Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

PHishers are now using our Soldiers as a come-on (vanity)
Email received | June 7, 2006 | Neil E. Wright

Posted on 06/07/2006 11:09:38 PM PDT by Neil E. Wright

             Status: RO
             Return-Path: 
            Delivered-To:  newright@XXXXXXX.net
                Received: from freedomusa.org (unknown [208.2.67.197]) by mx03.roc.ny.frontiernet.net (Postfix) with ESMTP id 7E03E80CAC for ; Fri, 19 May 2006 13:33:09 +0000 (UTC)
               Received: from maildcarg1.dc-host.net.ar (maildcarg1.dc-host.net.ar [200.55.6.132]) by freedomusa.org (8.13.4/8.13.4) with ESMTP id k4JAe58w062296 for ; Fri, 19 May 2006 05:40:06 -0500 (CDT) (envelope-from larrysmith@naveganas.com)
               Received: from conversion-daemon.maildcarg1.dc-host.net.ar by maildcarg1.dc-host.net.ar (iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003)) id <0IZI00I01KIXX8@maildcarg1.dc-host.net.ar> (original mail from larrysmith@naveganas.com) for webmaster@XXXXXXXXXX.org; Fri, 19 May 2006 10:33:08 -0300
                        (GMT)
               Received: from dc-host.net.ar (localhost [127.0.0.1]) by maildcarg1.dc-host.net.ar (iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003)) with ESMTP id <0IZI00GGGLN645@maildcarg1.dc-host.net.ar>; Fri, 19 May 2006 10:33:07 -0300 (GMT)
               Received: from [81.199.144.246] by maildcarg1.dc-host.net.ar (mshttpd); Fri, 19 May 2006 14:33:06 +0100
                   Date:Fri, 19 May 2006 14:33:06 +0100
                   From: "Larry Smith (larrysmith)" 
                 Subject: FROM: Sgt. Larry Smith
               Reply-To: larrysmith_info2005@walla.com
            Message-ID: <3d2fc03cd999.3cd9993d2fc0@dc-host.net.ar>
          MIME-version: 1.0
               X-Mailer: iPlanet Messenger Express 5.2 HotFix 1.21 (built Sep 8 2003)
            Content-type: text/plain; charset=us-ascii
        Content-language: es
 Content-transfer-encoding: 7BIT
       Content-disposition: inline
      X-Accept-Language: es
                 Priority: normal
                     To: undisclosed-recipients:;
         X-Virus-Scanned: by amavisd-new-2.3.2 (20050629) at filter03.roc.ny.frontiernet.net
         X-Mozilla-Status: 8001
        X-Mozilla-Status2: 00000000
                X-UIDL: 1148045591.M331818P25389V0000000000000011I00BBCB96_0.mx03.roc.ny.frontiernet.net,S=2999

FROM: Sgt. Larry Smith
U.S ARMY PERSONNEL
1st Armored Division(IRAQ)

Dear Freind,
My name is Larry Smith , I am an American soldier, serving in the military of the 1st Armored Division in Iraq, As you know we are being attacked by insurgents everyday and car bombs.We managed to move funds belonging to Saddam Hussien's family. The total amount is US$25 Million dollars in cash, mostly 100 dollar bills. We want to move this money to you, so that you may invest it for us and keep our share for banking.
We will take 50%, my partner and I. You take the other 40%.then 10% for expensesno strings attached, just help us move it out of Iraq, Iraq is a warzone. We plan on using diplomatic courier and shipping the money out in one large silver box, using diplomatic immunity.
If you are interested I will send you the full details, my job is to find a good partner that we can trust and that will assist us. Can I trust you? When you receive this letter,kindly send me an e-mail signifying your interest including your most confidential telephone/fax numbers for quick communication also your contact details.
This business is risk free. The box can be shipped out in 48hrs.

Respectfully,
Sgt. Larry Smith


TOPICS: Crime/Corruption; Culture/Society; Miscellaneous; Your Opinion/Questions
KEYWORDS: military; phishers; scam
I actually got this in my mailbox the sometime back ... Just thought I'd give everyone a heads up on what the phishers are trying now.
1 posted on 06/07/2006 11:09:41 PM PDT by Neil E. Wright
[ Post Reply | Private Reply | View Replies]

To: Neil E. Wright

Good grief.


2 posted on 06/07/2006 11:16:38 PM PDT by armymarinemom (My sons freed Iraqi and Afghan Honor Roll students.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Neil E. Wright

Is there no shame anymore?


3 posted on 06/07/2006 11:20:01 PM PDT by CrawDaddyCA (Free Travis McGee!!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: CrawDaddyCA
Is there no shame anymore?

Ah yes. Remember the good old days, when con men were respectable? Times sure have changed.

4 posted on 06/07/2006 11:28:05 PM PDT by opinionator
[ Post Reply | Private Reply | To 3 | View Replies]

To: Neil E. Wright

I'm beginning to think many of these scams originate in the House of Representives, after the Jefferson info started comming out. Both parties sh-t ther pants in unison. The "rest of the story" should be very interesting.


5 posted on 06/08/2006 12:57:26 AM PDT by Waco
[ Post Reply | Private Reply | To 1 | View Replies]

To: Waco
Well, I just did an ARIN whois lookup on the originating IP address and got this:

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 81.0.0.0 - 81.255.255.255
CIDR: 81.0.0.0/8
NetName: 81-RIPE
NetHandle: NET-81-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: NS3.NIC.FR
NameServer: SUNIC.SUNET.SE
NameServer: NS-EXT.ISC.ORG
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate:
Updated: 2005-07-27

Going to the RIPE NCC IP database provides this information:

inetnum: 81.199.144.0 - 81.199.151.255
netname: GilatSatcom-03
descr: Gilat Satcom range
country: il
admin-c: TECH6-RIPE
tech-c: TECH6-RIPE
status: ASSIGNED PA "status:" definitions
mnt-by: AS12491-MNT
mnt-lower: AS12491-MNT
mnt-routes: AS12491-MNT
source: RIPE # Filtered

person: Tech IP Planet
address: 21 Yegia Kapaim St.
address: Petach-Tikva
address: Israel
phone: +972 3 9255015
fax-no: +972 3 9217938
abuse-mailbox: abuse@gilat.net
nic-hdl: TECH6-RIPE
mnt-by: AS12491-MNT
source: RIPE # Filtered

Now, while I am willing to believe just about anything BAD about most of our "leaders" in Congress, I don't think they'd be going to Israel to send their emails. :)

6 posted on 06/08/2006 4:55:20 AM PDT by Neil E. Wright (An oath is FOREVER)
[ Post Reply | Private Reply | To 5 | View Replies]

To: Neil E. Wright
However, doing WHOIS lookup on the domain name, I found this:

   	Registrant:  	
   	Baglietto, Ignacio Esteban
   	
   	Suipacha 1111 piso 29
   	Buenos Aires, Capital Federal C1008AW
   	AR
  	 
   	Domain Name: NAVEGANAS.COM
 
   	Administrative Contact : 	 
   	Baglietto, Ignacio Esteban
   	ibaglietto@dearriba.com
   	Suipacha 1111 piso 29
   	Buenos Aires, Capital Federal C1008AW
   	AR
   	Phone: 5111-51-999-777
  	 
   	Technical Contact : 	 
   	Network Solutions, LLC. 
   	customerservice@networksolutions.com
   	13200 Woodland Park Drive
   	Herndon, VA 20171-3025
   	US
   	Phone: 1-888-642-9675
   	Fax: 571-434-4620
  	 
   	Record expires on 17-Nov-2006 	
   	Record created on 17-Nov-2003
   	Database last updated on 12-Jul-2004

Which makes me wonder if the IP is spoofed, since the domain is registered to a company in Argentina.

7 posted on 06/08/2006 6:00:57 AM PDT by Neil E. Wright (An oath is FOREVER)
[ Post Reply | Private Reply | To 6 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson