Spyware Warrior Spyware Warrior
Help with Spyware, Hijacking & Other Internet Nuisances
 
FAQ :: Search :: Memberlist :: Usergroups :: Register
Profile :: Log in to check your private messages :: Log in

Winning the EURO MILLION SPAINSH (sic!) lottery...

 
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spam
View previous topic :: View next topic  
Author Message
olliver
Expert Developer


Joined: 27 Jan 2006
Last Visit: 02 Dec 2010
Posts: 1157
Location: yes

PostPosted: Wed Jul 18, 2007 12:48 pm    Post subject: Winning the EURO MILLION SPAINSH (sic!) lottery... Reply with quote

Yep, it's 419er time again Wink

This time our friendly Nigerian kindly reminded us of our forgotten email that automagically participated in a "spainsh" lottery and won one of the bigger prizes...

Mail headers:
Quote:
Delivered-To: [redacted]
Received: by 10.70.21.7 with SMTP id 7cs328069wxu;
Wed, 18 Jul 2007 06:16:01 -0700 (PDT)
Received: by 10.115.18.1 with SMTP id v1mr583570wai.1184764560799;
Wed, 18 Jul 2007 06:16:00 -0700 (PDT)
Return-Path: <euspainlottery@yahoo.es>
Received: from yahoo1422.com ([84.76.177.25])
by mx.google.com with SMTP id j26si876559waf.2007.07.18.06.15.50;
Wed, 18 Jul 2007 06:16:00 -0700 (PDT)

Received-SPF: neutral (google.com: 84.76.177.25 is neither permitted nor denied by best guess record for domain of euspainlottery@yahoo.es)
Message-Id: <469e1290.1aba720a.1e0d.183bSMTPIN_ADDED@mx.google.com>
From: DR.LUIS FERNANDEZ <euspainlottery@yahoo.es>
Reply-To: infoferandez@aim.com
Subject: CONGRATULATIONS !!!
Date: Wed, 18 Jul 2007 15:15:59 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="e194c63f-0ac4-4e57-aaaf-e70327fcc2b0"


The sender, 84.76.177.25, is situated in................
Spain, of course Wink. As this address is listed in Spamhaus' XBL, a compromised system seems likely.
Quote:
inetnum: 84.76.0.0 - 84.77.255.255
netname: YACOMNET
descr: Ya.com Internet Factory
country: es
admin-c: JJR2-RIPE
admin-c: DMR52-RIPE
tech-c: YO11-RIPE
status: ASSIGNED PA
mnt-by: YACOM-NET-MNT
mnt-lower: YACOM-NET-MNT
mnt-routes: YACOM-NET-MNT
source: RIPE # Filtered


Mail Body:
Quote:
EURO MILLION SPAINSH LOTTERY INTERNATIONAL.
FROM:VICE PRESIDENT
INTERNATIONAL PROMOTION/PRIZE AWARD DEPT.
REFERENCE:67/80/ESP
BATCH:ESP-541-623-782
DATE:17TH OF JULY 2007
RE: WINNING NOTIFICATION / FINAL NOTICE

Sir/Madam
We are pleased to inform you of the result of the Euro Million Spainsh Lottery Winners International E-mail programs held on the 10TH OF JULY 2007. Your E-mail address attached to ticket number 653-908-321-675 with serial main number 345-790-241-671 drew lucky star numbers 34-32-90-43-32 which consequently won in the 2nd category, you have therefore been approved for a lump sum pay out of 1.000.000.00 Euro.(One Million Euro)
CONGRATULATIONS!!!

Due to mix up of some numbers and names, we ask that you keep your winning information confidential until your claims has been processed and your money remitted to you. This is part of our security protocol to avoid double claiming and unwarranted abuse of this program by some participants. All participants were selected through a computer ballot system drawn from over 100,000 company and 50,000,000 individual email addresses and names from all over the world.

This lottery was promoted and sponsored by his royal highness King Rey Juan Carlos and Spanish European Lottery Board in conjunction with all international world organization in order to enhance and promote the use of Internet Explorer Users and Microsoft-wares around the globe.,This promotional program takes place every three year. We hope with part of your winning you will take part in our end of year 50 million Euro International lottery.

To file for your claim,please contact our fiducial agent:DR.LUIS FERNANDEZ
(FERNANDEZ SECURITY COMPANY SPAIN)
TEL:+34-648-823-675
Email: infoferandez@aim.com

Please Remember to complete the verification form below,As all winning must be claimed not later than two weeks,After this date all unclaimed funds will be included in the next stake.Please note in order to avoid unnecessary delays and complications please remember to quote your reference number and batch numbers in all correspondence. Furthermore, should there be any change of address do inform our agent as soon as possible.

Congratulations once more from our members of staff and thank you for being part of our promotional program.
Note:Anybody under the age of 18 is automatically disqualified.

Sincerely yours,
MRS,COMFORT JOSE
Lottery Coordinator
_______________________________________________________________________

This message is CONFIDENTIAL. It may also be privileged or otherwise protected by work product immunity or other legal rules. If you have received it please let us know by reply it from your system; you should not copy it or disclose its contents to anyone. All messages sent to and from Fernandez Security Company Espaņa may be monitored to ensure compliance with internal policies and to protect your winning from the Euro Million Spanish Lottery Award Promotion.

The contents of any email addressed to our clients are subject to our usual terms of business; anything which does not relate to the official business of the firm is neither given nor endorsed by it.

______VERIFICATION FORM__________________________________
1.FULL NAME:............................
2.ADDRESS:..........................
3.MARITAL STATUS:.....................
4.OCCUPATION:........................
5.AGE:............
6.S E X:.............
7.NATIONALITY:........................
8.COUNTRY OF RESIDENCE:.........................
9.TELEPHONE NUMBER:..............................
10.FAX NUMBER:....................................
11.BATCH NUMBER :.........................
12.REFERENCE NUMBER:.....................
13.ALTERNATIVE EMAIL ADDRESS IF ANY................


Some notable passages worth commenting:

Quote:
All participants were selected through a computer ballot system drawn from over 100,000 company and 50,000,000 individual email addresses and names from all over the world.

Of course each of them quadruple opt-in with tacid consent to receiving unsolicited offers from all over the world. At least so was the writing on the "millions prospective customers" CD-cover

Quote:
This lottery was promoted and sponsored by his royal highness King Rey Juan Carlos and Spanish European Lottery Board in conjunction with all international world organization in order to enhance and promote the use of Internet Explorer Users and Microsoft-wares around the globe.

Two questions:
1. How to enhance and promote the usage of Internet Explorer Users? Does by chance our friendly Nigerian hint at zombified Windows machines that now happily proxy botnet sites and spew spam for the masses?
2. How to enhance and promote the usage of Microsoft wares? I presume using choice 1) like our Friend Leo Kuvayev does.
Whatever it does not make much sense to establish a lottery for this purpose, since both choices are not exactly legal in most countries and therefore not an honour to take over sponsorship and promotion for.

Quote:
This message is CONFIDENTIAL. It may also be privileged or otherwise protected by work product immunity or other legal rules. If you have received it please let us know by reply it from your system; you should not copy it or disclose its contents to anyone.

In other words: This mail isn't spam because it contains the magic word confidential and therefore protected anywhere on this planet. Of course sending complaints with the spam attached, or posting it to forums/newsgroups as public evidence breaks this agreement.

How confidential it actually is shows the following Google query:
http://www.google.com/search?q=ticket+number+653-908-321-675+main+number+345-790-241-671
Astonishingly, this combination returns about 810 results, some of them dating back to 1994 (!). And all of them containing the same ticket number that must have been won prize after prize for years without anyone noticing it. Even the telephone number results in quite a few results:
http://www.google.com/search?q=%2B34-648-823-675
About 215 dating back to May this year as Dr. Luis Fernandez.

Without doubt it is a scam designed to gather data of people who believed this to be true, despite the obvious warning signs like dubious origin, anonymous throwaway email accounts, strange spelling and punctuation and fabricated events that lead to this notification. So of course the appropriate reaction is to ignore the scam artist's request and report her/him instead.

Olliver
_________________
Petcord netlabel :: Synflict post-digital arts :: Leftob audio cast
Each click on any of the links above will save the life of a cute kitty somewhere in the universe.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Spyware Warrior Forum Index -> Spam All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



smartBlue Style © 2002 Smartor
Powered by phpBB © 2001, 2002 phpBB Group