[nsp-sec] ACK for Google scam (AS 4134)

[William Allen Simpson]

王华 wrote:
> ----------- nsp-security Confidential --------
> 
> Hi,
> Ack for 4134. Thanks a lot. But I do not know find 122.225.105.9 in the
> spam. Could you send me more info?
> 
dig w.cn

;; ANSWER SECTION:
w.cn.			3600	IN	A	122.225.105.9

...


> -----邮件原件-----
> 发件人: nsp-security-bounces at puck.nether.net
> [mailto:nsp-security-bounces at puck.nether.net] 代表 William Allen Simpson
> 发送时间: 2010年3月3日 19:24
> 收件人: NSP-Sec
> 主题: [nsp-sec] Google scam (AS 4134)
> 
> ----------- nsp-security Confidential --------
> 
> Wow, Google is so generous!  Imagine my surprise that they operate
> from an address in China....
> 
> AS      | IP               | AS Name
> 4134    | 122.225.105.9    | CHINANET-BACKBONE No.31,Jin-rong Street
> 
> ===
> 
> Return-Path: <google_team at w.cn>
> Received: from powerconnect.co.zw ([217.74.236.254])
>          by mx.google.com with ESMTP id e11si11738444fga.6.2010.03.02.18.36.
> 24;
>          Tue, 02 Mar 2010 18:36:28 -0800 (PST)
> Received-SPF: neutral (google.com: 217.74.236.254 is neither permitted nor
> denied by best guess record for domain of google_team at w.cn)
> client-ip=217.74.236.254;
> Authentication-Results: mx.google.com; spf=neutral (google.com:
> 217.74.236.254 is neither permitted nor denied by best guess record for
> domain of google_team at w.cn) smtp.mail=google_team at w.cn
> Received: (qmail 28957 invoked from network); 3 Mar 2010 02:19:32 -0000
> Received: from unknown (HELO localhost) ([192.168.50.241])
>            (envelope-sender <google_team at w.cn>)
>            by powerconnect.co.zw (qmail-ldap-1.03) with SMTP
>            for <google_team at w.cn>; 3 Mar 2010 02:19:32 -0000
> MIME-Version: 1.0
> Date: Wed, 3 Mar 2010 4:19:22 +0200
> From: Mrs Becky Johnny <google_team at w.cn>
> To: google_team at w.cn
> Subject: CONGRATULATIONS
> Organization: GOOGLE_TEAM
> Reply-To: google_team at w.cn
> Message-ID: <69e05bc4a21b4aa26f75442ec7755734 at powerconnect.co.zw>
> X-Sender: google_team at w.cn
> User-Agent: RoundCube Webmail/0.1b
> Content-Type: text/plain; charset="UTF-8"
> Content-Transfer-Encoding: 8bit
> 
> 
> --
> Dear GOOGLE User/Customer,
> 
> Co-founders Larry Page, president of Products, and Sergey Brin, president of
> Technology, brought Google to life in September 1998. Since then, the
> company
> has grown to more than 10,000 employees worldwide, with a management team
> that
> represents some of the most experienced technology professionals in the
> industry.
> 
> As a way of showing appreciation to our numerous customers/Users presently
> the
> company is engaged in an On-going 2010 PROMO
> We are delighted to inform you that your have just emerged a winner in our
> 2010
> GOOGLE AWARD PROMO.
> 
> Consequently Your patronage on our website (Google.com) has won YOU
> ($100,000.00
> USD) One Hundred Thousand United States Dollars and a Brand New 2009 Toyota
> Camry Car.
> You are required to fill the claims eligible form below and send it to us to
> enable successful pick up by you.
> 
> Name: Mrs. Becky Johnny
> Position:(Chief Promo Organizer)
> Email: google_team at w.cn
> 
> Please provide us with the following details,Your
> 
> Full Name:
> Residential Address:
> Age:
> Country:
> City:
> Personal Mobile Number:
> Office Mobile Number:
> 
> Congratulations from the staff and Management of the 2010 GOOGLE AWARD TEAM.
> Sincerely,Google Team
> Thank You
> Regards
> 
>