419 Scam – "NEW MEXICO LOTTERY (Mr Paterson Lasely, Caroline Bryan)"
"NEW MEXICO LOTTERY (Mr Paterson Lasely, Caroline Bryan)" are labels used by a fake lottery run by criminals in Nigeria.
Please send us replies by "claims agents", especially money demands and payment instructions, we will publish them here.
Please forward copies of fraud emails to the abuse department of the MSN domains and/or webmail address listed as the contact email for the "claims agent". Ask for the domains / addresses to be suspended because they are used in a 419 fraud (see 419 FAQ).
Received: from 188.8.131.52 by by15fd.bay15.hotmail.msn.com with HTTP; Fri, 08 Apr 2005 14:15:18 GMT X-Originating-IP: [184.108.40.206] X-Originating-Email: [firstname.lastname@example.org] X-Sender: email@example.com From: "New Mexico Organisational Promo" <firstname.lastname@example.org> Bcc: Subject: WINNING NOTIFICATION!!! Date: Fri, 08 Apr 2005 14:15:18 +0000
The website of that "lottery" is hosted on a free webhoster. It lists the following phone numbers, which are UK special service numbers that probably forward incoming calls to Nigeria:
The sending IP address is the same as in an email sent to us by a person claiming to be a lawyer for an unnamed relative of Rafiu Otono, a Nigerian gangster who is associated with the Vic Biz gang in Benin City, Edo State, Nigeria.
inetnum: 220.127.116.11 - 18.104.22.168 netname: GILAT-SATCOM-BLOCK-3 descr: Gilat-Satcom remarks: For abuse issues related to Gilat, email email@example.com notify: firstname.lastname@example.org country: GB admin-c: GS3350-RIPE tech-c: GS3350-RIPE status: ASSIGNED PA mnt-by: AS9116-MNT mnt-lower: AS9116-MNT changed: email@example.com 20050102 source: RIPE route: 22.214.171.124/18 descr: Goldenlines remarks: For addressing issues, email firstname.lastname@example.org remarks: For abuse issues, email email@example.com origin: AS9116 mnt-by: AS9116-MNT changed: firstname.lastname@example.org 20041121 source: RIPE role: Gilat Support address: Gilat Satcom address: 21D Yagia Kapaim st. Petach-Tikva, Israel phone: +972 3 9255000 fax-no: +972 3 9217938 admin-c: DR5299-RIPE admin-c: GE2074-RIPE tech-c: DR5299-RIPE tech-c: GE2074-RIPE trouble: email@example.com e-mail: firstname.lastname@example.org nic-hdl: GS3350-RIPE mnt-by: AS9116-MNT changed: email@example.com 20040909 source: RIPE
Request: n-mexico.net connected to whois.enom.com [126.96.36.199:43] ... Registration Service Provided By: Microsoft Contact: firstname.lastname@example.org Visit: http://support.msn.com/contactus.aspx?pk=PersonalAddress Domain name: n-mexico.net Registrant Contact: Paterson Lasely Paterson Lasely (email@example.com) +1.9167308552 Fax: none 1648 53rd St Sacramento, CA 95819 US Administrative Contact: Paterson Lasely Paterson Lasely (firstname.lastname@example.org) +1.9167308552 Fax: none 1648 53rd St Sacramento, CA 95819 US Technical Contact: NOC MSN NOC MSN (MSN-PA-TECH@msn.com) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Billing Contact: NOC MSN NOC MSN (MSN-PA-BILL@MSN.COM) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Status: Locked Name Servers: pdomns1.msn.com pdomns2.msn.com Creation date: 05 Apr 2005 05:19:06 Expiration date: 05 Apr 2006 05:19:06
Request: newmexico-2005.com connected to whois.melbourneit.com [188.8.131.52:43] ... Domain Name.......... newmexico-2005.com Creation Date........ 2005-04-01 Registration Date.... 2005-04-01 Expiry Date.......... 2006-04-01 Organisation Name.... New Mexico Organisational Promo Organisation Address. 1648 53rd St Organisation Address. Organisation Address. Sacramento Organisation Address. 95819 Organisation Address. CA Organisation Address. UNITED STATES Admin Name........... New Mexico Organisational Promo Admin Address........ 1648 53rd St Admin Address........ Admin Address........ Sacramento Admin Address........ 95819 Admin Address........ CA Admin Address........ UNITED STATES Admin Email.......... email@example.com Admin Phone.......... +1.9167308552 Admin Fax............ Tech Name............ MSN NOC Tech Address......... One Microsoft Way Tech Address......... Tech Address......... Redmond Tech Address......... 98052 Tech Address......... WA Tech Address......... UNITED STATES Tech Email........... MSN-PA-TECH@msn.com Tech Phone........... +1.4258828080 Tech Fax............. Name Server.......... pdomns1.msn.com Name Server.......... pdomns2.msn.com
Request: nmexico.net connected to whois.enom.com [184.108.40.206:43] ... Registration Service Provided By: Microsoft Contact: firstname.lastname@example.org Visit: http://support.msn.com/contactus.aspx?pk=PersonalAddress Domain name: nmexico.net Registrant Contact: New Mexico Lottery New Mexico Lottery (email@example.com) +1.9167308552 Fax: none 1648 53rd St Sacramento, CA 95819 US Administrative Contact: New Mexico Lottery New Mexico Lottery (firstname.lastname@example.org) +1.9167308552 Fax: none 1648 53rd St Sacramento, CA 95819 US Technical Contact: NOC MSN NOC MSN (MSN-PA-TECH@msn.com) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Billing Contact: NOC MSN NOC MSN (MSN-PA-BILL@MSN.COM) +1.4258828080 Fax: none One Microsoft Way Redmond, WA 98052 US Status: Locked Name Servers: pdomns1.msn.com pdomns2.msn.com Creation date: 29 Mar 2005 03:30:51 Expiration date: 29 Mar 2006 03:30:51