Email Spam Filter:
jwSpamSpy
Try it for free!


About spam / "419" / Blog
jwSpamSpy
Recent spam domains
Spam domain blacklist

Software
Links
joewein.de
joewein.net
Contact
Google

 

419 Scam – "UK-LOTTO Sweepstake Lottery / SIR. CARL PETER"

"UK-LOTTO Sweepstake Lottery / SIR. CARL PETER" is the fake identity used by a gang of advance fee fraud ("419") scammers operating in Nigeria and the UK. It's a fraud. (see one example scam email here).

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!

The scammers have registered a domain for the fake lottery:

Example of spam:

Return-Path: <karlpeterside@ukgrandlottery.net>
Received: from bay23-f23.bay23.hotmail.com ([64.4.22.73] helo=hotmail.com)
	by vmx02.prolocation.net with esmtp (Exim 4.43)
	id 1Cd4WB-0008Po-1s
	for aken@nioz.nl; Sat, 11 Dec 2004 11:30:27 +0100
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
	 Sat, 11 Dec 2004 02:30:01 -0800
Message-ID: 
Received: from 80.88.130.208 by by23fd.bay23.hotmail.msn.com with HTTP;
	Sat, 11 Dec 2004 10:29:01 GMT
X-Originating-IP: [80.88.130.208]
X-Originating-Email: [karlpeterside@ukgrandlottery.net]
X-Sender: karlpeterside@ukgrandlottery.net
From: "Karl Peterside" <karlpeterside@ukgrandlottery.net>
Bcc: 
Subject: WINNING NOTIFICATION
Date: Sat, 11 Dec 2004 10:29:01 +0000
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-MailScanner-SpamCheck: spam, SpamAssassin (score=7.796,
	required 5, BAYES_50 0.00, MILLION_USD 2.80, MISSING_HEADERS 0.12,
	MSGID_FROM_MTA_HEADER 0.05, NIGERIAN_BODY1 3.40, NIGERIAN_BODY2 0.60,
	NIGERIAN_BODY3 0.06, SPF_HELO_PASS -0.25, SUBJ_ALL_CAPS 0.67,
	US_DOLLARS_3 0.35)

UK-LOTTO Headquarters:
Customer Service
189.STREATHAM HIGH ROAD,
ELTHAM,
S.E 9 4TW.
LONDON.
UNITED KINGDOM.
Ref: UK/9420X2/68                                                            
       12/12/2004
Batch: 074/05/ZY369

                                    WINNING NOTIFICATION:

We happily announce to you the draw of the UK-LOTTO Sweepstake
Lottery International programs held on the 20TH NOVEMBER, 2004.
in LEEDS UNITED-KINGDOM.
Your e-mail address attached to ticket number: 564
75600545 188 with Serial number 5368/02 drew the lucky numbers:
19-6-26-17-35-7, which subsequently won you the lottery in the
2nd category.
You have therefore been approved to claim a total sum of
US$2,500,000.00 (Two million,Five Hundred Thousand United States
Dollars) in cash credited to file ktu/9023118308/03.This is from
a total cash prize of US $ 25 Million dollars, shared amongst
the first Ten (10) lucky winners in this category.
All participants were selected randomly from World Wide Web site
through computer draw system and extracted from over 100,000
companies. This promotion takes place annually.
Please note that your lucky winning number falls within our
European booklet representative office in Europe as indicated in
your play coupon.In view of this, your US$2,500,000.00 (Two
million,Five Hundred Thousand United States Dollars) would be
released to you by our payment office in europe.
Our European agent will immediately commence the process to
facilitate the release of your funds as soon as you contact him.
For security reasons, you are advised to keep your winning
information confidential till your claims is processed and your
money remitted to you in whatever manner you deem fit to claim
your prize.
This is part of our precautionary measure to avoid double
claiming and unwarranted abuse of this program by some
unscrupulous elements. Please be warned.
To file for your claim, please contact our fiduciary agent:
MR ANDREW  WOODS.
Email:
To avoid unnecessary delays and complications, please quote your
reference/batch numbers in any correspondences with us or our
designated agent.
Congratulations once more from all members and staffs of this
program. Thank you for being part of our promotional lottery
program.
Sincerely,
SIR. CARL PETER.
UK-LOTTO Co-ordinator.


The domain of this "lottery" was only registered a few days before the above email, on 2004-12-08, using a bogus postal address in the USA:

Request: ukgrandlottery.net

Domain Name.......... ukgrandlottery.net
  Creation Date........ 2004-12-08
  Registration Date.... 2004-12-08
  Expiry Date.......... 2005-12-08
  Organisation Name.... Karl Peterside
  Organisation Address. Cam 440 Bronx
  Organisation Address. 
  Organisation Address. New York
  Organisation Address. 12804
  Organisation Address. NY
  Organisation Address. UNITED STATES

Admin Name........... Karl Peterside
  Admin Address........ Cam 440 Bronx
  Admin Address........ 
  Admin Address........ New York
  Admin Address........ 12804
  Admin Address........ NY
  Admin Address........ UNITED STATES
  Admin Email.......... karlpeterside@ukgrandlottery.net
  Admin Phone.......... +1.5187931293
  Admin Fax............ 

Tech Name............ MSN NOC
  Tech Address......... One Microsoft Way
  Tech Address......... 
  Tech Address......... Redmond
  Tech Address......... 98052
  Tech Address......... WA
  Tech Address......... UNITED STATES
  Tech Email........... MSN-PA-TECH@msn.com
  Tech Phone........... +1.4258828080
  Tech Fax............. 
  Name Server.......... pdomns1.msn.com
  Name Server.......... pdomns2.msn.com

The actual source of the email is someone in Nigeria, hooked up to the Internet via a Danish satellite broadband provider:

     inetnum:      80.88.130.192 - 80.88.130.223
     netname:      EMP-TRA04
     descr:        Networks at locations TRA04
     country:      NG
     admin-c:      OO741-RIPE
     tech-c:       EMP5-RIPE
     status:       ASSIGNED PA
     remarks:      - - - - - - - - - - - - - - - - - -
     remarks:      Abuse address: abuse@emperion.net
     remarks:      - or the admin-c of the network
     remarks:      - - - - - - - - - - - - - - - - - -
     notify:       noc@emperion.net
     mnt-by:       EMP-NOC-MNT
     changed:      kmw@Emperion.net 20041202
     source:       RIPE
     
     route:        80.88.128.0/20
     descr:        DK-EMPERION-20010828-ROUTE
     origin:       AS21125
     mnt-by:       EMP-NOC-MNT
     changed:      kmw@Emperion.net 20010906
     source:       RIPE
     
     role:         Emperion NOC Operator
     address:      Emperion A/S
     address:      Middelfartgade 7
     address:      2100 Koebenhavn Oe
     address:      DK
     phone:        +45 3929 3530
     e-mail:       noc@emperion.net
     trouble:      kmw@emperion.net
     admin-c:      KW6968-RIPE
     tech-c:       KW6968-RIPE
     tech-c:       SRL7-RIPE
     tech-c:       AJ163-RIPE
     tech-c:       GB1283-RIPE
     tech-c:       FL497-RIPE
     nic-hdl:      EMP5-RIPE
     notify:       noc@emperion.net
     mnt-by:       EMP-NOC-MNT
     changed:      KMW@EMPERION.NET 20010906
     changed:      kmw@emperion.net 20020110
     changed:      kmw@emperion.net 20021107
     source:       RIPE
     
     person:       Oyom Ojo
     address:      Tranter International Limited
     phone:        +234 1 4973363
     fax-no:       +234 1 4973363
     e-mail:       oojo@tranterserve.com
     nic-hdl:      OO741-RIPE
     notify:       noc@emperion.net
     mnt-by:       EMP-NOC-MNT
     changed:      kmw@Emperion.net 20010912
     changed:      kmw@Emperion.net 20021022
     source:       RIPE

The same provider is used in the "englandlawonline.net" scam ("My name is Zack Manuel, I am the credit manager of First Standard Finance Bank Plc. here in the United Kingdom...", info@englandlawonline.com), which uses a domain hosted by RediffmailPro in India.


Here is a different version using the same lottery name but different aliases for the individuals:

From: Mrs Deborah Carl [mailto:mrsdeborah_carl@yahoo.co.uk] 
Sent: 23 February 2005 13:10
Subject: HELLO
Importance: High


UK NATIONAL LOTTO HEADQUARTERS
Customer Service Center
Ref Number: UK/910/16454
Batch Number:VC/32/ID1141
Dispatch date :05/02/2005
Dear Sir/Madam,
              WINNING NOTIFICATION
We happily announce to you the draw of the UK-LOTTO
Sweepstake Lottery International programs held on new year
day (1st of January, 2005) in ENGLAND AND WALES. Your
e-mail address/your companies e-mail address attached to
ticket number:5224652456UT with Serial number 0098/UK0204
drew the lucky numbers:03-01-15-20-34-33-07, which
subsequently won you the lottery in "A" category.
You have therefore been approved to claim a total sum of
US$2,500,000.00 (Two million, Five Hundred Thousand
United States Dollars) in cash credited to file
KLTT/KTU/2005ETN. This is from a total cash prize of US $25
Million dollars, shared amongst the first TEN (10) lucky
winners in this second category. All participants were
selected randomly from World Wide Web site through computer
draw system and extracted from over 100,000 companies.
This promotion takes place annually. Note that your lucky
winning number falls within our European booklet
representative office in Europe as indicated in your play
coupon. In view of this, y our US$2,500,000.00 (Two
million, Five Hundred Thousand United States Dollars) would
be released to you by our payment office in Europe. Our
European agent will immediately commence the process to
facilitate the release of your funds as soon as you contact
him. For security reasons, you are advised to keep your
winning information confidential till your claims is
processed and your money remitted to you in whatever manner
you deem fit to claim your prize. This is part of our
precautionary measure to avoid double claiming and
unwarranted abuse of this program. Please be
warned. To file for your claim, please contact our
fiduciary agent:
========================================================================
MR. JERRY GRAY
LEGAL/FIDUCIARY AGENT
EMAIL:mrjerrygray@yahoo.co.uk
========================================================================
To avoid unnecessary delays and complications, please
quote your Reference and Batch numbers in all your
correspondence with us or our designated agent.
Congratulations once more from all members and staff of
this program. Thank you for being part of our promotional
lottery program.
Note that you must contact your claims agent within one
week of receipt of this notice.
Sincerely,
MRS DEBORAH CARL
UK-LOTTO Co-ordinator,
UK N.L Information Service.


___________________________________________________________________________
Mail sent from WebMail service at more-bay
- http://www.more-bay.de