An accompanying mail was sent to the following addresses which
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
l-registrobr-...@corp.uol.com.br, mail-ab...@nic.br, n...@nic.br,
secur...@uol.com.br, l-adm-...@uolinc.com
Message abstract:
Message ID: <42007A7600005...@www.zipmail.com.br>
Originating IP address:
200.221.11.147 (smtp.zipmail.com.br)
ASN: 15201
ASN Description: UOL Inc
CIDR: 200.221.0.0/18
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=15201
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
zipmail.com.br does not support abuse@domain mail.
zipmail.com.br does not support postmaster@domain mail.
IP 200.221.11.147 (smtp.zipmail.com.br) is known to SpamHaus as a
source or relay of spam.
See: http://www.spamhaus.org/
Classification(s):
- Direct UBE sources, verified spam services and ROKSO spammers.
For more information on this host, see:
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL21868
Please address these issues.
- SORBS Open Relay: Spam Received See: http://www.dnsbl.sorbs.net/lookup.shtml?200.221.11.147
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=200.2...
http://openrbl.org/lookup?i=200.221.11.147
http://groups.google.com/groups?scoring=d&q=200.221.11.147+group:*abuse*
Among potential contact addresses found for this spam are:
IPW: l-registrobr-...@corp.uol.com.br, mail-ab...@nic.br, n...@nic.br, secur...@uol.com.br
D:
WI: l-adm-...@uolinc.com, l-registrobr-...@corp.uol.com.br, mail-ab...@nic.br, n...@nic.br
AN: ab...@zipmail.com.br, antispa...@abuse.net, mail-ab...@nic.br
RD:
AA:
The following addresses are not reachable per remote query or
local experience:
IG: ab...@zipmail.com.br postmas...@zipmail.com.br
Full unmunged headers and body follow.
Karsten M. Self <kms...@ix.netcom.com>
+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+
Version: 1.32
Last updated: 2004/10/10 03:43:37
---------------------------------------------------------------------
From ma...@zipmail.com.br Thu Feb 3 14:10:57 2005
Received: from localhost ([127.0.0.1] ident=karsten)
by localhost with esmtp (Exim 3.36 #1 (Debian))
id 1CwUI8-0004ob-00
for <karsten@localhost>; Wed, 02 Feb 2005 15:52:12 -0800
Status: U
Received: from popd.ix.netcom.com [207.217.120.162]
by localhost with POP3 (fetchmail-6.2.5)
for karsten@localhost (single-drop); Wed, 02 Feb 2005 15:52:12 -0800 (PST)
Received: from www.zipmail.com.br ([200.221.11.147])
by mx-a065a01.pas.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id 1cWugs3BP3NZFpr0
for <kms...@ix.netcom.com>; Wed, 2 Feb 2005 15:50:27 -0800 (PST)
Received: from [80.88.139.230] by www.zipmail.com.br with HTTP; Wed, 2 Feb 2005 21:32:32 -0200
Message-ID: <42007A7600005...@www.zipmail.com.br>
Date: Thu, 3 Feb 2005 00:32:32 +0100
From: ma...@zipmail.com.br
Subject: =?iso-8859-1?Q?THE=20FREE=20LOTTO=20COMPANY?=
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-ELNK-AV: 0
Bcc:
Lines: 73
X-SenderIP: 200.221.11.147
X-ASN: ASN-15201
X-CIDR: 200.221.0.0/18
X-Mozilla-Status: 0004
THE FREE LOTTO COMPANY
HOLLAND HEAD OFFICE
WESTPOORT, 1045AR HORNWEG
THE NETHERLANDS.
www.freelotto.com
Dear Winner,
We are please to announce you as one of the 50 lucky winners in the
FreeLotto draw held on friday
6th of december. All 50 winning addresses were randomly
selected from a batch of 50,000,000 international emails. Your email
address emerged alongside 49
others as a category 2 winner in this year's Annual FreeLotto Draw.
Consequently,you have therefore been approved for a total pay out of
$1,000,000 (One million United
States Dollars) only. The following particulars are attached to your
lotto payment order:
(i) winning numbers: 37-13-43-85-67-11
(ii) email ticket number: FL754/22/76
(iii) lotto code number: FL09622SP
(iv) the file Ref number: FL/04/736207152/SP
Please contact the payment officer to begin your claims.
Mr. Matt Newmann
Operations Director,
Email:
Once again on behalf of all our staff we CONGRATULATE YOU.
Sincerely,
Sandra Moller.
Promotions Manager
N.B:
1.All claims are nullified after 10 working days from today
2.Your Ref number must be in all your mails with the claims or payment
officer.
3.Do inform the payment officer of any change of names or addresses.
4.All winners under the age of 18 are automatically dis-qualified.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =
=3D=3D=3D=3D=3D=3D=3D=3D
The FreeLotto is drawn from Yahoo, Hotmail,Rediffmail and a
conglomeration of other international
IT companies. The freelotto internet draw is held quarterly every year
and is so organized to
encourage the use of the internet and
computers worldwide. We are proud to say that over 200 Million Dollars
are won annually in more
than 150 countries worldwide. We also encourage you to visit our
website at www.freelotto.com and
take your chance to play and become part of our winners. Millions are
winning on a daily
basis on one of the world's most famous free lotto service.
------------------------------------------
Use o melhor sistema de busca da Internet
Radar UOL - http://www.radaruol.com.br
---------------------------------------------------------------------
--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.
For a copy of the guidelines to this group, see:
<URL:http://www.killfile.org/~tskirvin/nana/>
