Advance Fee Fraud supposedly from Mrs. Nora Igwe. Reply to Mr.David Mark.phone number(+229 6821 8483) WESTERN UNION scam sent by service@timemanagementtraining.com (Reply-To: western.union0021@yahoo.fr) from Originating IP in Benin via server: host.surf22hosting.com. Originating IP: 41.216.44.198 ISP: OPT Benin / Benin Telecom Host Name: 41.216.44.198 Organization: Benin Telecom SA Location: Cotonou, 14 Littoral, Benin. Received: from host.surf22hosting.com ([65.109.239.70]) by COL0-MC3-F13.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900); Mon, 11 Mar 2013 20:02:25 -0700 Received: from localhost.localdomain (localhost [127.0.0.1]) by host.surf22hosting.com (8.14.3/8.12.10) with ESMTP id r2C2qSSH004996; Mon, 11 Mar 2013 22:52:28 -0400 From: "service" <service@timemanagementtraining.com> Reply-To: western.union0021@yahoo.fr Subject: CONTACT WESTERN UNION FOR YOUR MTCN Date: Mon, 11 Mar 2013 22:52:28 -0400 Message-Id: <20130312025228.M25245@timemanagementtraining.com> X-Mailer: OpenWebMail 2.53 X-OriginatingIP: 41.216.44.198 (service) MIME-Version: 1.0 Return-Path: service@timemanagementtraining.com X-OriginalArrivalTime: 12 Mar 2013 03:02:25.0567 (UTC) FILETIME=[06277AF0:01CE1ECE] Attn: Dear, We want to inform you that your $5000 has been release today from western union and we want you to contact Mr.David Mark immediately with this email address mailto:( western.union0021@yahoo.fr ) Or the phone number(+229 6821 8483) Here is the information the western union office need from you. your full name____________ your country_____________ your phone numbers____________ your age_______________ Your occupation_______________ Ask him to give you the question and answer for you to pick up the $5000 he sent to you, he will be sending it $5000 until he finish sending the whole amount to you which is $2.5M USD, One Million Five Hundred Thousands Dollars, you will pay small amount for PIN CODE before you can pick up the money but we don't know the exactly amount. We wish You Good luck Mrs. Nora Igwe.
Please help us keep Internet safer and cleaner by leaving a descriptive comment about 41.216.44.198 IP address
- Hacked Gmail accounts
- WordPress Hacking Attempts
- SSH Hacking Attempts
- Why Can't I See The Exact Address?
DNSBL* - is a list of IP addresses published through the Internet Domain Name Service (DNS) either as a zone file that can be used by DNS server software, or as a live DNS zone that can be queried in real-time. DNSBLs are most often used to publish the addresses of computers or networks linked to spamming; most mail server software can be configured to reject or flag messages which have been sent from a site listed on one or more such lists.
WHOIS** - is a query/response protocol that is widely used for querying databases in order to determine the registrant or assignee of Internet resources, such as a domain name, an IP address block, or an autonomous system number. WHOIS lookups were traditionally performed with a command line interface application, and network administrators predominantly still use this method, but many simplified web-based tools exist. WHOIS services are typically communicated using the Transmission Control Protocol (TCP). Servers listen to requests on the well-known port number 43.
** Approximate Geographic Location - This is NOT the exact geographical location of the person/organization with the given IP address. However, this should still give you a good idea about the area/region where this person/orgranization is located.