Spam 419/Nigeria Online fraud jwSpamSpy Contact
Email Spam Filter: |
|
|
419 Scam – "OMEGA LOTTERY INTERNATIONAL / United Trust Agency"
- About the 419 (Advance Fee) scam
- Email addresses used by 419 scammers
- Phone numbers used by 419 scammers
- How to report 419 spam to us
- Domains registered by 419 scammers
- Company names mentioned in 419 spam
- What can you do when you receive 419 spam
"OMEGA LOTTERY INTERNATIONAL" and "United Trust Agency" are labels used for a fake lottery comany and a fake claims agent. The gang behind this fraud operates in Belgium, using Belgian mobile phone numbers and free webmail accounts for correspondence.
|
In one instance, the scammers sent email with a fake sender address of omega@omega.com, abusing a domain name of a measuring instrument company! The spam was not sent by Omega.com:
http://www.omega.com
Email addresses associated with this scam:
- omega443@netscape.net
- omega@omega.com (fake!)
- omegasec2004@mmail.com
- omegasecurity2004@zwallet.com
Example of spam email:
Received: from [81.241.232.180] (helo=omega360.com)
by vmx55.multikabel.net with smtp (Exim 4.43)
id 1CeZy1-00031P-EX
for ############; Wed, 15 Dec 2004 15:17:26 +0100
From: FROM:OMEGA LOTTERY INTERNATIONAL <omega@omega.com>
To: ############
Reply-To: MrDPerry147@netscape.net
Subject: WINNING AWARD NOTIFICATION
Date: Wed, 15 Dec 2004 06:17:06 -0800
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="e5931f60-8fc3-472c-9703-ccfdb071b5b0"
X-MailScanner-SpamCheck: spam, SpamAssassin (score=12.768,
required 5, BAYES_60 0.37, MIME_BOUND_MANY_HEX 2.70,
MIME_QP_LONG_LINE 0.04, MSGID_FROM_MTA_HEADER 0.05,
MSGID_FROM_MTA_ID 1.72, NIGERIAN_BODY1 3.40, NIGERIAN_BODY2 0.60,
RCVD_IN_BL_SPAMCOP_NET 1.22, RCVD_IN_SORBS_SPAM 2.00,
SUBJ_ALL_CAPS 0.67)
X-MailScanner-From: omega@omega.com
This is a multi-part message in MIME format
--e5931f60-8fc3-472c-9703-ccfdb071b5b0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
WINNING AWARD NOTIFICATION
FROM:OMEGA LOTTERY INTERNATIONAL
INTERNATIONAL PROMOTION/PRIZE AWARD DEPT.
REF: MLI/231-ILGI0431/03
BATCH: IPD/15/096/PTNL
RE: WINNING FINAL NOTIFICATION.
Sir/Madam,
We are pleased to inform you of the result of the Lottery Winners =
International programs held on the 15th of December, 2004. Your e-mail =
address attached to ticket number 20511465897-6291 with serial number =
472-971103 drew lucky numbers -66-97-22-71-64,Security Acredited File Number =
OELP/002112, which consequently won in the 2nd category, you have therefore =
been approved for a lump sum pay out of US$ 800,000.00 (Eight Hundred =
Thousand United States Dollars). CONGRATULATIONS!!!
Due to mix up of some numbers and names, we ask that you keep your winning =
information very confidential till your claim hasbeen processed an your =
prize/money remitted to you.
This is part of our security protocol to avoid double claiming and =
unwarranted abuse of this program by some participants.
All participants were selected through a computer ballot system drawn from =
over 200,000,000 company and 300,000,000 individual email addresses and names =
from all over the world.
This promotional program takes place annually. We hope with part of your =
winning you will take part in our next year USD100 million international =
lottery.
To file for your claim, please contact our/your fiducial agent
of the, United Trust Agency
TEL: +32 485 561 097
Email:MrDPerry147@netscape.net
Note that all winning must be claimed not later than 22nd of December, 2004. =
After this date all unclaimed,funds will be included in the next stake.
Please note in order to avoid unnecessary delays and complications please =
remember to quote your reference number and batch numbers in all =
correspondence.
Furthermore,should there be any change of address do inform our agent as soon =
as possible.
Congratulations once more from our members of staff and thank you for being =
part of our promotional program.
Note: Anybody under the age of 18 is automatically disqualified.
Sincerely yours,
Mrs. Serena Van Hoog.
Lottery Coordinator.
--e5931f60-8fc3-472c-9703-ccfdb071b5b0--
WHOIS-record for the source IP address:
inetnum: 81.240.0.0 - 81.241.255.255
netname: BE-SKYNET-ADSL1
descr: Belgacom Skynet SA/NV
descr: ADSL Access
country: BE
admin-c: SN2068-RIPE
tech-c: SN2068-RIPE
rev-srv: ns.ripe.net
rev-srv: ns1.skynet.be
rev-srv: ns2.skynet.be
rev-srv: ns3.skynet.be
rev-srv: ns4.skynet.be
status: ASSIGNED PA
mnt-by: SKYNETBE-MNT
changed: ripe@skynet.be 20030825
source: RIPE
route: 81.240.0.0/14
descr: SKYNETBE-CUSTOMERS
origin: AS5432
notify: noc@skynet.be
mnt-by: SKYNETBE-MNT
changed: piet@skynet.be 20021202
source: RIPE
role: Skynet NOC administrators
address: Belgacom SA de droit public
address: ANS/ROC/RNO/IEC - TGX Building
address: Boulevard du Roi Albert II, 27
address: B-1030 Bruxelles
address: Belgium
phone: +32 2 202-4111
fax-no: +32 2 203-6593
e-mail: noc@skynet.be
e-mail: cops@belgacom.be
admin-c: BIEC1-RIPE
tech-c: BIEC1-RIPE
nic-hdl: SN2068-RIPE
remarks: -------------------------------------------
remarks: Network problems to: noc@skynet.be
remarks: Peering requests to: peering@skynet.be
remarks: Abuse notifications to: abuse@skynet.be
remarks: - I did *not* hack your computer
remarks: - I did *not* send you SPAM or virus
remarks: - I will *not* read your abuse complaints
remarks: -------------------------------------------
notify: noc@skynet.be
mnt-by: SKYNETBE-MNT
changed: ripe@skynet.be 20010907
changed: ripe@skynet.be 20040804
changed: ripe@skynet.be 20041105
changed: ripe@skynet.be 20041201
source: RIPE