Search Scamdex & Scamalot
A Scam Email with the Subject "mtaout03-winn.ispmail.ntl.com. /X-Originating-IP: [62.112.158.213]" was received in one of Scamdex's honeypot email accounts on Thu, 28 Feb 2008 10:58:02 -0800 and has been classified as a Generic Scam. The sender was "Advance Fee Scam,Incident Reporting and Termination." <fraud@antihotmail.com>, although it may have been spoofed.
canonical name mtaout03-winn.ispmail.ntl.com. aliases addresses 81.103.221.49 inetnum: 81.103.216.0 - 81.103.223.255 netname: NTL descr: NTL Infrastructure - Winnersh Datacentre country: GB ------------------------------------------------------- inetnum: 62.112.158.212 - 62.112.158.215 netname: HOSTTECH24-NET descr: hosttech Kaelin & Meuwly ISP descr: Haslaub descr: 8824 Schoenenberg country: CH IP address: 62.112.158.213Reverse DNS: [No reverse DNS entry per customer1.name-server.de.]
Reverse DNS authenticity: [Unknown] ASN: 5464ASN Name: UNSPECIFIED (Netdiscounter GmbH autonomous system)
IP range connectivity: 4 Registrar (per ASN): RIPE Country (per IP registrar): DE [Germany] Country Currency: EUR [euros] Country IP Range: 62.112.128.0 to 62.112.159.255 Country fraud profile: Normal City (per outside source): Berlin, Berlin Country (per outside source): DE [Germany] Private (internal) IP? No IP address registrar: whois.ripe.net Known Proxy? No Link for WHOIS: 62.112.158.213X-Apparently-To: html_edit@yahoo.com via 68.142.198.147; Thu, 28 Feb 2008 03:42:26 -0800
X-YahooFilteredBulk: 81.103.221.49 X-Originating-IP: [81.103.221.49] Return-Path: <andrewjolly@ntlworld.com>Authentication-Results: mta413.mail.mud.yahoo.com from=ntlworld.com; domainkeys=neutral (no sig) Received: from 81.103.221.49 (EHLO mtaout03-winn.ispmail.ntl.com) (81.103.221.49) by mta413.mail.mud.yahoo.com with SMTP; Thu, 28 Feb 2008 03:42:24 -0800 Received: from aamtaout01-winn.ispmail.ntl.com ([81.103.221.35]) by mtaout03-winn.ispmail.ntl.com with ESMTP id <20080228114457.GRVM19530.mtaout03-winn.ispmail.ntl.com@aamtaout01-winn.ispmail.ntl.com>; Thu, 28 Feb 2008 11:44:57 +0000 Received: from smtp.ntlworld.com ([81.103.221.25]) by aamtaout01-winn.ispmail.ntl.com with SMTP id <20080228114503.ZBHD219.aamtaout01-winn.ispmail.ntl.com@smtp.ntlworld.com>; Thu, 28 Feb 2008 11:45:03 +0000
X-Mailer: Openwave WebEngine, version 2.8.19 (webedge20-101-1110-20050615) X-Originating-IP: [62.112.158.213] From: "ONLINE-NOTIFICATION" <andrewjolly@ntlworld.com> Add Mobile Alert Reply-to: irish_customerservices01@live.com To: info@iriswinner.net Subject: Congratulation Lucky Winner!!! Date: Thu, 28 Feb 2008 11:43:06 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bitMessage-Id: <20080228114503.ZBHD219.aamtaout01-winn.ispmail.ntl.com@smtp.ntlworld.com>
Content-Length: 615 Ref: UK/9420X2/68 Batch: 074/05/ZY369 This is to inform you that you have been selected for a cash prize of £1,350,000.00(GBP) in cash credited to file KTU/9023118308/03. held on wednesday 20 Febuary 2008. Contact our Claims Agent here in the UK with the details below:1.Full Legal names 2.Occupation 3.Tel. number Name Of Claims Agent: Dr. Alan Brian Email address : irish_customerservices01@live.com Tel :+447045736906 Yours faithfully, Sir Kolyn Perkins. ----------------------------------------- Email sent from www.virginmedia.com/email Virus-checked using McAfee(R) Software and scanned for spam -- -- ------------------------------ Phone Contact (USA) +1[570]301-6289 Questions can be sent to: fraud@antihotmail.com Domain Dossier: http://www.centralops.net/ This email message including any attachments may contain confidential and/or network sensitive information intended only for the use of the individual(s) or entity to which it was addressed. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or the taking of any action in reliance on the contents of this email is strictly prohibited.