Tuesday, July 20, 2010

Inbox - =?iso-8859-1?Q?=A3652=2C000.00_Has_Been_Won_By_You.?=SCAM email received by our South American Correspondent

If you remember our South American correspondent said in his previous post that he had never played the lottery in his life

MICROSOFT NATIONAL LOTTERY HEADQUARTERS:
10 Great Pulteney Road,
London,W1F 9NB UNITED KINGDOM.

(Customer Services).

(1). Ticket Number: 008795727498,

(2). Lucky Number: 14-21-25-39-40-47(20), (3). Ref: BTD/968/10,Batch: 409978E.

The prestigious Microsoft company successfully organized a promotion over the world, while winners were randomly selected from a wide range of web hosts. And your email was luckily drawn by a computer balloting system as one of the winner in our experimental lottery bonanza from the prestigious MICROSOFT ONLINE PROMOTION that subsequently won you £652,000.00 GBP (Six Hundred and Fifty Two Thousand Great British Pounds). The DRAW was held in London (United Kingdom).

The claim agent assigned to you for the transfer of your winning prize is (Mr. John Ivan). The beneficiary of this e-mail address should contact the Microsoft claims officer with the required details for immediate claim of his/her prize.

THIS FORM SHOULD BE COMPLETED BY THE BENEFICIARY OF THE WINNING EMAIL ADDRESS FOR VERIFICATION BEFORE TRANSFER.

------------------------------------------------------

PAYMENT RELEASE ORDER FORM.

------------------------------------------------------
Do not complete - this is a phishing scam - identity theft

(1). Full Names: _______________

(2). Contact Address:___________

(3). Gender:___________________

(4). Age:______________________

(5). Marital Status:_____________

(6). Occupation:________________

(7). E-Mail Address:_____________

(8). Mobile Number:_____________

(9). Country:___________________

(10). Nationality:________________

Note: As soon as these details are received and verified, your winnings will be sent to you as bank draft. Thank you and congratulations once more.

Mr. John Ivan

Claims Agent Officer

Phone :: (+44)-702-402-2598

E-Mail:: (claimsjohnivan1@yahoo.com.cn)

-----------------------------------------------------

Signed By...

Mrs. Katerine T Ezquerra Bernardo. (Head Of Department) Award Winning Department, Microsoft Online Promotion

Information for the Police / Interpol
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9Ng==
X-Message-Status: n:0
X-SID-PRA: Microsoft
X-SID-Result: Pass
X-AUTH-Result: PASS
X-Message-Info: M98loaK0Lo27IVRxloyPIU5mf2GkJIVff8EhKGKObZcLaLGTQ3yHvLPWoYxqwhxO0reTD7l7hHKoqOznWdF0Xpo3+XmWdbyEOT8cEEiUlAs=
Received: from pop-10.pop.com.br ([200.175.8.252]) by snt0-mc4-f4.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Mon, 19 Jul 2010 15:41:40 -0700
Received: (qmail 17179 invoked from network); 19 Jul 2010 22:38:54 -0000
Received: from pop-34.pop.com.br (HELO nwebmail.pop.com.br) (brunofofao@pop.com.br@[200.175.8.91])
(envelope-sender )
by pop-10.pop.com.br (qmail-ldap-1.03) with SMTP
for ; 19 Jul 2010 22:38:54 -0000
X-C3Mail-ID: 1279579133974435
Received: from 83.229.4.230 (proxying for 192.168.19.26)
(SquirrelMail authenticated user brunofofao@pop.com.br)
by nwebmail.pop.com.br with HTTP;
Mon, 19 Jul 2010 22:38:54 -0000 (GMT)
Message-ID: <38953.83.229.4.230.1279579134.squirrel@nwebmail.pop.com.br>
Date: Mon, 19 Jul 2010 22:38:54 -0000 (GMT)
Subject: =?iso-8859-1?Q?=A3652=2C000.00_Has_Been_Won_By_You.?=
From: "Microsoft"
Reply-To: claimsjohnivan1@yahoo.com.cn
User-Agent: SquirrelMail/1.4.6-rc1
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Remote-IP: 200.175.8.91
Bcc:
Return-Path: brunofofao@pop.com.br
X-OriginalArrivalTime: 19 Jul 2010 22:41:41.0210 (UTC) FILETIME=[8E598BA0:01CB2793]

2 comments:

pfigueredo said...

Please notice that the text claims to be from UK

The IP 200.175.8.91 is located in Brazil and uses a proxy server.

In my opinion they're hiding their IP

katysita said...

Hello :

My name is Katerine and Ive been victim of this scam like a yer ago and as I can see they are using my personal information to sign their scams.It is really bothering, could you please take out my name from the post?? which is the one who signs ( Mrs. Katerine T ).
thank you
katy