419 Scammers Get Smart With New Domains - Assistance From US Co-Conspirators

419 Scammers Get Smart With New Domains - Assistance From US Co-conspirators 

DATELINE: HUKOU, TAIWAN

419 scammers, so-called after the Nigerian criminal code statute
dealing with advance fee fraud, are getting smarter every
day.  Recently a friend sent this reporter the following email
(personal details removed).  This new development in 419
scamming techniques is significant.  Notice the website and
email domains mentioned:

----- Original Message -----
From: CAREER REVIEW COUNCIL
(Engr. Kenneth Hager)
To: [omitted]

Sent: Sunday, December 30, 2007 12:07 PM
Subject: TOTAL LETTER
OF EMPLOYMENT OFFER/ TERMS OF AGREEMENT FOR CONTRACT SERVICES
TOTAL
LETTER OF EMPLOYMENT OFFER/ TERMS OF AGREEMENT FOR CONTRACT
SERVICESJOB REF: TOTAL/NIG/ (OPL)/223-07        
   

Dear [omitted]   

The Human Resources Department were able to resolve the status of
your application.   On this note, We hereby congratulate you on
the success of your application and as such we have attached to you
the Appointment Letter/Terms of Agreement for Total Services that
transcends any written document.   You are therefore required to
follow these procedures ASAP so as to complete your employment
formalities with Total Petroleum Company:  You are to Apply for
Work-Permit Visa; Forward; i) Scanned International passport and
passport No. details.ii) Your Appointment documents. to The Nigerian
Immigration Consulate via Email attachment, Contact Person:
Comptroller General. George Nnamani Email:
workpermit-visa@nigeria-immigration-gov.com Tel: +234-803-966-9011
Also, if the Terms of Agreement attached herewith is in concord to
your approval, kindly sign/endorse and return the last column to us
immediately to Head Office via:   info@totalpetroleumng.com and
then furthermore, procure your travel papers from the Nigerian
Immigration Consulate as highlighted above.We hereby once more
congratulate you on the success of your application to work with
TOTAL PETROLEUM PLC amongst many that had applied and thereby
instruct you to expedite all requirements as aforementioned above in
due time. Do get back to us with developments and updates regarding
your most preferred relocation date.Regards,Engineer James
Brown,Recruitment Terminal AgentRegional HR Divisional Manager,Career
Review Council, P. M. B. 456Total Building, Wuse Mile 2,
Abuja.enquiries@totalpetroleumng.com.....................................C/O
The Human Resources (HR) Department, Mr. Peter Clever- HR Principal
ManagerTotal Petroleum Plc            
         4 Afribank Street, VI Lagos.Mobile:
+2347032714320humanresources@totalpetroleumng.com 24hr Customer Care
Line: 00923482495475Fax (09) 811-40 41, (09) 611-40 43

---

In the past, 419 scammers were easily identified by their use of
free email hosts such as yahoo, gmail, etc., so it was easy to spot a
scam email.  However, these scammers are getting smarter, and
they are also getting help from co-conspirators within the USA. 
These domains and websites are designed to harvest passport and
identity documents from unsuspecting victims.  Federal and
international agencies around the world are investigating this new
development. 

Referenced in the above email are 2 domains worth noting. 
These domains are new, and in one case, only a few hours old and yet
already being used to perpetrate fraud.  There can be no doubt
as to why these domains were created. 

1: nigeria-immigration-gov.com - This domain is absolutely not
a government owned and operated domain.  Public records for this
domain show the following information:

Domain Name.......... nigeria-immigration-gov.com
 
Creation Date........ 2007-12-02
  Registration Date....
2007-12-02
  Expiry Date.......... 2009-12-02
 
Organisation Name.... Scott Brown
  Organisation Address. 25
Dunleavey Brook Rd
  Organisation Address.
 
Organisation Address. Uxbridge
  Organisation Address.
01569
  Organisation Address. MA
  Organisation
Address. UNITED STATES

Admin Name........... Scott Brown
 
Admin Address........ 25 Dunleavey Brook Rd
  Admin
Address........
  Admin Address........ Uxbridge
 
Admin Address........ 01569
  Admin Address........ MA
 
Admin Address........ UNITED STATES
  Admin Email..........
 
Admin Phone.......... +1.9897850398
  Admin
Fax............

Tech Name............ Hostmaster Hostmaster
 
Tech Address......... 1375 Peachtree St.
  Tech
Address......... Level A
  Tech Address......... Atlanta
 
Tech Address......... 30309
  Tech Address......... GA
 
Tech Address......... UNITED STATES
  Tech Email...........
 
Tech Phone........... +1.8889321997
  Tech Fax.............
+1.7177035107
  Name Server.......... dns2.earthlink.net
 
Name Server.......... dns3.earthlink.net 

2: totalpetroleumng.com - This is a bogus website that isn't even
finished.  Public information for this domain is:

Domain Name.......... totalpetroleumng.com
  Creation
Date........ 2007-12-29
  Registration Date.... 2007-12-29
 
Expiry Date.......... 2008-12-29
  Organisation Name....
Adriana Mejia
  Organisation Address. 72 Sutter st.
 
Organisation Address.
  Organisation Address. san jose
 
Organisation Address. 95110
  Organisation Address. CA
 
Organisation Address. UNITED STATES

Admin Name...........
Adriana Mejia
  Admin Address........ 72 Sutter st.
 
Admin Address........
  Admin Address........ san jose
 
Admin Address........ 95110
  Admin Address........ CA
 
Admin Address........ UNITED STATES
  Admin Email..........
 
Admin Phone.......... +1.408-297-1211
  Admin
Fax............

Tech Name............ Microsoft Office Live
 
Tech Address......... One Microsoft Way
  Tech
Address.........
  Tech Address......... Redmond
 
Tech Address......... 98052
  Tech Address......... WA
 
Tech Address......... UNITED STATES
  Tech Email...........
 
Tech Phone........... +1.8665915483
  Tech Fax.............
 
Name Server.......... ns1.officelive.com
  Name
Server.......... ns2.officelive.com

This email came with very convincing, sophisticated documentation
that might fool the unsuspecting into giving out their personal and
private information.  The documents use image files that cannot
be easily modified by the average person, and the documents are in
the Microsoft Word format.  Be sure to check the validity of any
offer before you send any information!