|
419 Scam Example: "Liverpool Promotions"
"Liverpool Promotions" is a fake lottery scam run by a gang in South Africa, despite the UK phone numbers (which redirect calls to another number). Please send us replies by "claims agents", especially money demands and payment instructions, we will publish them here. Please forward copies of fraud emails to the abuse department of the webmail address listed as the contact email for the "claims agent". Ask for the addresses to be suspended because they are used in a 419 fraud (see 419 FAQ).
Example of initial "winning notification":
LIVERPOOL PROMOTIONS Message headers: Received: from 165.165.235.223 (HELO amazon.com) (165.165.235.223) by mta152.mail.re2.yahoo.com with SMTP; Thu, 18 Aug 2005 03:30:15 -0700 From: LIVERPOOL PROMOTIONS <liverpoolpromo10@gawab.com................> To: user <emailaddress> Subject: WINNING NOTIFICATION....................... X-Priority: 3 X-MSMail-Priority: Normal Reply-To: LIVERPOOL PROMOTIONS <liverpoolpromo10@gawab.com................> mime-version: 1.0 content-type: multipart/mixed; boundary="qzsoft_directmail_seperator"
WHOIS details for sending network (IP 165.165.235.223): inetnum: 165.165.0.0 - 165.165.255.255 netname: IPNET-ADSL descr: Telkom descr: Soekor Building descr: 151 Frans Conradie Ave descr: Parow descr: Western Cape descr: 7500 org: org-TSL4-AFRINIC country: ZA admin-c: PB455-AFRINIC tech-c: JDU24-AFRINIC status: ASSIGNED PI remarks: Please contact abuse@saix.net for abuse queries remarks: noc e-mail: , phone: +27 12 6800224 remarks: abuse e-mail: , phone: +27 12 6800219 mnt-by: AFRINIC-HM-MNT mnt-lower: TELKOM-SA-IPNET-MNT changed: hostmaster@arin.net 19930630 changed: hostmaster@arin.net 20030827 changed: hostmaster@afrinic.net 20050221 source: AFRINIC organisation: ORG-TSL4-AFRINIC org-name: Telkom SA Ltd. org-type: LIR address: Telkom SA Ltd. address: Soekor Building address: 151 Frans Conradie Ave address: Parow address: Western Cape address: 7500 country: ZA e-mail: bezuidp@telkom.co.za admin-c: PB455-AFRINIC tech-c: TIN2-AFRINIC remarks: abuse e-mail: , phone: +27 12 6800219 mnt-ref: TF-196-25-MNT mnt-by: AFRINIC-HM-MNT changed: hostmaster@arin.net 19930831 changed: hostmaster@arin.org 20021021 changed: hostmaster@afrinic.net 20050221 source: AFRINIC person: Pieter Bezuidenhout address: Telkom SA Ltd SAIX address: 151 Frans Conradie Ave address: Parow address: Western Cape address: 7500 address: ZA phone: +1 111 1111111 fax-no: +2721 9302789 e-mail: bezuidp@telkom.co.za e-mail: pieter@saix.net nic-hdl: PB455-AFRINIC remarks: Abuse complaints can be directed to abuse@saix.net changed: hostmaster@arin.net 20000622 changed: hostmaster@arin.net 20021024 changed: hostmaster@afrinic.net 20050221 source: AFRINIC person: Johan Du Preez address: NNOC address: Oak Avenue address: Centurion address: Gauteng address: 2000 address: ZA phone: +1 012 6800067 e-mail: johan@saix.net nic-hdl: JDU24-AFRINIC remarks: Administrative Contact only, please contact remarks: abuse@saix.net for Abuse queries changed: hostmaster@arin.net 20030826 changed: hostmaster@arin.net 20030826 changed: hostmaster@afrinic.net 20050221 source: AFRINIC
|