To:          undisclosed-recipients:;

See the spam

Repeat offender. Appears to be from Camaroon, same as the above spam.
Spammer does use Hotmail as their prefered drop and forged Gmail as his sending address. Still a UK rape.

See the lookups

Subject: United nations have agreed to compensate you with the sum of US$500,000,00 !!!
Date:        3/7/2009 15:13
Received:    3/7/2009 15:09
From:        United nations officemail london, unitednations_officemaillondon@ya
To:          Chris Pickett, chris@studio42.com

See the spam

Abuse of a blind UK server. Forging an Australian Yahoo drop, but operating with a
Gmail drop.

See the lookups

Subject: United Nations have agreed to compensate you with the sum of US$500,000,00 !!!
Date:        3/7/2009 16:11
Received:    3/7/2009 16:09
From:        UNITED NATIONS, unitednations_officemaillondon@yahoo.com.au
To:          Chris Pickett, chris@studio42.com

See the spam

Repeat of the above spam. Same UK abuse. Yahoo forgeries and Gmail drop.

See the lookups

Subject: Dearest beloved
Date:        3/19/2009 14:21
Received:    3/19/2009 14:21
From:        Azin Evelyn, azin.evelyn@yahoo.com
Reply-To:    evelyn-azin@hotmail.fr
To:          undisclosedrecipients:;

See the spam

Wow, all over the place. Goes through Yahoo and uses a Yahoo drop, originating from
Nigeria. Claims to be in the Benin Republic, yet all the low-down happened in Kenya.
Seems to want to be contacted via a French Hotmail drop.

See the lookups

Subject: I request your Willingness/Approval
Date:        3/26/2009 17:27
Received:    3/26/2009 17:29
From:        Mr Jerry Howard, lewistan@oilpods.com
Reply-To:    jj.hh1977@gmail.com

See the spam

419 featuring Thai rape, Dutch abuse and Gmail drop, while claiming to be Scottish.

See the lookups

Subject: Good Day To You
Date:        3/27/2009 04:32
Received:    3/27/2009 10:24
From:        betcher marsha, mbetcher@dorchester2.k12.sc.us

See the spam

Spammer rapes a blind server that belongs to a school. Hotmail drop and wants to be
from Hong Kong.

See the lookups
UPDATE: March 28, 2009

Hotmail earns a major denial. They claim that the drop box used by the spammer is 
not in violation of the terms of usage agreeement. I am reading this as:
Those who abuse other resources to send spam may continue to use their Hotmail drop
because they are not abusing Hotmail resources.

See the denial
UPDATE: May 12, 2009

6 weeks later, Hotmail decides to actually do something and kill the account. Why couldn't
they figure this crap out as quick as they initially chose to ignore the problem?

See the denial

Subject: I await your response 28th March,2009.
Date:        3/28/2009 20:53
Received:    3/28/2009 13:43
From:        Alexander Geisler, alexandermgeisler@hotmail.com
Reply-To:    alexandermgeisler7@hotmail.com
To:          undisclosed-recipients:;

See the spam

Globe hopping stupidity. Claims to be British, yet is from South Africa. German
outgoing server, abuse of Rackspace in Great Britain, and a Hotmail drop.

See the lookups

This African ISP shows no surprises in the areas of incompetence, and as a result of their
negligent behavior, complaints can not be delivered.

See the denial

Subject: YOUR INVITATION TO ACT AS .....
Date:        4/11/2009 06:28
Received:    4/10/2009 10:23
From:        Wayne L Bruyns, waynebrunys1@yahoo.cn
Reply-To:    waynebrunys@yahoo.cn

See the spam

My invitation to act as a criminal? Thai abuse or origination. Comcast business
client abuse. Yahoo China drop box. Claims to be from London.

See the lookups

Subject: YOUR INVITATION TO ACT AS .....
Date:        4/12/2009 22:27
Received:    4/12/2009 11:05
From:        Wayne L Bruyns, waynebrunys1@yahoo.cn
Reply-To:    waynebrunys@yahoo.cn
To:          undisclosed-recipients:;

See the spam

A repeat spam. Again, using relay rape, but this time points to Nigerian origination.
Yahoo China drop box. Claims to be from London.

See the lookups

One of the Nigerian ISP's contact drops bounces due to being disabled. Let's face it, they
aren't going to take action anyways. This counts as a denial.

See the denial

Subject: Read carefuly and respond!
Date:        4/18/2009 12:24
Received:    4/18/2009 12:28
From:        Jack Karim Mr, jack@ltdoffice.net
To:          jack@ltdoffice.net

See the spam

Nothing new, interesting or amusing. Straight up super short contact 419 scam.
Admits to being from Burkina Faso, which is just more admission of it being spam.
Indian relay abuse.

See the lookups

Subject: Re:
Date:        4/28/2009 19:08
Received:    4/28/2009 19:16
From:        Barrister Jacob Craig, barrjacobcraig.adovate@live.co.uk
Reply-To:    barrjacobcraig.adovate@gmail.com
To:          undisclosed-recipients:;

See the spam

Nigerian raping a US Server. Live.co.UK drop for sending, Gmail drop for receiving.

See the lookups

Subject: FUND TRANSFER OF ($9,300,000.00).
Date:        4/30/2009 05:06
Received:    4/30/2009 05:02
From:        Dani Toure, danitoure2@centrum.cz
To:          no To-header on input, unlisted-recipients:;

See the spam

Crap via the Czech Republic via a Saudi Arabian proxy rape for some idiot in Burkina Faso

See the lookups

The Czech ISP doesn't feel their listed SWIP contact needs to be valid. Denial counted

See the denial

And of no surprise, the spammer's ISP still has an invalid drop on their SWIP.
Denial counted here as well

See the denial

Subject: I am Mr. Simon Williams,
Date:        5/4/2009 22:23
Received:    5/4/2009 22:19
From:        mr.simon williams, simonwilliams05@megamail.pt
To:          undisclosed-recipients:;

See the spam

Harvesting addresses to use them wrongly in this one of three spams involving
a Yahoo drop, Benin Republic injection and Portugal abuse.

See the lookups

Subject: I am Mr. Simon Williams,
Date:        5/4/2009 22:22
Received:    5/4/2009 22:19
From:        mr.simon, simonwilliams13@megamail.pt
To:          undisclosed-recipients:;

See the spam

2 of three so far. Again, Benin Republic origination, Yahoo preferred drop and Portugal rape.
Abusing my account used for domain registrations, showing proof of harvesting behaviors.

See the lookups

Subject: I am Mr. Simon Williams,
Date:        5/4/2009 22:23
Received:    5/4/2009 22:25
From:        mr.simon williams, simonwilliams05@megamail.pt
To:          undisclosed-recipients:;

See the spam

Third so far. Nothing new. Benin Republic origination, Portugal rape, Yahoo drop.

See the lookups

Subject: I am Mr. Simon Williams,
Date:        5/4/2009 22:23
Received:    5/4/2009 22:47
From:        mr.simon williams, simonwilliams05@megamail.pt
To:          undisclosed-recipients:;

See the spam

4th and nothing new. Yahoo drop, Benin Republic origination, Portugal rape.

See the lookups

Subject: I am Mr. Simon Williams,
Date:        5/4/2009 22:23
Received:    5/4/2009 23:19
From:        mr.simon williams, simonwilliams05@megamail.pt
To:          undisclosed-recipients:;

See the spam

5th plops into my anti-spam account.
Yahoo drop, Benin Republic origination and Portugal rape.

See the lookups

Subject: I am Mr. Simon Williams,
Date:        5/4/2009 22:23
Received:    5/4/2009 23:19
From:        mr.simon williams, simonwilliams05@megamail.pt
To:          undisclosed-recipients:;

See the spam

6th lands in the webmaster account.
Yahoo drop, Benin Republic origination and PortugalSee the lookups

Subject: Guten Tag
Date:        5/5/2009 07:05
Received:    5/5/2009 10:54
From:        Steve Morgan, s.mrg@consultant.com
Reply-To:    stevmorgan@aol.nl
To:          undisclosed-recipients:;

See the spam

Dutch origination or rape, in See the lookups

Subject: GOODDAY
Date:        5/7/2009 19:37
Received:    5/7/2009 19:37
From:        Greg Williams, greg.williams0987@gmail.com
Reply-To:    greg.williams789@gmail.com
To:          greg.williams0987@gmail.com

See the spam

Bottom feeder routing through India to cover their tracks. Gmail drop for contact.

See the lookups

Subject: From Switzerland
Date:        5/10/2009 15:10
Received:    5/10/2009 15:06
From:        Davide Klaus, webmaster@66.160.190.70
Reply-To:    david.eKlaus@yahoo.com
To:          David.eKlaus@yahoo.de

See the spam

Crap coming out of a non-secured server run by an idiot on the idiot/spammer friendly network
of Hurricane Electric, via some third-world dirtbag in Africa. Yahoo drops.

See the lookups

Subject: From Mr Kristofer Indrek
Date:        5/13/2009 23:08
Received:    5/13/2009 23:03
From:        Kristofer Indrek, indrekris@hansa.ee
Reply-To:    kristoind@aim.com
To:          indrekris@hansa.ee

See the spam

Nigerian abusing a Great Britain server with an AIM drop for a teaser 419.

See the lookups

Subject: CONTACT DHL FOR YOUR PACKAGE
Date:        5/15/2009 13:01
Received:    5/15/2009 12:57
From:        frednonso88@centrum.cz
To:          no To-header on input, unlisted-recipients:;

See the spam

Czech Republic abuse, spewing crap out of the Benin Republic. Benin ISP  uses a Yahoo drop in their SWIP.

See the lookups

It is of no surprise that the Czech USP is still not addressing their invalid
address for their SWIP.

See the denial

Subject: Treat As Urgent.
Date:        5/19/2009 11:34
Received:    5/19/2009 12:06
From:        Good Day, frjio08.200707@gmail.com
Reply-To:    asita_ali@voila.fr
To:          undisclosed-recipients:;

See the spam

We treat all spams here as urgent as we want to help law enforcement catch and stop spammers.
But that is all for nothing when spammers are protected when sending through Google and are
coming from Burkina Faso. MS Word attachment to further waste my time.

See the lookups

Subject: UNITED NATIONS FINANCIAL OPERATIONS
Date:        5/24/2009 13:39
Received:    5/24/2009 13:39
From:        Graham Vavangas, graham.vavangas@bristowgroup.com

See the spam

Great Britain in possible origination, or at least zombie rape. Gmail drop, Yahoo
re-director for emailing. Claiming their investigation revealed I am involved in an
illegal transaction and they'd prefer me to be involved in their illegal transaction
based on the first illegal transaction. Is that along the lines of "two wrongs make a
right?"

See the lookups

Subject: Contact from The BandMaker
Date:        5/25/2009 19:21
Received:    5/25/2009 19:19
From:        janeteng1@hotmail.com
To:          thebandmaker@studio42.com

See the spam

Just proves that spammers harvest from anywhere. Hotmail drop and abuse of a blind UK
server.

See the lookups
UPDATE: June 2, 2009

Hotmail kills the spammer's drop.

See the kill

Subject: LETTER OF DR.EDWARD
Date:        5/28/2009 19:21
Received:    5/28/2009 19:17
From:        Jelks Mboma, colljelky061@gmail.com
To:          undisclosed-recipients:;

See the spam

419 via Gmail, using a PDF file. 1 of 2.

See the lookups

Subject: LETTER OF DR.EDWARD
Date:        5/28/2009 19:20
Received:    5/28/2009 19:23
From:        Jelks Mboma, colljelky061@gmail.com
To:          undisclosed-recipients:;

See the spam

Second PDF-based 419 scam. Again via Gmail. 2 of 2.

See the lookups

Subject: CODE NO;822
Date:        5/30/2009 13:30
Received:    5/30/2009 13:25
From:        OFFICE OF THE SENATE HOUSE, info.steve@uk2.co.uk
Reply-To:    atmclaimsofficer@uko2.co.uk
To:          undisclosed-recipients:;

See the spam

419 acting like a lottery-type scam, yet they say "inheritance". It's all crap anyways.
Nigerian origination.

See the lookups

Subject: REGARDS
Date:        6/3/2009 00:41
Received:    6/3/2009 10:18
From:        wilson simwa, wilsonsimwa31@gmail.com
To:          undisclosed-recipients:;

See the spam

419 dirtball claiming to be from South Africa but hiding in Gmail.
Word document attachment that contains the scam itself.

See the lookups

Subject: My last and final email(David Walt Esq)
From: "David Walt Esq" 
Date:        6/3/2009 18:47
Received:    6/3/2009 19:01
From:        David Walt Esq, info@beneficiary.com
Reply-To:    davidwaltesq@yahoo.co.jp
To:          undisclosed-recipients:;

See the spam

419 Nigerian with a disposable Japanese Yahoo drop, and abusing an Africa ISP in Botswana
for their lies.

See the lookups

Subject: PLS ARE YOU STILL ALIVE/ FROM INVESTIGATION OFFICE APPROVED $5.7M IN YOUR NAME SINCE) REPLY TODAY?
Date:        6/3/2009 07:12
Received:    6/5/2009 11:05
From:        MRS.FARIDA (APPROVED FUNDS SETTLEMENT), efcc.approved.settlement@ef
Reply-To:    efcc_approved001@live.com

See the spam

Nigerian abusing another network. Live.com/Hotmail drop.
Claims to be a crime investigation person. Odd how they are committing a crime.

See the lookups

Subject: TOP SECRET AND CONFIDENTIAL....
Date:        6/7/2009 11:39
Received:    6/7/2009 11:43
From:        Nanado Benjamin, frjio08.20010ka5@gmail.com
Reply-To:    nanado_benjamin2000@voila.fr
To:          undisclosed-recipients:;

See the spam

Attachment reveals the spammer to claim their scam is based in Burkina Faso.
Gmail abuse with a French ISP as the target drop destination.

See the lookups

Subject: Attn; Recipient, Contact  imf
Date:        6/17/2009 16:02
Received:    6/17/2009 15:58
From:        92van253, 92van253@kpn-officedsl.nl
To:          undisclosed-recipients:;

See the spam

1 of 10. From the Benin Republic via Dutch rape. Originating ISP has French Yahoo drop.
Hitting my webmaster account is just plain stupid.

See the lookups

Subject: Attn; Recipient, Contact  imf
Message-id: <2e1e0202e242ae.2e242ae2e1e020@p
Date:        6/17/2009 16:07
Received:    6/17/2009 16:04
From:        92van253, 92van253@kpn-officedsl.nl
To:          undisclosed-recipients:;

See the spam

2 of 10. Hitting my domain contact drop box.
From the Benin Republic via Dutch rape. Originating ISP has French Yahoo drop.

See the lookups

Subject: Attn; Recipient, Contact  imf
Date:        6/17/2009 16:07
Received:    6/17/2009 16:04
From:        92van253, 92van253@kpn-officedsl.nl
To:          undisclosed-recipients:;

See the spam

3 of 10 so far. Sent to my personal account.
From the Benin Republic via Dutch rape. Originating ISP has French Yahoo drop.

See the lookups