by Berger
Thu Aug 05, 2010 2:46 pm
Fresh scam email that came from "THE GoogleUK GIVEAWAY TEAM":
Its email header shows some interesting info regarding where it was actually sent from:
From: GoogleUk @2010Promo [[email protected]]
Subject: Success Alert!!
THE GoogleUK GIVEAWAY TEAM.
Belgrave House,76 Buckingham Palace Road London SW1W 9TQ.
Ph: +447024053930, +447024028674, +44702409 2805
Fax: +44 8704951196.
Dear Sir/Madam,
Your E-mail just WON £850,000 GBP (Eight hundred and fifty thousand Great British Pounds) in our on-going Google Promo!
Your details are: Ticket #:00869575733664, E-mail ID Code : 65332 ,Payment:Category A.
Participants for this promo were randomly selected from worldwide range of web searchers who uses Google search engine Googler and other Google ancillary services.
For payment,write to Mr. Grahams Benfield immediately on these two Emails: [email protected] & [email protected].
Congratulations!!
Gustavo Lopez Velazquez (Promo Announcer)
**Proudly supported by Microsoft Corporation*** ---------------------------------------------------------------------------------------------------------------------------
Certificacion ISO 9001/2000: Sistema de Datos Bio-Pesqueros (Iquique, Valparaiso y Talcahuano)
Acreditacion INN - ISO 17025: Determinacion de la edad de jurel y merluza comun
Its email header shows some interesting info regarding where it was actually sent from:
Received: by 10.224.65.197 with SMTP id k5mr2606575qai.52.1280836895584;
Tue, 03 Aug 2010 05:01:35 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mx00.ifop.cl (mx00.ifop.cl [190.151.20.102]) by
mx.google.com with ESMTP id y29si6758529vcl.111.2010.08.03.05.01.22;
Tue, 03 Aug 2010 05:01:35 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 190.151.20.102 as permitted sender) client-ip=190.151.20.102;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 190.151.20.102 as permitted sender) [email protected]
Received: from yubarta.ifop.cl ([192.168.169.7]) by mx00.ifop.cl with ESMTP
id o73C1LPK002806;Tue, 3 Aug 2010 08:01:21 -0400
Received: from localhost (localhost.localdomain [127.0.0.1]) by
yubarta.ifop.cl (Postfix) with ESMTP id 4D7E43C276C; Tue, 3 Aug 2010
08:01:19 -0400 (CLT)
Received: from yubarta.ifop.cl ([127.0.0.1]) by localhost (yubarta.ifop.cl
[127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cg9Al2bn4KXd; Tue, 3
Aug 2010 08:01:18 -0400 (CLT)
Received: from yubarta.ifop.cl (yubarta.ifop.cl [192.168.169.7]) by
yubarta.ifop.cl (Postfix) with ESMTP id 091863C275F; Tue, 3 Aug 2010
07:58:41 -0400 (CLT)
Date: Tue, 3 Aug 2010 07:58:40 -0400
From: "GoogleUk @2010Promo" <[email protected]>
Reply-To: [email protected]
Message-ID: <1694541092.151401280836720939.JavaMail.root@yubarta>
Subject: Success Alert!!
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_6771_594118285.1280836720924"
To: undisclosed-recipients:;
X-Virus-Status: Clean
X-IFOP-Autenticity: IFOP's Genuine Email
X-Signature: IFOP
X-Scanned-By: IFOP
Organization: IFOP
X-MS-Exchange-Organization-SCL: 4
X-MS-Exchange-Organization-PCL: 2
X-MS-Exchange-Organization-Antispam-Report:
DV:3.3.5705.600;OrigIP:172.16.20.2