419 Scam – "MEGA MILLION E-MAIL LOTTO /MEGA MILLION LOTTO INTERNATIONAL SPA / FREDRICKS LINDA"

Example of response from fake security company (notice the classic all-capitals "I'M SCREAMING AT YOU" Nigerian style :-)

DR.LEONARD HENDRICKS
ZENITH TRUST AND FINANCIAL SERVICES
WEB SITE: www.zenithsecurities.com
FAX:+39 02 95 44 12 56
2004-11-15

ATTN: FIRSTNAME LASTNAME,

RE:TRANSFER:FIVE HUNDRED THOUSAND UNITED STATES DOLLARS (US$500,000.00)

CONSEQUENT UPON THE CONFIRMATION WE RECEIVED FROM THE MEGA MILLION
LOTTOMATICA SpA AND AFTER DUE VERIFICATION AND SCRUTINY WE CONTACT YOU FOR
THE TRANSFER OF YOUR WINNING PRIZE MONEY OF US$500,000.00 WON THROUGH THE
E-MAIL COMPUTER INTERNATIONAL LOTTERY.

YOU ARE HEREBY ADVISED TO GO TO ANY WESTERN UNION MONEY TRANSFER POINT AND
TRANSFER THE SUM OF FIVE HUNDRED EUROS(500.00EUROS) TO OUR DIRECTOR OF
ACCOUNTS .THIS PROCESSING FEE IS FOR THE OBTAINING OF THE NON RESIDENT
DOCUMENTS FROM THE MINISTRY OF FINANCE AND THE LOCAL LOTTO COMMISSION FOR
THE TRANSFER OF YOUR WINNING PRIZE MONEY.IT IS NOT OUR DUTY AS YOUR FUND
MANAGERS TO PAY FOR THE PROCESSING OF YOUR WINNING PRIZE MONEY.

AND IT IS NOT POSSIBLE FOR US TO DEDUCT THE PROCESSING FEES FROM THE
WINNING PRIZE MONEY BECAUSE OF THE INSURANCE BOND PLACED ON IT AND IT IS
FORWARDED TO US IN A CROSSED CHEQUE AND THIS MAKES IT IMPOSSIBLE FOR IT TO
BE TAMPERED WITH, AS THE WINNING PRIZE MONEY WILL REACH YOUR ACCOUNT
INTACT.

BASED ON THE ABOVE, YOU ARE ADVISED TO GO TO ANY WESTERN UNION NEAREST TO
YOU AND TELL THEM THAT YOU WANT TO TRANSFER FIVE HUNDRED EUROS TO REMY
SELLIN WITH THE FOLLOWING INFORMATION.THEY WILL SEND THE MONEY AND GIVE
YOU A 10DIGIT NUMBER THAT YOU WILL FORWARD TO US.WITH THIS NUMBER, THE
DIRECTOR OF ACCOUNTS WILL GO TO THE WESTERN UNION AND RETRIEVE THE MONEY
AND PROCEED TO THE MINISTRY AND LOCAL LOTTO COMMISSION FOR THE DOCUMENTS
TO FACILITATE THE TRANSFER OF YOUR WINNING PRIZE MONEY.

NAME: REMY SELLIN

ADDRESS:VIA PININFARINA 42-44

CITY:TORINO (TURIN)

COUNTRY: ITALY.

GO THROUGH THE ATTACHMENTS AND RETURN THE COMPLETED PAYMENT SCHEME FORM
WITH A RECEIPT OF PAYMENT FROM WESTERN UNION SHOWING THE TRANSFERED
PROCESSING FEES.

WE AWAIT YOUR URGENT RESPONSE AS WE LOOK FORWARD TO SERVE YOU BETTER.

REGARDS,

DR.LEONARD HENDRICKS
DIR.FOREIGN PAYMENTS.

Here were the message headers:

Received: from zenithse by discover.clusterdns.com with local (Exim 4.43)
	id 1Cef0Q-000709-VG
	for emailaddress; Thu, 16 Dec 2004 03:40:15 +0800
Received: from 213.140.6.111 ([213.140.6.111])
        (SquirrelMail authenticated user zenithse);
        by www.zenithsecurities.com with HTTP;
        Thu, 16 Dec 2004 03:40:14 +0800 (SGT)
Message-ID: <55771.213.140.6.111.1103139614.squirrel@213.140.6.111>
Date: Thu, 16 Dec 2004 03:40:14 +0800 (SGT)
Subject: NOTIFICATION/PROCESSING FEES/MEGAMILLION
From: zenithse@zenithsecurities.com

This email was actually sent from Italy:

     inetnum:      213.140.6.96 - 213.140.6.111
     netname:      FASTWEB-RESIDENTIAL-09
     descr:	      Infrastructure for Fastweb's main location
     descr:	      NAT IP addresses for residential customer, public subnet
     country:      IT
     admin-c:      IRS2-RIPE
     tech-c:       IRS2-RIPE
     status:	      ASSIGNED PA
     mnt-by:	      FASTWEB-MNT
     changed:      IP.RegistrationService@fastweb.it 20040224
     remarks:      In case of improper use originating from our network,
     remarks:      please mail customer or abuse@fastweb.it
     remarks:      INFRA-AW
     source:	      RIPE
     
     route:        213.140.0.0/20
     descr:        Fastweb Networks block
     origin:       AS12874
     remarks:      1st block released to it.fastweb local registry.
     mnt-by:       FASTWEB-MNT
     changed:      IP.RegistrationService@fastweb.it 20020805
     remarks:      In case of improper use originating from our network,
     remarks:      please mail customer or abuse@fastweb.it
     source:       RIPE
     
     person:       ip registration service
     address:      Via Caracciolo, 51
     address:      20155 Milano MI
     address:      Italy
     phone:        +39 02 45451
     fax-no:       +39 02 45451
     e-mail:       IP.RegistrationService@fastweb.it
     nic-hdl:      IRS2-RIPE
     remarks:
     remarks:      In case of improper use originating from our network,
     remarks:      please mail customer or abuse@fastweb.it
     remarks:
     notify:       IP.RegistrationService@fastweb.it
     changed:      IP.RegistrationService@fastweb.it 20011218
     source:       RIPE

Here is the completely bogus WHOIS record for the "security company":

     Registrant:
     	 Joswin neutralmugu@yahoo.com +868.931425166
     	 Joswin Inc.
     	 13421 Industrial Layout
     	 Careamo,DIttoli,TT 34213
     
     
     Domain Name:zenithsecurities.com 
     Record last updated at 2004-09-30 14:32:36
     Record created on 2004/9/30
     Record expired on 2005/9/30
     
     
     Domain servers in listed order:
     	 ns2.surf7.net 	 ns1.surf7.net 
     
     Administrator:
     	 13421 Industrial Layout
     	 Careamo
     DIttoli,
     TT
      34213
     
     	 name:(Joswin) 
     mail:(neutralmugu@yahoo.com) +868.931425166
     	 Joswin Inc.
     Technical Contactor:
     	 13421 Industrial Layout
     	 Careamo
     DIttoli,
     TT
      34213
     
     	 name:(Joswin) 
     mail:(neutralmugu@yahoo.com) +868.931425166
     	 Joswin Inc.
     Billing Contactor:
     	 13421 Industrial Layout
     	 Careamo
     DIttoli,
     TT
      34213
     
     	 name:(48) 
     mail:(neutralmugu@yahoo.com) +868.931425166
     	 Joswin Inc.
     
     Registration Service Provider:
     	name: Surf Seven Network 
     	tel: +60.124683101
      	fax: +60.124683101
      	web:http://www.surf7.net

Mega  Million Dollar  International Lotteries
European  Promotional Draws
****************************************************
Via Gallarate  Nr.  156
20152  Milano
Italia
*****************************************************
Claims Department
Ref: MMCAN/652311872/05
Batch: 074/05/369MM
                                   WINNING NOTIFICATION:
We happily announce to you the draw of the Mega Million Dollar  Sweepstake
Lottery International programs held on SATURDAY 5TH OF FEBRUARY, 2005.
in ITALY.
Your e-mail address attached to ticket number: 564700564321 with Serial number
4265/02 drew the lucky numbers: 31-05-75-67-25-04, which subsequently won you
the lottery in the
2nd category. You have therefore been approved to claim a total sum of
Seven  Hundred And Fifty Thousand United States Dollars ( US$ 750,000.00 ) in
cash credited to file Ref. No: MMCAN/652311872/05.This is from a total cash
prize of US $ 11,250,000.00  , shared amongst the first Fiftenn (15) lucky
winners in this category.
All participants were selected randomly from World Wide Web site
through computer draw system and extracted from over 150,000 individual/
company  e-mail addresses. This promotion takes place annually.
In view of this, your US$750,000.00  ( Seven Hundred And FiftyThousand United
States Dollars) would be released to you by our payment office in europe.
To begin your lottery claim, do contact the claims manager :
MR.  RICHARD  SMITH
CLAIMS MANAGER
MEGA MILLION DOLLARS LOTTERIES
mmdollarclaim@netscape.net
Note that all winning must be claimed not later than 11th April,2005.
After this date all unclaimed funds will be included in the next year
sweepstake.
In order to avoid unnecessary delays and complications do remember to quote your
reference number and batch numbers in all correspondence.
Furthermore, should there be any change of address do not hesitate inform your
claims manager as soon as possible.
Congratulations once more from our members of staff and thank you for being part
of our promotional program.
Yours Sincerely,
MRS. ANNA  MARIA  ARMELIANI
megamilliondollar@zwallet.com
Lottery Coordinator
********************************************************************************
DISCLAIMER: This communication is for the exclusive
use of the intended recipient (s) and shall not attach
any liability on the originator, Mega Million Dollar Lottery.
If you are the addressee, the contents of this
letter are intended for your use only and it shall not
be forwarded to any third party, without first
obtaining written authorizations from the originator.
It may contain information, which is confidential and
legally privileged and the same shall not be used or
dealt with by any third party in any manner without
the specific consent of Mega Million Lottery Int. CAN.