free web hosting | website hosting | Web Hosting | Free Website Submission | shopping cart | php hosting

Chaos Project #2

Mawete Maseka


On December 8 2002 we received a message from an individual who had been spammed by an Advance Fee Fraud criminal claiming to be Mrs. Louise Estrada. This person supplied email and website addresses associated with this particular scam, and asked if we might be interested in taking a closer look.

What we found when we accessed the mail account used by this fraudster alarmed us - he appeared to have a victim on the hook in a typical "wash wash" scheme, and had already convinced him to travel from his home in Grenoble, France to Madrid, Spain. At the point in which we entered the discussion, the victim appeared to be emailing the original scammer from Spain, discussing the meetings he had been having with (people who he did not know to be) other members of the criminal gang.

After carefully analysing the available data to assure ourselves that the victim was genuine, and not another reverse scammer, we sent him an urgent warning message. What we did not know was that this would be the start of a campaign, still ongoing after 14 days, in which every single person whom we attempted to contact in order to ask for help in saving M. Maseka from his own foolishness completely ignored our approach.

What follows is a transcript which first shows as much as we have been able to recover of the conversation between "Louise" and M. Maseka. From December 8, when we came in, it includes our attempts to raise a response from anyone who might be in a position to make direct contact with M. Maseka. The complete lack of response from his employers, the French police, a local newspaper, and Interpol is nothing short of shameful.

We have published M. Maseka's real identity in the hope that someone reading this will find a way to contact him, or get some appropriate authority to contact him, and ensure that he is out of danger. We did tell M. Maseka that we would be publishing this page, and specifically offered to conceal his true identity if he so wished. We know that he read that offer, but he did not reply.

Incidentally, this particular 'Louise Estrada' is the same as the one featured in the Louise Estrada thread of "The Lads do an Erap", which can be found at Scam-O-Rama.

 

M. Mawete Maseka - A Kenyan-born, French-resident victim of an Advance Fee Fraud scam.

   = messages from the fraudsters
   = messages from the victim
   = messages from The Chaos Project
 

See bottom of transcript for summary of post-publication updates.

As messages may be deleted from the scammer's account in future, all headers have been reproduced here for later research. However, only messages relating to M. Maseka have been recorded - other messages to and from "Louise" have been omitted; indeed, she didn't seem to be handling any other promising victims in this account, although the same scammer or group have managed to swindle money out of at least one other victim in another account. The scammer usually did not keep copies of the messages he sent to M. Maseka (although he did on a few early occasions). On December 10, we activated the option in the scammer's account to keep copies of sent messages by default, so more outbound messages are available from that date forward.


 

























































This is the earliest message to which we have access. It would appear to be a typical 'first response' message, sent by the scammer to M. Maseka after he had replied to a spam 'format' (inital approach).

From M. Maseka's email address, we could see that he worked at IMAG, a grouping of research institutes in Grenoble, France. Specifically, he worked in the CMP team, although he now seems to have lost his job there (see entries for December 13). The google-cached version of the team's web page includes M. Maseka, and photos of all staff.

The only other context in which M. Maseka turns up in a google search is a past-pupil listing of Lycée Denis Diderot, a French-language school in Nairobi, Kenya, where he apparently sat for his 'BAC' qualification in 1997.

From: "louise estrada"
To: mawete.maseka@imag.fr
Cc:
Subject: Assurance
Date: Wed, 06 Nov 2002 10:45:57 -0500
Content-Type: text/html; charset="iso-8859-15"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [216.139.172.18] by ws1-8.us4.outblaze.com with http for louise338@mail.com; Wed, 06 Nov 2002 10:45:57 -0500
X-Originating-Ip: 216.139.172.18
X-Originating-Server: ws1-8.us4.outblaze.com

Dear Mawete Maseka,

 I thank you for your response and willingness to help me, your mail came to me at the greatest time of need in my life. i understand your plight and you need to be reassured that am very much real thus i will open up to you for the fact that you have shown good faith and trust.

for us to proceed with this transactions, i will need you to contact my attorney in canada who's contact details i will be forwarding to you later so that you will contact and discuss the modus operandi of this transaction, but before you  do that i will like you to forward to me your most private phone number so that i will give you a phone call to discuss this transaction with you after which you will choose which way to go, am not in the position to make a phone call, because of  the high secuirty measures mounted in my house here in Manila philippine, but i will try as this money is my life and hope.

please i will need you to reassure me that you will not sell me out to the philippine Government, because they are not aware of my contact to you neither do they know about this fund which is the last for my family (Myself and Kids) besides they have frozen all my husband account, who is now facing trails. on the other hand i will assure you that i will be very honest with you.

I await to hear from you so that we can proceed.

Louise Mrs.

This message from M. Maseka (the first that we can see) originated from an address that can be verified as oise.imag.fr, strong confirmation that it was sent from within IMAG. It seems safe to assume that this message really did come from Mawete Maseka, who really does work for IMAG.

From: mawete.maseka@imag.fr
To: louise338@mail.com
Cc:
Subject: Re: Dear.
Date: Wed, 06 Nov 2002 14:07:39 +0100
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 519 invoked from network); 6 Nov 2002 13:03:28 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-61.outblaze.com with SMTP; 6 Nov 2002 13:03:28 -0000
Received: from spf6.us4.outblaze.com (205-158-62-33.outblaze.com [205.158.62.33]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gA6D2JMT027891 for <"louise338:mail.com"@mail.com.int>; Wed, 6 Nov 2002 13:02:19 GMT
Received: from imag.imag.fr (imag.imag.fr [129.88.30.1]) by spf6.us4.outblaze.com (8.11.6/8.11.6) with ESMTP id gA6D3Rd74487 for ; Wed, 6 Nov 2002 13:03:27 GMT
Received: from rhin.imag.fr (rhin.imag.fr [147.171.129.2]) by imag.imag.fr (8.11.6/8.11.6) with ESMTP id gA6D3P910369; Wed, 6 Nov 2002 14:03:25 +0100 (MET)
Received: from imag.fr (oise.imag.fr [147.171.129.34]) by rhin.imag.fr (8.10.2+Sun/jtpda-5.3.3) with ESMTP id gA6D3Ef19313 ; Wed, 6 Nov 2002 14:03:14 +0100 (MET)
Message-Id: <3DC9141B.55A8E2AB@imag.fr>
Reply-To: mawete.maseka@imag.fr
Organization: TIMA-CMP
X-Mailer: Mozilla 4.7 [en] (WinNT; I)
X-Accept-Language: en,x-ns1c6lYHymNNh6,x-ns2U1f0btwUq5f
Mime-Version: 1.0
References: <200211061221.gA6CLej04882@ebene.inrialpes.fr>
Content-Type: multipart/alternative; boundary="------------D760E0BC4F22151130BA6BE1"
X-Mailscanner: Found to be clean
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

Dear Mrs Louise Estrada,

Your message and it contents were received.
I am not going to hide that, I have already received  this kind of messages.

With all my due respects,I am attracted in this kind of deals but I want to be sure
that for once this is a seriuous deal.

That's why, before I start any thing you,  I want you to send a kind of
proof to me.
Some thing that can convince me that this is not part of these kind of silly
things we  always have on the internet.

I will be waitting your reply.

Best Regards,
Mawete Maseka.
 

Mrs Louise Estrada wrote:

Dear,

Listen and read carefully, i have found seriousness in
you and that is why i have decided to involve you in
this transaction o.k , i am  a woman of substance and
of great importance to my nation and the society in
general. i will not entertain any act of unseriousness
from you in this transaction o.k

you must take instructions from me at all time and for
security reasons you will only communicate me only by
my email for now o.k.

I,am Mrs LOUISA EJERCITOR ESTRADA , the wife of Mr
Joseph Estrada the former president of Philippine
located in the south east Asia. My husband was
presently impeached from office by a backed uprising
of mass demonstrators and the senate.

During my husband's regime as president of
Philippine, I realised US$120.5millions of dollars
from various contract projects I executed
successfully. I had planed to invest this money in
real estate and industral production.

Now i have used an NGO to move the money to a bank
in overseas, i want you to assist me transfer the
money to your bank account as the beneficiary because
i do not want the philippine government to trace  and
confiscate this one. they have confiscated all our
asset. This is the only money left for me and my
family o.k
Now if you agree, i will offer you 25% of the total
fund, and you must keep it very secret and
confidential o.k. There is no risk involved, all i
want from you is , your complete name, address, bank
particulars phone and fax numbers, company name if any
and you must be honest o.k
this money will be transfered to your account as soon
as you release this requirements o.k
i look forward to having a good relationship with
you o.k
regards,

Mrs Louise Estrade

(Wife to former philippine president)

Upon your acceptance to deal with me i will forward to you the contact informations of my Attorney in canada for you to contact and discuss the terms.

From: mawete.maseka@imag.fr
To: louise338@mail.com
Cc:
Subject: Re:Assurance
Date: Thu, 07 Nov 2002 11:07:02 +0100
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 2208 invoked from network); 7 Nov 2002 10:03:12 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-61.outblaze.com with SMTP; 7 Nov 2002 10:03:12 -0000
Received: from spf8.us4.outblaze.com (205-158-62-35.outblaze.com [205.158.62.35]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gA7A22ni020839 for <"louise338:mail.com"@mail.com.int>; Thu, 7 Nov 2002 10:02:02 GMT
Received: from imag.imag.fr (imag.imag.fr [129.88.30.1]) by spf8.us4.outblaze.com (8.11.6/8.11.6) with ESMTP id gA7A2ph73691 for ; Thu, 7 Nov 2002 10:03:07 GMT
Received: from rhin.imag.fr (rhin.imag.fr [147.171.129.2]) by imag.imag.fr (8.11.6/8.11.6) with ESMTP id gA7A2m912163; Thu, 7 Nov 2002 11:02:48 +0100 (MET)
Received: from imag.fr (oise.imag.fr [147.171.129.34]) by rhin.imag.fr (8.10.2+Sun/jtpda-5.3.3) with ESMTP id gA7A2bf27707 ; Thu, 7 Nov 2002 11:02:37 +0100 (MET)
Message-Id: <3DCA3B46.3DFF04BC@imag.fr>
Reply-To: mawete.maseka@imag.fr
Organization: TIMA-CMP
X-Mailer: Mozilla 4.7 [en] (WinNT; I)
X-Accept-Language: en,x-ns1c6lYHymNNh6,x-ns2U1f0btwUq5f
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="------------289F35907EC65FC4A5B3A35D"
X-Mailscanner: Found to be clean
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

Dear Mrs Louise,

I acknowledge good receipt of your message.
I have a funny feeling that you are an upright woman and
It's a pleasure to meet you.

I perfectly understand your delicate situation and It will be
a honor for me to help and deal with you.

I can see a  restless mother for her children and familly future.
I have my self a 3 years old young boy and I would like to ensure
him a beautiful future.

Finally I'd like to set your mind at rest :
I am honest with those who are honest. Far from me any kind of
ideas of treason. I knew tops and bottoms and now my only wish
is of living in peace. So you can rely on me.

My most private phone number is +33 6 99 19 44 25 but before calling me
I would like you to give me date by email to tell me the time you are going
to call me. (Please, precise French or philippine time).

So long.

Yours with regards,
Mawete.

From: "louise estrada"
To: mawete.maseka@imag.fr
Cc:
Subject: Re:Assurance
Date: Thu, 07 Nov 2002 23:52:46 -0500
Content-Type: text/html; charset="iso-8859-15"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [216.139.172.18] by ws1-10.us4.outblaze.com with http for louise338@mail.com; Thu, 07 Nov 2002 23:52:46 -0500
X-Originating-Ip: 216.139.172.18
X-Originating-Server: ws1-10.us4.outblaze.com

Dear Mawete Maseka,

Thank you for your mail.and perfect understanding of my predicament. unfortunately i can not assure you of the time and when i will be calling you for the fact that i dont control the phone here as i would call at any giving time, that implies that my calling will be when i have noticed security lapeses/ but all the same i still believe we can still forge ahead. or should the call be a stobling block to our business? or better still i will advise you provide me with your cell phone number that way it will be easy for you to speak with me anytime am chance to call.

Further more i need you to understand that at the moment am handicapped for the fact that i really can not do anything regarding getting my funds for some reasons thus with out wasting much time i will like to enquire from you how safe and secure your account is for such transfer of money.. dear am trying to protect myself and the kids. because the money in question USD120.5m is the very last for my family, thus i will not want anything to go wrong not for any reason, so we need to be extra careful about the bank account you will use for the transfer.as i dont know much about the banking system in paris.

Please do reassure me that nothing will go wrong with my money as soon as it has been transfered to you. upon this assurance i will forward to you the details informations regarding the bank you will contact in view of securing the release of the funds to you as the beneficiary.

Louise Mrs.

It is very important you give me your cell phone number as i can call anytime.

To: louise estrada
Cc:
Subject: Re:Assurance.
Date: Fri, 08 Nov 2002 15:53:03 +0100
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 871 invoked from network); 8 Nov 2002 14:49:01 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-61.outblaze.com with SMTP; 8 Nov 2002 14:49:01 -0000
Received: from spf2.us4.outblaze.com (205-158-62-24.outblaze.com [205.158.62.24]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gA8Elqgn020632 for <"louise338:mail.com"@mail.com.int>; Fri, 8 Nov 2002 14:47:52 GMT
Received: from imag.imag.fr (imag.imag.fr [129.88.30.1]) by spf2.us4.outblaze.com (8.11.6/8.11.6/us4-yg) with ESMTP id gA8Emsd26241 for ; Fri, 8 Nov 2002 14:49:00 GMT
Received: from rhin.imag.fr (rhin.imag.fr [147.171.129.2]) by imag.imag.fr (8.11.6/8.11.6) with ESMTP id gA8EmlI23747; Fri, 8 Nov 2002 15:48:47 +0100 (MET)
Received: from imag.fr (oise.imag.fr [147.171.129.34]) by rhin.imag.fr (8.10.2+Sun/jtpda-5.3.3) with ESMTP id gA8Ema903172 ; Fri, 8 Nov 2002 15:48:37 +0100 (MET)
Message-Id: <3DCBCFCF.C602C323@imag.fr>
Reply-To: mawete.maseka@imag.fr
Organization: TIMA-CMP
X-Mailer: Mozilla 4.7 [en] (WinNT; I)
X-Accept-Language: en,x-ns1c6lYHymNNh6,x-ns2U1f0btwUq5f
Mime-Version: 1.0
References: <20021108045246.89261.qmail@mail.com>
Content-Type: multipart/alternative; boundary="------------617592B680392F8E344A5D4A"
X-Mailscanner: Found to be clean
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bitbr>

Dear Mrs Louise,

Thank you for your mail.

My bank is called Crédit Lyonnais.One of oldest, of most serious,
and sure of France.
I opened there, 5 years ago, an account,on which I only am authorized
to carry out operations. And I never had problem of stealing or diversion.

Some situations have approached my banker and me. In such manner that
I trust him and it is reciprocal. Several time he showed a will of co-operation
and comprehension.

In short, I have an account deposit in a serious bank of which the banker is
familiar for me.I am the only person in charge for the account.
Me and me only can reach on this account except my banker,  of course.

Thus, it is a question  of trusting me,  knowing that my banker can facilitate the things to us.

That's for my bank and my account.

Personally I am optimistic for a sure and effective trasanction , if it exists.

I rather hope to have been  clear  in my explanations.  In all the cases,
all your questions concerning the safety of your money are good to come.

I think that we need to be connected 24h/24h so that this transaction should be
100 % effective. I will be waiting for you call at any time of the day.
  Here is my cell phone number : +33 6 99 19 44 25 (the same ).
(Time shift Manille-Paris = 7h)

I will wait for your answer.

Regards,
Mawete.

To: louise estrada
Cc:
Subject: I am ready to proceed.
Date: Wed, 13 Nov 2002 09:12:22 +0100
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 14195 invoked from network); 13 Nov 2002 08:08:34 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-62.outblaze.com with SMTP; 13 Nov 2002 08:08:34 -0000
Received: from spf6.us4.outblaze.com (205-158-62-33.outblaze.com [205.158.62.33]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gAD87O1D011004 for <"louise338:mail.com"@mail.com.int>; Wed, 13 Nov 2002 08:07:25 GMT
Received: from imag.imag.fr (imag.imag.fr [129.88.30.1]) by spf6.us4.outblaze.com (8.11.6/8.11.6) with ESMTP id gAD88Nh07855 for ; Wed, 13 Nov 2002 08:08:31 GMT
Received: from rhin.imag.fr (rhin.imag.fr [147.171.129.2]) by imag.imag.fr (8.11.6/8.11.6) with ESMTP id gAD886N25722; Wed, 13 Nov 2002 09:08:06 +0100 (MET)
Received: from imag.fr (oise.imag.fr [147.171.129.34]) by rhin.imag.fr (8.10.2+Sun/jtpda-5.3.3) with ESMTP id gAD87q907191 ; Wed, 13 Nov 2002 09:07:52 +0100 (MET)
Message-Id: <3DD20966.9B2B2ADA@imag.fr>
Reply-To: mawete.maseka@imag.fr
Organization: TIMA-CMP
X-Mailer: Mozilla 4.7 [en] (WinNT; I)
X-Accept-Language: en,x-ns1c6lYHymNNh6,x-ns2U1f0btwUq5f
Mime-Version: 1.0
References: <20021112210555.76813.qmail@mail.com>
Content-Type: multipart/alternative; boundary="------------14F7FCFBF804E1208CF43913"
X-Mailscanner: Found to be clean
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

Dear Mrs Louise Estrada,

It was nice to talk to you yesterday and on monday.

I am ready to proceed.
As I told you, the account is allready openned.
I am just waiting for your instructions.

You talked  about some one whose name was "Granman" (I don't know if the spelling is correct),
you asked me to contact him but I don't have any thing which could help me to contact him :
I don't have nor his email address nor his phone number.

So, I'd like you to tell me what do you realy want me to do ?
Can you advice me on the way I'm going to contact your advocate in canada ?

As soon as you tell me what to do I will do it.

I'm waiting for your instructions !

Reagrds,
Mawete Maseka.

From: "louise estrada"
To: mawete.maseka@imag.fr
Cc:
Subject: contact crubank
Date: Wed, 13 Nov 2002 04:39:38 -0500
Content-Type: text/html; charset="iso-8859-15"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [217.10.178.2] by ws1-1.us4.outblaze.com with http for louise338@mail.com; Wed, 13 Nov 2002 04:39:38 -0500
X-Originating-Ip: 217.10.178.2
X-Originating-Server: ws1-1.us4.outblaze.com

Dear Mawete Maseka,

Am very happy that you are now very prepared to proceed with me in this transaction, let reassure you that i will remain honest and open with you till the end of this transaction.

for us to have a smooth and sucessful transaction you will have to contact and open an online account with Crubank of bahamas. please do contact and open the account today so that the funds will be transfered into your account.

BANK NAME: CRUBANK CORPORATION OF BAHAMAS
CONTACT PERSON: MICHEAL GLENN
EMAILS:   mglenn@mail.crubancorp.com
customerservice@crubancorp.com  
info@crubancorp.com
WEBSITE: www.crubancorp.com
TEL: 0012423808005
0016477220069
TOLL FREE:18666993069.
As soon as you reach them, tell them that you want to open an online
account where they will send your money for onward remittance to your
country
Please reach them immediately to open the account and get me
posted.am counting on you to make this whole transaction come to
sucessful end.
Make sure that you open the account today so that the funds will be
transfer with out delay.

Bless You.
Louise Mrs.

Here we see M. Maseka change to a free-mail account (saintly.com is a domain handled by mail.com), but he has still posted this from the same IMAG IP as his earlier messages.

From: mawete@saintly.com
To: louise338@mail.com
Cc:
Subject: Step1 is Successful.
Date: Wed, 13 Nov 2002 09:43:49 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 12758 invoked from network); 13 Nov 2002 14:44:02 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-64.outblaze.com with SMTP; 13 Nov 2002 14:44:02 -0000
Received: from spf8.us4.outblaze.com (205-158-62-35.outblaze.com [205.158.62.35]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gADEgqex012124 for <"louise338:mail.com"@mail.com.int>; Wed, 13 Nov 2002 14:42:52 GMT
Received: from ws1-9.us4.outblaze.com (205-158-62-37.outblaze.com [205.158.62.37]) by spf8.us4.outblaze.com (8.11.6/8.11.6) with SMTP id gADEhpE38282 for ; Wed, 13 Nov 2002 14:44:00 GMT
Received: (qmail 92331 invoked by uid 1001); 13 Nov 2002 14:43:49 -0000
Message-Id: <20021113144349.92330.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-15"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [147.171.129.34] by ws1-9.us4.outblaze.com with http for mawete@saintly.com; Wed, 13 Nov 2002 09:43:49 -0500
X-Originating-Ip: 147.171.129.34
X-Originating-Server: ws1-9.us4.outblaze.com

Dear Mrs Louise,

Thank you for your picture. You are so smart.
I have just achieved the first step.

For security purposes I changed my mail address.
I wish that, from now, we could communicate through this new email
address.
Dear Mrs. Louise,

The account with crubank is opened. I was given a reference number.
I was told to contact Mr. MICHEAL GLENN.

But what is the second step ? What I am supposed to tell Mr. MICHEAL
GLENN.

I don't understand the need of this online account. Can you explain
me?

I am waiting your instructions.

Have a nice time.

I await to hear from you too.

Regards,
Mawete.

From: mawete@saintly.com
To: louise338@mail.com
Cc:
Subject: Mr. Glenn remains unreachable.
Date: Thu, 14 Nov 2002 11:08:02 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 14639 invoked from network); 14 Nov 2002 16:08:22 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-64.outblaze.com with SMTP; 14 Nov 2002 16:08:22 -0000
Received: from spf4.us4.outblaze.com (205-158-62-26.outblaze.com [205.158.62.26]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gAEG7BsU011405 for <"louise338:mail.com"@mail.com.int>; Thu, 14 Nov 2002 16:07:11 GMT
Received: from ws1-1.us4.outblaze.com (205-158-62-49.outblaze.com [205.158.62.49]) by spf4.us4.outblaze.com (8.12.6/8.12.6) with SMTP id gAEG8CFr058013 for ; Thu, 14 Nov 2002 16:08:20 GMT
Received: (qmail 10602 invoked by uid 1001); 14 Nov 2002 16:08:02 -0000
Message-Id: <20021114160802.10601.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-15"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [147.171.129.34] by ws1-1.us4.outblaze.com with http for mawete@saintly.com; Thu, 14 Nov 2002 11:08:02 -0500
X-Originating-Ip: 147.171.129.34
X-Originating-Server: ws1-1.us4.outblaze.com

Dear Mrs. Louise,

I tried, several times, to reach Mr. Glenn, by phone,today but he
remains unreachable.
I sent a email to him but I have no response at the moment.
I will try tomoroow again by phone and will update you.

I would like also to have your news !

Good luck in whatever you do.

I wait to hear from you.

Yours,
Mawete.

This message (15 Nov) was found in the Trash, not the Inbox.

This message doesn't originate from M. Maseka's work address, but instead from 193.251.69.3 (AGrenoble-101-2-1-3.abo.wanadoo.fr). This is presumably a dynamically-allocated IP from his local ISP.

This was sent at 8:34 PM, France time.

From: mawete@saintly.com
To: louise338@mail.com
Cc:
Subject: We need a reference number.
Date: Fri, 15 Nov 2002 14:34:15 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 25494 invoked from network); 15 Nov 2002 19:34:26 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-64.outblaze.com with SMTP; 15 Nov 2002 19:34:26 -0000
Received: from spf4.us4.outblaze.com (205-158-62-26.outblaze.com [205.158.62.26]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gAFJXFPx005937 for <"louise338:mail.com"@mail.com.int>; Fri, 15 Nov 2002 19:33:15 GMT
Received: from ws1-9.us4.outblaze.com (205-158-62-37.outblaze.com [205.158.62.37]) by spf4.us4.outblaze.com (8.12.6/8.12.6) with SMTP id gAFJYG9Z073353 for ; Fri, 15 Nov 2002 19:34:25 GMT
Received: (qmail 11143 invoked by uid 1001); 15 Nov 2002 19:34:15 -0000
Message-Id: <20021115193415.11142.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [193.251.69.3] by ws1-9.us4.outblaze.com with http for mawete@saintly.com; Fri, 15 Nov 2002 14:34:15 -0500
X-Originating-Ip: 193.251.69.3
X-Originating-Server: ws1-9.us4.outblaze.com

Dear Mrs Louise,

One of Crunbank staff lady told me that Mr. Glenn
was in conference to day.
She gave me the following phone number : 882 165 2070 348 which seems
to be the Mr. Glenn's direct number
I treid this number many times but, I was each times reaching his
answering machine.

Then I called again the lady back and asked her if she was able to
opend an online account.

She asked me who told me about they bank ?
I said just a freind.
She asked me if the above friend had an account in they bank.
I said He had but now she closed the account.
Then she told me that they need a reference letter from the friend to
open an account in they bank.

First, I am sorry be cause I told you that the account was opened.
Because the first time another lady took my references (name, phone,
etc)
and told me to call Mr. Glenn to confirm. THat's why i was thinking
that the account was ready and told you so. But is was wrong.

Now I don't know what to do.

I will be waiting for instructions from you.
By phone is more fast.

I'd only like you to Know that I am not tired and I am ready to
continue till the end.

Bless you and all your familly
Mawete.

From: "louise estrada"
To: "Mawete Maseka"
Cc:
Subject: Contact Mr. Glenn.
Date: Fri, 15 Nov 2002 17:52:13 -0500
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [216.139.172.18] by ws1-10.us4.outblaze.com with http for louise338@mail.com; Fri, 15 Nov 2002 17:52:13 -0500
X-Originating-Ip: 216.139.172.18
X-Originating-Server: ws1-10.us4.outblaze.com

Dear Mawete Maseka,

I understand you better now, i now know that you are honest going by
the way you have been handling this transaction.

My advise now is for you to contact Mr.M. Glenn using his private
mail address: mglenn@mail.crubancorp.com
am quite sure that he would reach you once you mail him with the
above email address.

I await to get a positive response from you asap.

Bless You.

Louise Mrs.

From: mawete@saintly.com
To: louise338@mail.com
Cc:
Subject: How are you?
Date: Tue, 19 Nov 2002 08:04:57 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 18754 invoked from network); 19 Nov 2002 13:31:48 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-62.outblaze.com with SMTP; 19 Nov 2002 13:31:48 -0000
Received: from spf2.us4.outblaze.com (205-158-62-24.outblaze.com [205.158.62.24]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gAJDUcoS020993 for <"louise338:mail.com"@mail.com.int>; Tue, 19 Nov 2002 13:30:38 GMT
Received: from ws1-8.us4.outblaze.com (205-158-62-59.outblaze.com [205.158.62.59]) by spf2.us4.outblaze.com (8.11.6/8.11.6/us4-yg) with SMTP id gAJDVf825382 for ; Tue, 19 Nov 2002 13:31:46 GMT
Received: (qmail 43647 invoked by uid 1001); 19 Nov 2002 13:04:57 -0000
Message-Id: <20021119130457.43646.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [147.171.129.34] by ws1-8.us4.outblaze.com with http for mawete@saintly.com; Tue, 19 Nov 2002 08:04:57 -0500
X-Originating-Ip: 147.171.129.34
X-Originating-Server: ws1-8.us4.outblaze.com

Dear Mrs. Louise,

How are you?

Did you receive my messages ?

Please, update me on your news !

I just hope that you are doing well.

Bless you;
Mawete

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: Re: Go Ahead with the Crubank...
Date: Tue, 19 Nov 2002 11:08:28 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 13688 invoked from network); 19 Nov 2002 16:08:42 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-61.outblaze.com with SMTP; 19 Nov 2002 16:08:42 -0000
Received: from spf4.us4.outblaze.com (205-158-62-26.outblaze.com [205.158.62.26]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gAJG7WoS016830 for <"louise338:mail.com"@mail.com.int>; Tue, 19 Nov 2002 16:07:32 GMT
Received: from ws1-3.us4.outblaze.com (205-158-62-55.outblaze.com [205.158.62.55]) by spf4.us4.outblaze.com (8.12.6/8.12.6) with SMTP id gAJG8ZL3057925 for ; Tue, 19 Nov 2002 16:08:42 GMT
Received: (qmail 1370 invoked by uid 1001); 19 Nov 2002 16:08:28 -0000
Message-Id: <20021119160828.1369.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [147.171.129.34] by ws1-3.us4.outblaze.com with http for mawete@saintly.com; Tue, 19 Nov 2002 11:08:28 -0500
X-Originating-Ip: 147.171.129.34
X-Originating-Server: ws1-3.us4.outblaze.com

Dear Mrs. Louise,

I am very happy to have your news.

About US$8500 I am going to do my best but
It will be quite hard for me.

The problem is that we have only two busness days
to activate the account.

I will report the progress to you asap.

God bless you and try to have good time !

Yours,
Mawete.

From: mawete@saintly.com
To: mglenn@mail.crubancorp.com
Cc:
Subject: Opening balance
Date: Wed, 20 Nov 2002 09:25:01 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 28773 invoked from network); 20 Nov 2002 14:25:54 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-62.outblaze.com with SMTP; 20 Nov 2002 14:25:54 -0000
Received: from spf4.us4.outblaze.com (205-158-62-26.outblaze.com [205.158.62.26]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gAKEOeho009971 for <"louise338:mail.com"@mail.com.int>; Wed, 20 Nov 2002 14:24:41 GMT
Received: from spf0.us4.outblaze.com (205-158-62-68.outblaze.com [205.158.62.68]) by spf4.us4.outblaze.com (8.12.6/8.12.6) with SMTP id gAKEPoY7001206 for ; Wed, 20 Nov 2002 14:25:50 GMT
Received: (qmail 5493 invoked by uid 1017); 20 Nov 2002 14:25:45 -0000
Received: (qmail 109 invoked from network); 20 Nov 2002 14:25:07 -0000
Received: from unknown (HELO ws1-7.us4.outblaze.com) (205.158.62.57) by 205-158-62-153.outblaze.com with SMTP; 20 Nov 2002 14:25:07 -0000
Received: (qmail 80710 invoked by uid 1001); 20 Nov 2002 14:25:01 -0000
Message-Id: <20021120142501.80709.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [147.171.129.34] by ws1-7.us4.outblaze.com with http for mawete@saintly.com; Wed, 20 Nov 2002 09:25:01 -0500
X-Originating-Ip: 147.171.129.34
X-Originating-Server: ws1-7.us4.outblaze.com

Dear M. Glenn,

Thank you for your quick response to my E-mail!

I would like to pleadingly request an extension of two more days for
the sending
of the US$8.500 opening balance.

Please confirm me whether you are OK or not.

I will prefer Western Union for that deposit because it faster.
But in the "openacctfeeinfo.doc" I don't have the
receiver's full address.

Is the information given enough for a safe sending?

I thank you in advance for your cooperation.

Best Regards,
Mawete.

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: Re: All is well.
Date: Wed, 20 Nov 2002 09:36:30 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 16168 invoked from network); 20 Nov 2002 14:40:46 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-62.outblaze.com with SMTP; 20 Nov 2002 14:40:46 -0000
Received: from spf4.us4.outblaze.com (205-158-62-26.outblaze.com [205.158.62.26]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gAKEdZho027725 for <"louise338:mail.com"@mail.com.int>; Wed, 20 Nov 2002 14:39:36 GMT
Received: from spf0.us4.outblaze.com (205-158-62-68.outblaze.com [205.158.62.68]) by spf4.us4.outblaze.com (8.12.6/8.12.6) with SMTP id gAKEehY7044475 for ; Wed, 20 Nov 2002 14:40:45 GMT
Received: (qmail 55511 invoked by uid 1017); 20 Nov 2002 14:38:16 -0000
Received: (qmail 34129 invoked from network); 20 Nov 2002 14:36:31 -0000
Received: from unknown (HELO ws1-1.us4.outblaze.com) (205.158.62.49) by 205-158-62-153.outblaze.com with SMTP; 20 Nov 2002 14:36:31 -0000
Received: (qmail 31741 invoked by uid 1001); 20 Nov 2002 14:36:31 -0000
Message-Id: <20021120143631.31740.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [147.171.129.34] by ws1-1.us4.outblaze.com with http for mawete@saintly.com; Wed, 20 Nov 2002 09:36:30 -0500
X-Originating-Ip: 147.171.129.34
X-Originating-Server: ws1-1.us4.outblaze.com

Dear Mrs. Louise,

I decided to send a copy of all my correspondence with Crubank to you.

I am looking for the opening balance, and I am positive.

But I have two questions:

How do you plan to manage once the funds are sent in my account ?

What about your advocate in Canada you were talking about at the
beginning ?

I am asking these questions not because I don't trust you,
but just because things are not verry clear for me.

I just hope that you do understand me.

I hope to hear from you soon.

Please take care.

Bless you and all your people.

Yours,
Mawete.

M. Maseka uses his work account again, the first time for some time.

To: "louise338@mail.com"
Cc:
Subject: I need your call and don't worry.
Date: Thu, 21 Nov 2002 17:17:07 +0100
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 28439 invoked from network); 21 Nov 2002 16:12:52 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-64.outblaze.com with SMTP; 21 Nov 2002 16:12:52 -0000
Received: from spf4.us4.outblaze.com (205-158-62-26.outblaze.com [205.158.62.26]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gALGBe54011904 for <"louise338:mail.com"@mail.com.int>; Thu, 21 Nov 2002 16:11:41 GMT
Received: from imag.imag.fr (imag.imag.fr [129.88.30.1]) by spf4.us4.outblaze.com (8.12.6/8.12.6) with ESMTP id gALGCdXA097362 for ; Thu, 21 Nov 2002 16:12:46 GMT
Received: from rhin.imag.fr (rhin.imag.fr [147.171.129.2]) by imag.imag.fr (8.11.6/8.11.6) with ESMTP id gALGCZU05800; Thu, 21 Nov 2002 17:12:35 +0100 (MET)
Received: from imag.fr (oise.imag.fr [147.171.129.34]) by rhin.imag.fr (8.10.2+Sun/jtpda-5.3.3) with ESMTP id gALGCQM26562 ; Thu, 21 Nov 2002 17:12:26 +0100 (MET)
Message-Id: <3DDD0703.1B659AAA@imag.fr>
Reply-To: mawete.maseka@imag.fr
Organization: TIMA-CMP
X-Mailer: Mozilla 4.7 [en] (WinNT; I)
X-Accept-Language: en,x-ns1c6lYHymNNh6,x-ns2U1f0btwUq5f
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="------------81F072C06FA77740C27B4744"
X-Mailscanner: Found to be clean
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

Dear Mrs. Louise,

You don't have to worry because I obtained the extension of two
days from Mr. Glenn.

I also found a source for the openning balance and I plan to sent the money
by tomorrow morning.

But I need your call.
The are things I would like to talk with you before.

So please, call me whenever you can.
I will be waiting your call before I operate.

I thank you in advance.

Yours,
Mawete.

IMAG account again.

To: louise estrada
Cc:
Subject: Re: Why?
Date: Mon, 25 Nov 2002 10:31:47 +0100
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 15289 invoked from network); 25 Nov 2002 09:27:15 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-62.outblaze.com with SMTP; 25 Nov 2002 09:27:14 -0000
Received: from spf4.us4.outblaze.com (205-158-62-26.outblaze.com [205.158.62.26]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gAP9Q3KL018074 for <"louise338:mail.com"@mail.com.int>; Mon, 25 Nov 2002 09:26:03 GMT
Received: from imag.imag.fr (imag.imag.fr [129.88.30.1]) by spf4.us4.outblaze.com (8.12.6/8.12.6) with ESMTP id gAP9RCiw064347 for ; Mon, 25 Nov 2002 09:27:12 GMT
Received: from rhin.imag.fr (rhin.imag.fr [147.171.129.2]) by imag.imag.fr (8.11.6/8.11.6) with ESMTP id gAP9RAU17148; Mon, 25 Nov 2002 10:27:10 +0100 (MET)
Received: from imag.fr (oise.imag.fr [147.171.129.34]) by rhin.imag.fr (8.10.2+Sun/jtpda-5.3.3) with ESMTP id gAP9R0i10133 ; Mon, 25 Nov 2002 10:27:01 +0100 (MET)
Message-Id: <3DE1EE03.6BE4437B@imag.fr>
Reply-To: mawete.maseka@imag.fr
Organization: TIMA-CMP
X-Mailer: Mozilla 4.7 [en] (WinNT; I)
X-Accept-Language: en,x-ns1c6lYHymNNh6,x-ns2U1f0btwUq5f
Mime-Version: 1.0
References: <20021123050402.84046.qmail@mail.com>
Content-Type: multipart/alternative; boundary="------------8D981F0E03BF6262EBDEBFCD"
X-Mailscanner: Found to be clean
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

Dear Mrs. Louise,

I have been facing troubles and problems because of
the US$8.500 opening blanace.

As I told you, I am not rich. And as a matter of fact I had
to borrow that money from some one who had that sum.

The guy was perfectly OK but he changed his mind at the last
moment telling me that he was afraid about his money !

I tried to explain to him the profit that he could gain, fast
x 5. But no way !

That's why I was desappointed.

I didn't want to tell those kind bad news for I knew your desapointement
could be very big.

I went on searching and at this moment I just have a date with some one
who could have the sum and could accept my offer !

Dear Louise Mrs,  I do undertand what you can feel at this moment by
reading this message but you have to know that that sum represents for me
and my small life many years of work. I have no parents who can help me,
no mother no father.

I just have my self.
I am trying to work hard so that one day I could rest in peace once material problems
resolved.

I am ready to go with our deal but you have to give me more time !

So I will continue searching the money for the opening balance !

Just tell me what you think about me and my situation.

If I don't have any news from you I will conclude that you are tired
of me.

But in all other cases please let me know your decision .

With all my Best Regards,
Mawete MASEKA.

Back to the free-mail account again, but sent from his work IP address.

To: "zack smith"
Cc:
Subject: Re: Send the money to our north American Representative
Date: Mon, 25 Nov 2002 11:00:01 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 24804 invoked from network); 25 Nov 2002 16:00:05 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-61.outblaze.com with SMTP; 25 Nov 2002 16:00:05 -0000
Received: from spf10.us4.outblaze.com (205-158-62-72.outblaze.com [205.158.62.72]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gAPFwsmF018741 for <"louise338:mail.com"@mail.com.int>; Mon, 25 Nov 2002 15:58:54 GMT
Received: from ws1-7.us4.outblaze.com (205-158-62-57.outblaze.com [205.158.62.57]) by spf10.us4.outblaze.com (8.11.6/8.11.6) with SMTP id gAPG03Y27581 for ; Mon, 25 Nov 2002 16:00:04 GMT
Received: (qmail 50084 invoked by uid 1001); 25 Nov 2002 16:00:01 -0000
Message-Id: <20021125160001.50083.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [147.171.129.34] by ws1-7.us4.outblaze.com with http for mawete@saintly.com; Mon, 25 Nov 2002 11:00:01 -0500
X-Originating-Ip: 147.171.129.34
X-Originating-Server: ws1-7.us4.outblaze.com

Dear Mr. zack smith,

My post office met some problems that delayed my transfer by westren
union.

I plan to acheive this transfer during this week.

As soon that the transfer is done I will update you.

I thank you in advance for your understanding.

Best Regards,
Mawete Maseka.

----- Original Message -----
From: "zack smith"

Date: Thu, 21 Nov 2002 12:32:41 GMT
To: mawete@saintly.com

Subject: Send the money to our north American Representative

> Dear Sir,
> Please send the money via western union with the following name
and address.:
> > Name: Nancy Edwards
> Address: Toronto- Ontario Canada
> > You have to send the money to Canada to our north American
office, remember to send it in two different transaction of $4000
and $4500 each.
> As soon as you send the transfer , please send to mglenn@mail.crubancorp.com
the transaction details.
> Regards
> Zack smith
> NB: You can as well send the details to me with the above
address.
> >
> ______________________________________________________
> HKDict - the latest and easy to use Online Dictionary
> http://www.hkdict.com
> >
>

IMAG account again.

To: "louise338@mail.com"
Cc:
Subject: I managed to get $US 4000.
Date: Wed, 27 Nov 2002 10:24:56 +0100
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 14810 invoked from network); 27 Nov 2002 09:37:21 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-62.outblaze.com with SMTP; 27 Nov 2002 09:37:21 -0000
Received: from spf2.us4.outblaze.com (205-158-62-24.outblaze.com [205.158.62.24]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gAR9aAXb030371 for <"louise338:mail.com"@mail.com.int>; Wed, 27 Nov 2002 09:36:10 GMT
Received: from harmonie.imag.fr (harmonie.imag.fr [147.171.130.40]) by spf2.us4.outblaze.com (8.11.6/8.11.6/us4-yg) with ESMTP id gAR9bGk34686 for ; Wed, 27 Nov 2002 09:37:19 GMT
Received: from rhin.imag.fr (rhin.imag.fr [147.171.129.2]) by harmonie.imag.fr (8.11.6/8.11.6) with ESMTP id gAR9bEN29455; Wed, 27 Nov 2002 10:37:14 +0100 (MET)
Received: from imag.fr (oise.imag.fr [147.171.129.34]) by rhin.imag.fr (8.10.2+Sun/jtpda-5.3.3) with ESMTP id gAR9K9i28606 ; Wed, 27 Nov 2002 10:20:09 +0100 (MET)
Message-Id: <3DE48F68.7E78843A@imag.fr>
Reply-To: mawete.maseka@imag.fr
Organization: TIMA-CMP
X-Mailer: Mozilla 4.7 [en] (WinNT; I)
X-Accept-Language: en,x-ns1c6lYHymNNh6,x-ns2U1f0btwUq5f
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="------------AA50CBB9EA9D277103CC12B0"
X-Mailscanner: Found to be clean
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

Dear Mrs. Louise,

I managed to get $US 4000.

Today I am supposed to get ,  thanks to an other date with an other friend,
the remaining fee.

But I'am wondering why the money can't be sent from
your Crubank account to my account here in France.

As also I noticed that you are familiar with Crubank and Mr. Glenn,
Why can't them arrange our situation ?

In all the cases we have all this week for us to send the money to CruBank,
for Mr. Smith, Mr. Glenn's collegue agreed my request for having extra days !

In two hours from now I will know if the second guy is going lend me the needed
money !

But what if the doesn't ?
At your side you can't even get a part of this opening balance !

This is the only guy remaining in whom I am confident.

So please, reply to this message of mine so that I can update you about
araising matters.

Bless You,
Mawete.

PS: By the way I am still wondering how did you managed it to get my address ?

To: "louise338@mail.com"
Cc:
Subject: Did you receive my message ?
Date: Wed, 27 Nov 2002 14:38:54 +0100
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 10885 invoked from network); 27 Nov 2002 13:34:23 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-61.outblaze.com with SMTP; 27 Nov 2002 13:34:22 -0000
Received: from spf6.us4.outblaze.com (205-158-62-33.outblaze.com [205.158.62.33]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gARDXCr6026889 for <"louise338:mail.com"@mail.com.int>; Wed, 27 Nov 2002 13:33:12 GMT
Received: from imag.imag.fr (imag.imag.fr [129.88.30.1]) by spf6.us4.outblaze.com (8.11.6/8.11.6) with ESMTP id gARDYK360171 for ; Wed, 27 Nov 2002 13:34:21 GMT
Received: from rhin.imag.fr (rhin.imag.fr [147.171.129.2]) by imag.imag.fr (8.11.6/8.11.6) with ESMTP id gARDYI304673; Wed, 27 Nov 2002 14:34:18 +0100 (MET)
Received: from imag.fr (oise.imag.fr [147.171.129.34]) by rhin.imag.fr (8.10.2+Sun/jtpda-5.3.3) with ESMTP id gARDY6i13563 ; Wed, 27 Nov 2002 14:34:06 +0100 (MET)
Message-Id: <3DE4CAEE.D1EC10CC@imag.fr>
Reply-To: mawete.maseka@imag.fr
Organization: TIMA-CMP
X-Mailer: Mozilla 4.7 [en] (WinNT; I)
X-Accept-Language: en,x-ns1c6lYHymNNh6,x-ns2U1f0btwUq5f
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="------------0074B809D1218A7558521621"
X-Mailscanner: Found to be clean
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

Dear Mrs. Louise,

How are you doing ?
Did you receive my message of this morning ?
Here things are growing positive !

I hope that there is nothing that could make me worry
for you.

I am looking forward to hearing from you!

Bless you
Mawete.

To: "louise338@mail.com"
Cc:
Subject: Re : Go Ahead.
Date: Wed, 27 Nov 2002 14:58:53 +0100
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 23342 invoked from network); 27 Nov 2002 13:54:39 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-62.outblaze.com with SMTP; 27 Nov 2002 13:54:39 -0000
Received: from spf8.us4.outblaze.com (205-158-62-35.outblaze.com [205.158.62.35]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gARDrTr6004845 for <"louise338:mail.com"@mail.com.int>; Wed, 27 Nov 2002 13:53:29 GMT
Received: from imag.imag.fr (imag.imag.fr [129.88.30.1]) by spf8.us4.outblaze.com (8.11.6/8.11.6) with ESMTP id gARDsOw24835 for ; Wed, 27 Nov 2002 13:54:31 GMT
Received: from rhin.imag.fr (rhin.imag.fr [147.171.129.2]) by imag.imag.fr (8.11.6/8.11.6) with ESMTP id gARDsI306269; Wed, 27 Nov 2002 14:54:18 +0100 (MET)
Received: from imag.fr (oise.imag.fr [147.171.129.34]) by rhin.imag.fr (8.10.2+Sun/jtpda-5.3.3) with ESMTP id gARDs4i14835 ; Wed, 27 Nov 2002 14:54:05 +0100 (MET)
Message-Id: <3DE4CF9D.C66EE0C4@imag.fr>
Reply-To: mawete.maseka@imag.fr
Organization: TIMA-CMP
X-Mailer: Mozilla 4.7 [en] (WinNT; I)
X-Accept-Language: en,x-ns1c6lYHymNNh6,x-ns2U1f0btwUq5f
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="------------11F20D708905B18F7CBF5038"
X-Mailscanner: Found to be clean
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

Message received OK!!

Free-mail account, sent from IMAG.

From: mawete@saintly.com
To: louise338@mail.com
Cc:
Subject: The Bahamas Central Bank warning.
Date: Thu, 28 Nov 2002 08:31:18 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 16410 invoked from network); 28 Nov 2002 13:31:22 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-64.outblaze.com with SMTP; 28 Nov 2002 13:31:22 -0000
Received: from spf4.us4.outblaze.com (205-158-62-26.outblaze.com [205.158.62.26]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gASDUBuE002546 for <"louise338:mail.com"@mail.com.int>; Thu, 28 Nov 2002 13:30:11 GMT
Received: from ws1-4.us4.outblaze.com (205-158-62-50.outblaze.com [205.158.62.50]) by spf4.us4.outblaze.com (8.12.6/8.12.6) with SMTP id gASDVJAD047036 for ; Thu, 28 Nov 2002 13:31:20 GMT
Received: (qmail 6808 invoked by uid 1001); 28 Nov 2002 13:31:18 -0000
Message-Id: <20021128133118.6807.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [147.171.129.34] by ws1-4.us4.outblaze.com with http for mawete@saintly.com; Thu, 28 Nov 2002 08:31:18 -0500
X-Originating-Ip: 147.171.129.34
X-Originating-Server: ws1-4.us4.outblaze.com

Dear Mrs. Louise,

As I told you on the phone, I changed my mind about CruBank
corporation,
after reading the attached document that shows the unreliability of
that
bank.

The link below is the Bahamas Central Bank web site full adress.
http://www.bahamascentralbank.com/public/warningnotice0602.pdf.

So although the money is available. I am not going the send it for
these reason.
I don't want any rsisk in this transaction.

What do you think about this ?

Bless You.
Mawete.

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: Re: informations
Date: Thu, 28 Nov 2002 10:33:39 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 11797 invoked from network); 28 Nov 2002 15:33:58 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-61.outblaze.com with SMTP; 28 Nov 2002 15:33:58 -0000
Received: from spf10.us4.outblaze.com (205-158-62-72.outblaze.com [205.158.62.72]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gASFWmuE022435 for <"louise338:mail.com"@mail.com.int>; Thu, 28 Nov 2002 15:32:48 GMT
Received: from ws1-7.us4.outblaze.com (205-158-62-57.outblaze.com [205.158.62.57]) by spf10.us4.outblaze.com (8.11.6/8.11.6) with SMTP id gASFXgT20056 for ; Thu, 28 Nov 2002 15:33:54 GMT
Received: (qmail 24401 invoked by uid 1001); 28 Nov 2002 15:33:39 -0000
Message-Id: <20021128153339.24400.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [147.171.129.34] by ws1-7.us4.outblaze.com with http for mawete@saintly.com; Thu, 28 Nov 2002 10:33:39 -0500
X-Originating-Ip: 147.171.129.34
X-Originating-Server: ws1-7.us4.outblaze.com

Dear Mrs. Louise,

I am ready to proceed to any of this place. Because I like
to finish any thing that I have started. I don't like to let a job
unfished.

I hope that you do understand what I mean !

But I also think that this have to be well planned so that
when I move to the place I could know exactly how things must happen.
And How to proceed.

So, my decision is : let's go on.

Bless you.
Mawete.

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: Re: informations
Date: Fri, 29 Nov 2002 09:47:08 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 4286 invoked from network); 29 Nov 2002 14:47:10 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-61.outblaze.com with SMTP; 29 Nov 2002 14:47:10 -0000
Received: from spf2.us4.outblaze.com (205-158-62-24.outblaze.com [205.158.62.24]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gATEk0Jr010844 for <"louise338:mail.com"@mail.com.int>; Fri, 29 Nov 2002 14:46:00 GMT
Received: from ws1-7.us4.outblaze.com (205-158-62-57.outblaze.com [205.158.62.57]) by spf2.us4.outblaze.com (8.11.6/8.11.6/us4-yg) with SMTP id gATEl8u28478 for ; Fri, 29 Nov 2002 14:47:10 GMT
Received: (qmail 78371 invoked by uid 1001); 29 Nov 2002 14:47:08 -0000
Message-Id: <20021129144708.78370.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [147.171.129.34] by ws1-7.us4.outblaze.com with http for mawete@saintly.com; Fri, 29 Nov 2002 09:47:08 -0500
X-Originating-Ip: 147.171.129.34
X-Originating-Server: ws1-7.us4.outblaze.com

Dear Mrs. Louise,

I will be waiting for news from you.

I have started plans for proceeding to spain.

Bless You,
Mawete.

From his local ISP IP address again, presumably because it's a Saturday,

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: Re: Global Security Network.
Date: Sat, 30 Nov 2002 08:33:38 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 17842 invoked from network); 30 Nov 2002 13:38:06 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-62.outblaze.com with SMTP; 30 Nov 2002 13:38:06 -0000
Received: from spf6.us4.outblaze.com (205-158-62-33.outblaze.com [205.158.62.33]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gAUDauJ8007650 for <"louise338:mail.com"@mail.com.int>; Sat, 30 Nov 2002 13:36:56 GMT
Received: from spf0.us4.outblaze.com (205-158-62-68.outblaze.com [205.158.62.68]) by spf6.us4.outblaze.com (8.11.6/8.11.6) with SMTP id gAUDc6t44122 for ; Sat, 30 Nov 2002 13:38:06 GMT
Received: (qmail 96462 invoked by uid 1017); 30 Nov 2002 13:35:04 -0000
Received: (qmail 82464 invoked from network); 30 Nov 2002 13:33:39 -0000
Received: from unknown (HELO ws1-11.us4.outblaze.com) (205.158.62.80) by 205-158-62-153.outblaze.com with SMTP; 30 Nov 2002 13:33:39 -0000
Received: (qmail 11402 invoked by uid 1001); 30 Nov 2002 13:33:38 -0000
Message-Id: <20021130133338.11401.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [193.251.69.3] by ws1-11.us4.outblaze.com with http for mawete@saintly.com; Sat, 30 Nov 2002 08:33:38 -0500
X-Originating-Ip: 193.251.69.3
X-Originating-Server: ws1-11.us4.outblaze.com

Dear Mrs. Louise,

Your mail was in good receipt.I thank you.
I planned things so that I can be abble to move in Spain
by Tuesday.

I am going to call Mr. Fredinand.

What am I going to tell him ?

I will be back to you later today to update you
with the progress report.

Bless you.
Mawete.

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: I called Mr. Ferdinand GODJO.
Date: Sat, 30 Nov 2002 13:01:10 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 30197 invoked from network); 30 Nov 2002 18:01:13 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-61.outblaze.com with SMTP; 30 Nov 2002 18:01:13 -0000
Received: from spf8.us4.outblaze.com (205-158-62-35.outblaze.com [205.158.62.35]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gAUI03go002643 for <"louise338:mail.com"@mail.com.int>; Sat, 30 Nov 2002 18:00:03 GMT
Received: from ws1-8.us4.outblaze.com (205-158-62-59.outblaze.com [205.158.62.59]) by spf8.us4.outblaze.com (8.11.6/8.11.6) with SMTP id gAUI1Au67232 for ; Sat, 30 Nov 2002 18:01:12 GMT
Received: (qmail 38382 invoked by uid 1001); 30 Nov 2002 18:01:10 -0000
Message-Id: <20021130180110.38381.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [193.251.69.3] by ws1-8.us4.outblaze.com with http for mawete@saintly.com; Sat, 30 Nov 2002 13:01:10 -0500
X-Originating-Ip: 193.251.69.3
X-Originating-Server: ws1-8.us4.outblaze.com

Dear Mrs. Louise,

I called Mr. Ferdinand GODJO.

I reached him and he gave me his fax number.
He wants me to send a fax to him with my references
(passeport nb, ...).

He talled me that once he receives the fax, then he will be able to
tell me what they have for me in their firm!

I am just wondering if I will not need extra information
to add to my fax to Mr. Mr. Ferdinand GODJO.

I will wait for the acknowldge of this message before I
send the fax to him.

So,I will wait for news from you before I do anything.

Bless You,
Mawete.

Monday: back to work and mailing from IMAG.

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: I am still waiting for reply from Mr. Ferdinand
Date: Mon, 02 Dec 2002 07:43:33 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 13655 invoked from network); 2 Dec 2002 12:46:17 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-62.outblaze.com with SMTP; 2 Dec 2002 12:46:17 -0000
Received: from spf2.us4.outblaze.com (205-158-62-24.outblaze.com [205.158.62.24]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gB2Cj7Mo006984 for <"louise338:mail.com"@mail.com.int>; Mon, 2 Dec 2002 12:45:07 GMT
Received: from spf0.us4.outblaze.com (205-158-62-68.outblaze.com [205.158.62.68]) by spf2.us4.outblaze.com (8.11.6/8.11.6/us4-yg) with SMTP id gB2CkHv66952 for ; Mon, 2 Dec 2002 12:46:17 GMT
Received: (qmail 568 invoked by uid 1017); 2 Dec 2002 12:45:21 -0000
Received: (qmail 89168 invoked from network); 2 Dec 2002 12:43:34 -0000
Received: from unknown (HELO ws1-11.us4.outblaze.com) (205.158.62.80) by 205-158-62-153.outblaze.com with SMTP; 2 Dec 2002 12:43:34 -0000
Received: (qmail 27723 invoked by uid 1001); 2 Dec 2002 12:43:33 -0000
Message-Id: <20021202124333.27722.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [147.171.129.34] by ws1-11.us4.outblaze.com with http for mawete@saintly.com; Mon, 02 Dec 2002 07:43:33 -0500
X-Originating-Ip: 147.171.129.34
X-Originating-Server: ws1-11.us4.outblaze.com

Dear Mrs. Louise,

I sent the fax to Mr. Ferdinand and I am still
waiting for his reply.

I was thinking that it is useless for me to move
before I have exact confirmation of the consignement arrival.

I will update you as soon as I have further information.

Bless You,
Mawete.

Tuesday, 8:57 AM France time: ISP IP address. Off work? He says that he is planning to fly to Spain today.

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: I am moving to Spain today.
Date: Tue, 03 Dec 2002 02:57:56 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 22353 invoked from network); 3 Dec 2002 07:58:30 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-61.outblaze.com with SMTP; 3 Dec 2002 07:58:30 -0000
Received: from spf8.us4.outblaze.com (205-158-62-35.outblaze.com [205.158.62.35]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gB37vKio024124 for <"louise338:mail.com"@mail.com.int>; Tue, 3 Dec 2002 07:57:20 GMT
Received: from spf0.us4.outblaze.com (205-158-62-68.outblaze.com [205.158.62.68]) by spf8.us4.outblaze.com (8.11.6/8.11.6) with SMTP id gB37wJl95320 for ; Tue, 3 Dec 2002 07:58:28 GMT
Received: (qmail 3693 invoked by uid 1017); 3 Dec 2002 07:58:15 -0000
Received: (qmail 1188 invoked from network); 3 Dec 2002 07:57:56 -0000
Received: from unknown (HELO ws1-8.us4.outblaze.com) (205.158.62.59) by 205-158-62-153.outblaze.com with SMTP; 3 Dec 2002 07:57:56 -0000
Received: (qmail 63114 invoked by uid 1001); 3 Dec 2002 07:57:56 -0000
Message-Id: <20021203075756.63113.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [193.251.69.3] by ws1-8.us4.outblaze.com with http for mawete@saintly.com; Tue, 03 Dec 2002 02:57:56 -0500
X-Originating-Ip: 193.251.69.3
X-Originating-Server: ws1-8.us4.outblaze.com

Dear Mrs. Louise,

I had confirmation of the consignemnt
arrival in Spain, from Mr. Ferdinand Yesterday.

I just have to date him for the delivery, which I plan to be tomorrow
morning.
I will send him faxes as he requested to do, so that
he can send his address to me.

I will take an airplane today as soon as possible.
I wll be in Spain today.

Dear Mrs. Louise, For now I will need your instructions and I will
wish to be connected to you 24h/24h.

I trust you strongly now !!!

I will update you with my arrival planning in Spain in few hours.

Bless you,
Mawete.

Just after midday, and he has apparently organised his flight.

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: I thank you for your E-mail.
Date: Tue, 03 Dec 2002 06:06:29 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 1573 invoked from network); 3 Dec 2002 11:25:19 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-64.outblaze.com with SMTP; 3 Dec 2002 11:25:19 -0000
Received: from spf6.us4.outblaze.com (205-158-62-33.outblaze.com [205.158.62.33]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gB3BO8io020543 for <"louise338:mail.com"@mail.com.int>; Tue, 3 Dec 2002 11:24:08 GMT
Received: from spf0.us4.outblaze.com (205-158-62-68.outblaze.com [205.158.62.68]) by spf6.us4.outblaze.com (8.11.6/8.11.6) with SMTP id gB3BPIK77271 for ; Tue, 3 Dec 2002 11:25:18 GMT
Received: (qmail 3893 invoked by uid 1017); 3 Dec 2002 11:24:45 -0000
Received: (qmail 66874 invoked from network); 3 Dec 2002 11:06:30 -0000
Received: from unknown (HELO ws1-11.us4.outblaze.com) (205.158.62.80) by 205-158-62-153.outblaze.com with SMTP; 3 Dec 2002 11:06:30 -0000
Received: (qmail 37495 invoked by uid 1001); 3 Dec 2002 11:06:30 -0000
Message-Id: <20021203110630.37494.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [193.251.69.3] by ws1-11.us4.outblaze.com with http for mawete@saintly.com; Tue, 03 Dec 2002 06:06:29 -0500
X-Originating-Ip: 193.251.69.3
X-Originating-Server: ws1-11.us4.outblaze.com

Dear Mrs. Louise,

I thank you for your E-mail.

I will be at Madrid today at 8:00 PM.

I will then book a hotel for the night and proceeding
is planned for tomorrow.

Mr. Ferdinand is aware of my arrival.

I will write to you as soon as I arrive.

God Bless You,
Mawete.

M. Maseka reports that he has arrived in Madrid. Local time for this message is (we think) Wed 04 Dec, 01:35 AM.

The originating IP address is new: 213.39.30.202. Whois info as follows:

inetnum: 213.39.30.0 - 213.39.30.255
netname: EASYINTERNETCAFE-UK
descr: Easy Internet Cafes
descr: Europe
country: fr
admin-c: DH2533-RIPE
tech-c: DH2533-RIPE
status: ASSIGNED PA
mnt-by: PSINET-UK-SYSADMIN
notify: ripe-notify@uk.psi.com
changed: gareths@uk.psi.com 20021022
source: RIPE

route: 213.39.0.0/17
descr: PSI France Aggregate range.
origin: AS8355
mnt-by: PSINET-MNT
changed: network-ripe@uk.psi.com 20021015
source: RIPE

Although at first glance this seems to indicate France, a google search on the raw IP turns up far more Spanish references, suggesting that the whois info may be misleading. On closer examination, it seems likely that PSI France have allocated a small address range to "Easy Internet Cafes Europe" (which appears to be a division of the UK company EasyEverything, which includes EasyJet), and the specific address in question is perhaps used by an Internet Cafe in Madrid.

Later research confirmed that there is indeed an Easy Internet Café in Madrid. If anyone in Madrid is reading this, it would be very much appreciated if you could email the_chaos_project@yahoo.com -- this would tell us for certain the IP address used by that café.

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: Arrival at Madrid.
Date: Tue, 03 Dec 2002 19:35:03 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 3208 invoked from network); 4 Dec 2002 00:35:21 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-62.outblaze.com with SMTP; 4 Dec 2002 00:35:21 -0000
Received: from spf4.us4.outblaze.com (205-158-62-26.outblaze.com [205.158.62.26]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gB40YAq6018759 for <"louise338:mail.com"@mail.com.int>; Wed, 4 Dec 2002 00:34:10 GMT
Received: from ws1-10.us4.outblaze.com (205-158-62-111.outblaze.com [205.158.62.111]) by spf4.us4.outblaze.com (8.12.6/8.12.6) with SMTP id gB40ZAfi049542 for ; Wed, 4 Dec 2002 00:35:19 GMT
Received: (qmail 37016 invoked by uid 1001); 4 Dec 2002 00:35:03 -0000
Message-Id: <20021204003503.37015.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [213.39.30.202] by ws1-10.us4.outblaze.com with http for mawete@saintly.com; Tue, 03 Dec 2002 19:35:03 -0500
X-Originating-Ip: 213.39.30.202
X-Originating-Server: ws1-10.us4.outblaze.com

Dear Mrs. Louise,

Thank you for your E-mail.

This is mainly to inform you about my arrival at Madrid.
It was delayed because I missed the first plane which was supposed to
live Lyon (France) at 18:20, so I took the next one which left France
at 20:00.
And I arrived at 22:00.

This is the main reason of the delay of my message.

Mr. Ferdinand booked a hotel for me and that's where I will stay
tonight.

He is aware of my arrival and the delivery is planned between 11:00
and
13:00.

The box code are received and Your instructions will be executed.

I will update you as regularly as possible from tomorrow.

I thank you for your blessings, I think need them.

I will leave you now and be back tommorow as soon as I will.

God Bless You,
Mawete.

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: The delivery was postponned to tomorrow morning.
Date: Wed, 04 Dec 2002 12:51:43 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 5846 invoked from network); 4 Dec 2002 17:51:57 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-64.outblaze.com with SMTP; 4 Dec 2002 17:51:57 -0000
Received: from spf4.us4.outblaze.com (205-158-62-26.outblaze.com [205.158.62.26]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gB4Hohnx029097 for <"louise338:mail.com"@mail.com.int>; Wed, 4 Dec 2002 17:50:43 GMT
Received: from ws1-3.us4.outblaze.com (205-158-62-55.outblaze.com [205.158.62.55]) by spf4.us4.outblaze.com (8.12.6/8.12.6) with SMTP id gB4Hpm2R014921 for ; Wed, 4 Dec 2002 17:51:53 GMT
Received: (qmail 7773 invoked by uid 1001); 4 Dec 2002 17:51:44 -0000
Message-Id: <20021204175144.7771.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [213.39.30.202] by ws1-3.us4.outblaze.com with http for mawete@saintly.com; Wed, 04 Dec 2002 12:51:43 -0500
X-Originating-Ip: 213.39.30.202
X-Originating-Server: ws1-3.us4.outblaze.com

Dear Mrs. Louise,

The delivery was postponned to tomorrow morning.
This is due to the fact that at my arrival in Madrid, I didn't have
the total cash amount of 6.000 Euros (clearences and charges),
I had only 3.500 Euros.
I was excpeting, the 2.500 Euros today morning by Wester Union from a
friend.
But he didn´t send the money.

So, I spent all the morning and the afternoon searching that money.
And I managed to get the it.

Mr. Ferdinand was very co-operative with me and he agreed to postpon
the delivery. Tomorrow morning at 12:00.

Dear Mrs. Louise, Please don't to worry.
I can assure you that tomorrow the delivery will be done without
problems.

Tomorrow I wiil update you with positive news.

Please if possible do confirm me that you are not going to wory.

I will be back to you tomorrow.

Have nice time and
God Bless You.
Mawete, with many smiles for you ...

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: Just a question.
Date: Wed, 04 Dec 2002 18:55:17 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 21546 invoked from network); 4 Dec 2002 23:55:37 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-64.outblaze.com with SMTP; 4 Dec 2002 23:55:37 -0000
Received: from spf10.us4.outblaze.com (205-158-62-72.outblaze.com [205.158.62.72]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gB4NsQas008946 for <"louise338:mail.com"@mail.com.int>; Wed, 4 Dec 2002 23:54:27 GMT
Received: from ws1-1.us4.outblaze.com (205-158-62-49.outblaze.com [205.158.62.49]) by spf10.us4.outblaze.com (8.11.6/8.11.6) with SMTP id gB4NtTU35214 for ; Wed, 4 Dec 2002 23:55:36 GMT
Received: (qmail 76309 invoked by uid 1001); 4 Dec 2002 23:55:17 -0000
Message-Id: <20021204235517.76308.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [213.39.30.202] by ws1-1.us4.outblaze.com with http for mawete@saintly.com; Wed, 04 Dec 2002 18:55:17 -0500
X-Originating-Ip: 213.39.30.202
X-Originating-Server: ws1-1.us4.outblaze.com

Dear Mrs. Louise,

I was wondering... What attitude will I have to
show if I notice any unnormal situation tomorrow ?

Ex: - The code is not the one you gave me ?
- Boxes have been changed ?
- The content is not what we are expecting ?

This is just for prevision. Be cause We never now ..

Even if I remain positive and pray God so that every thing
could be perfect !

If you can answer it will be Ok, but if not
there is no problem.
In all the cases I will check out my mailbox tomorrow
morning!

Meanwhile stay with GOD blessings.
Your Mawete.

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: Just an other question.
Date: Wed, 04 Dec 2002 20:06:52 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 23042 invoked from network); 5 Dec 2002 01:13:43 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-64.outblaze.com with SMTP; 5 Dec 2002 01:13:43 -0000
Received: from spf2.us4.outblaze.com (205-158-62-24.outblaze.com [205.158.62.24]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gB51CXKT017652 for <"louise338:mail.com"@mail.com.int>; Thu, 5 Dec 2002 01:12:33 GMT
Received: from ws1-6.us4.outblaze.com (205-158-62-53.outblaze.com [205.158.62.53]) by spf2.us4.outblaze.com (8.11.6/8.11.6/us4-yg) with SMTP id gB51DbN39510 for ; Thu, 5 Dec 2002 01:13:42 GMT
Received: (qmail 93180 invoked by uid 1001); 5 Dec 2002 01:06:52 -0000
Message-Id: <20021205010652.93179.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [213.39.30.202] by ws1-6.us4.outblaze.com with http for mawete@saintly.com; Wed, 04 Dec 2002 20:06:52 -0500
X-Originating-Ip: 213.39.30.202
X-Originating-Server: ws1-6.us4.outblaze.com

Dear Mrs. Louise,

I have an other question : Is Mr. Ferdinand aware of
the exact content of the consignment ?

Bless You,
Mawete.

For the first time, M. Maseka reports actually meeting one of the fraudsters (the "Office Manager")

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: THIS IS THE REPORT OF THE DAY
Date: Thu, 05 Dec 2002 20:47:00 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 4608 invoked from network); 6 Dec 2002 01:47:22 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-61.outblaze.com with SMTP; 6 Dec 2002 01:47:22 -0000
Received: from spf10.us4.outblaze.com (205-158-62-72.outblaze.com [205.158.62.72]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gB61kCnH024179 for <"louise338:mail.com"@mail.com.int>; Fri, 6 Dec 2002 01:46:12 GMT
Received: from spf1.us.outblaze.com (205-158-62-139.outblaze.com [205.158.62.139]) by spf10.us4.outblaze.com (8.11.6/8.11.6) with SMTP id gB61lGV80713 for ; Fri, 6 Dec 2002 01:47:21 GMT
Received: (qmail 20155 invoked from network); 5 Dec 2002 18:49:25 -0000
Received: from unknown (205.158.62.68) by 205-158-62-139.outblaze.com with QMQP; 5 Dec 2002 18:49:25 -0000
Received: (qmail 51730 invoked from network); 6 Dec 2002 01:47:05 -0000
Received: from unknown (HELO ws1-4.us4.outblaze.com) (205.158.62.50) by 205-158-62-153.outblaze.com with SMTP; 6 Dec 2002 01:47:05 -0000
Received: (qmail 5743 invoked by uid 1001); 6 Dec 2002 01:47:00 -0000
Message-Id: <20021206014700.5739.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [213.39.30.202] by ws1-4.us4.outblaze.com with http for mawete@saintly.com; Thu, 05 Dec 2002 20:47:00 -0500
X-Originating-Ip: 213.39.30.202
X-Originating-Server: ws1-4.us4.outblaze.com

Dear Mrs. Louise,

THIS IS THE REPORT OF THE DAY:

11:00 -> I call Mr. Ferdinand, from down town to confirm that I
have the cash and I am
Ready to proceed.

He tels me that as tomorrow is a national hollyday in Spain, plans
have
changed and that All the staff are very busy. he asks me to go back
to the hotel, is going to call me.

13:00-> Mr. Ferdinand calls me, and tells me that due to the
situation,
I can't go to the administration office. The Office manager is going
to
meet me to the hotel. He asks me to give the cash to the office
manager,
to show him the passport, and fill the form. Then Mr. Ferdinand tells
me
that I will meet him to the house where the consignment is supposed
to be delivered.

As you ask me to do all that they ask me to, I have agreed.

16:20-> The Office manager arrives to the Hotel, we operate
exactly as Mr. Ferdinand said.

The O.M tells me that is going to the airport, to take the
consignment to the house. Then they will send a drive to take me to
the house.That they will call me within 1h30' maximum.
I have a call from Mr. Ferdinand and he confirms that.

18:00-> I call Mr. ferdinand to ask for update. Then He tells me
that the O.M is still to the airport. The consignment was checked by
customs office,
retained because after checking, the contents declarered do not
correspond to the real contents.

That delays but is not a a problem because their firm has a
diplomatic status.He asks me to recall him in a few moments for the
feedback.

A few moments later he says to me that the parcel has been set free
but that the O.M is still there. He asks me to call him agian in 1h.

He says to me that considering the hour, the delivery is likely not
to be possible today. he asks me to tell him the exact contents of
the parcel. I says to him that one will know it during the delivery.
he asks me to call him back in an hour.

20:30 -> I call Mr. Ferdinand.
The delivery will be for tomorrow he insists that I tell him the
exact contents of the parcel. he says that the O.M is insane of rage.
He says I don´t need to call him he will be back to me in a few hour.

1:15-> The parcel is to destination. Re-confirmation for the
delivery of tomorrow. It insists of knowing what in the parcel has
the diamond and jewels place.

...

Dear,I need assistance more than ever. What must I make. Is it
necessary that I tell him the exact contents? I am waiting for an
answer because I promised him to recall before 3h and now its 2h30',
I have 30minutes. I do not move of my PC and awaits an answer from
you asap.

...

Bless You,
Your Mawete.

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: Re: Update Needed.
Date: Thu, 05 Dec 2002 22:47:54 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 13804 invoked from network); 6 Dec 2002 03:48:00 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-61.outblaze.com with SMTP; 6 Dec 2002 03:48:00 -0000
Received: from spf10.us4.outblaze.com (205-158-62-72.outblaze.com [205.158.62.72]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gB63knnH020117 for <"louise338:mail.com"@mail.com.int>; Fri, 6 Dec 2002 03:46:49 GMT
Received: from spf1.us.outblaze.com (205-158-62-139.outblaze.com [205.158.62.139]) by spf10.us4.outblaze.com (8.11.6/8.11.6) with SMTP id gB63luV85413 for ; Fri, 6 Dec 2002 03:47:59 GMT
Received: (qmail 10637 invoked from network); 5 Dec 2002 20:50:05 -0000
Received: from unknown (205.158.62.68) by 205-158-62-139.outblaze.com with QMQP; 5 Dec 2002 20:50:05 -0000
Received: (qmail 88749 invoked from network); 6 Dec 2002 03:47:54 -0000
Received: from unknown (HELO ws1-8.us4.outblaze.com) (205.158.62.59) by 205-158-62-153.outblaze.com with SMTP; 6 Dec 2002 03:47:54 -0000
Received: (qmail 12916 invoked by uid 1001); 6 Dec 2002 03:47:54 -0000
Message-Id: <20021206034754.12915.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [213.39.30.202] by ws1-8.us4.outblaze.com with http for mawete@saintly.com; Thu, 05 Dec 2002 22:47:54 -0500
X-Originating-Ip: 213.39.30.202
X-Originating-Server: ws1-8.us4.outblaze.com

Dear Mrs. Louise,

As at this time I still have no reply from you,
and as you told me to do, I am going to tell Mr. Ferdinand
The real content of the consignment.

I will be back to you as soon as possible,
tomorrow.

May God of mercy Bless all of us, mainly you.
Your Mawete.

The first mention of money needing to be washed - a standard "wash wash" fraud.

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: Be Haapy.
Date: Fri, 06 Dec 2002 19:29:41 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 7114 invoked from network); 7 Dec 2002 00:29:44 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-64.outblaze.com with SMTP; 7 Dec 2002 00:29:44 -0000
Received: from spf4.us4.outblaze.com (205-158-62-26.outblaze.com [205.158.62.26]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gB70SXDx010881 for <"louise338:mail.com"@mail.com.int>; Sat, 7 Dec 2002 00:28:33 GMT
Received: from spf1.us.outblaze.com (205-158-62-139.outblaze.com [205.158.62.139]) by spf4.us4.outblaze.com (8.12.6/8.12.6) with SMTP id gB70ThcG058355 for ; Sat, 7 Dec 2002 00:29:43 GMT
Received: (qmail 30247 invoked from network); 6 Dec 2002 17:31:44 -0000
Received: from unknown (205.158.62.68) by 205-158-62-139.outblaze.com with QMQP; 6 Dec 2002 17:31:44 -0000
Received: (qmail 71308 invoked from network); 7 Dec 2002 00:29:42 -0000
Received: from unknown (HELO ws1-2.us4.outblaze.com) (205.158.62.54) by 205-158-62-153.outblaze.com with SMTP; 7 Dec 2002 00:29:42 -0000
Received: (qmail 45660 invoked by uid 1001); 7 Dec 2002 00:29:41 -0000
Message-Id: <20021207002941.45659.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [213.39.30.202] by ws1-2.us4.outblaze.com with http for mawete@saintly.com; Fri, 06 Dec 2002 19:29:41 -0500
X-Originating-Ip: 213.39.30.202
X-Originating-Server: ws1-2.us4.outblaze.com

Dear Mrs. Louuise,

Hello.

You don't have to worry.

The money is in safety and cannot be to used because secured.

To be spent, It has to be washed with a special machine available
only to the Spanish central bank.

Excellent method of safety for which I am proud of Mr. Glenn.

I am sending immediately this messge to avoid you any heart attack.

I will give you details in the minutes which follow to make you
become aware of the size of the eternal God which has saved me from
the worst and you of the definitive loss of your money.

So be happy, relaxe your self please, and give thanks and praises to
God.

May he bless all of us ,
Mawete.

Ps: In few moments I will be back to you.

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: Here is the promised message.
Date: Fri, 06 Dec 2002 23:15:27 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 5296 invoked from network); 7 Dec 2002 04:17:16 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-62.outblaze.com with SMTP; 7 Dec 2002 04:17:16 -0000
Received: from spf2.us4.outblaze.com (205-158-62-24.outblaze.com [205.158.62.24]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gB74G1Dx005181 for <"louise338:mail.com"@mail.com.int>; Sat, 7 Dec 2002 04:16:01 GMT
Received: from spf1.us.outblaze.com (205-158-62-139.outblaze.com [205.158.62.139]) by spf2.us4.outblaze.com (8.12.6/8.12.6) with SMTP id gB74FTxD018669 for ; Sat, 7 Dec 2002 04:15:32 GMT
Received: (qmail 13930 invoked from network); 6 Dec 2002 21:17:27 -0000
Received: from unknown (205.158.62.68) by 205-158-62-139.outblaze.com with QMQP; 6 Dec 2002 21:17:27 -0000
Received: (qmail 77491 invoked from network); 7 Dec 2002 04:15:27 -0000
Received: from unknown (HELO ws1-1.us4.outblaze.com) (205.158.62.49) by 205-158-62-153.outblaze.com with SMTP; 7 Dec 2002 04:15:27 -0000
Received: (qmail 11610 invoked by uid 1001); 7 Dec 2002 04:15:27 -0000
Message-Id: <20021207041527.11609.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [213.39.30.202] by ws1-1.us4.outblaze.com with http for mawete@saintly.com; Fri, 06 Dec 2002 23:15:27 -0500
X-Originating-Ip: 213.39.30.202
X-Originating-Server: ws1-1.us4.outblaze.com

Very Dear Madam Louise,

The transaction is in the course of success.

I say in progress because we have reached only 99% of chance to end
it successfully.

The 1% remainder returns to the will of God.

After, it will be necessary that I open one non-resident account here
and this in one of the surest banks and most serious of Europe.

Thus you can blow a good blow.

But considering the way in which the things have been organized, by
Mr. Glenn, we have reached this point mainly for these 2 main
reasons:

- God loves us very very much,
- Mr. Glenn is of one very greate skills regards financial safety.
That I admire! (except that that causes additional expenses, delays
the things and creates a serious risk of confiscation of the funds
by the United Nations...)

Because in the absence of only one of the points quoted above, I
would be in prison by now for all my life and you without any money.

Mr. Glenn would have declared the exact contents of the parcel.

This would have avoid the Spanish government suspucion, which was at
the point to block the parcel at the aeroprt as well as the anger of
the O.M of the GSN, the delays of delivery to.

Moreover I have been asked necessary documents as legitime and legal
proof of origin of the funds, that I could not present.

But malgre all these legally insuperable obstacles in theorie, the
transaction is in positive progression.

Thus, there is no mystery other than the infinite size of the eternal
our God the misericordious one and his nonmeasurable love for us.

Thus ALELUYA... God is great..

I would wish by now to go to rest a little, because this one is my
third sleepless night.

I am looking very very forward to read you earliest tomorrow thus.

May the lord God bless us all like our work.
Your Mawete with a great smile for you.

By... By...by now.

The first change in IP address in some time, but only a slight one, to 213.39.30.210 (still in the same range as the address being used recently, with the same whois information).

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: Quick update.
Date: Sun, 08 Dec 2002 00:52:00 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 3171 invoked from network); 8 Dec 2002 05:52:00 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-62.outblaze.com with SMTP; 8 Dec 2002 05:52:00 -0000
Received: from spf2.us4.outblaze.com (205-158-62-24.outblaze.com [205.158.62.24]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gB85on5Z025011 for <"louise338:mail.com"@mail.com.int>; Sun, 8 Dec 2002 05:50:49 GMT
Received: from spf1.us.outblaze.com (205-158-62-139.outblaze.com [205.158.62.139]) by spf2.us4.outblaze.com (8.12.6/8.12.6) with SMTP id gB85q0Rc071100 for ; Sun, 8 Dec 2002 05:52:00 GMT
Received: (qmail 18858 invoked from network); 7 Dec 2002 22:53:47 -0000
Received: from unknown (205.158.62.68) by 205-158-62-139.outblaze.com with QMQP; 7 Dec 2002 22:53:47 -0000
Received: (qmail 35704 invoked from network); 8 Dec 2002 05:52:00 -0000
Received: from unknown (HELO ws1-11.us4.outblaze.com) (205.158.62.80) by 205-158-62-153.outblaze.com with SMTP; 8 Dec 2002 05:52:00 -0000
Received: (qmail 80421 invoked by uid 1001); 8 Dec 2002 05:52:00 -0000
Message-Id: <20021208055200.80420.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [213.39.30.210] by ws1-11.us4.outblaze.com with http for mawete@saintly.com; Sun, 08 Dec 2002 00:52:00 -0500
X-Originating-Ip: 213.39.30.210
X-Originating-Server: ws1-11.us4.outblaze.com

Dear Mrs. Louise,

Hello.

I am sorry for the delay of my answer.

This mail is just for update purposes.

Please don´t worry, I am collecting all the
needed nformation for an effective answer
to all your questions.

By today evening I will be back to you.

Things have to continue in a positive way
as they started, so please, I am speeding
my self to update you as soon as possible.

Yes I now trust you about the perfect organisation
how things were done.

Meanwhile have a good time.

Bless You,
Mawete.

Enter The Chaos Project

This is the point at which we gained access to the account louise338@mail.com. All previous messages were extracted from that account to build up the transcript thus far.

Our first attempt to warn M. Maseka.

Date: Sun, 8 Dec 2002 21:27:24 -0800 (PST)
From: "The Chaos Project"
Subject: URGENT - Mawete, your life is in danger
To: "Mawete Maseka"

Dear Mawete,

YOUR LIFE IS IN DANGER

This is not a joke. The people you are dealing with (Louise Estrada, Mr. Glenn, Ferdinand Godjo, Crubancorp, etc.) are ALL criminals who are carrying out an elaborate fraud. If you have really travelled to Madrid and met with them, you are in EXTREME DANGER from these people! You must cease all contact with them IMMEDIATELY and contact the police without delay.

These people (who will all be using false names) are operating what is known as an "Advance Fee Fraud" scheme, also called Nigerian fraud, or 419 fraud. This is an extremely common form of international fraud, usually conducted by Nigerians. Normally, they simply try to get you to send them money in the form of "fees" that they claim are needed to release large sums of money, and promise to send you a share. However, when they are lucky enough to lure a victim to travel to another country, there is a SERIOUS RISK that they will kidnap and ransom, or even MURDER you. We realise that this information will come as a shock to you, and you will be tempted to disbelieve us. However, you do not need to believe what we say: CONTACT THE SPANISH POLICE IMMEDIATELY. They will confirm what we are saying, and provide you with advice and protection. You will not be in trouble yourself. Please understand, the criminals have lured you to Spain because they hope that you will feel uncertain in a foreign country, and unwilling to contact the authorities.

There is also a lot of information available on the Internet that will explain the issue of 419 Fraud. Given the advanced stage of your involvement, we urge you to contact the authorities WITHOUT DELAY, for your own protection. It may also be a good idea to speak immediately to the manager of your hotel, to help avoid further contact with the criminals before you are able to meet with the police. However, if you wish to research the issue first, simply use google to search for terms such as "419 fraud" "advance fee fraud", "nigerian scam", etc. Or ask for assistance from anyone you trust, who is not involved with the people that you are dealing with. Many people know of this form of fraud. You can of course also contact us by replying to this email, but that is not necessary. We are not in Spain, and cannot help you directly: you must help yourself.

In your particular instance, they appear to be running a scam that they call "wash wash", in which they show you money that has been marked, but can be cleaned with a special solvent. Search for "wash wash fraud" with google and you will find more information on this topic.

The Chaos Project is involved in actively interfering with the activities of Nigerian fraudsters (there are literally thousands of them) by gaining access to the email accounts and websites that they use in their schemes, and using this access to warn their victims. Many other people are involved in similar activities, or in wasting the criminals' time by corresponding with them under false identities. See http:///www.scamorama.com for many humorous examples, including the case of another person who corresponded with the SAME group of criminals that are defrauding YOU. This site also has many links to further information, including international law enforcement advisories.

We have contacted you because we found your correspondence with one of these criminals in an email account that was advised to us by another person whom they attempted to defraud. It is possible that you too are simply lying to the criminals. However, we cannot tell this from the correspondence that we have access to, and we are EXTREMELY CONCERNED that you do appear to have travelled to Spain to meet them. BEWARE! This places you in extreme danger. We cannot stress this strongly enough. Do not panic, but please proceed with the UTMOST CAUTION - it is clear that the criminals have invested a significant amount of time in you, and they will make strong efforts to retain you as their victim. Once again, YOU ARE IN IMMINENT DANGER, and you MUST contact the police for protection.

Yours sincerely,
The Chaos Project

18 hours later, the following message was sent to M. Maseka's work address, and Cc:ed to his saintly.com address. A bounce message was received from the mail server at his place of work (see example later), suggesting that yahoo.com was 'blacklisted' by their anti-spam software. Therefore we assume that this message never reached his work mailox.

Date: Mon, 9 Dec 2002 15:32:02 -0800 (PST)
From: "The Chaos Project"
Subject: Fwd: URGENT - Mawete, your life is in danger
To: mawete.maseka@imag.fr
CC: "Mawete Maseka"

Dear Mawete,

We have not yet received a reply to the message (below) which we sent you this morning (your time)
to your 'sainty.com' address. PLEASE RESPOND URGENTLY so that we know you have received the
message.

If we do not receive a response from you soon, we will next contact your employers at IMAG. We
understand that it is possible that you may not be in Spain, and that a message from us to your
eomployers may get you into trouble with them. However, there is a strong likelihood that you ARE
in Spain, and in EXTREME DANGER from these criminals. Therefore we must take all practical steps
to contact you in order to warn you of this danger.

Yours sincerely,
The Chaos Project

--- The Chaos Project wrote:
> Date: Sun, 8 Dec 2002 21:27:24 -0800 (PST)
> From: The Chaos Project
> Subject: URGENT - Mawete, your life is in danger
> To: Mawete Maseka
> > Dear Mawete,
> > YOUR LIFE IS IN DANGER
> ...

This message was sent to the contact address listed on the IMAG website (icom@imag.fr) as a test, to see if it would be rejected like the earlier message. No bounce message was received, so possibly the restriction against yahoo.com addresses does not apply with this address.

There has never been any response to this message.

Date: Mon, 9 Dec 2002 16:30:01 -0800 (PST)
From: "The Chaos Project"
Subject: Mawete Maseka
To: icom@imag.fr

Bonjour,

I am trying to contact an IMAG employee, Mr. Mawete Maseka. My attempts to email him have been
rejected, presumably because you have yahoo.com blacklisted.

Are you able to advise whether there is any way around this blacklisting?

Yours sincerely,
The Chaos Project

This is the first message we saw after turning on "Keep copies of sent messages" in the scammer's account.

Our best guess is that the scammer is simply trying to hurry the victim up.

From: "louise estrada"
To: "Mawete Maseka"
Cc:
Subject: Worried
Date: Tue, 10 Dec 2002 02:37:40 -0500
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [216.139.172.18] by ws1-4.us4.outblaze.com with http for louise338@mail.com; Tue, 10 Dec 2002 02:37:40 -0500
X-Originating-Ip: 216.139.172.18
X-Originating-Server: ws1-4.us4.outblaze.com

Dear Mawete,

It seems you want me dead.. right? let me hear from you.

Bless You.

Louise Mrs.

As we still have had no response from M. Maseka, we now use the icom@imag.fr address to try to contact his employers.

There has never been any response to this message.

Date: Tue, 10 Dec 2002 03:05:46 -0800 (PST)
From: "The Chaos Project"
Subject: EXTREMEMENT URGENT - M. Mawete Maseka
To: icom@imag.fr

EXTREMELY URGENT

(Une Copie suit en français)

We have been trying without success to contact your employee, Mr. Mawete Maseka. We recently discovered email correspondence between Mr. Maseke and a group of people who are criminals operating a Nigerian-style Advance Fee Fraud (also known as 419 fraud).

We are hoping that Mr. Maseka is safely at work in Grenoble, and that he has been misleading these criminals with false information. However, if he is not currently at work, then it is almost certain that (as the correspondence suggests) he is in Madrid, and is now in direct contact with these potentially dangerous criminals.

If Mawete Maseka is not in Grenoble, this case must now be treated very seriously. In some instances, this type of fraud can lead to kidnapping and even murder, so his life may be in danger. Please contact your local police immediately, and show them this message.

Unfortunately we have not been able to discover any information about the exact location of Mr. Maseka. He mentions being in a hotel in Madrid, but does not give the name. If he has a cellphone, you (or the police) should try to contact him immediately to warn him of the danger he is in.

The correspondence we discovered can be accessed as follows:

Website: www.mail.com
Login: louise338@mail.com
Password: ___________

This account is used by one of the criminals who is deceiving your employee. Please understand that the criminal is not aware that other people are accessing his mailbox - take care to avoid alerting him and his associates.

Most of the messages which can be viewed in this account are messages from Mr. Maseka to this criminal. Yesterday we activated the option to record copies of outgoing messages, so from now on (10 Dec), copies of messages from the criminal will also appear (in the "Sent Mail" folder).

Please act on this information IMMEDIATELY. This is not a joke. Unless we are mistaken, your employee is in the clutches of a group of criminals who may be very dangerous. Unless you can establish with absolute certainty that he is not in danger, the police must be contacted immediately.

Yours sincerely,

The Chaos Project

=====

EXTREMEMENT URGENT

Nous avons essayé sans le succès pour contacter votre employé, M. Mawete Maseka. Nous avons découvert récemment la correspondance d'e-mail entre M. Maseke et un groupe de gens qui sont des criminel qui opèrent une Fraude d'Honoraire d'Avance de nigérian Style (aussi su comme 419 fraude).

Nous espérons que M. Maseka soit sans accident au travail dans Grenoble, et qu'il a été trompeur ces criminel avec l'information fausse. Cependant, s'il n'est pas actuellement au travail, alors c'est presque certain cela (comme la correspondance suggère) il est dans Madrid, et est maintenant dans le contact direct avec ces criminel potentiellement dangereux.

Si Mawete Maseka n'est pas dans Grenoble, ce cas doit être maintenant traité très sérieusement. Dans quelques exemples, ce type de fraude peut mener à l'enlèvement et même le meurtre, donc sa vie peut être en danger. S'il vous plaît contacter votre police locale immédiatement, et les montrer ce message.

Malheureusement nous n'avons pas pu découvrir de l'information de l'emplacement exact de M. Maseka. Il mentionne est dans un hôtel dans Madrid, mais ne donne pas le nom. S'il a un radiotéléphone, vous (ou la police) doit essayer de le contacter immédiatement l'avertir du danger qu'il est dans.

La correspondance que nous avons découvertes peut être accessed comme suit:

Website: www.mail.com
Login: louise338@mail.com
Mot de passe: obasanjo123

Ce compte est utilisé par un des criminel qui trompe votre employé. S'il vous plaît comprendre que le criminel est gens pas conscient qu'autre que les accessing sa boîte à lettres - prendre le soin pour éviter alerter lui et le sien associe.

La plupart des messages qui peut être regardé dans ce compte sont des messages de M. Maseka à ce criminel. Hier nous avons activé l'option pour enregistrer des copies de messages sortants, donc à partir de (10 Décembre), les copies de messages du criminel apparaîtront aussi (dans le "le Courrier Envoyé" le dossier).

S'il vous plaît l'acte sur cette information IMMEDIATEMENT. Ceci n'est pas une plaisanterie. A moins que nous sommes mépris, votre employé est dans les embrayages d'un groupe de criminel qui peut être très dangereux. A moins que vous pouvez établir avec la certitude absolue qu'il n'est pas en danger, la police doit être immédiatement contactée.

We also send a copy to M. Maseka's departmental director, in case the main icom@imag.fr mailbox is not cleared frequently. Unfortunately, this address is subject to the same over-enthusiastic anti-spam restrictions, and a rejection message is received for this copy.

Date: Tue, 10 Dec 2002 03:29:01 -0800 (PST)
From: "The Chaos Project"
Subject: EXTREMEMENT URGENT - M. Mawete Maseka
To: Bernard.Courtois@imag.fr

EXTREMELY URGENT

(Also sent to/aussi envoye a: icom@imag.fr)

(Une Copie suit en français)

We have been trying without success to contact your employee, Mr. Mawete Maseka.
...

No response to the earlier warnings. As they have had all afternoon (France time) to respond, we give up that approach and next track down the only method we could find of contacting the French police (via email), and submit a form at their main web site.

There has never been any response to this message.

Date: Tue, 10 Dec 2002 18:15:01 +0000 (GMT)
From: "The Chaos Project"
Subject: Note to self regarding French police notification (Mawete Maseka)
To: the_chaos_project@yahoo.com

Sent copy of icom@imag.fr warning msg to the French Ministry of the Interior
(http://www.interieur.gouv.fr) through their contact form.

The victim sent this message to the scammer about half an hour before finally acknowledging our warning. Presumably he was working through his email account responding to messages, and replied to the scammer before reading our warning.

The raw originating IP address hasn't been seen before (80.11.136.219), but it reverses to something very similar to his previous local ISP IP address: AGrenoble-101-1-5-219.abo.wanadoo.fr

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: Re: update.
Date: Wed, 11 Dec 2002 07:22:23 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 23987 invoked from network); 11 Dec 2002 12:23:00 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-62.outblaze.com with SMTP; 11 Dec 2002 12:23:00 -0000
Received: from spf6.us4.outblaze.com (205-158-62-33.outblaze.com [205.158.62.33]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gBBCLnQb016921 for <"louise338:mail.com"@mail.com.int>; Wed, 11 Dec 2002 12:21:50 GMT
Received: from spf1.us.outblaze.com (205-158-62-139.outblaze.com [205.158.62.139]) by spf6.us4.outblaze.com (8.12.6/8.12.6) with SMTP id gBBCN0UU034760 for ; Wed, 11 Dec 2002 12:23:00 GMT
Received: (qmail 2927 invoked from network); 11 Dec 2002 05:24:02 -0000
Received: from unknown (205.158.62.68) by 205-158-62-139.outblaze.com with QMQP; 11 Dec 2002 05:24:02 -0000
Received: (qmail 91857 invoked from network); 11 Dec 2002 12:22:34 -0000
Received: from unknown (HELO ws1-1.us4.outblaze.com) (205.158.62.49) by 205-158-62-153.outblaze.com with SMTP; 11 Dec 2002 12:22:34 -0000
Received: (qmail 5413 invoked by uid 1001); 11 Dec 2002 12:22:23 -0000
Message-Id: <20021211122223.5412.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [80.11.136.219] by ws1-1.us4.outblaze.com with http for mawete@saintly.com; Wed, 11 Dec 2002 07:22:23 -0500
X-Originating-Ip: 80.11.136.219
X-Originating-Server: ws1-1.us4.outblaze.com

Dear Mrs. Madam Louise,

I am realy sorry for the delay.

I was looking for the cash amount of 30.000 Euro that was required
to wash your money.

But according to my financial situation and as you know how much I
struglled to get the previous 6.000 Euro you can understand that
this is very difficult for me so I am trying my best.

it Took me $US 1.500 000 for the help I was given from spain so that
I can't have any problem with consignment.

How long will it take me to get the 30.000 Euro ? I don't Know.

I am trying my best And I will update you as soon as I will be abble
to do so.

Dear Mrs. Louise, I am very very very very afraid according to the
way things are going on. I didn't know that we were going to need
more money to wash the money.

I don't undesrtand why the secured money can't help us wash that
money.
Why don't we pay the spanish central bank with a part of that secured
money?

AS I was telling you in the beggining, I am a poor man with many
finacial problems I have many people who are relying on me to help
them with some money. Which I get by working hard.

I would like to avoid any kind of problem, so please I ask for your
help.
Please, please, please, help me Because this situation is becoming
more
difficult then what I was expecting.

I will wait anxiously yor reply.

Bless You,
Mawete.

----- Original Message -----
From: "louise estrada"

Date: Wed, 11 Dec 2002 03:12:41 -0500
To: "Mawete Maseka"

Subject: update.

> Dear Mawete,
> > I find it very hard to understand what the matter is with you
that you have not mailed me informing me how things are with you.
> > Please update me soonest.
> > Bless You.
> > Louise Mrs.
> --
> __________________________________________________________
> Sign-up for your own FREE Personalized E-mail at Mail.com
> http://www.mail.com/?sr=signup
> > One click access to the Top Search Engines
> http://www.exactsearchbar.com/mailcom
>

Finally the victim replies to our warning. Curiously, his prime concern seems to be whether we had told his boss (as we hinted we would).

X-Apparently-To: the_chaos_project@yahoo.com via 216.136.131.40; 11 Dec 2002 04:51:11 -0800 (PST)
Return-Path:
Received: from 205.158.62.139 (HELO spf1.us.outblaze.com) (205.158.62.139) by mta153.mail.scd.yahoo.com with SMTP; 11 Dec 2002 04:51:11 -0800 (PST)
Received: (qmail 11803 invoked from network); 11 Dec 2002 05:52:19 -0000
Received: from unknown (205.158.62.68) by 205-158-62-139.outblaze.com with QMQP; 11 Dec 2002 05:52:19 -0000
Received: (qmail 93412 invoked from network); 11 Dec 2002 12:50:40 -0000
Received: from unknown (HELO ws1-1.us4.outblaze.com) (205.158.62.49) by 205-158-62-153.outblaze.com with SMTP; 11 Dec 2002 12:50:40 -0000
Received: (qmail 49006 invoked by uid 1001); 11 Dec 2002 12:50:19 -0000
Message-ID: <20021211125019.49003.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [80.11.136.219] by ws1-1.us4.outblaze.com with http for mawete@saintly.com; Wed, 11 Dec 2002 07:50:17 -0500
From: "Mawete Maseka"  | This is Spam | Add to Address Book
To: the_chaos_project@yahoo.com
Date: Wed, 11 Dec 2002 07:50:17 -0500
Subject: Re: Fwd: URGENT - Mawete, your life is in danger
X-Originating-Ip: 80.11.136.219
X-Originating-Server: ws1-1.us4.outblaze.com
Content-Length: 547

Hello,

Your message were received only today by me.
I could not reply sooner because I didn't go to internet
the days before.

I am sorry.

I could not Know or imagine that things were like this.

So please help me instead of warning my boss.

I will wait a reply ASAP.

I thank you in advance.

Yours Mawete,

Again he asks whether we have told his boss ...

X-Apparently-To: the_chaos_project@yahoo.com via 216.136.131.41; 11 Dec 2002 05:02:54 -0800 (PST)
Return-Path:
Received: from 205.158.62.139 (HELO spf1.us.outblaze.com) (205.158.62.139) by mta453.mail.yahoo.com with SMTP; 11 Dec 2002 05:02:54 -0800 (PST)
Received: (qmail 30079 invoked from network); 11 Dec 2002 06:04:04 -0000
Received: from unknown (205.158.62.68) by 205-158-62-139.outblaze.com with QMQP; 11 Dec 2002 06:04:04 -0000
Received: (qmail 28686 invoked from network); 11 Dec 2002 13:02:34 -0000
Received: from unknown (HELO ws1-1.us4.outblaze.com) (205.158.62.49) by 205-158-62-153.outblaze.com with SMTP; 11 Dec 2002 13:02:34 -0000
Received: (qmail 68250 invoked by uid 1001); 11 Dec 2002 13:02:25 -0000
Message-ID: <20021211130225.68249.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [80.11.136.219] by ws1-1.us4.outblaze.com with http for mawete@saintly.com; Wed, 11 Dec 2002 08:02:24 -0500
From: "Mawete Maseka"
To: the_chaos_project@yahoo.com
Date: Wed, 11 Dec 2002 08:02:24 -0500
Subject: Re: Fwd: URGENT - Mawete, your life is in danger
X-Originating-Ip: 80.11.136.219
X-Originating-Server: ws1-1.us4.outblaze.com
Content-Length: 390

Hello,

Please tell me if my boss have been told about all these
things, please.

So that I can Know How to proceed, I thank you in advance.

Yours Mawete.

... and again.

So far, these are the only messages that we have had from M. Maseka, and all three are mainly concerned with asking us whether his boss has been informed. Around this time, he appears to have lost his job (see later). This might simply be due to his having run off to Spain without telling his employers, or staying away too long, but it is interesting to speculate that he may actually have stolen money from his workplace or colleagues to pay the scammers - this is something that turns up quite often in news reports of 419 victims

X-Apparently-To: the_chaos_project@yahoo.com via 216.136.131.44; 11 Dec 2002 05:06:43 -0800 (PST)
Return-Path:
Received: from 205.158.62.139 (HELO spf1.us.outblaze.com) (205.158.62.139) by mta106.mail.scd.yahoo.com with SMTP; 11 Dec 2002 05:06:43 -0800 (PST)
Received: (qmail 3087 invoked from network); 11 Dec 2002 06:07:46 -0000
Received: from unknown (205.158.62.68) by 205-158-62-139.outblaze.com with QMQP; 11 Dec 2002 06:07:46 -0000
Received: (qmail 70140 invoked from network); 11 Dec 2002 13:06:21 -0000
Received: from unknown (HELO ws1-1.us4.outblaze.com) (205.158.62.49) by 205-158-62-153.outblaze.com with SMTP; 11 Dec 2002 13:06:21 -0000
Received: (qmail 74730 invoked by uid 1001); 11 Dec 2002 13:06:11 -0000
Message-ID: <20021211130611.74729.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [80.11.136.219] by ws1-1.us4.outblaze.com with http for mawete@saintly.com; Wed, 11 Dec 2002 08:06:11 -0500
From: "Mawete Maseka"
To: the_chaos_project@yahoo.com
Date: Wed, 11 Dec 2002 08:06:11 -0500
Subject: Re: Fwd: URGENT - Mawete, your life is in danger
X-Originating-Ip: 80.11.136.219
X-Originating-Server: ws1-1.us4.outblaze.com
Content-Length: 390

Hello,

Please tell me if my boss have been told about all these
things, please.

So that I can Know How to proceed, I thank you in advance.

Yours Mawete.

So we tell him what we have done.

We are keen to hear back from him, as there is a slight chance that he will not heed our warning. In order to encourage ongoing contact with us, we withhold full copies of our messages to his employer and the police until he responds.

There has never been any response to this message.

Date: Wed, 11 Dec 2002 12:55:46 -0800 (PST)
From: "The Chaos Project"
Subject: Bonjour Mawete (Was: Re: Fwd: URGENT - Mawete, your life is in danger)
To: "Mawete Maseka"

Dear Mawete,

Thank you for your reply. We are VERY relieved to see that you are safely back in Grenoble. We have been extremely concerned about your safety.

We tried to contact you in a number of ways, including emails to your place of work (IMAG). We are sorry if this causes you any trouble, but after very careful research, we determined that it was very likely that you were in Spain (as your emails suggested), and were in EXTREME danger from the criminals who were defrauding you.

We located your IMAG contact details on a web page (http://cmp.imag.fr/CMPStaff.html). Our attempts to contact your director Bernard Courtois failed because your company's anti-spam software rejected mail from our yahoo.com address. This means that he will not have received our message. We also sent a warning message to the email address icom@imag.fr, which was not rejected, but we have received no reply to that message. Perhaps messages to that address are read only infrequently, or it may have been rejected 'silently', without notification to us.

Another person, acting independently, tried to email your colleague Sebastien Colin. This message was probably also rejected because of its yahoo.com originating address, but we have not had confirmation of this.

Because we were extremely concerned for your safety, we also sent a message through a web-based contact form at the national French Police web site. We have received no response to that message.

Mawete, it appears almost certain that you have been the victim of an Advance Fee Fraud criminal operation, also known as 419 fraud. Could we please ask you to reply ASAP to confirm that you now understand what has been happening? When we receive your reply, we will forward to you copies of the messages we sent to icom@imag.fr, and to the French police.

It is vital to your safety that you research the issue of Advance Fee Fraud, and understand what these criminals were doing to you. If you still believe the story that they have told you, then you may still be in danger from them (although this is now unlikely, as long as you do not meet them again in person). However they will certainly continue to try to get money from you until you either tell them that you know what they are doing, or (safer) simply stop communicating with them altogether.

The fastest way to find information on the particular scheme they were using with you is to do a google search on the phrase "wash wash fraud". You can also find a good selection of informative links at the bottom of the excellent Scam-O-Rama page (http://www.scamorama.com), and you may like to visit our own site at http://connect.to/chaosproject

We are very interested to receive more information about what really happened to you. Although we considered the possibility that you were deceiving the criminals (as many people now do), all the evidence suggested that you had actually gone to Spain and met with them. Is that correct? What happened to you there - did you lose money?

If you have lost money to these criminals, we strongly recommend that you contact your local Police. Police attitudes vary in different countries (e.g. in the USA the police will not be interested unless you have lost a great deal of money), but it would be worth checking with your local authorities.

Once again, please accept our apologies if we have caused you any difficulty, with your employer or otherwise. Our efforts to contact them, and the police, were made because we genuinely believed, after careful research, that there was a significant risk that you were in mortal danger from dangerous criminals.

Yours sincerely,
The Chaos Project

--- Mawete Maseka wrote:
> Hello,
> > Your message were received only today by me.
> I could not reply sooner because I didn't go to internet
> the days before. ...

After still not hearing any more from M. Maseka, we took another look in the scammer's account, and found the following.

Local Grenoble Wanadoo IP address again.

From: mawete@saintly.com
To: "louise estrada"
Cc:
Subject: Thank you for your message.
Date: Thu, 12 Dec 2002 08:26:24 -0500
Return-Path:
Delivered-To: louise338:mail.com@mail.com
Received: (qmail 30865 invoked from network); 12 Dec 2002 13:26:31 -0000
Received: from unknown (HELO spf12.us4.outblaze.com) (205.158.62.36) by 205-158-62-62.outblaze.com with SMTP; 12 Dec 2002 13:26:31 -0000
Received: from spf2.us4.outblaze.com (205-158-62-24.outblaze.com [205.158.62.24]) by spf12.us4.outblaze.com (8.12.5/8.12.5/us4-yg) with ESMTP id gBCDPK9j005230 for <"louise338:mail.com"@mail.com.int>; Thu, 12 Dec 2002 13:25:20 GMT
Received: from ws1-1.us4.outblaze.com (205-158-62-49.outblaze.com [205.158.62.49]) by spf2.us4.outblaze.com (8.12.6/8.12.6) with SMTP id gBCDQTrZ017413 for ; Thu, 12 Dec 2002 13:26:30 GMT
Received: (qmail 84512 invoked by uid 1001); 12 Dec 2002 13:26:24 -0000
Message-Id: <20021212132624.84511.qmail@mail.com>
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [193.253.227.56] by ws1-1.us4.outblaze.com with http for mawete@saintly.com; Thu, 12 Dec 2002 08:26:24 -0500
X-Originating-Ip: 193.253.227.56
X-Originating-Server: ws1-1.us4.outblaze.com

Dear Mrs. Louise,

Thank you for your message.

I am planning to ask for a personnal credit from one richisim
freinds of mine, to save your money from United Nations confiscation.

But before I proceed I would like to be asssured about the future
transactions details knowing that made some credit from friends
to get the cash amount of 6.000 Euro.

How come that the spanish central bank can't take some pourcentages
from the secured money. This is some I don't understand.

In all the cases I will do my best, to collect some money but I am
waiting
for a reply from you.

May The GOD of Goodness Bless You,
Mawete.

From: "louise estrada"
To: "Mawete Maseka"
Cc:
Subject: proceed.
Date: Thu, 12 Dec 2002 11:28:53 -0500
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [216.139.172.18] by ws1-3.us4.outblaze.com with http for louise338@mail.com; Thu, 12 Dec 2002 11:28:53 -0500
X-Originating-Ip: 216.139.172.18
X-Originating-Server: ws1-3.us4.outblaze.com

Dear Mawete,

Listen dear you need not worry yourself over the 6,000.00 euros you
paid to the firm in spain as all your expeneses will be taken care
off as soon as we have concluded with the firm in spain.. this is
what you are going to do once all the money has been properly
washed.. before you transfer the money into your account,.. i will
want you to deduct from it all your expenses after which you will
make the deposit..ok.

Note that, it will be impossible for the spanish central bank to
take out some percentages from our funds ok.. cause this transaction
of ours is a private and secret arrangements which you know.. so we
dont have to involve any other person or office in this matter
reasons been that they might be working for the philippine
Government.. ok. so the idea of us asking the spanish central bank to
take out of our fund is totaly ruled out.. take note of this.

My, dear please go ahead and request for the loan from your friend
so that we can conclude this transactions of ours in a timely
manner,(But make it a secret one) even if your friend insists that
you will repay him back with interest do agree with him ok.. do all
your best to rise the money this week so that you will be in Spain
this weekend to conclude things after which the funds will be
transfered into your personal account.. dear, dont worry as all your
financial problems will soon be a thing of the past this i have
assured you and am reassuring you again.. do proceed and get the loan
from your friend ok. as all will be fine..

Xmas is around the corner and am quite sure you want to get the best
this year..right? well my dear.. you will live to celebrate the best
of xmas you have ever celebrated as you will have more than enough
fund around to play with once we have concluded this transaction
which we will conclude as you have made good steps in view of
resolving this matter..

I will wait for your detailed informations that you have gotten the
required money so that the rest fund can be washed.

Bless You.

Louise Mrs.

There has never been any response to this message.

Date: Fri, 13 Dec 2002 04:10:58 -0800 (PST)
From: "The Chaos Project"
Subject: Mawete - are you still being defrauded?
To: "Mawete Maseka"

Dear Mawete,

A couple of days ago we asked you to write to us to tell us what had happened to you in Spain. As you haven't replied, we looked again at the email account louise338@mail.com

We were amazed to find that you are still corresponding with the criminal that operates this account! Do you not understand what is happening here? That person is not Louise Estrada - it is a male Nigerian criminal, who is part of a group that are stealing your money.

We are also very alarmed to see that they want you to go back to Spain. Mawete, you MUST NOT DO THIS! There is a small but SERIOUS risk that you will be kidnapped or murdered by this criminal gang.

We are guessing that perhaps you do understand that they are criminals, but you are hoping to get back the 6.000 Euros you have given them. You must accept that this will not happen - that money is lost, and you will only endanger yourself by trying to recover it.

Have you researched the issue of Advance Fee Fraud, as we advised you? Just search for "wash wash fraud" at Google (http://www.google.com), and you will find plenty of information about the scam they are pulling on you.

We understand that you are a French speaker (having gone to the Lycee Denis Diderot in Kenya, and now working in Grenoble at IMAG); perhaps you had difficulty understanding our warnings. Show our letters to an English speaker that you trust - they will translate them for you.

Mawete, PLEASE heed our warnings. Do not continue to place yourself in DANGER. Please reply to this message as soon as possible to reassure us that you accept that you have been defrauded, and will not continue to meet with these criminals or send them money.

Yours sincerely,

The Chaos Project

This is the last message we have seen in the louise338@mail.com mailbox. We speculate that M. Maseka may have told his scammer about our ability to access this mailbox, prompting him to switch to a new address.

However, we do have reason to believe that the scammer is still monitoring the louise338@mail.com mailbox, at least as late as 19 December (we observed unrelated spam arrive in the Inbox, and then later get trashed).

From: "louise estrada"
To: "Mawete Maseka"
Cc:
Subject: Update needed.
Date: Fri, 13 Dec 2002 11:48:48 -0500
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0
X-Mailer: MIME-tools 5.41 (Entity 5.404)
Received: from [216.139.169.25] by ws1-8.us4.outblaze.com with http for louise338@mail.com; Fri, 13 Dec 2002 11:48:48 -0500
X-Originating-Ip: 216.139.169.25
X-Originating-Server: ws1-8.us4.outblaze.com

Dear Mawete,

I need to hear from you, as am quite sure that by now you must have
gotten the 30,000.00 euros from your friend so that the rest money
can be washed.

Please do update me soonest as am getting worried.

Bless You.

Louise Mrs.

Still no response, so we try to contact him at his work address. Although we get the expected bounce, somehow an automatic process is still triggered, and we also get a message suggesting that M. Maseka has been fired.

There has never been any response to this message.

Date: Fri, 13 Dec 2002 12:56:21 -0800 (PST)
From: "The Chaos Project"
Subject: Please contact us
To: "Mawete Maseka"

Dear Mawete,

Are you back at work yet? What is happening? We are very concerned about your safety - please reply ASAP.

Yours sincerely,

The Chaos Project

This is the bounce message that we receive for all messages sent to address @imag.fr, except for icom@imag.fr (no bounce).

X-Apparently-To: the_chaos_project@yahoo.com via 216.136.131.44; 13 Dec 2002 12:56:32 -0800 (PST)
Return-Path:
Received: from 129.88.30.1 (EHLO imag.imag.fr) (129.88.30.1) by mta102.mail.scd.yahoo.com with SMTP; 13 Dec 2002 12:56:32 -0800 (PST)
Received: from rhin.imag.fr (rhin.imag.fr [147.171.129.2]) by imag.imag.fr (8.11.6/8.11.6) with ESMTP id gBDKuUu09304 for ; Fri, 13 Dec 2002 21:56:31 +0100 (MET)
Received: from (root@localhost) by rhin.imag.fr (8.10.2+Sun/jtpda-5.3.3) id gBDKuPC05660 ; Fri, 13 Dec 2002 21:56:25 +0100 (MET)
Date: Fri, 13 Dec 2002 21:56:25 +0100 (MET)
Message-Id: <200212132056.gBDKuPC05660@rhin.imag.fr>
From: "MailScanner"
To: the_chaos_project@yahoo.com
Subject: Unsolicited commercial email rejected
X-MailScanner: generated
Content-Length: 548

Our UCE (spam) detectors have been triggered by a message you sent:-
To: maseka@rhin.imag.fr
Date: Fri Dec 13 21:56:25 2002
This message has been destroyed. The detectors that were triggered are
RFC-IGNORANT-ABUSE.

The server which is sending the message to our site is listed in a
public blacklist of badly configured or misused mail systems.

If you have any questions about this, or you believe you have received
this message in error, please contact the site system administrators.

--
MailScanner
Email Virus Scanner

We also note that M. Maseka has been expunged from the web page for his department, and all staff photos have been removed (leaving only names and contact details).

X-Apparently-To: the_chaos_project@yahoo.com via 216.136.131.42; 13 Dec 2002 12:56:35 -0800 (PST)
Return-Path:
Received: from 129.88.30.1 (EHLO imag.imag.fr) (129.88.30.1) by mta147.mail.scd.yahoo.com with SMTP; 13 Dec 2002 12:56:34 -0800 (PST)
Received: from rhin.imag.fr (rhin.imag.fr [147.171.129.2]) by imag.imag.fr (8.11.6/8.11.6) with ESMTP id gBDKuXu09307 for ; Fri, 13 Dec 2002 21:56:33 +0100 (MET)
Received: from (maseka@localhost) by rhin.imag.fr (8.10.2+Sun/jtpda-5.3.3) id gBDKuSD05672 for the_chaos_project@yahoo.com; Fri, 13 Dec 2002 21:56:28 +0100 (MET)
Date: Fri, 13 Dec 2002 21:56:28 +0100 (MET)
From: "mawete Maseka"
Message-Id: <200212132056.gBDKuSD05672@rhin.imag.fr>
To: the_chaos_project@yahoo.com
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0
Content-Length: 102

Hello

Mawete Maseka is not anymore member of CMP,
and your E-mail has been forwarded to cmp@imag.fr.

Still no success in seeking help. Next we try a suggestion from a helpful correspondent, and email the 24-hour newsdesk of a newspaper in the Grenoble area.

There has never been any response to this message.

Date: Fri, 13 Dec 2002 14:28:19 -0800 (PST)
From: "The Chaos Project"
Subject: URGENT - Un habitant de Grenoble en danger des criminels Nigérians
To: redaction@ledauphine.com

Bonjour,

(Nous nous excusons d'écrire en Anglais; nous parlons Français un peu, mais pas très bien. Vous pouvez répondre en Français ou Anglais.)

The Chaos Project is a modest project to frustrate the efforts of Nigerian Advance Fee Fraud criminals (419 fraud). We will assume that you are familiar with this type of fraud, or that you will research it.

http://connect.to/thechaosproject/

We recently gained access to the email account of one of these criminals, and discovered a conversation with a Grenoble resident. The fraudsters are operating a scam on this person that the Nigerians call "wash wash fraud". We were very concerned to find that the victim had been lured to Madrid to meet the criminals. By doing this, he placed himself at serious risk - in some cases victims who travel to meet the criminals are kidnapped or even murdered.

We made numerous efforts to contact the victim, his employers, and the French police, but without success. This is partly because The Chaos Project operates under one prime rule: anonymity at all costs. Because the perpetrators of these scams are sometimes dangerous criminals, we do not reveal our real identity, make traceable telephone calls, etc. All contact must be via email.

Although he acknowledged our warning, the victim is still communicating with the criminals, and may still be deceived by their lies. His last email was from Grenoble, but they are trying to get him to go back to Spain with more money. Therefore he may still be in serious danger. The victim also seems to have lost his job, so he may be quite distraught and acting irrationally.

In order to help him, we desperately need email contact with someone local to the victim (preferably the local police), in order to help make him understand what is going on. We are therefore asking if you could please make some enquiries and find someone who we can contact by email, who could then make contact with the victim and ensure that he is safe. Ideally we would like to communicate with someone from the local fraud authorities who has the time to help, and is willing to do so.

In return for your help, we will provide updates on what happens with this fraud victim. It could potentially make quite a good newspaper story.

Yours sincerely,

The Chaos Project

26 hours after that, once again with no response, we take our correspondent's second suggestion and email M. Erik Madsen, who is listed on Interpol's Intellectual Property Crimes Links page as follows:

Contact officer:

IPSG LYON
Erik Madsen (Crime Intelligence Officer)
Financial and Hi-Tech Crime Sub-Directorate
200, quai Charles de Gaulles
69006 Lyon
France
Phone: + 33 4 72 44 71 90
Fax: + 33 4 72 44 72 21
e.madsen@interpol.int

Although 419 fraud is not related to intellectual property, is is a financial crime, and M. Madsen's address was suggested to us because Lyon is not far from Grenoble. We had assumed that he would either respond, or else pass the information to someone more appropriate.

M. Madsen was given the address for a separate copy of M. Maseka's transcript, and that address has never been advised to anyone else. As far as we can tell, that page's built-in web-bug has never been triggered. Therefore we assume that M. Madsen, if he read our message at all, never looked at the transcript.

There has never been any response to this message.

Date: Sat, 14 Dec 2002 16:23:20 -0800 (PST)
From: "The Chaos Project"
Subject: URGENT - Un habitant de Grenoble en danger des criminels Nigérian
To: e.madsen@interpol.int

Bonjour,

(Nous nous excusons d'écrire en Anglais; nous parlons Français un peu, mais pas très bien. Vous pouvez répondre en Français ou en Anglais.)

The Chaos Project is a modest project to frustrate the efforts of Nigerian Advance Fee Fraud criminals (419 fraud). Obviously you will be familiar with this type of fraud.

http://connect.to/thechaosproject/

We recently gained access to the email account of one of these criminals, and discovered a conversation with a Grenoble resident. The fraudsters are operating a scam on this person that the Nigerians call "wash wash fraud" (marked money that can only be cleaned with an expensive chemical). We were very concerned to find that the victim had been lured to Madrid to meet the criminals, and therefore was possibly at risk of violence from the scammers.

We have a transcript of the conversation between the scammer and the victim, together with our own messages relating to this case. Because it is too large to email through Yahoo, we have posted the transcript on our website at the following address. Please note that this address has not been given to anyone else, so the transcript is not public.

http://connect.to/thechaosproject/__________.html

As you will see from the transcript, we have made numerous efforts to contact the victim, his employers, the French police, and the local media, but so far without success. Recently an ex-patriot Frenchman living in the U.K. responded to our appeal for contact information and helpfully suggested this Interpol address.

Although the victim acknowledged our warning, he is still communicating with the criminals, and may still be deceived by their lies. His last email was from Grenoble, but they are trying to get him to go back to Spain with more money. Therefore he may still be in serious danger. The victim also seems to have now lost his job (at IMAG), so he may be quite distraught and acting irrationally.

Please note that although we are a stricly amateur effort, we do have a reasonable understanding of what we are doing. We have only persisted with this case because an analysis of the victim's originating IP addresses in his diferent messages really do seem to confirm that he travelled from France to Spain to meet with the criminals, thus putting himself in serious danger. If he can raise more money, there is a risk that he will agree to their request to go back to Spain and meet them again.

PLEASE respond immediately to indicate reception of this notification. We are very disappointed at the lack of response to all our previous efforts, and remain very concerned for the safety of M. Maseka. Although The Chaos Project has a cardinal rule of retaining its anonymity at all costs, we are eager to provide any help that we can offer, via email.

Yours sincerely,

The Chaos Project

This message, with its suggestion of publishing his name, was written specifically to provoke a response from M. Maseka. It was also bugged, so that we could find out if, and from where, he was receiving our messages. The bug revealed that the message was read approximately five hours later, from a Grenoble IP address (193.251.23.145; AGrenoble-101-1-1-145.abo.wanadoo.fr) on 17 Dec at 09:23 GMT.

There has never been any response to this message.

Date: Mon, 16 Dec 2002 20:04:23 -0800 (PST)
From: "The Chaos Project"
Subject: Please respond urgently
To: mawete@saintly.com

Cher M. Maseka,

Why have you not responded to our earlier messages? Where are you - are you safe?

We will soon be publishing the transcript of your correspondence with the criminal who pretended to be Louise Estrada. If you would like, we can change your name in the text. Would you prefer this?

Yours sincerely,
The Chaos Project

After a couple more hours with no response, we try again to coax a response out of him. This time we try harder to prove to him that we will publish his name.

This message was also bugged, and the bugs showed that he read the message on 17 December, at 5:15 PM GMT. The copy of the transcript for which we gave him the address (again, a separate copy specifically for him, this time with all mention of web bugs removed) is also bugged, and has not been viewed by the time of publication of this page.

Date: Tue, 17 Dec 2002 03:31:05 -0800 (PST)
From: "The Chaos Project" <the_chaos_project@yahoo.com>
Subject: You are being deceived
To: mawete@saintly.com

Cher M. Maseka,

We know that you are reading our messages, and we know that you are in Grenoble, so for the moment we are hoping that you are safe.

However, you continue to ignore our requests for a response. We also know that all activity has now ceased in the account louise338@mail.com, an account that had previously been in active use for many months to defraud (or attempt to defraud) other victims as well as yourself.

We can therefore surmise this possible scenario:

- You continue to believe the lies that are being told to you about dirty money in Madrid.

- You have told the criminals about our messages to you, and have perhaps even forwarded some of our messages to them.

- Because of this, they have stopped using the address louise338@mail.com, and are communicating with you from another account.

Is that what is actually happening, Mawete? Are we right? How close are we? We know that it will be hard to accept that you have lost your money to this fraudulent scheme. However, you MUST grasp this, or you will continue to lose money and endanger yourself.

At our web site, we now have a page describing the type of fraud of which you are a victim. There are also links to other sites. READ this page. FOLLOW the links and READ what you find there.

Website - http://connect.to/thechaosproject/

"About AFF" page - http://connect.to/thechaosproject/aboutAFF.html

Follow this next link, and find a page that provides a transcript between the SAME SET OF CRIMINALS that are defrauding you, and somebody else who knows what they are doing.

http://www.upvetmet79.org/~juramentado/

Despite the lack of response from you, we are determined to do all we can to thwart these criminals and save you from your own foolishness. If we do not hear from you soon, we will publish the full transcript of your conversations with Louise Estrada on our web site. In fact it is already there, we simply have not published the address of the page. You may view it immediately:

http://connect.to/thechaosproject/__________.html

If you are still in any doubt, contact the police. Show them our messages. Show them the messages from "Louise Estrada". The police will know who is lying, and will explain it to you. Remember, we are telling you to GO TO THE POLICE. Will the criminals give you the same advice?

Yours sincerely,

The Chaos Project

This message was sent simultaneously to the following addresses, as well as through the web form at http://www.interieur.gouv.fr

icom@imag.fr
Bernard.Courtois@imag.fr
redaction@ledauphine.com
e.madsen@interpol.int

An immediate anti-spam rejection bounce was expected from the address of M. Maseka's ex-department director (Bernard Courtois), but did not arrive.

There have never been any responses to this message.

Date: Thu 19 Dec 12:10 GMT
From: "The Chaos Project" <the_chaos_project@yahoo.com>
Subject: URGENT - Final request for assistance in the case of Mawete Maseka

Over the past 12 days, The Chaos Project has been attempting to enlist help in warning a young Grenoble resident that he is being actively defrauded by a group of Nigerian criminals operating an Advance Fee Fraud, or '419' scheme.

Despite trying to contact his employer, the French police, a local newspaper, and the Financial Crimes division of Interpol in Lyon, we have received ABSOLUTELY NO RESPONSE from any email address that we have tried.

The victim, Mawete Maseka, still reads the warning messages we send him, but no longer replies. We know that he has communicated with the criminals since responding to our initial warning message. From this we think it likely that the criminals still have him 'in their spell' - the last thing we were able to establish is that they were attempting to get him to go back to Spain with 30.000 Euros.

This message is being sent simultaneously to all the addresses we have tried over the past 12 days, as a final request for assistance. If there is no reply before 06:00 AM (GMT) on Sunday December 22, we will, as a last resort, publish a web page detailing the whole of M. Maseka's conversation with the criminals who are defrauding him, together with the complete text AND EMAIL ADDRESSES of all the messages we sent in our attempts to enlist help.

If you are now willing to provide assistance in the case of M. Maseka, or wish to provide an explanation why you have ignored requests to help this man - who may very well be in danger of his life - PLEASE contact us at this address immediately.

PUBLICATION - Sunday December 22, 10:00 AM (GMT) - The transcript up to this point is published at The Chaos Project web site. A link is provided from the front page. The project is announced on Alex Kerensky's Reverse Scam Message Board.
Apparently still unread as at 24 Dec 02:00 GMT, however the service we use for 'bugging' has been having some outages.

Date: Sun, 22 Dec 2002 16:30:48 -0800 (PST)
From: "The Chaos Project" <the_chaos_project@yahoo.com>
Subject: Publication of Chaos Project #2 - Mawete Maseka
To: mawete@saintly.com

Cher M. Maseka,

We have now published the transcript of your conversation with the criminal who calls himself "Louise Estrada":

http://connect.to/thechaosproject/CP2-Mawete/CP2.html

or

http://ecobank.customerservice.inbox.as/CP2-Mawete/CP2.html

Please understand that we have done this out of a desire to help you - we still do not know whether you understand that you are being swindled, and that you may possibly be in danger from these criminals. Please contact us to discuss this.

The Chaos Project

This message was sent to nine addresses, two of which bounced immediately. It's a long shot, and we don't hold very high hopes of a response, but it's worth a try.

The French translation, a vast improvement on our original, was kindly provided by "Dr. Esher Koli", a fellow anti-scammer.

Date: Sun, 22 Dec 2002 19:53:00 -0800 (PST)
From: "The Chaos Project" <the_chaos_project@yahoo.com>
Subject: Pouvez-vous aider Mawete Maseka?

Bonjour,

Le Chaos Project (http://connect.to/thechaosproject) a tenté lors des dernières deux semaines de convaincre Monsieur Mawete Maseka qu'il se fait duper par un groupe de Nigérians qui pratiquent une fraude dite "d'honoraires avancés". Vous trouverez nos efforts et la correspondance entre M. Maseka et les fraudeurs à:

http://connecto.to/thechaosproject/CP2-Mawete/CP2.html

(Nous avons pu nous immiscer dans le compte de courriel du fraudeur).

Malheureusement, nous croyons que M. Maseka est toujours sous l'influence de ce groupe, et nos efforts pour le convaincre qu'il se fait escroquer et qu'il est possiblement en danger ont été jusqu'ici sans succès.

Nous avons trouvé votre adresse d'e-mail sur une page web listant des camarades du BAC 1997 de M. Maseka au Lycée Denis Diderot. Nous espérons que vous ayez maintenu le contact avec M. Maseka depuis l'obtention de votre diplôme, et que vous puissiez le contacter et lui expliquer ce qui se passe.

Si vous parvenez à le joindre, ou pouvez nous indiquer une quelconque façon de le contacter, nous apprécierions fort une réponse de votre part (en anglais ou en français).

Vous verrez en suivant le lien ci-dessus que nous avons déjà essayé de contacter l'employeur de M. Maseka, la police française, un journal local, et la division des Crimes Financiers d'Interpol. Nous trouvons honteux le fait qu'aucune de ces instances n'ait daigné nous répondre à ce sujet. La présente est vraiment un effort de dernier recours, et bien que nous l'ajouterons à la correspondance affichée sur la page internet ci-haut, soyez assurés que nous n'afficherons pas votre nom ni votre adresse, ni ne vous impliquerons d'une quelconque manière, même si nous n'obtenons aucune réponse de votre part.

Salutations distinguées,

Le Chaos Project

===============================

Subject: Can you help Mawete Maseka?

Hello,

The Chaos Project ( http://connect.to/thechaosproject ) has been trying for the past two weeks to convince Monsieur Mawete Maseka that he is being swindled by a group of Nigerian 'Advanced Fee Fraud' criminals. You can read about our efforts here:

http://connecto.to/thechaosproject/CP2-Mawete/CP2.html

Unfortunately, we believe that M. Maseka may still be under the influence of this group, and our efforts to enlist help in convincing him that he is being defrauded, and that he may in fact be in serious danger, have so far been unsuccessful.

We found your email address listed on a web page of M. Maseka's fellow 1997 BAC students at Lycée Denis Diderot. We are hoping that you may have maintained contact with M. Maseka since leaving school, and may be in a position to contact him and explain what is happening.

If you do manage to contact him, or can offer any suggestions as to how we might further help him, we would greatly appreciate a response from you (in English or French).

You will see from the web page mentioned above that we have previously tried to contact M. Maseka's employer, the French police, a local newspaper, and the Financial Crimes division of Interpol. We believe the fact that we have received no response from any of these addresses is quite shameful. However, this message is more of a last resort, and although we will shortly be adding the text of this message to the transcript, we will NOT disclose your name or address, nor will we make any implications if we do not receive a response from you.

Yours sincerely,

The Chaos Project

A botched cut-and-paste job managed to drop the first few characters of this correction message. It should begin "Veuillez noter q'une erreur ..." The message itself is just to correct a typo in the CP2 link from the previous message, and went to the same list of recipients.

Date: Mon, 23 Dec 2002 13:23:01 -0800 (PST)
From: "The Chaos Project" <the_chaos_project@yahoo.com>
Subject: Correction

er q'une erreur s'est glissée dans l'hyperlien qui réfère à la correspondance entre les fraudeurs,
M. Maseka et le Chaos Project. Il devrait
se lire:

http://connect.to/thechaosproject/CP2-Mawete/CP2.html

Bien à vous,

The Chaos Project


UPDATES

The following is a summary of updates that have been made to this page since its initial publication on December 22, at 10:00 (GMT). The most recent updates appear at the top. All times are in GMT. Nigeria, France,and Spain are all GMT +0100.

23 December 2002 21:40 - Added the correction message.

23 December 2002 04:05 - Added the email sent to previous fellow students of M. Maseka.

23 December 2002 01:40 - Added further research to the 3 December entry, which reinforces the theory that M. Maseka was writing from an Internet Café in Madrid between the 3rd and 8th of December.

23 December 2002 00:30 - Emailed M. Maseka to advise him that we had published this page.