S! all,

This is mainly directed at the blokes across the pond. I got an e-mail from a guy who says he's a barristor in London, long story short. I believe it's a scam of some sort, I could of just deleted it and moved on but if this is a scam i want to nail the bastard, so can anybody tell me if there exsist a domain name that would have [email protected]? i've tried to search ot online but to no avail, anyway i have been in contact with the FBI on this one, but i was doing a little research myself.

Thanks for the help

all them idiots that call themselves lawyers with a deal that would only match that of the lottery itself wether they come from London or Africa are nothing but a scam mainly directed at senior citizens that might not have all thier cookies in one basket. I get at least one a month usually coming from a lawyer of a huge oil baron in africa that needs assistance in the transfer of the funds. sometimes they go all out and even give a phone number you can call for specific details,,,,,,,,my best idea on the matter is to find the best virus you have thats locked up in your antivrus and send it to them,,,,either that or play games with them. get all interested in thier scam and do everything except givve them your bank number or CC number or phone number,,,,,,,if anything give them a false number thatll lead to a peticular government agency,,,after all,,,its thier job to sort out the garbage isnt it.........personally myself..........I'd rather get thier personal info and pay them a little visit.....givvem a biyatch slap upside the head for spamming me......

I get tons of them ("grand poobah of Nigerian Royal Court...inherited 25 zillion dollars) as I do international business. Just blow it off....

Be advised, there is even one (at least) posing as a vet of Iraqi campaign... ("Three Kings" meets Nigerian Prince) "we discovered a ton of Saddam's money...help me launder it" kinda' stuff.

It's all rubbish...I get 3-4 a week....

I got one from an Ebay spoof. Very well, done, actually. Well, the email was. Made it look like it was from ebay (even to the point of putting, in the fine print, "Ebay does not send emails to account holders"). Anyways, I don't have an ebay account, so I knew it was fishy to begin with. I ended up following the links and such, and Vlad was able to get into their FTP. Vlad and I were searching through it, found they were also doing a "Help the tsunami victims" thing as well. Still don't know why Vlad didn't blow it up... what's up with that man?

Hmmm,

I checked with internic and the following ifo was returned...

Results for london.com


Whois Server Version 1.3

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to www.internic.net
for detailed information.

Domain Name: LONDON.COM
Registrar: REGISTER.COM, INC.
Whois Server: whois.register.com
Referral URL: www.register.com
Name Server: UDNS1.ULTRADNS.NET
Name Server: UDNS2.ULTRADNS.NET
Status: REGISTRAR-LOCK
Updated Date: 17-feb-2005
Creation Date: 07-nov-1997
Expiration Date: 06-nov-2006


A little further digging...

www.london.com (213.161.77.145)

Traceroute IP Owner Whois Dig Host Google:link
TRACEROUTE 213.161.77.145
Green=fast, Orange=medium, Red=Slow link from United Kingdom
Hop Router name IP Address ms ms ms
1 gw12k-hex-g2-0-gbic.uk2net.com 213.239.57.1 0 0 0
2 217.163.4.33 217.163.4.33 3 1 0
3 ge-6-0.core1.London1.Level3.net 212.187.131.45 11 1 0
4 pos7-2.mpr2.lhr1.uk.above.net 208.185.188.185 3 1 1
5 so-4-1-0.cr2.lhr3.uk.above.net 208.185.156.2 3 1 1
6 pos1-0.er1a.lhr3.uk.above.net 208.184.231.162 3 1 1
7 general.londonmarketing.com 213.161.77.145 5 1 1

top
IP OWNER 213.161.77.145
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms www.apnic.net/db/dbcopyright.html

inetnum: 213.0.0.0 - 213.255.255.255
netname: RIPE-CIDR-BLOCK
descr: Not allocated by APNIC
remarks: ------------------------------------------------------
remarks:
remarks: Important:
remarks:
remarks: Details of networks in this range are not registered
remarks: in the APNIC Whois Database.
remarks:
remarks: Please search the RIPE Whois Database, which contains
remarks: details of IP addresses allocated in Europe, the
remarks: Middle East, and northern Africa:
remarks:
remarks: website: www.ripe.net/perl/whois
remarks: command line: whois.ripe.net
remarks:
remarks: ------------------------------------------------------
country: AU
admin-c: IANA1-AP
tech-c: IANA1-AP
mnt-by: MAINT-APNIC-AP
mnt-lower: MAINT-APNIC-AP
status: ALLOCATED PORTABLE
changed: hm-changed @ apnic.net 20030403
changed: hm-changed @ apnic.net 20040926
source: APNIC

role: Internet Assigned Numbers Authority
address: see www.iana.org.
e-mail: nobody @ apnic.net
admin-c: IANA1-AP
tech-c: IANA1-AP
nic-hdl: IANA1-AP
remarks: For more information on IANA services
remarks: go to IANA web site at www.iana.org.
mnt-by: MAINT-APNIC-AP
changed: nobody @ apnic.net 20020530
source: APNIC


top
WHOIS london.com

Whois Server Version 1.3

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to www.internic.net
for detailed information.

Domain Name: LONDON.COM

Whois Server: whois.register.com
Referral URL: www.register.com
Name Server: UDNS1.ULTRADNS.NET
Name Server: UDNS2.ULTRADNS.NET
Status: REGISTRAR-LOCK
Updated Date: 17-feb-2005
Creation Date: 07-nov-1997
Expiration Date: 06-nov-2006


>>> Last update of whois database: Sat, 21 May 2005 10:38:24 EDT <<<



Domain Name: london.com

Created on..............: 07 Nov 1997 00:00:00
Expires on..............: 06 Nov 2006 00:00:00

Registrant Info:
NJDomains, Abuse Contact: abuse @ mail.com
Gerald Gorman
33 Knightsbridge Rd.
Piscataway, NJ 08854
US
Phone: 2124254200
Fax..: none
Email: abuse @ [email protected]

Administrative Info:
NJDomains, Abuse Contact: abuse @ mail.com
Gerald Gorman
33 Knightsbridge Rd.
Piscataway, NJ 08854
US
Phone: 2124254200
Fax..: none
Email: abuse @ [email protected]

Technical Info:
NJDomains, Abuse Contact: abuse @ mail.com
Gerald Gorman
33 Knightsbridge Rd.
Piscataway, NJ 08854
US
Phone: 2124254200
Fax..: none
Email: abuse @ [email protected]

Billing Info:
NJDomains, Abuse Contact: abuse @ mail.com
Gerald Gorman
33 Knightsbridge Rd.
Piscataway, NJ 08854
US
Phone: 2124254200
Fax..: none
Email: abuse @ [email protected]

Status: Locked

Domain servers in listed order:

udns1.ultradns.net
udns2.ultradns.net




top
DIG 213.161.77.145
;; Warning: Message parser reports malformed message packet.

; <<>> DiG 9.2.1 <<>> -t any -c any 213.161.77.145
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12932
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;213.161.77.145. ANY ANY

;; AUTHORITY SECTION:
. 10800 IN SOA A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. 2005052201 1800 900 604800 86400

;; Query time: 43 msec
;; SERVER: 213.239.57.3#53(213.239.57.3)
;; WHEN: Mon May 23 15:53:14 2005
;; MSG SIZE rcvd: 107

top
HOST www.london.com
rcode = 0 (Success), ancount=1
The following answer is not authoritative:
The following answer is not verified as authentic by the server:
145.77.161.213.IN-ADDR.ARPA 43199 IN PTR general.londonmarketing.com
For authoritative answers, see:
77.161.213.IN-ADDR.ARPA 43199 IN NS ns.above.net
77.161.213.IN-ADDR.ARPA 43199 IN NS ns3.above.net
Additional information:
ns.above.net 1304 IN A 207.126.96.162
ns3.above.net 2917 IN A 207.126.105.146


FULL

rcode = 3 (Non-existent domain), ancount=0
Unable to get information about domain -- try again later.

And there web address... www.londontown.com/

LOL Kit...

Yep, those 'scams' are called 'phishing'. They use real Official looking Email and websites to spoof the user into giving up their personal banking or account info.

If you think it's a scam, call the bank or business and ask them directly.