The Scamdex Scam Email Archive X

Subject:  mtaout03-winn.ispmail.ntl.com. /X-Originating-IP: [62.112.158.213]
From:  "Advance Fee Scam,Incident Reporting and Termination." <fraud@antihotmail.com>
Date:  Thu, 28 Feb 2008 10:58:02 -0800
Category:  Generic
Date Added:  2016-07-20 19:12:28

An Email with the Subject "mtaout03-winn.ispmail.ntl.com. /X-Originating-IP: [62.112.158.213]" was received in one of Scamdex's honeypot email accounts on Thu, 28 Feb 2008 10:58:02 -0800 and has been classified as a Generic Scam Email. The sender shows as "Advance Fee Scam,Incident Reporting and Termination." <fraud@antihotmail.com>.

The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be added to their email address lists for spam purposes.


canonical name mtaout03-winn.ispmail.ntl.com.
aliases
addresses 81.103.221.49

inetnum:      81.103.216.0 - 81.103.223.255
netname:      NTL
descr:        NTL Infrastructure - Winnersh Datacentre
country:      GB

-------------------------------------------------------

inetnum:        62.112.158.212 - 62.112.158.215
netname:        HOSTTECH24-NET
descr:          hosttech Kaelin & Meuwly ISP
descr:          Haslaub
descr:          8824 Schoenenberg
country:        CH

IP address:                     62.112.158.213
customer1.name-server.de.]
Reverse DNS authenticity:       [Unknown]
ASN:                            5464
autonomous system)
IP range connectivity:          4
Registrar (per ASN):            RIPE
Country (per IP registrar):     DE [Germany]
Country Currency:               EUR [euros]
Country IP Range:               62.112.128.0 to 62.112.159.255
Country fraud profile:          Normal
City (per outside source):      Berlin, Berlin
Country (per outside source):   DE [Germany]
Private (internal) IP?          No
IP address registrar:           whois.ripe.net
Known Proxy?                    No
Link for WHOIS:                 62.112.158.213



2008 03:42:26 -0800
X-YahooFilteredBulk: 81.103.221.49
X-Originating-IP: [81.103.221.49]
Return-Path: <andrewjolly@ntlworld.com>
domainkeys=neutral (no sig) (81.103.221.49) by mta413.mail.mud.yahoo.com with SMTP; Thu, 28 Feb Received: from aamtaout01-winn.ispmail.ntl.com ([81.103.221.35]) by <20080228114457.GRVM19530.mtaout03-winn.ispmail.ntl.com@aamtaout01-winn.ispmail.ntl.com>; Thu, 28 Feb 2008 11:44:57 Received: from smtp.ntlworld.com ([81.103.221.25]) by <20080228114503.ZBHD219.aamtaout01-winn.ispmail.ntl.com@smtp.ntlworld.com>;
X-Mailer: Openwave WebEngine, version 2.8.19 (webedge20-101-1110-20050615)
X-Originating-IP: [62.112.158.213]
From: "ONLINE-NOTIFICATION" <andrewjolly@ntlworld.com>  Add Mobile Alert
Reply-to: irish_customerservices01@live.com
To: info@iriswinner.net
Subject: Congratulation Lucky Winner!!!
Date: Thu, 28 Feb 2008 11:43:06 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
<20080228114503.ZBHD219.aamtaout01-winn.ispmail.ntl.com@smtp.ntlworld.com>
Content-Length: 615

Ref: UK/9420X2/68
Batch: 074/05/ZY369

This is to inform you that you have been selected for a cash prize of
 £1,350,000.00(GBP) in cash credited to file KTU/9023118308/03. held
 on
 wednesday 20 Febuary 2008.

Contact our Claims Agent here in the UK with the details below:1.Full
 Legal names 2.Occupation 3.Tel. number

Name Of Claims Agent: Dr. Alan Brian
Email address : irish_customerservices01@live.com
Tel :+447045736906

Yours faithfully,
Sir Kolyn Perkins.

-----------------------------------------
Email sent from www.virginmedia.com/email
Virus-checked using McAfee(R) Software and scanned for spam



--
--
------------------------------
Phone Contact (USA) +1[570]301-6289
Questions can be sent to: fraud@antihotmail.com
Domain  Dossier: http://www.centralops.net/

This email message including any attachments may contain confidential
and/or network sensitive information intended only for the use of the
individual(s) or entity to which it was addressed. If you are not the
intended recipient, you are hereby notified that any disclosure,
copying, distribution, or the taking of any action in reliance on the
contents of this email is strictly prohibited.

canonical name mtaout03-winn.ispmail.ntl.com. aliases addresses 81.103.221.49 inetnum: 81.103.216.0 - 81.103.223.255 netname: NTL descr: NTL Infrastructure - Winnersh Datacentre country: GB ------------------------------------------------------- inetnum: 62.112.158.212 - 62.112.158.215 netname: HOSTTECH24-NET descr: hosttech Kaelin & Meuwly ISP descr: Haslaub descr: 8824 Schoenenberg country: CH IP address: 62.112.158.213 Reverse DNS: [No reverse DNS entry per customer1.name-server.de.] Reverse DNS authenticity: [Unknown] ASN: 5464 ASN Name: UNSPECIFIED (Netdiscounter GmbH autonomous system) IP range connectivity: 4 Registrar (per ASN): RIPE Country (per IP registrar): DE [Germany] Country Currency: EUR [euros] Country IP Range: 62.112.128.0 to 62.112.159.255 Country fraud profile: Normal City (per outside source): Berlin, Berlin Country (per outside source): DE [Germany] Private (internal) IP? No IP address registrar: whois.ripe.net Known Proxy? No Link for WHOIS: 62.112.158.213 X-Apparently-To: html_edit@yahoo.com via 68.142.198.147; Thu, 28 Feb 2008 03:42:26 -0800 X-YahooFilteredBulk: 81.103.221.49 X-Originating-IP: [81.103.221.49] Return-Path: <andrewjolly@ntlworld.com> Authentication-Results: mta413.mail.mud.yahoo.com from=ntlworld.com; domainkeys=neutral (no sig) Received: from 81.103.221.49 (EHLO mtaout03-winn.ispmail.ntl.com) (81.103.221.49) by mta413.mail.mud.yahoo.com with SMTP; Thu, 28 Feb 2008 03:42:24 -0800 Received: from aamtaout01-winn.ispmail.ntl.com ([81.103.221.35]) by mtaout03-winn.ispmail.ntl.com with ESMTP id <20080228114457.GRVM19530.mtaout03-winn.ispmail.ntl.com@aamtaout01-winn.ispmail.ntl.com>; Thu, 28 Feb 2008 11:44:57 +0000 Received: from smtp.ntlworld.com ([81.103.221.25]) by aamtaout01-winn.ispmail.ntl.com with SMTP id <20080228114503.ZBHD219.aamtaout01-winn.ispmail.ntl.com@smtp.ntlworld.com>; Thu, 28 Feb 2008 11:45:03 +0000 X-Mailer: Openwave WebEngine, version 2.8.19 (webedge20-101-1110-20050615) X-Originating-IP: [62.112.158.213] From: "ONLINE-NOTIFICATION" <andrewjolly@ntlworld.com> Add Mobile Alert Reply-to: irish_customerservices01@live.com To: info@iriswinner.net Subject: Congratulation Lucky Winner!!! Date: Thu, 28 Feb 2008 11:43:06 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Message-Id: <20080228114503.ZBHD219.aamtaout01-winn.ispmail.ntl.com@smtp.ntlworld.com> Content-Length: 615 Ref: UK/9420X2/68 Batch: 074/05/ZY369 This is to inform you that you have been selected for a cash prize of £1,350,000.00(GBP) in cash credited to file KTU/9023118308/03. held on wednesday 20 Febuary 2008. Contact our Claims Agent here in the UK with the details below:1.Full Legal names 2.Occupation 3.Tel. number Name Of Claims Agent: Dr. Alan Brian Email address : irish_customerservices01@live.com Tel :+447045736906 Yours faithfully, Sir Kolyn Perkins. ----------------------------------------- Email sent from www.virginmedia.com/email Virus-checked using McAfee(R) Software and scanned for spam -- -- ------------------------------ Phone Contact (USA) +1[570]301-6289 Questions can be sent to: fraud@antihotmail.com Domain Dossier: http://www.centralops.net/ This email message including any attachments may contain confidential and/or network sensitive information intended only for the use of the individual(s) or entity to which it was addressed. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or the taking of any action in reliance on the contents of this email is strictly prohibited.