Example of spam:
Return-Path: <[email protected]>
Received: from bay23-f23.bay23.hotmail.com ([64.4.22.73] helo=hotmail.com)
by vmx02.prolocation.net with esmtp (Exim 4.43)
id 1Cd4WB-0008Po-1s
for [email protected]; Sat, 11 Dec 2004 11:30:27 +0100
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Sat, 11 Dec 2004 02:30:01 -0800
Message-ID:
Received: from 80.88.130.208 by by23fd.bay23.hotmail.msn.com with HTTP;
Sat, 11 Dec 2004 10:29:01 GMT
X-Originating-IP: [80.88.130.208]
X-Originating-Email: [[email protected]]
X-Sender: [email protected]
From: "Karl Peterside" <[email protected]>
Bcc:
Subject: WINNING NOTIFICATION
Date: Sat, 11 Dec 2004 10:29:01 +0000
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-MailScanner-SpamCheck: spam, SpamAssassin (score=7.796,
required 5, BAYES_50 0.00, MILLION_USD 2.80, MISSING_HEADERS 0.12,
MSGID_FROM_MTA_HEADER 0.05, NIGERIAN_BODY1 3.40, NIGERIAN_BODY2 0.60,
NIGERIAN_BODY3 0.06, SPF_HELO_PASS -0.25, SUBJ_ALL_CAPS 0.67,
US_DOLLARS_3 0.35)
UK-LOTTO Headquarters:
Customer Service
189.STREATHAM HIGH ROAD,
ELTHAM,
S.E 9 4TW.
LONDON.
UNITED KINGDOM.
Ref: UK/9420X2/68
12/12/2004
Batch: 074/05/ZY369
WINNING NOTIFICATION:
We happily announce to you the draw of the UK-LOTTO Sweepstake
Lottery International programs held on the 20TH NOVEMBER, 2004.
in LEEDS UNITED-KINGDOM.
Your e-mail address attached to ticket number: 564
75600545 188 with Serial number 5368/02 drew the lucky numbers:
19-6-26-17-35-7, which subsequently won you the lottery in the
2nd category.
You have therefore been approved to claim a total sum of
US$2,500,000.00 (Two million,Five Hundred Thousand United States
Dollars) in cash credited to file ktu/9023118308/03.This is from
a total cash prize of US $ 25 Million dollars, shared amongst
the first Ten (10) lucky winners in this category.
All participants were selected randomly from World Wide Web site
through computer draw system and extracted from over 100,000
companies. This promotion takes place annually.
Please note that your lucky winning number falls within our
European booklet representative office in Europe as indicated in
your play coupon.In view of this, your US$2,500,000.00 (Two
million,Five Hundred Thousand United States Dollars) would be
released to you by our payment office in europe.
Our European agent will immediately commence the process to
facilitate the release of your funds as soon as you contact him.
For security reasons, you are advised to keep your winning
information confidential till your claims is processed and your
money remitted to you in whatever manner you deem fit to claim
your prize.
This is part of our precautionary measure to avoid double
claiming and unwarranted abuse of this program by some
unscrupulous elements. Please be warned.
To file for your claim, please contact our fiduciary agent:
MR ANDREW WOODS.
Email:
To avoid unnecessary delays and complications, please quote your
reference/batch numbers in any correspondences with us or our
designated agent.
Congratulations once more from all members and staffs of this
program. Thank you for being part of our promotional lottery
program.
Sincerely,
SIR. CARL PETER.
UK-LOTTO Co-ordinator.
The domain of this "lottery" was only registered a few days before the above email, on 2004-12-08, using a bogus postal address in the USA:
Request: ukgrandlottery.net
Domain Name.......... ukgrandlottery.net
Creation Date........ 2004-12-08
Registration Date.... 2004-12-08
Expiry Date.......... 2005-12-08
Organisation Name.... Karl Peterside
Organisation Address. Cam 440 Bronx
Organisation Address.
Organisation Address. New York
Organisation Address. 12804
Organisation Address. NY
Organisation Address. UNITED STATES
Admin Name........... Karl Peterside
Admin Address........ Cam 440 Bronx
Admin Address........
Admin Address........ New York
Admin Address........ 12804
Admin Address........ NY
Admin Address........ UNITED STATES
Admin Email.......... [email protected]
Admin Phone.......... +1.5187931293
Admin Fax............
Tech Name............ MSN NOC
Tech Address......... One Microsoft Way
Tech Address.........
Tech Address......... Redmond
Tech Address......... 98052
Tech Address......... WA
Tech Address......... UNITED STATES
Tech Email........... [email protected]
Tech Phone........... +1.4258828080
Tech Fax.............
Name Server.......... pdomns1.msn.com
Name Server.......... pdomns2.msn.com
The actual source of the email is someone in Nigeria, hooked up to the Internet via a Danish satellite broadband provider:
inetnum: 80.88.130.192 - 80.88.130.223
netname: EMP-TRA04
descr: Networks at locations TRA04
country: NG
admin-c: OO741-RIPE
tech-c: EMP5-RIPE
status: ASSIGNED PA
remarks: - - - - - - - - - - - - - - - - - -
remarks: Abuse address: [email protected]
remarks: - or the admin-c of the network
remarks: - - - - - - - - - - - - - - - - - -
notify: [email protected]
mnt-by: EMP-NOC-MNT
changed: [email protected] 20041202
source: RIPE
route: 80.88.128.0/20
descr: DK-EMPERION-20010828-ROUTE
origin: AS21125
mnt-by: EMP-NOC-MNT
changed: [email protected] 20010906
source: RIPE
role: Emperion NOC Operator
address: Emperion A/S
address: Middelfartgade 7
address: 2100 Koebenhavn Oe
address: DK
phone: +45 3929 3530
e-mail: [email protected]
trouble: [email protected]
admin-c: KW6968-RIPE
tech-c: KW6968-RIPE
tech-c: SRL7-RIPE
tech-c: AJ163-RIPE
tech-c: GB1283-RIPE
tech-c: FL497-RIPE
nic-hdl: EMP5-RIPE
notify: [email protected]
mnt-by: EMP-NOC-MNT
changed: [email protected] 20010906
changed: [email protected] 20020110
changed: [email protected] 20021107
source: RIPE
person: Oyom Ojo
address: Tranter International Limited
phone: +234 1 4973363
fax-no: +234 1 4973363
e-mail: [email protected]
nic-hdl: OO741-RIPE
notify: [email protected]
mnt-by: EMP-NOC-MNT
changed: [email protected] 20010912
changed: [email protected] 20021022
source: RIPE
The same provider is used in the "englandlawonline.net" scam ("My name is Zack Manuel, I am the credit manager of First Standard Finance Bank Plc. here in the United Kingdom...", [email protected]), which uses a domain hosted by RediffmailPro in India.
Here is a different version using the same lottery name but different aliases for the individuals:
From: Mrs Deborah Carl [mailto:[email protected]]
Sent: 23 February 2005 13:10
Subject: HELLO
Importance: High
UK NATIONAL LOTTO HEADQUARTERS
Customer Service Center
Ref Number: UK/910/16454
Batch Number:VC/32/ID1141
Dispatch date :05/02/2005
Dear Sir/Madam,
WINNING NOTIFICATION
We happily announce to you the draw of the UK-LOTTO
Sweepstake Lottery International programs held on new year
day (1st of January, 2005) in ENGLAND AND WALES. Your
e-mail address/your companies e-mail address attached to
ticket number:5224652456UT with Serial number 0098/UK0204
drew the lucky numbers:03-01-15-20-34-33-07, which
subsequently won you the lottery in "A" category.
You have therefore been approved to claim a total sum of
US$2,500,000.00 (Two million, Five Hundred Thousand
United States Dollars) in cash credited to file
KLTT/KTU/2005ETN. This is from a total cash prize of US $25
Million dollars, shared amongst the first TEN (10) lucky
winners in this second category. All participants were
selected randomly from World Wide Web site through computer
draw system and extracted from over 100,000 companies.
This promotion takes place annually. Note that your lucky
winning number falls within our European booklet
representative office in Europe as indicated in your play
coupon. In view of this, y our US$2,500,000.00 (Two
million, Five Hundred Thousand United States Dollars) would
be released to you by our payment office in Europe. Our
European agent will immediately commence the process to
facilitate the release of your funds as soon as you contact
him. For security reasons, you are advised to keep your
winning information confidential till your claims is
processed and your money remitted to you in whatever manner
you deem fit to claim your prize. This is part of our
precautionary measure to avoid double claiming and
unwarranted abuse of this program. Please be
warned. To file for your claim, please contact our
fiduciary agent:
========================================================================
MR. JERRY GRAY
LEGAL/FIDUCIARY AGENT
EMAIL:[email protected]
========================================================================
To avoid unnecessary delays and complications, please
quote your Reference and Batch numbers in all your
correspondence with us or our designated agent.
Congratulations once more from all members and staff of
this program. Thank you for being part of our promotional
lottery program.
Note that you must contact your claims agent within one
week of receipt of this notice.
Sincerely,
MRS DEBORAH CARL
UK-LOTTO Co-ordinator,
UK N.L Information Service.
___________________________________________________________________________
Mail sent from WebMail service at more-bay
- http://www.more-bay.de
