Lotto scam: Free Lottery
D. Blinker
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
ab...@order-vault.net, postm...@order-vault.net
Message abstract:
Message ID: <200506090554....@hs43.order-vault.net>
Originating IP address:
69.94.80.21 (hs43.order-vault.net)
ASN: 19916
ASN Description:
CIDR: 69.94.80.0/20
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=19916
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
The originating IP is listed in the following spam and open
relay lookup services:
- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?69.94.80.21
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=69.94.80.21
http://openrbl.org/lookup?i=69.94.80.21
http://groups.google.com/groups?scoring=d&q=69.94.80.21+group:*abuse*
Among potential contact addresses found for this spam are:
IPW: d...@axxs.net
D: postm...@order-vault.net ab...@order-vault.net
WI:
AN: postm...@order-vault.net
RD:
AA:
The following addresses are not reachable per remote query or
local experience:
IG:
Slight munging applied to 'To' and 'Cc' lines to avoid bot-scraping, on
request.
Karsten M. Self <kms...@ix.netcom.com>
+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+
Version: : 1.41 $
Last updated: : 2005/06/06 21:36:51 $
---------------------------------------------------------------------
From mati...@jmail.co.za Wed Jun 8 23:25:55 2005
Received: from localhost ([127.0.0.1] ident=karsten)
by localhost with esmtp (Exim 3.36 #1 (Debian))
id 1DgGKu-0005hD-00
for <karsten@localhost>; Wed, 08 Jun 2005 23:16:17 -0700
Status: U
Received: from popd.ix.netcom.com [209.86.93.120]
by localhost with POP3 (fetchmail-6.2.5)
for karsten@localhost (single-drop); Wed, 08 Jun 2005 23:16:16 -0700 (PDT)
Received: from hs43.order-vault.net ([69.94.80.21])
by mx-casero.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id
1dGgj8BB3Nl34m0
for <kms...@ix.netcom.com>; Thu, 9 Jun 2005 02:14:26 -0400 (EDT)
Received: from hs43.order-vault.net (localhost.localdomain [127.0.0.1])
by hs43.order-vault.net (8.12.10/8.12.10) with ESMTP id j595udJj011961;
Thu, 9 Jun 2005 01:56:40 -0400
Received: (from apache@localhost)
by hs43.order-vault.net (8.12.10/8.12.10/Submit) id j595s4sl010376;
Thu, 9 Jun 2005 01:54:04 -0400
Date: Thu, 9 Jun 2005 01:54:04 -0400
Message-Id: <200506090554....@hs43.order-vault.net>
To:
Subject: CONGRATULATION!!
From: MatildaJonesy <mati...@jmail.co.za>
X-Priority: 3 (Normal)
CC:
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: RLSP Mailer
X-ELNK-AV: 0
Lines: 91
X-SenderIP: 69.94.80.21
X-ASN: ASN-19916
X-CIDR: 69.94.80.0/20
X-Mozilla-Status: 0004
Dear Winner,
WINNING FINAL NOTIFICATION
We are officially informing you of the result of the
Lottery Winners International
programs held on the 14th of APRIL 2005 as part of our
promotional programs for the year 2005.
Your e-mail address attached to ticket
number 77007742781005-18721 with reference number
414-3721060 drew winning numbers 7-00-71-00-
66-49 and credited to batch number 121cfc, which
consequently won in the 3rd
category via our electronic ticket as stated above.
You have therefore been
approved for a pay out of 1,800,000.00 (One Million
Eight Hundred Thousand Pounds).
CONGRATULATIONS!!!
Total funds have now been deposited and insured with
our affiliate security firm
for transfer into your nominated bank account either
by means of wire transfers
through any of our correspondent banks or any other
means suitable to you.
We also advice that you keep your winning information
very confidential as our
security policy demands to avoid double
claims/impersonation and unwarranted
abuse of this program by some individuals.
All participants were selected through a random
computer ballot system drawn
from over 800,000 company and 1,000,000 individual
email addresses and names
from all over the world. This promotional program
takes place annually and we
hope with part of your winning you will take part in
our next year 20 Million Pounds
International Lottery.
To file for your claim,you will be contacting our
accounts department authorized to verify and process
your claims for your total
payment (You will receive more information upon your
acknowledgment of this email).
This lottery is promoted and sponsored by software
corporations and other
private organizations to help individuals generate
fortunes which would
encourage them to expand their business frontiers
thereby creating more
opportunities and assisting with humanitarian concerns
within their immediate
environment. Please Note that winnings must be claimed
not later than 30th of June 2005.
After this date all unclaimed funds will be
included in our subsequent
program coming up later in 2005. In order to avoid
complications always quote
your reference number in all correspondence.
Furthermore, should there be any change of address do
inform us as soon as possible.
Congratulations from our organization and
thank you for being part of our
promotional program.
N.B: Anybody under the age of 18 is automatically
disqualified from
this program.
Sincerely yours,
Mrs Matilda Jones
FREE LOTTERY PROMOTION INTERNATIONAL
PROMOTIONS/PRIZE AWARD DEPT
74 CRANBOUNE ROAD
LONDON,
UNITED KINGDOM.
To file for your claim, please contact our fiduciary
agent:
Simon Lee
simon...@web-mail.com.ar
___________________________________________________________________________
Mail sent from WebMail service at PHP-Nuke Powered Site
- http://yoursite.com
---------------------------------------------------------------------
--
D. Blinker
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
ab...@avantamour.com, postm...@avantamour.com
Message abstract:
Message ID: <200506160852....@host1.avantamour.com>
Originating IP address:
64.78.186.47 (host1.avantamour.com)
ASN: 13649
ASN Description: ViaWest Internet Services
CIDR: 64.78.176.0/20
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=13649
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
The originating IP is listed in the following spam and open
relay lookup services:
- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?64.78.186.47
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=64.78.186.47
http://openrbl.org/lookup?i=64.78.186.47
http://groups.google.com/groups?scoring=d&q=64.78.186.47+group:*abuse*
Among potential contact addresses found for this spam are:
IPW: ab...@viawest.net, arin...@verado.com, hostm...@viawest.net
D: postm...@avantamour.com ab...@avantamour.com
WI:
AN: postm...@avantamour.com
RD:
AA: ab...@viawest.net, rou...@viawest.net
The following addresses are not reachable per remote query or
local experience:
IG:
Slight munging applied to 'To' and 'Cc' lines to avoid bot-scraping, on
request.
Karsten M. Self <kms...@ix.netcom.com>
+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+
Version: : 1.40 $
Last updated: : 2005/06/05 00:54:21 $
---------------------------------------------------------------------
From carl...@web-mail.com.ar Thu Jun 16 04:23:38 2005
Received: from localhost ([127.0.0.1] ident=karsten)
by localhost with esmtp (Exim 3.36 #1 (Debian))
id 1DiqfW-0000Yh-00
for <karsten@localhost>; Thu, 16 Jun 2005 02:28:14 -0700
Status: U
Received: from popd.ix.netcom.com [209.86.93.119]
by localhost with POP3 (fetchmail-6.2.5)
for karsten@localhost (single-drop); Thu, 16 Jun 2005 02:28:14 -0700 (PDT)
Received: from host1.avantamour.com ([64.78.186.47])
by mx-jacana.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id
1dIQEy7FD3Nl34e0
for <kms...@ix.netcom.com>; Thu, 16 Jun 2005 05:27:14 -0400 (EDT)
Received: from host1.avantamour.com (localhost.localdomain [127.0.0.1])
by host1.avantamour.com (8.12.11/8.12.10) with ESMTP id j5G8r6QW017896;
Thu, 16 Jun 2005 02:53:34 -0600
Received: (from apache@localhost)
by host1.avantamour.com (8.12.11/8.12.11/Submit) id j5G8qVar017884;
Thu, 16 Jun 2005 02:52:31 -0600
Date: Thu, 16 Jun 2005 02:52:31 -0600
Message-Id: <200506160852....@host1.avantamour.com>
To:
Subject: WINNING NOTIFICATION
From: carlos <carl...@web-mail.com.ar>
X-Priority: 3 (Normal)
CC:
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: RLSP Mailer
X-ELNK-AV: 0
Lines: 69
X-SenderIP: 64.78.186.47
X-ASN: ASN-13649
X-CIDR: 64.78.176.0/20
X-Mozilla-Status: 0004
Dear Winner,
WINNING FINAL NOTIFICATION
We are officially informing you of the result of the Lottery Winners
International
programs held on the 25FT of MAY 2005 as part of our promotional programs
for
the year 2005. Your e-mail address attached to ticket number 77007742781005-
18721 with reference number 414-3721060 drew winning numbers 7-00-71-00-
66-49 and credited to batch number 121cfc, which consequently won in the 3rd
category via our electronic ticket as stated above. You have therefore been
approved for a pay out of ?1,800,000.00 (One Million Eight Hundred Thousand
Pounds).
CONGRATULATIONS!!!
Total funds have now been deposited and insured with our affiliate security
firm
for transfer into your nominated bank account either by means of wire
transfers
through any of our correspondent banks or any other means suitable to you.
We
also advice that you keep your winning information very confidential as our
security policy demands to avoid double claims/impersonation and unwarranted
abuse of this program by some individuals.
All participants were selected through a random computer ballot system drawn
from over 800,000 company and 1,000,000 individual email addresses and names
from all over the world. This promotional program takes place annually and
we
hope with part of your winning you will take part in our next year ?20
Million
Pounds International Lottery. To file for your claim, you will be contacting
our
accounts department authorized to verify and process your claims for your
total
payment (You will receive more information upon your acknowledgment of this
email).
This lottery is promoted and sponsored by software corporations and other
private organizations to help individuals generate fortunes which would
encourage them to expand their business frontiers thereby creating more
opportunities and assisting with humanitarian concerns within their
immediate
environment. Please Note that winnings must be claimed not later than 25th
of
JUNE 2005. After this date all unclaimed funds will be included in our
subsequent
program coming up later in 2005. In order to avoid complications always
quote
your reference number in all correspondence.
Furthermore, should there be any change of address do inform us as soon as
possible. Congratulations from our organization and thank you for being part
of
our promotional program.
N.B: Anybody under the age of 18 is automatically disqualified from this
program.
Sincerely yours,
Mr Brain Gumm
fREE LOTTERY PROMOTION INTERNATIONAL
PROMOTIONS/PRIZE AWARD DEPT
LONDON, UNITED KINGDOM.
Address: 74 CRANBOUNE ROAD
CITY, STATE, ZIP: LIVERPOOL,
UNITED KINGDOM
To file for your claim, please contact our fiduciary agent:
Mr Carlos Gibson
Email: agent...@web-mail.com.ar