Archive for the ‘Spam’ Category

Cool — I won the British Lottery! Nov 8 2004

Is this like British Nigerian spam?

Money money money money

British Lottery Headquarters:
Customer Service
Ref: BTL/491OXI/04
Batch: 12/25/0304

We happily announce to you the draw of the British
Lottery International programs held on the 31st of
July 2004 in London.Your e-mail address attached to
ticket number: 694 75600545 721 with Serial number
886/04 drew the lucky numbers: 31-6-26-13-35-7,which
subsequently won you the lottery in the 2nd
category.You are therefore, been approved to claim a
total sum of US$2,500,000.00(Two million, five hundred
thousand, United StatesDollars) in cash credited to
file RPC/9080118308/04.This is from a total cash prize
of US $125 Million dollars, shared amongst the first
Fifty (50) lucky winners in this category.
This year Lottery Program Jackpot is the largest ever
for British Lottery .The estimated $125 million
jackpot would be the sixth-biggest in U.K. history.The
biggest was the $363 million jackpot that went to two
winners in a May 2000 drawing of The Big Game, Mega
Millions’ predecessor.
Please note that your lucky winning number falls
within our European booklet representative office in
Europe as indicated in our play coupon. In view of
this, your US$2,500,000.00 (Two million, five hundred
thousand,United States Dollars) would be released to
you by our affiliate bank in London.
Our agent will immediately commence the process to
facilitate the release of your funds to you as soon as
you make contact with him .
All participants were selected randomly from World
Wide Web site through computer draw system and
extracted from over 100,000 companies.This
promotiontakes place annually. For security reasons,
you are advised to keep your winning information
confidential till your claims is processed a nd your
money remitted to you in whatever manner you deem fit
to claim your prize. This is a part of our
precautionary measure to avoid double claiming and
unwarranted abuse of this program by some unscrupulous
elements. Please be warned.To file for your claim,
please contact our fiduciary agent with the below
details for processing of your claims.
AGENT: Mrs Mary Pebbles

To avoid unnecessary delays and complications, please
quote your reference/batchnumbers in any
correspondences with us or our designated
agent.Congratulations once more from all members and
staffs of this program.Thank you for being part of our
promotional lottery
Maxwell Coker.
Zonal Coordinator.

This is so clearly a scam. They do have a great website though: – you should check it out for how ridiculous it is. DO NOT FILL OUT ANY FORMS OR RESPOND WITH ANY PERSONAL INFORMATION.

Next of Kin Oct 30 2004

Question: Do you think that Nigerians know that we know that they know how to do email spam scams?

What SpamAssasin thinks:

Content analysis details: (15.2 points, 5.0 required)

pts rule name description
—- ———————- ————————————————–
0.5 FROM_ENDS_IN_NUMS From: ends in numbers
0.4 SUBJ_ALL_CAPS Subject is all capitals
1.3 MILLION_USD BODY: Talks about millions of dollars
0.2 RISK_FREE BODY: Risk free. Suuurreeee….
0.3 HTML_10_20 BODY: Message is 10% to 20% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
1.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.5 MPART_ALT_DIFF BODY: HTML and text parts are different
0.2 HTML_TEXT_AFTER_BODY BODY: HTML contains text after BODY close tag
1.8 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
[Blocked – see ]
1.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[ listed in]
1.4 NIGERIAN_BODY4 Message body looks like a Nigerian spam message 4+
0.5 NIGERIAN_BODY2 Message body looks like a Nigerian spam message 2+
0.1 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
1.9 NIGERIAN_BODY3 Message body looks like a Nigerian spam message 3+
2.9 NIGERIAN_BODY1 Message body looks like a Nigerian spam message 1+

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

The message:

lambert william
Sun, 31 Oct 2004 03:41:27 +0200

First, I must solicit your confidence in this transaction; this is by virtue of its nature as being


of this magnitude will make any one prehensive and worried, but I am assuring you that all will be well at the end of the day. Let me start by first introducing myself properly to you. I am
Nigeria LTD. Lagos.


I came to know of you in my private search for a reliable and
reputable person to handle this confidential transaction, which involves the transfer of a huge sum of money to a foreign account requiring maximum confidence.

Cool. Who did you talk to to determine that I could handle a huge sum of money? Perhaps we could BOTH ask that I be allowed to handle OTHER large amounts of money.

THE PROPOSITION: A foreigner, Late Engineer Johnson Creek,
an Oil Merchant/Contractor with the Federal Government of Nigeria, until his death nine years ago in a ghastly air crash, banked with us here at Standard Trust Bank LTD. Lagos,
and had a closing balance of US$38.5M (Thirty Eight Million, Five Hundred Thousand United States Dollars)
which the bank now unquestionably expects it to be claimed by any available foreign
next-of-kin of the Late beneficiary or alternatively be donated to a discredited trust fund for arms and ammunition at a military war college here in Nigeria.

Mmkay, mmkay, mmkay, ooh, ok, I see, oh yes, mmmmm, yes, I see.

Fervent valuable efforts are being made by the Standard Trust Bank to get in touch with
any of the Creek family or relatives but proved to avail.
It is because of the perceived possibility of not being able to locate any of Late Engr. Johnson Creeks next-of-kin (he had no known wife and children) that the management under the influence of our chairman and member of the board of directors,
that an arrangement be made for the funds to be declared UNCLAIMABLE and subsequently be donated to the Trust Fund for Arms and Ammunition to further enhance the course of war in
Africa and the world in general.

Welll, my my. That DOES sound bad. People Might Die if I Don’t Help you OUT somehow??? Please, … continue.

In order to avert this negative development, some of my trusted
colleagues and I now seek your permission to have you stand as a next-of-kin to Late Engr. Johnson Creek so that the funds US$38.5M would be released and paid into your bank account as the beneficiary’s next-of-kin. All documents and proves to enable you get this fund will be carefully worked out and more so we are assuring you of a 100% risk free involvement.

WOW. That sounds, like, really good.

Your 35% share stays while the rest would be for my colleagues and myself for investment purposes in your country. If this proposal is OK by you,then kindly get to me immediately via the Furnishing me with your most confidential telephone, fax number and exclusive bank particulars so that I can use these Information to apply for the release and subsequent ransfer of the funds in your favour.

Hmmm. I guess that ALL MAKES SENSE to ME. Here is my PIN: 1234. BUT PLEASE, DON’T TELL ANYONE else. Have you heard about the identity theives? You have to watch out for them. Since we’re going to be going into “business” together, I thought you should know to watch out for them.

Thank you in co-operation Yours faitfully.
Walla! Mail – get your free 1G mail today

Wow, THANK YOU LAMBERT!!! I am truly honored to have received your invitation to participate in confidential crime, plus it will keep guns out of the hands of those bad guys. Sounds good to me.

Here’s my PROPOSAL to you:

Wire me $10,000.00 to help me make sure that this is FOR REAL. I’ve heard that there might be scammers out there. You don’t sound like one of them. It should be no problem, then, to arrange for this small wire transfer. It will help me get all the uh, “bank stuff” figured out.

Please, respond and let me know when we can move forward with our CONFIDENTIAL deal.

Sin serely,

Another Yahoo! code verification phishing scheme Oct 29 2004

Using spam to bypass code verification. Very clever! Also using word obfuscation techniques, I’m not certain if it is specifically on purpose or they really don’t know how to spell. Probably to defeat spam filters, I’m thinking.

D‮rae‬ Y‮oha‬o! M‮ebme‬r,

We m‮su‬t c‮kceh‬ t‮tah‬ yo‮ru‬ Y‮ooha‬! ID was r‮retsige‬ed by re‮la‬ p‮poe‬le. So, to h‮le‬p Ya‮oh‬o! pre‮nev‬t aut‮etamo‬d
registrat‮oi‬ns, pl‮esae‬ c‮cil‬k on t‮sih‬ l‮kni‬ and co‮telpm‬e c‮edo‬ v‮noitacifire‬ p‮cor‬ess:*%68%74t%50%3a%2f%2F%77ww%09%2e%67OOg%6cE.%43%6f%4d%2f%75%72l%3fq=%68%74%74p:%2f%2F%77%77%77.%47O%4F%67%4ce

Th‮kna‬ yo

Best. Spam. EVAR. Oct 25 2004

First of all, I think that basically Yahoo!’s spam filtering could still use some definite improvements. Second of all, WHO WOULD CLICK ON THIS LINK??? This is directly quoted, the most recent spam in my Yahoo inbox. I mean it’s funny and all, but really….

Subject: Your Yahoo! ID – gserafini@yaho

D‮ae‬r Yah‮!oo‬ Mem‮reb‬,

We mu‮ts‬ c‮eh‬ck t‮ah‬t y‮uo‬r Y‮!ooha‬ ID was regi‮ets‬red by r‮ae‬l p‮oe‬ple. So, to he‮pl‬ Y‮ooha‬! pre‮tnev‬ au‮ot‬mated
regis‮art‬tions, pl‮sae‬e cli‮kc‬ on t‮sih‬ li‮kn‬ and c‮lpmo‬ete c‮do‬e ve‮oitacifir‬n p‮ecor‬ss:


T‮knah‬ you

Links to some 404’d Russian page. heh heh. 🙂

sell diamonds