"Spainsh" lottery winning notification "E-mail"

From: DR LUIZ FERNANDEZ euspainlotterys@aim.com
Subject: CONGRATULATION!!! WINNING NOTIFICATION.
Date: June 16, 2007 10:35:30 AM GMT+01:00
Reply-To: infofernandezsec@aim.com
Return-Path:
Received: ... from aim1088.com ([84.76.178.9]) by isp (Xserve/smtpin32/MantshX 4.0) with SMTP id l5G9Zskm009479; Sat, 16 Jun 2007 02:35:56 -0700 (PDT)
Message-Id: <200706160935.l5G9Zskm009479@isp>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary=a4ad678d-d1bb-4568-ab24-88912ff8c6d9
Original-Recipient: [email]

EURO MILLION SPAINSH LOTTERY INTERNATIONAL.
FROM:VICE PRESIDENT
INTERNATIONAL PROMOTION/PRIZE AWARD DEPT.
REFERENCE:67/80/ESP
BATCH:ESP-541-623-782
DATE:12TH OF JUNE 2007
RE: WINNING NOTIFICATION / FINAL NOTICE
Sir/Madam
We are pleased to inform you of the result of the Euro Million Spainsh Lottery Winners International E-mail programs held on the 8th of JUNE 2007. Your E-mail address attached to ticket number 653-908-321-675 with serial main number 345-790-241-671 drew lucky star numbers 34-32-90-43-32 which consequently won in the 2nd category, you have therefore been approved for a lump sum pay out of 1.000.000.00 Euro.(One Million Euro)
CONGRATULATIONS!!!
Due to mix up of some numbers and names, we ask that you keep your winning information confidential until your claims has been processed and your money remitted to you. This is part of our security protocol to avoid double claiming and unwarranted abuse of this program by some participants. All participants were selected through a computer ballot system drawn from over 100,000 company and 50,000,000 individual email addresses and names from all over the world.
This lottery was promoted and sponsored by his royal highness King Rey Juan Carlos ,This promotional program takes place every three year. We hope with part of your winning you will take part in our end of year 50 million Euro International lottery.
To file for your claim,please contact our fiducial agent:DR.LUIS FERNANDEZ
(FERNANDEZ SECURITY COMPANY SPAIN)
TEL:+34-648-823-675
Email: infofernandezsec@aim.com
Remember all winning must be claimed not later than two weeks,After this date all unclaimed funds will be included in the next stake.
Please note in order to avoid unnecessary delays and complications please remember to quote your reference number and batch numbers in all correspondence. Furthermore, should there be any change of address do inform our agent as soon as possible.
Congratulations once more from our members of staff and thank you for being part of our promotional program.
Note:Anybody under the age of 18 is automatically disqualified.
Sincerely yours,
MRS,COMFORT JOSE
Lottery Coordinator

Great spelling on this one.
Ad if I would end up winning one million, wouldn't it be MY responsibility to find it out?
Do people really believe in that they have been added by someone to some random lottery where they won million(s)?
And why would any such instance rely on "E-mail" to inform the winners, giving even the winning notification that way? Sure they must have also address and phone details in record then.
Plus I have not seen even one where the URL or the email sending domain would have anything to do with anything else but hotmail, yahoo, lycos, walla, or any other free email provider.
This "Spainsh" winning notification is no different.

I guess I should write a book about how to write GOOD scams that anyone would actually even remotely believe, get that on Amazon, and then send a reply to these unoriginal ones telling how much they could learn and how they could tenfold their income with some training in how to feed people bs ...

Aisha Qadir - millionaire laundering money to charity

From: mrsaishaqadir@aim.com
Subject: Please reply if you are interested
Date: June 14, 2007 1:44:13 PM GMT+01:00
To: [email]
Return-Path:
Received: .. from pc-a66cdb5b8f57 (hst-144-21.orlandonet.net [83.143.144.21]) by isp (Xserve/smtpin26/MantshX 4.0) with SMTP id l5ECU0vg021047for ; Thu, 14 Jun 2007 05:30:02 -0700 (PDT)
Received: from [83.143.144.21] by web335.mail.aim.com via HTTP; Thu, 14 Jun 2007 12:44:13 +0000 (GMT)
Message-Id: <0KAVSR0K.LO6MY9L@aim.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
X-Priority: 3
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-Scanned: yes
User-Agent: Mozilla 2.0 (Macintosh; I; 68K)
Original-Recipient: [my email]

Greetings,

My name is Mrs. Aisha Qadir, widow to late Mr. Ahmed Qadir, former owner of
Petroleum and Gas Company, here in Kuwait, I am 68years old, Suffering from
long time cancer of the breast, From all indications my condition is really Deteriorating, and it's
quite obvious that I won't live more than 3 months according to my doctors, this is because the cancer stage has
gotten to a very bad stage, I don't want your pity, but i need your trust.

My late husband died early last year from heart attack, and during theperiod of
our marriage we Couldn't produce any child, my late husband was very wealthy, and after his death, I
inherited all his business and wealth, The doctor has advised me that I will not live for more than 3
months, so I have now decided to spread all my wealth, to contribute mainly to the development of charity in
Africa, America, Asia and Europe, am sorry if you are embarrassed by my mail, i found your e-mail
address in the web directory, and i have decided to contact you, but if for any reason you find this mail
offensive, you can ignore it and please accept my apology.

Before my late husband died he was a major oil tycoon, in Kuwait anddeposited
the sum of 25million dollars (Twenty Five million dollars) in a company in Europe some years ago,
thats all i have left now, I need you to collect this funds and distribute it yourself to charity,
so that when i die my soul can rest in peace, the funds will be entirely in hands and management, i hope
God gives you the wisdom to touch very many lives, that is my main concern.
20% of this money will be for your time and effort, while 80% goes to charity.


God bless you.

Mrs. Aisha Qadir.

A millionaire in a poor country, with millions of dollars of illegal money ... the spouse is dead for a while now, and this dying millionaire found your contact details in a web directory and now wants your help to launder this money to charity and will pay you so much in return ...
How many times have I heard this story? Maybe 3 variations a day for the past 3 years ...

Even all these rich dying millionaires that are located in Muslim countries are always using God bless somewhere in the email. How about Allah bless, for once?

IP address is located in Sofia, Bulgaria.

Geneyratevideo.com - loam spam

From: conformal@bkkmail.com
Subject: Your refinan/ce application
Date: July 14, 2007 5:01:07 PM GMT+01:00
To: [another user's email]
Return-Path:
Received: ... 62.42.101.235.dyn.user.ono.com (62.42.101.235.dyn.user.ono.com [62.42.101.235]) by isp (Xserve/smtpin37/MantshX 4.0) with SMTP id l5DG0w9Q027096; Wed, 13 Jun 2007 09:01:20 -0700 (PDT)
Message-Id: <70355383.20280090@cherokee.com>
Mime-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Original-Recipient: [my email]

Hello.
Important information regarding your l()an: ID MLDU2376
Your refinan/ce application has been accepted. We are ready to you a l()an.
Please finalize everything by visitig our Secure Web-form.
http://geneyratevideo.com

Of which

Domain Name: GENEYRATEVIDEO.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com

Visit AboutUs.org for more information about geneyratevideo.com
a href="http://www.aboutus.org/geneyratevideo.com"AboutUs: geneyratevideo.com/a

Registration Service Provided By: NameCheap.com
Contact: support@NameCheap.com
Domain name: geneyratevideo.com

Registrant/Administrative/Technical Contact:

metsales inc.
gordon metcalfe (gordomet@coldmail.ca)
+1.4033979426
Fax: +1.5555555555
7622 Elbow drive
calgary, AB T2V 1K2
CA

More Karin Patterson originated Viagra spam

From: busy4miles@urscorp.com
Subject: You pay We ship, NoPrescription, CialisPhentemineXanaViagra\/aliun from $2/pill MeridiaCelebrex RivotrilLevitrPropecia favour
Date: June 12, 2007 2:39:05 PM GMT+01:00
To: [someotheremail]

Certified OnlinePharmacy
Genuine Quality Ingredient & All Countries Shipping
ViagraAs 10pills $57
CialisAs 20pills $1xx
PhentermineAs 30pills $1xx
ValiumAs 30pills $95
XanaxAs 30pills $99
LevitraAs 10pills $73
plus 30 meds more RivotrilAs 30pills $70
AtivanAs 30pills $90
AmbienAs 30pills $1xx
MeridiaAs 30pills $1xx
SomaAs 30pills $1xx
CelebrexAs 30pills $1xx
plus 30 meds more
Best Price - Click Here To View More [link to http://kehuxw.alsoathankyou.com]

Of which we can get

Domain Name: ALSOATHANKYOU.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN

Registrant:
Name: Karin Patterson
Organization: Karin Patterson
Address: 408 McLaughlin Dr.
City: Santa Cruz
Country: US
Postal Code: 95064-1017
Email: karinpattersonmint@yahoo.com

Which makes it that she/he/them have been spamming habitually my inbox, and it annoys me enough to get an own label for this Karin Patterson.

Schoolisalways.com - viagra spams

From: am9discuss@cnh.com
Subject: 1 Million Satisfied Customers Worldwide, 100% Safe & Effective PenisEnlargement Pill raised
Date: June 11, 2007 6:10:25 AM GMT+01:00
To: [some other email]
Return-Path:
[..] Received: from 78.237.237.221.broad.ga.sc.dynamic.163data.com.cn (78.237.237.221.broad.ga.sc.dynamic.163data.com.cn [221.237.237.78] (may be forged))by isp (Xserve/smtpin50/MantshX 4.0) with SMTP id l5B4Achg028878; Sun, 10 Jun 2007 21:10:41 -0700 (PDT)
Message-Id: <76901.26134.30544@cnh.com>
Mime-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-Accept-Language: en-us, en
User-Agent: Mozilla Thunderbird 1.5 (Windows/20060111)
Original-Recipient: [my email]

idea address tomorrow.
Safe & Effective PenisEnlargement
Over 1,500,000 bottles sold worldwide
WeOffer a FULL MONEY BACK GUARANTEE if you are not completely satisfied with the results of Man-XL, you have nothing to lose, just a lot to gain
A breakthrough in herbal Science has created a pill that has been designed specifically for PenisEnlargement. The tests that took place over a 6 month period showed that out of the 5,000 Males from around the world who participated, the average gain after 5 months of taking Man-XL pills was 3.02 Inches! Amazing, PERMANENT RESULTS that will last.
Did you know... Man-XL was featured in leading mens magazines such as FHM, MAXIM, plus many others, and rated No.1 choice forPenisEnlargement Also seen on TV
-:- Gain Up to 3+ Inches In Length
-:- Increase YourPenis Width (Girth) By upto 20%
-:- Help Stop PrematureEjaculation!
-:- Produce Stronger, Rock HardErections
-:- 100% Safe To Take, With NO Side Effects
-:- Fast Shipping WorldWide
-:- Doctor Approved And Recommended
-:- No Pumps, No Surgery, No Exercises
-:- Very discrete shipping and billing
-:- 100% Money Back Guarantee
-:- Up to 3 FREE Bottles Of Man-XL
-:- Highly secure 128bit order processing
See by yourself BEFORE & AFTER result by a customer
Buy This herbal EnlargementPills here [link to schoolisalways.com]

progress goes satisfaction,

Of which whois

Domain Name: SCHOOLISALWAYS.COM
Registrar: TODAYNIC.COM, INC.
Whois Server: whois.todaynic.com
Referral URL: http://www.NOW.CN

Registrant/Administrative Contact/Technical Contact:
Name: Karin Patterson
Organization: Karin Patterson
Address: 408 McLaughlin Dr.
City: Santa Cruz
Country: US
Postal Code: 95064-1017
Email: karinpattersonmint@yahoo.com

Edward Moore, $ 35 million ...

And today's winner loser is "Edward Moore".
He forgot to write on the spam that he is a banker from Some Fancy Bank in UK.
And how about for once, one of these banker scams could even fake to be coming from a bank's email address ad ISP? I have not yet seen a single one.

Absolut pearl part of it

You may wonder how i got your contact to be able to have such trust on you with the huge amount in question, never mind on commencement of full commuinication, we shall know each othervery well,hoping that this is a life time chance that can make both you and me to live well for the rest of our life. shall be looking foward to hearing from you

Don't you find it odd how he send the offer to transfer $ 35 million to undisclosed recipients?

Dear mr, since you claim that you know me and these $ 35 million are legal, please call me on the phone. I would not trust internet for such delicate matters. Since you say that you know me, you surely must have my phone number in your address book.

From: edwardmoore141@aol.co.uk
Subject: Permission To Transfer $35 Million USD
Date: June 11, 2007 2:39:42 AM GMT+01:00
To: undisclosed-recipients: ;
Return-Path:
[..] Received: from imo-m19.mx.aol.com (imo-m19.mail.aol.com [172.20.107.65]) by imr-d01.mx.aol.com (v107.10) with ESMTP id RELAYIN3-4466cb2104c; Sun, 10 Jun 2007 22:23:12 -0400
Received: from edwardmoore141@aol.co.ukby imo-m19.mx.aol.com (mail_out_v38_r9.2.) id j.d1a.c063172 (57881); Sun, 10 Jun 2007 21:39:47 -0400 (EDT)
Received: from mblk-d45 (mblk-d45.mblk.aol.com [205.188.212.229]) by air-ia04.mail.aol.com (v115.17) with ESMTP id MAILINIA43-e219466ca7df187; Sun, 10 Jun 2007 21:39:45 -0400
Received: from 41.205.166.74 by mblk-d45.sysops.aol.com (205.188.212.229) with HTTP (WebMailUI); Sun, 10 Jun 2007 21:39:42 -0400
Message-Id: <8C979E084BFC6CC-9AC-14E1E@mblk-d45.sysops.aol.com>
Mime-Version: 1.0
X-Mailer: AOL Email 27618
Content-Type: multipart/alternative; boundary=--------MB_8C979E084BFC6CC_9AC_27703_mblk-d45.sysops.aol.com
X-Mb-Message-Source: WebUI
X-Mb-Message-Type: User
X-Aol-Ip: 172.20.107.65
X-Spam-Flag: YES
Original-Recipient: [my email]


Permission To Transfer $35 Million USD

If with your permission, I can arrange for the transfer of $35 Million Usd into your personal account or company account. This transaction is legitimate and legal and hence you have no need to worry.

On acceptance of this offer please let me know so that i can furnish you with more details on this issue. An early response to my mail will be appreciated to enable us open up commuinication towards the realization of this goal.

You may wonder how i got your contact to be able to have such trust on you with the huge amount in question, never mind on commencement of full commuinication, we shall know each othervery well,hoping that this is a life time chance that can make both you and me to live well for the rest of our life. shall be looking foward to hearing from you.

God bless you and your family.

Regards
Edward Moore
edwardmoore911@yahoo.co.uk
Get a FREE AOL Email account with 2GB of storage. Plus, share and store photos and experience exclusively recorded live music Sessions from your favourite artists. Click Here for more information.

More digging on Leo Kuvayev aka Alex Rodrigez

And more digging on Leo Kuvayev aka Alex Rodrigez:

BBC : Massachusetts tackles spam gang - May 12, 2005
Not unknown in the wild wild web.
Leo Kuvayev @ Rokso
Kuvayev/Rodrigez at Spamtrackers.eu
Leo Kuvayev / Alex Rodrigez aka Badcow at Spamhaus.org
Spamhaus Statistics : The Top 10 of the whole planet
Lawsuit against Russian Spam Gang @ Spam Kings, O'Reilly (Spam Kings is a brilliant book by the way!)
Attorney General Tom Reilly Shuts down Spam King Leo Kuvayev @ Lindqvist.com
MA Atterney General on Leo Kuvayev (excl. Microsoft server errors)
Mr Kuvayev's home page in Web Archive, leonik.com
Kuvayev @ Information Week
Wed, 28 Feb 2007 Sick of spam? Get mad and get even
Leo Kuvayev is listed on the top 10 of the internet influent people

In the '90s Leo was a promising computer science grad student at the University of Massachusetts, where his focus was on artificial intelligence and machine learning. (His articles include "Intelligent Methods for File System Optimization" and "Learning to Play Hearts.") [articles]

Leo apparently became a US citizen in 2000 and was running some kind of online casino and Internet payment business out of Montreal. Last year, he launched a spam affiliate network called BadCow with a partner, Vladislav Khokholkov, who is also named in the lawsuit along with a handful of other people. The AP apparently reached Vlad by phone in Russia today, and he coyly said "I don't send e-mails."

(Spam Kings article above)



Bits and pieces
Mr Kuvayev / Rodrigez' ICQ = 101859176 (from his site, via internet archive, also listed on icq.com)
Mr Kuvayev's provided info (again all from his expired home page) about his 3 sisters :

Nadira's brief info:
Born in November, 1980 in Moscow, Russia
Height: 5'6''
Weight: on a slim side
Location: Moscow, Russia
Phone: +7 095 423-6337

Lana's brief info:
Born in November, 1980 in Moscow, Russia
Height: 5'6''
Weight: just right
Location: Boston, MA
Email: laname@hotmail.com

Regina's brief info:
Email: regi428@ilovechocolate.com

This guy is sued only in MA for close to $ 40 million. He seems to log in to his ICQ account regularly.
Why is it so hard to catch him?
ICQ logs for sure every time each user logs in from which IP address. I can only guess that ICQ respects the privacy of every user it has then. So it ICQ where all the Isreali. Palestinians and Al Quaida communicate as well as it gives them privacy?

Another paypal scam - billingline.com

From: do-not-reply@paypalsecurity.com
Subject: Please Restore Your Account Access
Date: June 9, 2007 1:07:33 PM GMT+01:00
Reply-To: do-not-reply@paypalsecurity.com
Return-Path:
[...] Received: from User ([38.114.33.242]) by smtpgw.armorholdings.com with Microsoft SMTPSVC(6.0.3790.3959); Sat, 09 Jun 2007 08:03:18 -0400
Message-Id:
Mime-Version: 1.0
X-Mimeole: Produced By Microsoft MimeOLE V6.00.3790.3959
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
Content-Type: text/html; charset=Windows-1251
Content-Transfer-Encoding: quoted-printable
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 1
X-Msmail-Priority: High
Thread-Index: AceqjirC+y1pkfyfQIaztd797ObJDg==
X-Brightmail-Tracker: AAAAAA==
X-Brightmail-Scanned: yes
Original-Recipient: [my email]
X-Originalarrivaltime: 09 Jun 2007 12:03:18.0157 (UTC) FILETIME=[2AAF7BD0:01C7AA8E]

PayPal is constantly working to ensure security by regularly screening the accounts in our system. We recently reviewed your account, and we need more information to help us provide you with secure service. Until we can collect this information, your access to sensitive account features will be limited. We would like to restore your access as soon as possible, and we apologize for the inconvenience.
Why is my account access limited?

Your account access has been limited for the following reason(s):

June 09, 2007: We have reason to believe that your account was accessed by a third party. Because protecting the security of your account is our primary concern, we have limited access to sensitive PayPal account features. We understand that this may be an inconvenience but please understand that this temporary limitation is for your protection.

(Your case ID for this reason is PP-xxx-xxx-xxx )

How can I restore my account access?

Please visit the Resolution Center and complete the steps to remove limitations.

To complete the verification process you must log in and go to resolution center and unlimit your account.

Of the link (www.domainline.com) we get

Domain Name: BILLINGLINE.COM
Registrar: DSTR ACQUISITION VII, LLC
Whois Server: whois.dotregistrar.com
Referral URL: http://www.dotregistrar.com
Name Server: NS1.EXTRAHOST.ES
Name Server: NS2.EXTRAHOST.ES
Status: clientTransferProhibited
Updated Date: 14-dec-2006
Creation Date: 20-jan-2005
Expiration Date: 20-jan-2008

Registrant, Administrative Contact, Technical Contact, Zone Contact:
Chazelle Christophe (BILLINGLINE-COM-DOM)
ExtraNext On Line consulting S.L.
Paseo Joan de Borbo, 16
Entresuelo, 2a
Barcelona, ES 08003
ES
+34 902955627
+34 935504050
whois@extranext.es