|
419 Scam Example: "BMW LAND Cars Promotional Lottery"
"BMW LAND Cars Promotional Lottery" is a fake lottery scam run by Nigerian gang abusing the name of the car company. BMW has no connection to these criminals. This follows a similar pattern as the "Honda Car Lottery" and the "Microsoft lottery" scams, which have been going on for many months. Please forward us copies of any replies or money demands by the ""claims agents" (Yahoo Mail: Forward / as Attachment, Outlook Express: Message / Forward as attachment, see "How to report 419 spam to us"). We will publish such replies here. Please forward copies of fraud emails to the abuse department of the webmail address listed as the contact email for the "claims agent". Ask for the addresses to be suspended because they are used in a 419 fraud (see 419 FAQ).
Example of initial "winning notification":
THE LOTTERY DEPARTMENT Message headers: Received: from bay16-dav10.bay16.hotmail.com ([65.54.186.190] helo=hotmail.com) by emailhost with esmtp (Exim 4.44) id 1ENrvi-0001RY-C2 for emailaddress; Fri, 07 Oct 2005 15:06:32 +0200 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Fri, 7 Oct 2005 06:06:24 -0700 Message-ID: <[email protected]> Received: from 192.116.154.206 by BAY16-DAV10.phx.gbl with DAV; Fri, 07 Oct 2005 13:06:24 +0000 X-Originating-IP: [192.116.154.206] X-Originating-Email: [[email protected]] X-Sender: [email protected] From: "The BMW LAND Cars Automobiles Lottery Department" <[email protected]> Subject: >>OFFICIAL PRIZE NOTIFICATION<< Date: Fri, 7 Oct 2005 06:06:09 -0700
WHOIS details for domain "onlineprizewinner.net": Domain Name: ONLINEPRIZEWINNER.NET Registrar: MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE Whois Server: whois.melbourneit.com Referral URL: http://www.melbourneit.com Name Server: PDOMNS1.MSN.COM Name Server: PDOMNS2.MSN.COM Status: ACTIVE Updated Date: 03-sep-2005 Creation Date: 03-sep-2005 Expiration Date: 03-sep-2006 Domain Name.......... onlineprizewinner.net Creation Date........ 2005-09-04 Registration Date.... 2005-09-04 Expiry Date.......... 2006-09-04 Organisation Name.... James Burroughs Organisation Address. Beverly Hills Organisation Address. Organisation Address. 70 Beverly Park Organisation Address. 90210 Organisation Address. CA Organisation Address. UNITED STATES Admin Name........... James Burroughs Admin Address........ Beverly Hills Admin Address........ Admin Address........ 70 Beverly Park Admin Address........ 90210 Admin Address........ CA Admin Address........ UNITED STATES Admin Email.......... [email protected] Admin Phone.......... +1.3102474804 Admin Fax............ Tech Name............ MSN NOC Tech Address......... One Microsoft Way Tech Address......... Tech Address......... Redmond Tech Address......... 98052 Tech Address......... WA Tech Address......... UNITED STATES Tech Email........... [email protected] Tech Phone........... +1.4258828080 Tech Fax............. Name Server.......... pdomns1.msn.com Name Server.......... pdomns2.msn.com
WHOIS details for sending network (IP 192.116.154.206): inetnum: 192.116.153.0 - 192.116.157.255 netname: GILAT-SATCOM-BLOCK-47-48-49-50-51 descr: Gilat-Satcom remarks: For abuse issues related to Gilat, email [email protected] country: GB admin-c: GS3350-RIPE tech-c: GS3350-RIPE status: ASSIGNED PA mnt-by: AS9116-MNT mnt-lower: AS9116-MNT source: RIPE # Filtered role: Gilat Support address: Gilat Satcom address: 21D Yagia Kapaim st. Petach-Tikva, Israel phone: +972 3 9255000 fax-no: +972 3 9217938 admin-c: DR5299-RIPE admin-c: GE2074-RIPE tech-c: DR5299-RIPE tech-c: GE2074-RIPE remarks: trouble: [email protected] nic-hdl: GS3350-RIPE mnt-by: AS9116-MNT source: RIPE # Filtered abuse-mailbox: [email protected] % Information related to '192.116.128.0/18AS9116' route: 192.116.128.0/18 descr: Goldenlines remarks: For addressing issues, email [email protected] remarks: For abuse issues, email [email protected] origin: AS9116 mnt-by: AS9116-MNT source: RIPE # Filtered Email history for IP address 192.116.154.206:
|