[nsp-sec] ATTN AOL, 419 Advance Fee Fraud drop box

[Anthony Edwards]

Hi

419 Advance Fee Fraud drop box claims_microsftlottry at london.com:

abuse at abuse:~$ host -t mx london.com
london.com mail is handled by 10 mailin-01.mx.aol.com.
london.com mail is handled by 10 mailin-04.mx.aol.com.
london.com mail is handled by 10 mailin-03.mx.aol.com.
london.com mail is handled by 10 mailin-02.mx.aol.com.

: X-Apparently-To:   x via 69.147.75.5; Tue, 28 Dec 2010 16:28:27 -0800 
: Return-Path:   <poning at cm.nctu.edu.tw> 
: X-YahooFilteredBulk:   140.113.144.250 
: Received-SPF:   none (mta1016.mail.mud.yahoo.com: domain of poning at cm.nctu.edu.tw does not designate permitted sender hosts) 
: X-YMailISG:   8o0mjCccZAoc09V15KxP3EE.rN3SSatJAtKOKf_JQOKzdanZ cCvUAw84SNhhlY76Kh5WRgmr_J3U.j6SbKKjtmXICqq4f4mqdWjSFcT.Je8c zHCVsj2QqvQ0mKwVVrtU41YU4bxuVAHGBZjj9vMARDQk6jdpn63wVIJAcVCd j3EBvVeVg_MYoPbJoUqJGILYnd5XWc_iKHuE.Rs.V25Xw8_DlzTB7.5qpYPS ScZ0zGtoUsCjwdMaUx0tkyQUH53fG9r4FazQO454P8O8hQ_jz9vpxj8AyYGZ Ktwh.lt5tOtboMNYO43GQ1G3Vf0.jYw3gtc4R00zNMx9L1UdP5EukqyxZD34 6AlxpGVrPNH.2ONSlr00dsn67yehsCR3SeVasFASeKuaXs0LeX9eGRcSh5YG 3u6sq8UM1igOnVTKpEqXgOw9JMfDtmgb4fcrxmpjuRDrAO4zmSJlPCRsWGpm MHMMTIhrErf7iau3iUnyJrpCxoc4ip.41viS3d99M8pgTGSuvEWFupcnH02U kf8fM1NtmtDhWvqcN5vKGX7RtY_wVlZT9leNJzxWq85dL8eTMhnxco1iQA_Q 1L6518pJ4XfT3LTcNFxhpajiM98_lb1aGHaThAMYfNMkP_xZ8.chUs3gVox1 QhS6cDTYGj0DAgJS92mKaXGkMbHlPLuaeNjovWjZc6aDYSC_9MS1F8U6sXBO wwr6sObRjXC2YlNzxQKSkKbwUmA4oKSDxqfWLTKttcLHDak1mSQ4D6qIBDG9 HivwLFg6SQTskNt8hGucTyXC5SK38_SvkcUNlVmeo27mXftXvGUsa_KbxU7m W4SZcbUElMVU9YO64rDOnS42orp1G_ZKDBFMH3SXdr0_JOtLc1NQHMBQDoE2 UnpIZPaOSIcV2OkDMmQawcyGT1GSygZaYD6Lihzd6vOzdlDwrH1mVXYw3aXl 4jYx4UADBy82ZY6YIzwkJOzX4rp_sZFA.Pwea.htmXNhKTcRGNyriQjmzqUV c8dz7jT4KysZBXWKBr_ozCM1p0z62Oje.LnFVcGzklb8DZTbGOBFZel_DY_T 69xmg3GHpS99M4hDJIQ03oFv.c57l0EUi4EnNpJ7lIDXe5ITVYvjLhZELWQP ZuCQNc3_8_m1U3No_vhmalahyOssJ7rTzj3odQR9IeLmCfYLBDsWHlpbHkrp DHysWrZCQPjwJy3SUoy1pY18QapDcb5B80FOkRCEMvEoE1FkJ2vaTtiqBuU6 IaNZAe2yMfVKxv03l4kX0KQ6MO.woX8AQxhT1FEkKgjPLWhteWaX_OIPM3Jf uKC.R1cZcrS75OXOww8gEbfYFWK5Z.JnpQm2pVv3qID75El.HSXbTNVNOakF fkR5f9Pg.TAStujFRBwd3k7.kzPophVnHn.bO8mAJrpJRS7yW_6cADHRQmun XHfLaRIv..2yZccm_GPuIvn3vhKRhtX7GFq9waNmIJOdRzWNk5G0yKDiN_UE 87DIiQ-- 
: X-Originating-IP:   [140.113.144.250] 
: Authentication-Results:   mta1016.mail.mud.yahoo.com from=cm.nctu.edu.tw; domainkeys=neutral (no sig); from=cm.nctu.edu.tw; dkim=neutral (no sig) 
: Received:   from 127.0.0.1 (EHLO cmbsd.cm.nctu.edu.tw) (140.113.144.250) by mta1016.mail.mud.yahoo.com with SMTP; Tue, 28 Dec 2010 16:28:25 -0800 
: Received:   from User ([41.203.64.254]) (authenticated bits=0) by cmbsd.cm.nctu.edu.tw (8.14.3/8.13.8) with ESMTP id oBT0HdAH078758; Wed, 29 Dec 2010 08:18:06 +0800 (CST) (envelope-from poning at cm.nctu.edu.tw) 
: Message-Id:   <2010___________________8758 at cmbsd.cm.nctu.edu.tw> 
: Reply-To:   <claims_microsftlottry at london.com> 
: From:   "MICROSOFT E-MAIL AWARD WINNING 2010."<poning at cm.nctu.edu.tw>  Add sender to Contacts 
: Subject:   Winning Numbers 07,12,15,28,39 
: Date:   Wed, 29 Dec 2010 01:23:11 -0800 
: MIME-Version:   1.0 
: X-Content-Type:   text/plain; charset="Windows-1251" 
: X-Content-Transfer-Encoding:   7bit 
: X-Priority:   3 
: X-MSMail-Priority:   Normal 
: X-Mailer:   Microsoft Outlook Express 6.00.2600.0000 
: X-MimeOLE:   Produced By Microsoft MimeOLE V6.00.2600.0000 
: To:   undisclosed-recipients:; 
: Content-Length:   1749
: Content-Type: text/plain
: X-SpamCop-note: Converted to text/plain by SpamCop (outlook/eudora hack)
: 
: CONGRATULATION!!
: YOU HAVE WON  500.000.00 GBP
: FROM MICROSOFT E-MAIL AWARD WINNING
: DRAWS 2010 HELD HERE IN UNITED KINGDOM
: This is a formal notification of the just concluded final draws of the  Microsoft E-mail Draw monthly promotional program held on 27/12/2010 In  United kingdom. You have been approved to be paid a winning sum of 500.000.00Gbps,
: We happily announce to you the Microsoft award (2010) of the International lottery program held on 27th of December , 2010.Your e.mail address has won!! the draw, which subsequently won you the lottery in the its category i.e You are there for been approve to claim a total sum of  500.000.00 British pounds.
: THESE ARE YOUR WINNING INFORMATION'S:
: Batch Number 024/320541
: Winning Numbers 07,12,15,28,39
: Reference Number M/LOTTO/02463092
: Payment No M/LOTTO 5237.
: Your ticket number:56475600545 188 with serial number 5368/06 draw the lucky number of (6) congratulations, you have just won yourself 500.000.00 ponds in the lottery conducted by the MICROSOFT AWARD LOTTERYORGANIZATION.Your email address was among those choosen for this year promo 2010 Edition.
: kindly contact Microsoft Overseas Payment Officer,
: Dr, ALEX WINTER FALL. at this email address below.
: Email: claims_microsftlottry at london.com
: http://www.london.com
: You are to Fill the below details...
: 1. FULL NAME........................
: 2. COUNTRY OF ORIGIN:....................
: 3. PRESENT ADDRESS.: ........................
: 4. AGE.: .................
: 5. OCCUPATION....................... 6. SEX...................
: 7. TELEPHONE NUMBER.......................
: 8. BATCH NUMBER: .........................
: 9. WINNING NUMBER:...................
: 10. REFERENCE NUMBER:.................................
: Yours Sincerely,
: MRS.BRADSHAW
: (MICROSOFT LOTTERY COORDINATOR)

-- 
Anthony Edwards
anthony.edwards at sns.bskyb.com
Abuse Team Manager  -  Sky Network Services
DDI: 0161 888 3507