Friday, February 26, 2010

aspaccpro@wa8a0pm2x.homepage.t-online.de>
Received: from mailout09.t-online.de (mailout09.t-online.de [194.25.134.84])
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o1Q98ihh001039
for <xxxxx@xxxxx>; Fri, 26 Feb 2010 10:08:44 +0100
Received: from fwd07.aul.t-online.de (fwd07.aul.t-online.de )
by mailout09.t-online.de with smtp
id 1NkwAL-0003Ip-Tp; Fri, 26 Feb 2010 10:07:21 +0100
Received: from User (V8cfPBZbQtGuguG8nidSwicHUiX12vKiWgEjUPI5+HFidWf87PbZmENYT6dM8Vmp93CTywecom@[24.217.51.148]) by fwd07.t-online.de
with esmtp id 1Nkv52-1jczpo0; Fri, 26 Feb 2010 08:57:48 +0100
Reply-To: <aspac@w.cn>
From: "Aspac Promotion Company" <aspaccpro@wa8a0pm2x.homepage.t-online.de>
Subject: Congratulations once again!!!
Date: Fri, 26 Feb 2010 08:57:42 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <1Nkv52-1jczpo0@fwd07.t-online.de>
X-ID: V8cfPBZbQtGuguG8nidSwicHUiX12vKiWgEjUPI5+HFidWf87PbZmENYT6dM8Vmp93CTywecom
X-TOI-MSGID: 7873a79f-f2b2-4859-b807-5ad9d495a954
X-UIDL: SlI!!]&V"![@T"!E';"!
Status: U
Old-X-EsetId: E74D982990713469F84B987C9D2676
X-EsetId: E74D982990713469F84B987C9D2676
X-EsetScannerBuild: 6657

Dear Beneficiary,

We the Aspac promotion company is happy to inform you of this year's release of the ASIA INTERNATIONAL PROMOTION, we play with your Email address on the 5th January 2010, the results were released on the 19th February 2010. Your Email address was entered as an alternative Email attached to Reference Number: CC/2010/171MPL with, Batch number REF.NO: EGS/1983-022 NJA drew the lucky numbers 9-13-21-30-31-44, which consequently won the lottery in the 3rd category.

You have therefore been approved a lump sum payment of $ 750,000.00 (SEVEN HUNDRED AND FIVE THOUSAND UNITED STATES DOLLARS) in cash credited to file REF.NO: CC/09/171MPL. This is from a total cash prize of $ 18,671,410.00 (EIGHTEEN MILLION, SIX HUNDRED AND SEVENTY ONE THOUSAND, FOUR HUNDRED AND TEN DOLLARS shared among the winners in this category). CONGRATULATIONS!!!

All participants were selected through a computer ballot system drawn from (Six Million) profiles such as BUKUTAMU E-mail Profiles from Asia, America, Africa, Europe, and South Pacific, as part of their New Year International promotion program.

Your winnings are to be paid through Western Union on daily transfers of $5,000 till the total of your winnings $ 750,000.00 is confirmed by you. As a matter of fact, the first transfer has been affected through Western Union Department of the African Regional paying bank, Eco Bank. The transfer details of your first transfer of $5,000 are as provided below and you are advised to track and access it online through Western Union website: www.westernunion.com.

MTCN: 7782318948
Sender^s first name: Dousou
Sender^s second name: Jack
Amount: $5,000:00

This transfer has no recipient name and location until we received the below listed requirements. You are therefore, advised to forward the following information immediately. This is because upon receipt, it shall be forwarded to Western Union Department of Eco Bank for subsequent transfer of $5,000 daily until the total amount won is confirmed by you.

Do not complete or send. Identity theft attempt
1. Full Name:
2. Full Address:
3. Marital Status:
4. Occupation:
5. Age:
6. Sex:
7. Nationality:
8. Telephone Number:

Congratulations once again!!!

Sincerely,

DR Mohammadali Ahmad Ali Ayasreh

Check IP 194.25.134.84 - IP address 194.25.134.84 seems to belong to a Suspicious (1) with
threat level 26, last malicious activity 15 days ago

IP Address Location results for 194.25.134.84

IP Address: 194.25.134.84 WhoIs Lookup IP BlackList Lookup
Hostname: mailout09.t-online.de Reverse DNS

[See complete information about your system with our IP Information tool!]

IP Address Conversion - IP Convert for 194.25.134.84 to Hex & to Dec

IP to Dec [IP Address to decimal]: 3256452692
IP to Hex [IP Address to hexadecimal]: c2198654
IP to Bin [IP to binary]: 11000010000110011000011001010100

IP Address Lookup results for Europe

IP Address Continent: Europe
IP Continent Code:(EU)
IP Continent Population: 731,000,000
IP Continent Area: 10,180,000 km²
IP Continent Total Population: 11%
IP Continent Density People: 70.00 per km²
IP Continent Latitude: (48.69083)
IP Continent Longitude: (9.1405)

IP Location Lookup results for Germany

IP Country Name: Germany

IP Country Capital: Berlin
IP Language: German
IP Currency: Euro(€) (EUR)
IP Country Latitude: (51.5)
IP Country Longitude: (10.5)
IP Country Code: DEU (DE)

IP Location Lookup results for 194.25.134.84 in Hessen

IP Address Region: Hessen
IP Address City: Weiterstadt
IP Address Latitude: (49.9078)
IP Address Longtitude: (8.5953)

Additional IP Location information for 194.25.134.84

IP Address Organization: www.t-online.de
IP Address ISP: Deutsche Telekom AG

Time zone for 194.25.134.84: Europe/Berlin
Local time zone for 194.25.134.84: Europe/Berlin

Inbox - 2 Suspect emails! IP & Subject different but identical link in Content! It smells very fishy.

equallinggn825@samtouli.de>
Received: from 93.102.224.87.rev.optimus.pt (93.102.224.87.rev.optimus.pt [93.102.224.87])
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o1PLP3ev030418
for <<xxxxx@xxxxx>; Thu, 25 Feb 2010 22:25:09 +0100
Received: from 93.102.224.87 by mxlb.ispgateway.de; Thu, 25 Feb 2010 21:23:20 +0000
Date: Thu, 25 Feb 2010 21:23:20 +0000
From: "Elisabeth Gregory" <GregoryIIEYX1@kichimail.com>
X-Mailer: The Bat! (v3.80.03) Professional
Reply-To: equallinggn825@samtouli.de
X-Priority: 3 (Normal)
Message-ID: <533198297.34335281226368@samtouli.de>
To: <xxxxx@xxxxx>; Subject: Re:
MIME-Version: 1.0
Content-Type: text/plain;
charset=Windows-1252
Content-Transfer-Encoding: 7bit
X-UIDL: 7;[!!a+'"!Status: RO
Old-X-EsetId: E74D982990713469F84B987C9D2676
X-EsetId: E74D982990713469F84B987C9D2676
X-EsetScannerBuild: 6657

http://secretfiles.rts1e3ew.co.uk/archive0714/?id=xxxxx@xxxxx

Check IP 93.102.224.87 not on IP Blacklist so it would seem sender is using BOTS

IP Address Location results for 93.102.224.87

IP Address: 93.102.224.87 WhoIs Lookup IP BlackList Lookup
Hostname: 93.102.224.87.rev.optimus.pt Reverse DNS

[See complete information about your system with our IP Information tool!]

IP Address Conversion - IP Convert for 93.102.224.87 to Hex & to Dec

IP to Dec [IP Address to decimal]: 1567023191
IP to Hex [IP Address to hexadecimal]: 5d66e057
IP to Bin [IP to binary]: 1011101011001101110000001010111

IP Address Lookup results for Europe

IP Location Lookup results for Portugal

IP Country Name: Portugal

IP Country Capital: Lisbon
IP Language: Portuguese, Mirandese
IP Currency: Euro(€) (EUR)
IP Country Latitude: (39.5)
IP Country Longitude: (-8)
IP Country Code: PRT (PT)

IP Location Lookup results for 93.102.224.87 in Lisboa

IP Address Region: Lisboa
IP Address City: Carnaxide
IP Address Latitude: (38.7167)
IP Address Longtitude: (-9.25)

Additional IP Location information for 93.102.224.87

IP Address Organization: OPTIMUS Portugal
IP Address ISP: Optimus, Telecomunicagues S.A.

Time zone for 93.102.224.87: Europe/Lisbon
Local time zone for 93.102.224.87: Europe/Lisbon

Return-Path: <emblazonedrzc1@schoefer-web.de>
Received: from 125.24.194.135.adsl.dynamic.totbb.net (125.24.194.135.adsl.dynamic.totbb.net [125.24.194.135])
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o1Q6DAJB030911
for <xxxxx@xxxxx>; Fri, 26 Feb 2010 07:13:11 +0100
Date: Fri, 26 Feb 2010 13:13:07 +0700
From: "Araceli Hare" <Hare1936@storefront.amazon.com>
Subject: FW:
To: <<xxxxx@xxxxx>;

Message-ID: <000d01cab6aa$c377e2f0$6400a8c0@emblazonedrzc1>
MIME-Version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.0.6001.18049
X-Mailer: Microsoft Windows Mail 6.0.6001.18000
Content-type: text/plain; format=flowed; charset=iso-8859-1; reply-type=original
Content-transfer-encoding: 7bit
X-Priority: 3
X-MSMail-priority: Normal
X-UIDL: KkA"!>&b"!L,Z"!JHb!!
Status: RO
Old-X-EsetId: E74D982990713469F84B987C9D2676
X-EsetId: E74D982990713469F84B987C9D2676
X-EsetScannerBuild: 6657

http://filearchive.rts1e3ew.co.uk/archive0714/?id=xxxxx@xxxxx

Check IP 125.24.194.135 not on IP Blacklist so it would seem sender is using BOTS

IP Address Location results for 125.24.194.135

IP Address: 125.24.194.135 WhoIs Lookup IP BlackList Lookup
Hostname: 125.24.194.135.adsl.dynamic.totbb.net Reverse DNS

[See complete information about your system with our IP Information tool!]

IP Address Conversion - IP Convert for 125.24.194.135 to Hex & to Dec

IP to Dec [IP Address to decimal]: 2098774663
IP to Hex [IP Address to hexadecimal]: 7d18c287
IP to Bin [IP to binary]: 1111101000110001100001010000111

IP Address Lookup results for Asia

IP Address Continent: Asia
IP Continent Code:(AS)
IP Continent Population: 3,879,000,000
IP Continent Area: 44,579,000 km²
IP Continent Total Population: 60%
IP Continent Density People: 89.00 per km²
IP Continent Latitude: (29.8405)
IP Continent Longitude: (89.296)

IP Location Lookup results for Thailand

IP Country Name: Thailand

IP Country Capital: Bangkok
IP Language: Thai
IP Currency: Baht (THB)
IP Country Latitude: (15)
IP Country Longitude: (100)
IP Country Code: THA (TH)

IP Location Lookup results for 125.24.194.135 in Krung Thep

IP Address Region: Krung Thep
IP Address City: Bangkok
IP Address Latitude: (13.75)
IP Address Longtitude: (100.5167)

Additional IP Location information for 125.24.194.135

IP Address Organization: TOT Public Company Limited Bangkok
IP Address ISP: TOT public company limited

Time zone for 125.24.194.135: Asia/Bangkok
Local time zone for 125.24.194.135: Asia/Bangkok