Lottery scam: Group Lottery
D. Blinker
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
Message abstract:
Message ID: <2005012320552...@www.intrared.net>
Originating IP address:
200.24.7.39 ()
ASN: 26619
ASN Description:
CIDR: 200.24.7.0/24
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=26619
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
IP 200.24.7.39 () is known to SpamHaus as a source or relay of spam.
See: http://www.spamhaus.org/
Classification(s):
- Direct UBE sources, verified spam services and ROKSO spammers.
For more information on this host, see:
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL23057
Please address these issues.
The originating IP is listed in the following spam and open
relay lookup services:
- SpamCop: Blocked - see http://www.spamcop.net/bl.shtml?200.24.7.39
- SORBS Open Relay: Exploitable Server See:
http://www.dnsbl.sorbs.net/lookup.shtml?200.24.7.39 Spam Received See:
http://www.dnsbl.sorbs.net/lookup.shtml?200.24.7.39
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=200.24.7.39
http://openrbl.org/lookup?i=200.24.7.39
http://groups.google.com/groups?scoring=d&q=200.24.7.39+group:*abuse*
Among potential contact addresses found for this spam are:
IPW: asu...@isa.com.co
D:
WI:
AN:
RD: rjar...@flycom.net, mmbo...@internexa.com, ab...@redglobal.net,
postm...@redglobal.net
AA:
The following addresses are not reachable per remote query or
local experience:
IG:
Full unmunged headers and body follow.
Karsten M. Self <kms...@ix.netcom.com>
+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+
Version: 1.32
Last updated: 2004/10/10 03:43:37
---------------------------------------------------------------------
From win...@info.nd Sun Jan 23 23:27:01 2005
Received: from localhost ([127.0.0.1] ident=karsten)
by localhost with esmtp (Exim 3.36 #1 (Debian))
id 1Csv5H-00038E-00
for <karsten@localhost>; Sun, 23 Jan 2005 19:40:11 -0800
Status: U
Received: from popd.ix.netcom.com [207.217.120.161]
by localhost with POP3 (fetchmail-6.2.5)
for karsten@localhost (single-drop); Sun, 23 Jan 2005 19:40:11 -0800 (PST)
Received: from www.intrared.net ([200.24.7.39])
by mx-a065a10.pas.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id
1cSV3576F3NZFpB0
Sun, 23 Jan 2005 19:37:54 -0800 (PST)
Received: by www.intrared.net (Postfix, from userid 48)
id D9FF537C5CA; Sun, 23 Jan 2005 15:55:28 -0500 (COT)
To:
Subject: LOTTO NOTIFICATION!!!
From: lotto <win...@info.nd>
X-Priority: 3 (Normal)
Cc:
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: RLSP Mailer
Message-Id: <2005012320552...@www.intrared.net>
Date: Sun, 23 Jan 2005 15:55:28 -0500 (COT)
X-ELNK-AV: 0
Lines: 64
X-SenderIP: 200.24.7.39
X-ASN: ASN-26619
X-CIDR: 200.24.7.0/24
GROUP LOTTERY INTERNATIONAL
FROM:THE DESK OF THE VICE PRESIDENT
GROUP LOTTERY INTERNATIONAL/PRIZE AWARD DEPT.
Ref. Number:EGS/4693108078/08
Batch Number:35/8707/9PD
C/F/ Number. 18084245570NL
ATTENTION.
Sir/Ma/Miss,
We are pleased to inform you of the result of the Lottery Winners
International programs held on the 20th JANUARY,2005.Your e-mail address
attached to ticket number
748--13465207--156 with serial number 8052--79 drew lucky numbers
8-10-25-30-32-49 which consequently won in the 1st category.You have
therefore been approved for a lump sum pay of 100,000.00(One hundred
thousand EUROS) in cash credited to file .This is from a total cash
prize of
900.000.00(Nine hundred thousand EUROS)shared among the Nine
international winners in this category.
CONGRATULATIONS!!!
Due to mix up of some numbers and names we ask that you keep your
winning information confidential until your claims has been processed
and
your money Remitted to you.This is part of our security protocol to
avoid
double claiming and unwarranted
abuse of this program by some participants. All participants were
selected through a computer ballot system drawn from over 50,000
company and
70,000,000
individual email addresses and names from all over the world.This
promotional program takes place every three years,the lottery was
promoted
and sponsored by the President
of the World Largest software,B. Gates.We hope with part of your
winning you will take part in our next year EUROS 500 thousand
international
lottery.Your fund is now deposited with in a bank under a fixed deposit
bond policy insured to you by
our financial agent.
To file for your claim please contact our financial agent,Foriegn
operations manager,Mr.K.PAUL of Bonsoftware security bv.
Email:bonso...@netscape.net
Tel:0031645008356. Remember all winning must be claimed not later than
10th of FEBUARY 2005. After this date all unclaimed funds will be
included in the next stake. Please note in order to avoid unnecessary
delays and complications please remember to quote your reference number
and
batch numbers in all correspondence.Furthermore,should there be any
change of address do inform our agent as soon as possible.
Congratulations
once more from our members of staff and thank
you for being part of our promotional program.
Sincerely yours,
Mr.K.PAUL.
Lotto Co-ordinator.
___________________________________________________________________________
Mail sent from servicio de HHUniversal- http://www.handhelduniversal.com
---------------------------------------------------------------------
D. Blinker
are thought to be responsible for domain(s), IP blocks, ASN, or
nameservers associated with the origin point:
ab...@nic.it, ab...@tiscali.com, postm...@tiscali.com
Message abstract:
Message ID: <41EDBF77...@mk-cpfrontend-1.mail.uk.tiscali.com>
Originating IP address:
212.74.114.37 (mk-smarthost-1.mail.uk.tiscali.com)
ASN: 9105
ASN Description: Tiscali UK
CIDR: 212.74.96.0/19
CIDR Report:
http://www.cidr-report.org/cgi-bin/as-report?as=9105
The following (if any) queryable spam-related information is
associated with the originating IP and/or domain:
- SORBS Open Relay: Spam Received See:
http://www.dnsbl.sorbs.net/lookup.shtml?212.74.114.37
- SPEWS Level 1: ! [1] tiscali, see http://spews.org/ask.cgi?S3150
- SPEWS Level 2: ! [1] tiscali, see http://spews.org/ask.cgi?S3150
Additional resources of possible interest:
http://www.senderbase.org/?searchBy=ipaddress&sb=1&searchString=212.74.114.37
http://openrbl.org/lookup?i=212.74.114.37
http://groups.google.com/groups?scoring=d&q=212.74.114.37+group:*abuse*
Among potential contact addresses found for this spam are:
IPW: ab...@uk.tiscali.com, hostm...@uk.tiscali.com
D: postm...@tiscali.com ab...@tiscali.com
WI:
AN: ab...@nic.it, ab...@tiscali.com
RD:
AA:
The following addresses are not reachable per remote query or
local experience:
IG:
Full unmunged headers and body follow.
Karsten M. Self <kms...@ix.netcom.com>
+------------------------------------------------------------------+
| This report produced by the SpamTools reporting kit licensed |
| under the GNU GPL and available at: |
| |
| http://linuxmafia.com/~karsten/Download/SpamTools.tar.gz |
| |
+------------------------------------------------------------------+
Version: 1.32
Last updated: 2004/10/10 03:43:37
---------------------------------------------------------------------
From dptpromo...@handbag.com Mon Jan 24 10:15:48 2005
Received: from localhost ([127.0.0.1] ident=karsten)
by localhost with esmtp (Exim 3.36 #1 (Debian))
id 1Ct6pK-0006pD-00
for <karsten@localhost>; Mon, 24 Jan 2005 08:12:30 -0800
Status: U
Received: from popd.ix.netcom.com [207.217.120.162]
by localhost with POP3 (fetchmail-6.2.5)
for karsten@localhost (single-drop); Mon, 24 Jan 2005 08:12:30 -0800 (PST)
Received: from mk-smarthost-1.mail.uk.tiscali.com ([212.74.114.37])
by mx-a065a23.pas.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id
1cT3AE6W13NZFpE0
for <kms...@ix.netcom.com>; Mon, 24 Jan 2005 04:45:08 -0800 (PST)
Received: from mk-cpfront-1.mail.uk.tiscali.com ([212.74.114.3]:60474
helo=mk-cpfrontend.uk.tiscali.com)
by mk-smarthost-1.mail.uk.tiscali.com with esmtp (Exim 4.30)
id 1Ct3Ps-0002Ug-CE; Mon, 24 Jan 2005 12:34:00 +0000
Received: from [83.118.56.141] by mk-cpfrontend.uk.tiscali.com with HTTP;
Mon, 24 Jan 2005 12:34:00 +0000
Date: Mon, 24 Jan 2005 13:34:00 +0100
Message-ID: <41EDBF77...@mk-cpfrontend-1.mail.uk.tiscali.com>
From: dptpromo...@handbag.com
Subject: AWARD WINNING NOTIFICATION!!!! $1,000,000.00 USD
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-ELNK-AV: 0
Bcc:
Lines: 82
X-SenderIP: 212.74.114.37
X-ASN: ASN-9105
X-CIDR: 212.74.96.0/19
X-Mozilla-Status: 0004
IDAHO LOTTERY PROMOTION INTERNATIONAL
FROM THE DESK OF THE PROMOTIONS MANAGER
INTERNATIONAL PROMOTION AWARDS DEPARTMENT
Ref. Number: 132/756/4534
Batch number: 638901527-IDB/05
Security Code:ID(08)(67)(24)(68)CCC
Reply E-mail:dptcla...@netscape.net
Sir/ Madam,
AWARD WINNING NOTIFICATION!!!!
We are pleased to inform you of the Idaho international lottery winners
result programmes held on 20th January 2005. Your e-mail address was atta=
ched
to ticket number(27)(36)(52)(45)(09)IDL with your serial number 3772-554
drew you a lucky number 3-14-18-23-31-45 which consequently won in the fi=
rst
category, you are therefore been approved for lump sum pay out of US$1,0=
00,000
(One million United states Dollars) CONGRATULATIONS ! ! !
Due to mix up of some numbers and names, you are advised to keep your
winning information confidential until your claims has been processed and=
your money remitted to your nominated bank. This is part of our security=
protocol to avoid double claims and unwarranted abuse of this programme
by some participants. All participants were selected through an e-mail ba=
lloting
system. drawn from over 30,000 company and 20,000,000 individual email ad=
dresses
and names from all over the world.This promotional programme takes place
every three years. This lottery was promoted and sponsored by EDF, Inter=
net
service provider, Association of software producers and Idaho Board of Di=
rector
In Europe and America. We sincerely hope that with part of your winning,
you will take part
in our next year US$20 million international lottery.
To file for your claim, please contact our fiducial agent:
DR.STEVE BROWN.
E-mail address:dptcla...@netscape.net
Tel: 0031 615-645-130
Remember, all winning must be claimed not later than 15 days after the re=
ceipt
of this notice.Please note, in order to avoid unnecessary delays and comp=
lications,remember
to quote your reference number and batch number in all correspondence. Fu=
rthermore,
should there be any change of address do inform our Processing claim agen=
t
as soon as possible.
Once again congratulations .
Best regards,
Mrs.TERESA DESH
International Lottery coordinator.