|
419 Scam Example: "Liverpool Promotions"
"Liverpool Promotions" is a fake lottery scam run by a gang in South Africa, despite the UK phone numbers (which redirect calls to another number). Please send us replies by "claims agents", especially money demands and payment instructions, we will publish them here. Please forward copies of fraud emails to the abuse department of the webmail address listed as the contact email for the "claims agent". Ask for the addresses to be suspended because they are used in a 419 fraud (see 419 FAQ).
Example of initial "winning notification":
LIVERPOOL PROMOTIONS Message headers: Received: from 165.165.235.223 (HELO amazon.com) (165.165.235.223) by mta152.mail.re2.yahoo.com with SMTP; Thu, 18 Aug 2005 03:30:15 -0700 From: LIVERPOOL PROMOTIONS <liverpoolpromo10@gawab.com................> To: user <emailaddress> Subject: WINNING NOTIFICATION....................... X-Priority: 3 X-MSMail-Priority: Normal Reply-To: LIVERPOOL PROMOTIONS <liverpoolpromo10@gawab.com................> mime-version: 1.0 content-type: multipart/mixed; boundary="qzsoft_directmail_seperator"
WHOIS details for sending network (IP 165.165.235.223):
inetnum: 165.165.0.0 - 165.165.255.255
netname: IPNET-ADSL
descr: Telkom
descr: Soekor Building
descr: 151 Frans Conradie Ave
descr: Parow
descr: Western Cape
descr: 7500
org: org-TSL4-AFRINIC
country: ZA
admin-c: PB455-AFRINIC
tech-c: JDU24-AFRINIC
status: ASSIGNED PI
remarks: Please contact abuse@saix.net for abuse queries
remarks: noc e-mail: , phone: +27 12 6800224
remarks: abuse e-mail: , phone: +27 12 6800219
mnt-by: AFRINIC-HM-MNT
mnt-lower: TELKOM-SA-IPNET-MNT
changed: hostmaster@arin.net 19930630
changed: hostmaster@arin.net 20030827
changed: hostmaster@afrinic.net 20050221
source: AFRINIC
organisation: ORG-TSL4-AFRINIC
org-name: Telkom SA Ltd.
org-type: LIR
address: Telkom SA Ltd.
address: Soekor Building
address: 151 Frans Conradie Ave
address: Parow
address: Western Cape
address: 7500
country: ZA
e-mail: bezuidp@telkom.co.za
admin-c: PB455-AFRINIC
tech-c: TIN2-AFRINIC
remarks: abuse e-mail: , phone: +27 12 6800219
mnt-ref: TF-196-25-MNT
mnt-by: AFRINIC-HM-MNT
changed: hostmaster@arin.net 19930831
changed: hostmaster@arin.org 20021021
changed: hostmaster@afrinic.net 20050221
source: AFRINIC
person: Pieter Bezuidenhout
address: Telkom SA Ltd SAIX
address: 151 Frans Conradie Ave
address: Parow
address: Western Cape
address: 7500
address: ZA
phone: +1 111 1111111
fax-no: +2721 9302789
e-mail: bezuidp@telkom.co.za
e-mail: pieter@saix.net
nic-hdl: PB455-AFRINIC
remarks: Abuse complaints can be directed to abuse@saix.net
changed: hostmaster@arin.net 20000622
changed: hostmaster@arin.net 20021024
changed: hostmaster@afrinic.net 20050221
source: AFRINIC
person: Johan Du Preez
address: NNOC
address: Oak Avenue
address: Centurion
address: Gauteng
address: 2000
address: ZA
phone: +1 012 6800067
e-mail: johan@saix.net
nic-hdl: JDU24-AFRINIC
remarks: Administrative Contact only, please contact
remarks: abuse@saix.net for Abuse queries
changed: hostmaster@arin.net 20030826
changed: hostmaster@arin.net 20030826
changed: hostmaster@afrinic.net 20050221
source: AFRINIC
|