Lottery scam: Free Millions Email Lottery
D. Blinker
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
Message abstract:
Message ID:
<200505051246.1...@mx-a065b01.pas.sa.earthlink.net>
Originating IP address:
80.224.2.107 (107-2-adsl.red.retevision.es)
ASN: 16338
ASN Description: AUNA Autonomous System
CIDR: 80.224.0.0/19
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=16338
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
retevision.es does not support postmaster@domain mail.
IP 80.224.2.107 (107-2-ADSL.red.retevision.es) is known to SpamHaus
as a source or relay of spam.
See: http://www.spamhaus.org/
Classification(s):
- Illegal 3rd party exploits, including proxies, worms and trojans.
For more information on this host, see:
http://www.spamhaus.org/query/bl?ip=80.224.2.107
Please address these issues.
The originating IP is listed in the following spam and open
relay lookup services:
- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?80.224.2.107
- Composite Blocklist: Blocked - see
http://cbl.abuseat.org/lookup.cgi?ip=80.224.2.107
- SORBS Open Relay: Dynamic IP Addresses See:
http://www.sorbs.net/lookup.shtml?80.224.2.107
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=80.224.2.107
http://openrbl.org/lookup?i=80.224.2.107
http://groups.google.com/groups?scoring=d&q=80.224.2.107+group:*abuse*
Among potential contact addresses found for this spam are:
IPW: ab...@auna.es, tech...@auna.es
D: ab...@retevision.es
WI:
AN:
RD:
AA: ab...@auna.es, tech...@auna.es
The following addresses are not reachable per remote query or
local experience:
Slight munging applied to 'To' and 'Cc' lines to avoid bot-scraping, on
request.
Karsten M. Self <kms...@ix.netcom.com>
+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+
Version: 1.38
Last updated: 2005/04/18 20:00:01
---------------------------------------------------------------------
From freemill...@casinomail.com Thu May 5 19:32:30 2005
Received: from localhost ([127.0.0.1] ident=karsten)
by localhost with esmtp (Exim 3.36 #1 (Debian))
id 1DTmKS-0002mH-00
for <karsten@localhost>; Thu, 05 May 2005 12:48:12 -0700
Status: U
Received: from popd.ix.netcom.com [209.86.93.120]
by localhost with POP3 (fetchmail-6.2.5)
for karsten@localhost (single-drop); Thu, 05 May 2005 12:48:12 -0700 (PDT)
Received: from casinomail445.com ([80.224.2.107])
by mx-a065b01.pas.sa.earthlink.net (EarthLink SMTP Server) with SMTP id
1dtMiz1N23NZFpK0
Thu, 5 May 2005 12:46:00 -0700 (PDT)
From: FREE MILLIONS EMAIL LOTTERY AWARD 2005 PROGRAMME
<freemill...@casinomail.com>
Reply-To: freemill...@casinomail.com
Subject: LAST NOTIFICATION -:CLAIM YOUR WINNING PRIZE ON EURO MILLIONS
LOTTERY EMAIL PROGRAMME AWARD 2005!!!
Date: Thu, 05 May 2005 21:45:39 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="2b301d8e-18ea-4771-aa66-db5436b3debb"
Message-Id:
<200505051246.1...@mx-a065b01.pas.sa.earthlink.net>
X-ELNK-AV: 0
Lines: 65
X-SenderIP: 80.224.2.107
X-ASN: ASN-16338
X-CIDR: 80.224.0.0/19
This is a multi-part message in MIME format
--2b301d8e-18ea-4771-aa66-db5436b3debb
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
FREE MILLION LOTTO PROMOTIONS.
FROM:INTERNATIONAL PROMOTION/PRIZE AWARD DEPT.
REFERENCE: 0127/5680/HILK
BATCH: EGGS-301-698-0197:
RE: WINNING NOTIFICATION / FINAL NOTICE
Dear Winner,
We are pleased to inform you of the result of the Free Million Lottery =
Winners,an International E-mail program held on the 15th of April,2005. Your
=
E-mail address fall to the ticket number 963-124-002-352 with serial main =
number 058-459-321-057 drew lucky star numbers 00-58-16-27-92 which =
consequently won in the 2nd category of this program, you have therefore
been =
approved for a lump sum pay out of
1.000.000.00 Euro.(One Million Euros)
CONGRATULATIONS!!!
Due to mix up of some numbers and names, we ask that you keep your winning =
informations confidential until your claims has been processed and your
money =
remitted to you. This is part of our security protocol to avoid double =
claiming and unwarranted abuse of this program by some participants.
All participants were selected through a computer ballot system drawn from =
over 100,000 company and 50,000,000 individual email addresses and names
from =
all over the world.
This lottery was promoted and sponsored by Bill Gates,President of
Microsoft, =
the world's largest software company in order to enhance and promote the use
=
of Internet Explorer Users and microsoft-softwares around the globe.This =
promotional program takes place every three years.We hope that,
with part of your winning, you will take part in our end of year 50 million
=
Euro International lottery.
To file for your claim, please contact our fiducial agent:
MR. GOLDSMITH IVAN
( GOLDSMITH SECURITY & CONSULTANT)
Email:golds...@consultant.com
www.freelotto.com
Remember, all winning must be claimed not later than 29th May, 2005. After =
this date all unclaimed funds will be included in the next stake.Please note
=
in order to avoid unnecessary delays and complications please remember to =
quote your reference number and batch numbers in all correspondence.
Furthermore, should there be any change of address do inform our agent as =
soon as possible.
Congratulations once more from our members of staff and thank you for being
=
part of our promotional program.
Sincerely yours,
Maria Juan Lopez
Lottery Supervisor.
Note: Anybody under the age of 18 is automatically disqualified
--2b301d8e-18ea-4771-aa66-db5436b3debb--