Anti-Spam The Deadbeats Hall of Lame
Warning: Not all menu items are working. We're working on this but this site is a low-priority project.
Why rent sound gear and deal with issues? Hire Studio42 and your event goes off as planned!

Deadbeats' Hall of Lame
2009 Lottery Scam Edition

WARNING!

Do not sign me up for any mail lists. Studio42 does not accept such unsolicited business. Also, since I've recently been getting a flood of such e-mail from various people and organizations I don't wish to deal with, their names will end up here, along with their home and business addresses, and phone numbers, whenever possible.
Please realize that 99.9% of internet users DON'T want your crap in our e-mail boxes.
Minimum fine for violation of this policy allows me to legally bill/invoice for $500 and this can be escalated to a court of law.

This page created on January 1, 2009 for Lottery'ers in 2009


Subject: Email Address Have Won
Date:        1/2/2009 05:54
Received:    1/2/2009 13:01
From:        Weaver, Tamara, TWeaver@Hensley.com
To:          undisclosed-recipients:;


  • See the spam

Whee! I already won a fake lottery. Hot damn! Proxy or zombie rape and going through
an provider known for being rather spammy.


  • See the lookups

    
Subject: 2009 OFFICIAL WINNINGS NOTIFICATION_MCS - 26798/096
Date:        1/4/2009 01:59
Received:    1/4/2009 01:59
From:        mary-kate25@hetnet.nl


  • See the spam

My anti-spam account can only get 3rd place for a fake lottery of a blind Dutch server.
Harvesting on theplanet.com, a known spam tolerant provider.


  • See the lookups

    
Subject: YOUR E-MAIL WON!!!
Date:        1/4/2009 07:04
Received:    1/4/2009 12:05
From:        Coordinator, ksbt@cox.net
Reply-To:    cmieconsultant@msn.com
To:          undisclosed-recipients:;


  • See the spam

Spammer abusing Cox.Net via a non-secured relay on spam-friendly SoftLayer.
Uses both Hotmail and MSN drops for their criminal behavior.


  • See the lookups

    
Subject: Please open the attachment file below for more information.
Date:        1/6/2009 01:34
Received:    1/6/2009 01:31
From:        MSN AWARD, brimicawa1@hotmail.com
Reply-To:    claimagent2009@gala.net
To:          undisclosed-recipients:;


  • See the spam

Hotmail "from", but forged, Word attachment with the bulk of the scam, New Zealand abuse
via a Zambia rape.


  • See the lookups

    
Subject: Please open the attachment file below for more information.
Date:        1/8/2009 12:50
Received:    1/8/2009 12:46
From:        WORLD CUP, jefmore@live.com
Reply-To:    jeffmore@live.com
To:          undisclosed-recipients:;


  • See the spam

Live.com drop, Zambia origination, and New Zealand rape. Same as above type crap, but
FIFA themed this time.


  • See the lookups

    
Subject: New Year Grant Award!!!
Date:        1/16/2009 08:47
Received:    1/16/2009 10:21
From:        Miss.Andjella Anzhela{RUSSIAN FOUNDATION FOR BASIC RESEARCH}, info@
Reply-To:    mrtomatamara.secertary101@hotmail.com
To:          undisclosed-recipients:;


  • See the spam

Hotmail drop, zombie rape and Taiwan abuse for a bogus grant.


  • See the lookups

In typical Asian form, a contact drop listed by the Taiwan NIC is invalid.


  • See the denial

And sticking true to form, in their regular whois, one of those drops is also invalid.


  • See the denial

    
Subject: Your Email Have Won!(BO/028/JES)
Date:        1/29/2009 19:03
Received:    2/8/2009 17:01
From:        Mrs.Sandra Jorge, cajainfo@gmail.com
Reply-To:    cajafinance@mixmail.com
To:          undisclosed-recipients:;


  • See the spam

German abuse, originates or zombie rapes from Spain, and a Spanish drop box.


  • See the lookups

    
Subject: Our Ref: FGN /SNT/STB
Date:        2/13/2009 22:21
Received:    2/13/2009 22:18
From:        ATM PAYMENT DEPARTMENT !!!, kimisanders@cox.net
Reply-To:    harry101@jmail.co.za
To:          undisclosed-recipients:;


  • See the spam

Crap relaying out of COX via a blind misconfigured relay. Spammer uses a MSN drop
as their choice for scamming.


  • See the lookups

    
Subject: A T M CREDITED IN YOUR FAVOUR
Date:        2/14/2009 05:52
Received:    2/14/2009 12:36
From:        ATM PAYMENT OFFICE, kimisanders@cox.net
Reply-To:    albertthoms012@jmail.co.za
To:          undisclosed-recipients:;


  • See the spam

A repeat using the same tactics but different names as the previous one.
MSN drop box, while abusing COX.


  • See the lookups

    
Subject: A T M CREDITED IN YOUR FAVOUR
Date:        2/14/2009 05:52
Received:    2/14/2009 12:37
From:        ATM PAYMENT OFFICE, kimisanders@cox.net
Reply-To:    albertthoms012@jmail.co.za
To:          undisclosed-recipients:;


  • See the spam

Identical repeat via COX and the same blind server, and MSN drop.


  • See the lookups

MSN in a rare show of action. Doesn't really ay anything has been done.
They claim this to be a phishing scam, but the wording of the spam suggests
a different type of identity theft scam.


  • See the action

    
Subject: GRANT/AID AWARD - 2009
Date:        3/2/2009 15:25
Received:    3/2/2009 15:45
From:        United Nations Foundation, grant2009@unfoundation.org
Reply-To:    fidelity.aid.foundationuk1@gmail.com
To:          undisclosed-recipients:;


  • See the spam

One of two fake drawing awards, with the spammer using a Gmail drop and is from
Nigeria.


  • See the lookups

    
Subject: GRANT/AID AWARD - 2009
Date:        3/2/2009 15:25
Received:    3/2/2009 15:56
From:        United Nations Foundation, grant2009@unfoundation.org
Reply-To:    fidelity.aid.foundationuk1@gmail.com
To:          undisclosed-recipients:;


  • See the spam

2nd fake lottery scam from Nigeria with Gmail drop.


  • See the lookups

    
Subject: REF No: 56475600545188
Date:        3/4/2009 15:34
Received:    3/4/2009 16:06
From:        NEW  YEAR  PROMO, info@lottery.co.uk
Reply-To:    uknlb2009@gmail.com
To:          undisclosed-recipients:;


  • See the spam

Spams via Liquid Web, comes from Nigeria and uses  Gmail drop. African ISP uses a Yahoo
drop for their SWIP.


  • See the lookups

    
Subject: GRANT AWARD - 2009
Date:        3/4/2009 17:28
Received:    3/4/2009 17:43
From:        United Nations Foundation, grant2009@unfoundation.org
Reply-To:    fidelityukfoundationdpt@gmail.com
To:          undisclosed-recipients:;


  • See the spam

Nigerian spammer camping out on a raped server on Liquid Web. This spam has ties to
the above spam and these two spams here and here as well. No change in rape and orgination
locations from the previous spam.
Gmail contact drop and the Nigerian ISP still using a Yahoo drop.


  • See the lookups

    
Subject: Mrs. Ana Bell
Date:        3/12/2009 04:03
Received:    3/12/2009 10:00
From:        Siemens News Center, laquinta@yuma.twcbc.com
Reply-To:    siemens11@btinternet.com
To:          info@co.uk


  • See the spam

One of two short award scams. Using a UK-ISP drop, but relaying via a blind service
on Road Runner.


  • See the lookups

    
Subject: Mrs. Ana Bell
Date:        3/12/2009 04:03
Received:    3/12/2009 10:00
From:        Siemens News Center, laquinta@yuma.twcbc.com
Reply-To:    siemens11@btinternet.com
To:          info@co.uk


  • See the spam

A quick unwanted repeat. Same UK-ISP drop, and same Road Runner rape.


  • See the lookups

    
Subject: Email Notification!
Date:        3/17/2009 10:09
Received:    3/17/2009 10:21
From:        Karlsson Lars-Erik, lars-erik.karlsson@kommun.vaxjo.se
To:          undisclosed-recipients:;


  • See the spam

My webmaster account wins a contest it didn't enter into. A HREF="sweden.shtml">Swedish rape via a misconfigured
server, or via internal abuse. Either way, the spammer can't be located from this end of
the connection. Dutch drop box by Privacy Protect'ed domain registration. Drop box located on the GNAX network.


  • See the lookups

    
Subject: Email Notification!
Date:        3/17/2009 10:09
Received:    3/17/2009 10:42
From:        Karlsson Lars-Erik, lars-erik.karlsson@kommun.vaxjo.se
To:          undisclosed-recipients:;


  • See the spam

A repeat sent to my domain contact drop box. Dutch drop on a Privacy Protect'ed domain, 
A HREF="sweden.shtml">Swedish Rape. 
Drop box located on the GNAX network.


  • See the lookups

    
Subject: winner
Date:        3/17/2009 04:54
Received:    3/17/2009 10:58
From:        Microsoft Online Notice, yallayallabakery@bellnet.ca
Reply-To:    gprinnket2009@live.co.uk
To:          info@uk.com


  • See the spam

Fake lottery. BellNexia abuse from Brazil. UK Live.com drop. Brazilian ISP uses a 
Gmail drop.


  • See the lookups

    
Subject: Email Notification!
Date:        3/17/2009 12:09
Received:    3/17/2009 16:36
From:        Karlsson Lars-Erik, lars-erik.karlsson@kommun.vaxjo.se
To:          undisclosed-recipients:;


  • See the spam

3rd strike. 1st strike is here, 2nd strike is here. Drop is Dutch on a Privacy Protect'ed domain. Same A HREF="sweden.shtml">Swedish rape.
Drop box located on the GNAX network.


  • See the lookups

    
Subject: Email Notification!
Date:        3/17/2009 12:09
Received:    3/17/2009 16:52
From:        Karlsson Lars-Erik, lars-erik.karlsson@kommun.vaxjo.se
To:          undisclosed-recipients:;


  • See the spam

4th strike. 3rd strike is here. Filters created to stop this garbage.
Dutch Privacy Protect'ed domain for drop,
and same ongoing Swedish rape.
Drop box located on the GNAX network.


  • See the lookups

    
Subject: YOUR PARCEL FOR DELIVERY
Date:        3/18/2009 03:06
Received:    3/18/2009 10:55
From:        Info, info@finlogistics.co.id
Reply-To:    mrslindahill08@yahoo.com.hk
To:          info@atm.com


  • See the spam

Relaying via Indonesia off proxy rape. Hong Kong Yahoo drop for reply-to forgery. Seems more 419/phish oriented though, but too upfront about the supposed fees.
BCC'ed to my personal account and webmaster. 1 message ID so only one complaint despite
two reciepts.


  • See the lookups

    
Subject: winner
Date:        3/18/2009 07:55
Received:    3/18/2009 11:33
From:        Microsoft Online Notice, heathcarpentry@bellnet.ca
Reply-To:    gprinnket2009@live.co.uk
To:          info@uk.com


  • See the spam

Abuse out of BellNexia via Malasian rape. UK Live.com drop.
Sent to my personal and my domain drop.


  • See the lookups

    
Subject: EMAIL ID 2009nl.k
Date:        3/27/2009 03:30
Received:    3/27/2009 12:31
From:        DE CASINO OESINE INT S.L 09, utpayo09@hotmail.es
Reply-To:    infolacaixabka@aol.com
To:          undisclosed-recipients:;


  • See the spam

New Zealand abuse, Dutch Rape, Hong Kong Yahoo drop.


  • See the lookups

    
Subject: BENEFICIARY(REF NO.REF:ORG/74-A0802742009)
Date:        4/10/2009 22:45
Received:    4/10/2009 21:51
From:        ORANGE WELFARE SCHEME, info@uohyd.ernet.in
Reply-To:    jburley67@googlemail.com


  • See the spam

1 of 7. Indian rape, Nigerian origination, Google drop. Yawn.


  • See the lookups

    
Subject: BENEFICIARY(REF NO.REF:ORG/74-A0802742009)
Date:        4/10/2009 22:53
Received:    4/10/2009 21:57
From:        ORANGE WELFARE SCHEME, info@uohyd.ernet.in
Reply-To:    jburley67@googlemail.com


  • See the spam

2 of 7. Indian rape, Nigerian origination, Google drop. Yawn.
No changes, other than a second sending.


  • See the lookups

    
Subject: BENEFICIARY(REF NO.REF:ORG/74-A0802742009)
Date:        4/10/2009 22:51
Received:    4/10/2009 21:58
From:        ORANGE WELFARE SCHEME, info@uohyd.ernet.in
Reply-To:    jburley67@googlemail.com


  • See the spam

3 of 7. Indian rape, Nigerian origination, Google drop. Yawn.
No changes, other than a third sending.


  • See the lookups

    
Subject: BENEFICIARY(REF NO.REF:ORG/74-A0802742009)
Date:        4/10/2009 22:50
Received:    4/10/2009 21:58
From:        ORANGE WELFARE SCHEME, info@uohyd.ernet.in
Reply-To:    jburley67@googlemail.com


  • See the spam

4th spam of 7. Indian rape, Nigerian origination, Google drop. This is getting old fast.


  • See the lookups

    
Subject: BENEFICIARY(REF NO.REF:ORG/74-A0802742009)
Date:        4/10/2009 22:49
Received:    4/10/2009 21:58
From:        ORANGE WELFARE SCHEME, info@uohyd.ernet.in
Reply-To:    jburley67@googlemail.com


  • See the spam

5th spam of 7. Indian rape, Nigerian origination, Google drop. No variety at all.


  • See the lookups

    
Subject: BENEFICIARY(REF NO.REF:ORG/74-A0802742009)
Date:        4/10/2009 22:47
Received:    4/10/2009 21:58
From:        ORANGE WELFARE SCHEME, info@uohyd.ernet.in
Reply-To:    jburley67@googlemail.com


  • See the spam

6th spam of 7. Indian rape, Nigerian origination, Google drop. So boring.


  • See the lookups

    
Subject: BENEFICIARY(REF NO.REF:ORG/74-A0802742009)
Date:        4/10/2009 22:47
Received:    4/10/2009 21:59
From:        ORANGE WELFARE SCHEME, info@uohyd.ernet.in
Reply-To:    jburley67@googlemail.com


  • See the spam

7th spam in this run so far. Indian rape, Nigerian origination, Google drop.


  • See the lookups

    
Subject: BENEFICIARY(REF NO.REF:ORG/74-A0802742009)
Date:        4/10/2009 22:48
Received:    4/11/2009 13:08
From:        ORANGE WELFARE SCHEME, info@uohyd.ernet.in
Reply-To:    jburley67@googlemail.com


  • See the spam

The same spammer allowed to continue without any sort of intervention. 8 of 9 total now.
Indian rape, Nigerian origination, Google drop.

  • See the lookups

    
Subject: BENEFICIARY(REF NO.REF:ORG/74-A0802742009)
Date:        4/10/2009 22:52
Received:    4/11/2009 13:09
From:        ORANGE WELFARE SCHEME, info@uohyd.ernet.in
Reply-To:    jburley67@googlemail.com


  • See the spam

Now totalling 9, it's time to blacklist.
Indian rape, Nigerian origination, Google drop.


  • See the lookups

    
Subject: 
Date:        4/20/2009 15:14
Received:    4/21/2009 16:32
From:        Win!, rlates@cox.net
Reply-To:    eddie.collins2009@msn.com
To:          undisclosed-recipients:;


  • See the spam

Coming out of COX via another relay enabled due to a phished account.
Various Hotmail drops, including MSN and UK Hotmail.


  • See the lookups

    
Subject: REPLY FOR CLAIMS
Date:        4/23/2009 22:24
Received:    4/23/2009 22:19
From:        OXFAM GB-UK, mtveten@cox.net
Reply-To:    terrywilliams@strompost.info
To:          undisclosed-recipients:;


  • See the spam

More crap out of COX, so it seems it would be wise of me to make a volume to
concentrate their abuse into one focal point.


  • See the lookups

    
Subject: BRAVO VOUS VENEZ DE GAGNER!!
Date:        4/28/2009 00:14
Received:    4/28/2009 09:58
From:        groupeatlantique@fasdi.org
Reply-To:    cabinet.maitre.leroysantos@gmail.com
To:          undisclosed-recipients:;


  • See the spam

Lottery scammer in French using a GMail drop.


  • See the lookups

    
Subject: From Mrs. Melissa Foster
Date:        4/30/2009 02:42
Received:    4/30/2009 02:40
From:        fifa2010promo03 @dslextreme.com, fifa2010promo03@dslextreme.com
To:          undisclosed-recipients:;


  • See the spam

Another fake FIFA lottery scam, utizing protection via Google.


  • See the lookups

    
Subject: Grant Award
Date:        4/30/2009 04:16
Received:    4/30/2009 04:14
From:        OXFAM GB -UK, tcamryjbl21@cox.net
Reply-To:    terrywilliams1880@strompost.org
To:          undisclosed-recipients:;


  • See the spam

I won a fake grant, which had to be sent via proxy rape to cover tracks and then out
via Cox.


  • See the lookups

    
Subject: Contact
Date:        5/2/2009 16:09
Received:    5/3/2009 13:09
From:        Batch Number, scovilb@nbnet.nb.ca
Reply-To:    claims02@btinternet.com
To:          info@irish.com


  • See the spam

Nigerian raping BellNexia/Sympatico for fake lottery scamming.


  • See the lookups

    
Subject: Batch:074/05/ZY369
Date:        5/4/2009 03:58
Received:    5/4/2009 10:34
From:        Irish Online News, arbe@nbnet.nb.ca
Reply-To:    mr.derekwhite12@btinternet.com
To:          ..@nbnet.nb.ca


  • See the spam

Again, Nigerian abusing Sympatico for fake lottery.
Using a British drop for enabling their scam.


  • See the lookups

    
Subject: Congratulations
Date:        5/18/2009 06:37
Received:    5/18/2009 12:24
From:        Mary Justice, alpinemotorinn@nb.aibn.com
Reply-To:    agntdalton@ymail.com
To:          info@btl.co.uk


  • See the spam

Abusing Sympatico via Nigeria with a YMail reply-to drop.


  • See the lookups

    
Subject: Sir/Madam
Date:        5/20/2009 02:55
Received:    5/20/2009 13:29
From:        BRITISH PLC, dentalhygieneclinic@bellnet.ca
Reply-To:    telecom31@live.com
To:          info@co.uk


  • See the spam

Still abusing Sympatico/BellNexia but via an idiot customer on the Qwest network.
Live.com Drop.


  • See the lookups

    
Subject: Good Day
Date:        5/22/2009 04:17
Received:    5/22/2009 12:25
From:        stgabrielsparish@bellnet.ca
Reply-To:    siemens111@btinternet.com
To:          info@co.uk


  • See the spam

More BellNexia abuse via a Korean rape. UK ISP drop box for yet another British Lottery
scam.


  • See the lookups

    UPDATE: May 25, 2009
    

The Korean ISP shows ignorance by having their server down. This must be why they have
such a clean track record of no complaints: Can't gather statistics when you have no
numbers. Denial counted.


  • See the denial

    
Subject: congratulation!!
Date:        5/23/2009 06:49
Received:    5/23/2009 10:45
From:        ©Siemens Alert, airexpert@bellnet.ca
Reply-To:    agt.ss88@btinternet.com
To:          info@co.uk


  • See the spam

More BellNexia abuse, this time via Hungarian rape. British drop drop.


  • See the lookups

    
Subject: ATTENTION:
Date:        5/26/2009 02:52
Received:    5/26/2009 11:18
From:        siemens, notlpc@bellnet.ca
Reply-To:    agt.ss88@btinternet.com
To:          info@org.


  • See the spam

More Bellnexia/Sympatico abuse. British drop drop, Singapore rape.


  • See the lookups

The British ISP that holds the spammer's drop claims to have taken action.
I feel this is "lip service" and intended to get me to drop the issue.


  • See the action

    
Subject: ATTENTION:
Date:        5/26/2009 03:02
Received:    5/26/2009 12:59
From:        siemens, notlpc@bellnet.ca
Reply-To:    agt.ss88@btinternet.com
To:          info@org.


  • See the spam

Same as above. Bellnexia/Sympatico abuse, British drop, same Singapore rape.
Send to my webmaster account, which oddly enough, also does not want this.


  • See the lookups

    
Subject: ATM CARD
Date:        5/28/2009 08:16
Received:    5/28/2009 08:49
From:        London Scottish Bank ATM CARD, info@londonscottishbank.co.uk
Reply-To:    londonscottish-bk@w.cn
To:          undisclosed-recipients:;


  • See the spam

Abusing Vietnamese servers from Nigeria to use a Chinese drop, while claiming to
be from the UK


  • See the lookups

It comes as no surprise that one of the Nigerian contacts does not exist.


  • See the denial

    
Subject: GOOD-DAY
Date:        6/4/2009 12:27
Received:    6/4/2009 12:25
From:        UN, info@un.org
Reply-To:    execsuk2009@gmail.com
To:          undisclosed-recipients:;


  • See the spam

Globe hopping. Nigerian origination, abusing a Kazakhstan ISP, Yahoo Italy drop for
collecting the scam but a GMail drop as the default reply to.


  • See the lookups

    
Subject: Endeavor To Read.
Date:        6/8/2009 00:55
Received:    6/8/2009 08:30
From:        Mrs. Franca Gogh., softwarepro10@aim.com
Reply-To:    microsoftwebdept@aim.com
To:          undisclosed-recipients:;


  • See the spam

Dutch rape or origination, Earthlink enablement, and AIM drop box.


  • See the lookups

    
Subject: Electronic Mail Winning Notification
Date:        6/11/2009 14:20
Received:    6/11/2009 14:48
From:        Microsoft Award Team, info@microsoft.co.uk
Reply-To:    microresult147@gmail.com
To:          Chris Pickett, chris@studio42.com


  • See the spam

Hotmail and GMail drops with Australian rape. 1 of 2.


  • See the lookups

    UPDATE: June 12, 2009
    

Hotmail nukes the account.


  • See the kill

    
Subject: Electronic Mail Winning Notification
Date:        6/11/2009 14:22
Received:    6/11/2009 14:21
From:        Microsoft Award Team, info@microsoft.co.uk
Reply-To:    microresult147@gmail.com
To:          Chris Pickett, chris@studio42.com


  • See the spam

2 of 2 so far. Again, Hotmail and GMail drops with same Australian abuse.


  • See the lookups

    UPDATE: June 12, 2009
    

Hotmail nukes the account. Granted, same account as above, but Microsoft is responding.


  • See the kill

    
Subject: MasterCard UEFA Claims.
Date:        6/12/2009 17:14
Received:    6/13/2009 10:42
From:        MasterCard UEFA Champions League Lottery Inc., onlinegames@uefa.com
Reply-To:    uefaclaims@gmail.com


  • See the spam

Sending to my anti-spam account. GMail drop, UK rape, Nigerian origination.


  • See the lookups

One of the Nigerian ISP's SWIP contacts are disabled. Well, not like they were actually
going to do anything anyways.


  • See the denial


    
The Annoyance continues at the 2009 Lottery Scam Edition Volume 2 page.

    • If you are one of the dilweeds who sent me unsolicited email or are someone thinking about it, drop dead.

    Also, if you've got a complaint about my anti-spam feelings or want to scold me for being justifiably sick of spam, I have the following words of wisdom for you:

    BLOW IT OUT YOUR ASS!

    Anyone else, I'd like to hear from you. Click below and drop me a line.
    Anti-Spam Site administrator