Newsgroup: it.comp.sicurezza.varie
Titolo: OT FINALMENTE HO VINTO ANCH'IO


Reply-To: 
freelotto2...@katamail.com
To: MIO INDIRIZZO
Date: Mon, 23 Oct 2006 20:38:40 +0100
Subject: claim your winning
X-Mailer: Microsoft Outlook Express 5.00.2919.7000
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Dear Lucky Winner,
Internet lottery
The Free Lotto OrganisationUK (United
Kingdom)
Reference number A206-35-707
Ticket numbers 390-15-54-35
We are glad to
inform you that your E-mail address appears as the confirmedWinner of our last
email lottery program held on the 23rd of October 2006.Your e-mail address
attached to Reference number A206-35-707, lucky numbers 390-15-54-35, which
consequently won in the 2nd category, you have therefore been approved for a
lump sum payment of EUR 3,500.000.00 euros. [Three Million and five hundred
thousand euros only]CONGRATULATIONS!!!This promotional program takes place every
year. All participants were selected through a computer ballot system drawn from
over 200,000 companies and 50,000, 000 individual email addresses and names from
all over the world.In order to avoid unnecessary delays and complications please
remember to quote your reference number and lucky numbers in all correspondence.
We ask that you should keep your winning information confidential until your
claim has been processed and your money remitted to you. To file for your claim
or for further details please contact our agent and forward the required details
asked for from the form below via a plain text
message:*************************************************************Contact
Details for claim release processName: Richard PurkhardtEMAIL:
freelotto2...@katamail.com
*************************************************************In
respect of our commitment towards helping the less privilege, we ask that you
voluntarily contribute 1% of your Global winnings to any charity organization
you desire at your convenience.NOTE: All winning must be claimed not later than
4th Quarter of this fiscal year 2006.Congratulations once more from our members
of staff and thank you for being part of our promotional program.This email and
its attachments are confidential and may contain legally privileged information.
You should not disclose the contents to any other person. If you are not the
intended recipient, please notify the sender immediately and delete this email
from your system.FREE LOTTERY INTERNATIONAL PROMOTIONS/PRIZE AWARD DEPT.Please
fill and forward the form below via a plain text message in order to have your
claim process for release.FORMInternet lotteryThe Free Lotto OrganisationUK
(United Kingdom)LOTTERY PAYMENT APPLICATION FORM(To be completed by lottery
winners only)Ticket Number: .........................................Reference
Number: ....................................First Name:
...............................................Last
Name:................................................Home Address:
.....................................Country:
...............................................Telephone (Home)/ Mobile:
....................Fax (Private or Office): ...........................Email
Address: .....................................Date of Birth:
........................................Occupation:
..........................................Marital Status:
.......................................I................................hereby
declare that the above information are true and binding on me. If at any time it
is discovered that I have given false information, I will forfeit my rights to
my winnings.Yours Sincerely,Mrs. Elizabeth Jenson(Lottery Coordinator)IMPORTANT
NOTICE.Please be informed that NON RESIDENTS of Ireland and United Kingdom will
be required to procure a Affidavits of Lotto Claim/Court clearance certificate
from the Court in Ireland prior to award payment policy of Organisers/European
Gaming Board as required by the Clearance office.Please be aware that your
Paying Authority wills Effect Payment Swiftly upon satisfactory Report,
Verifications and validation provided by this Clearance Office

 Secondo voi l'indirizzo 
freelotto2...@katamail.com
 è valido?
Sì.

 Cosa mi regali, ora che hai tutti questi soldi? :-D
Ecco appena uno vince una barca di soldi, tutti a chiedere qualcosa, parenti, 
amici, figli illeggittimi avuti da donne mai conosciute, utenti di newsgroup 
eccetera. Dovevo stare zitto. La prossima volta non lo dico a nessuno. 
D'altronde si sa che il silenzio č d'oro. 

 vecchiaia, tutto qui.
Però questi della lotteria mi chiedono di anticipare delle spese per entrare in
possesso della vincita milionaria, se anticipi tu questi soldi poi dividiamo il 
malloppo :-)
Altra chicca truffaldina.
Sul telefonino di mio padre è arrivato questo sms:
Ci sono messaggi per te! Chiama da telefono fisso 89-987-87-16 e segui la voce
guida. Info e costi di iscrizione 
www.promo-sms.net
Mittente 20100
numero centro messaggi 393205952500
Inviato 20/10/2006
ore 11.44.56
E per finire mi stanno pure arrivando e-mail di spam al viagra dalla malesia.
Sto facendo la collezione. Vedi immagine:
http://www.hostingfiles.net/files/20061029113349_e-mail.JPG
E' un periodaccio, spam, lotterie truffaldine, sms pubblicitari con relativo
899.

 qualcuno faccia festa con le loro chiappe, purtroppo :-(
Analisi del programma ABUSE
IP del mittente (o del mailserver che consegna):84.220.45.50
Ha detto di essere :
bobevans.com
Mailserver che riceve [by]:
fep02-svc.tim.it
Per l'e-mail: <mio indirizzo>
mio indirizzo non sembra avere MX validi
Listato da:
*  
blackholes.five-ten-sg.com
: Sorgente di spam
*  
sbl-xbl.spamhaus.org
: Open proxy
84.220.45.50 è un open proxy, interrompo l'analisi
****RISULTATI*****
Fermati alla linea Received: 1
- 84.220.45.50(
host-84-220-45-50.cust-adsl.tiscali.it
): Open proxy
Cerco contatti di abuse nella cache
Nessun risultato nella cache
Abuse address probabile:: 
ab...@tiscali.it
L'IP appartiene a
 Reverse lookup: 
host-84-220-45-50.cust-adsl.tiscali.it
Geographical location: Naples 04 Italy
Address block information:% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% 
http://www.ripe.net/db/news/abuse-proposal-20050331.html
% for more details.
%
% Rights restricted by copyright.
% See 
http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag
% Information related to '84.220.0.0 - 84.221.255.255'
inetnum:      84.220.0.0 - 84.221.255.255
netname:      TISCALINET
descr:        Tiscali SpA
descr:        PROVIDER
country:      IT
admin-c:      RC524-RIPE
admin-c:      FP1849-RIPE
admin-c:      FB2233-RIPE
tech-c:       TI335-RIPE
rev-srv:      
ns.tiscalinet.it
rev-srv:      
sns.tiscali.it
remarks:      ADSL dial-up customers
remarks:      -----------------------------------------------------------
remarks:      Send trouble queries or problems to
ks:      -----------------------------------------------------------
remarks:      SPAM or net abuse please mail to
ks:      -----------------------------------------------------------
remarks:      For more information see 
http://www.tiscali.it/
remarks:      -----------------------------------------------------------
status:       ASSIGNED PA
mnt-by:       AS8612-MNT
source:       RIPE # Filtered
role:         Tiscali IT
address:      Tiscali S.p.A.
address:      SS 195 Km 2.300
address:      localita Sa Illetta
address:      09122 - Cagliari
address:      Italy
phone:        
+39 070 46011
fax-no:       
+39 070 4601400
remarks:      -----------------------------------------------------------
remarks:      Send trouble queries or problems to
ks:      -----------------------------------------------------------
remarks:      SPAM or net abuse please mail to
ks:      -----------------------------------------------------------
remarks:      For more information see 
http://www.tiscali.it/
remarks:      -----------------------------------------------------------
e-mail:       admin-c:      RC524-RIPE
admin-c:      FP1849-RIPE
tech-c:       RC524-RIPE
tech-c:       FB2233-RIPE
tech-c:       FP1849-RIPE
nic-hdl:      TI335-RIPE
mnt-by:       AS8612-MNT
source:       RIPE # Filtered
person:       Francesco Boi
address:      Tiscali SpA
address:      SS. 195 Km. 2,300
address:      09122 Cagliari
address:      Sardinia - Italy
phone:        
+39 070 46011
fax-no:       
+39 070 4609250
e-mail:       nic-hdl:      FB2233-RIPE
source:       RIPE # Filtered
person:       Ruben Cardella
address:      Tiscali SpA
address:      SS. 195 Km. 2,300
address:      09122 Cagliari
address:      Sardinia - Italy
remarks:      Network Engineer
phone:        
+39 070 46011
fax-no:       
+39 070 4609328
e-mail:       nic-hdl:      RC524-RIPE
source:       RIPE # Filtered
person:       Francesco Pau
address:      Tiscali
address:      SS. 195 Km. 2,300
address:      09122 Cagliari
address:      Sardinia - Italy
remarks:      Network Engineer
phone:        
+39 070 46011
fax-no:       
+39 070 4609251
e-mail:       nic-hdl:      FP1849-RIPE
source:       RIPE # Filtered
% Information related to '
84.220.0.0/14AS8612
'
route:        
84.220.0.0/14
descr:        Tiscali SpA
origin:       AS8612
mnt-by:       AS8612-MNT
mnt-by:       TISCALI-INT-ROUTE
source:       RIPE # Filtered
% Information related to '
84.220.0.0/14AS3257
'
route:        
84.220.0.0/14
descr:        Tiscali SpA
origin:       AS3257
mnt-by:       TISCALI-INT-ROUTE
source:       RIPE # Filtered

 tempo per analizzare per bene le mail e segnalarle ...
l'importante è che non manchi il tempo per verificare se il prodotto 
serve o no ;-)
-- 
Sans

 maggiore completezza, uno spam inoltrato pure a NANAS ha un altro peso)
Ho segnalato a 
ab...@tiscali.it
 e l'e-mail mi è tornata indietro. Boh, comunque
tutte le e-mail di spam provengono da indirizzi Ip diversi e ogni volta il
programma  Abuse.exe dice che sono open proxy. Server mal configurati, Pc
infetti zombizzati? Ho capito è tempo perso, fare segnalazioni si perde più
tempo che a scaricare l'e-mail di 2 KB e a filtrarla con l'ottimo antispam di
Thunderbird. Passo e chiudo.
Messagio di notifica, per un me pò criptico, dell'e-mail ritornata indietro.
 - Questi destinatari sono stati elaborati dal server di posta:
ab...@it.tiscali.com
; Non riuscito; 5.3.0 (stato del sistema di posta diverso o
non definito)
    MTA remoto 
mail-mx-int-1.tiscali.com
: errore di rete
 - Diagnostica protocollo SMTP: 554 Message refused
Reporting-MTA: dns; 
mail-mx-1.tiscali.it
Received-from-MTA: dns; 
fep02-svc.tim.it
 (213.230.128.226)
Arrival-Date: Sun, 29 Oct 2006 16:05:05 +0100
Original-Recipient: 
rfc822;ab...@tiscali.it
Final-Recipient: rfc822; 
ab...@it.tiscali.com
Action: Failed
Status: 5.3.0 (other or undefined mail system status)
Remote-MTA: dns; 
mail-mx-int-1.tiscali.com