SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD


Scam email #254641 - You've won a lottery!

Email info

The email was sent on 2018-09-25 13:25:01 and appeared to be from fabrizia.ada@yahoo.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to fabrizia.ada@yahoo.com which was the scammer's actual email address.
It was probably sent from 77.238.176.162 in Unknown, United Kingdom

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

Do fill out the claim form and forward it to
the below email address :
Email: cresterwinners03@webmail.co.za
Mr. Thomas Ngobene
TEL: +27-63-277-5021
Fax: +27- 86-601-6465




Attachment content - CRESTER WINNERS PRIZE AWARD LETTER $2.5 MILLION!!.pdf:

CRESTERWINNERS LOTTERY/EMAIL DRAW SOUTH AFRICA 49, Microsoft Pretoria(cardinalplace) Office 461 Victoria street.Johannesburg,South Africa RE / AWA R D N O T I FI C A T I O N ; FI N AL N O T I C E We wish to inform you of the lottery draws held 2018 to declare the winners of the CRESTERWINNERS/ INTERNATIONAL PROMOTIONS. Your company, attached to ticket number 356 - 00098 - 3211 - 222, with serial number 818 - 09 drew the lucky numbers 14 - 41 - 25 - 19 - 49 - 37, and consequently won the lottery. You have therefore been approved for a lump sum pay out of $2,500,000.00 in cash credited to file REF NO: ZAR/810346908/2017. This is from total prize money of $150,000,000.00 shared among the seventeen international winners in this category. All participants were selected through a computer ballot system drawn from 17,000 names from Australia, New Zealand, America, Europe ,Africa and Middle East and Asia as part our International Promotions Program, which is conducted monthly. Your fund is now available for claim. Due to the mix up of some numbers and names, we ask that you keep this award strictly from public notice until your claim has been processed and your money remitted to your account. This is part of our security protocol to avoid double claiming or unscrupulous acts by participants of this promotion. We hope with a part of you prize, you will participate in our end of year high stakes $100,000,000 Million International Lottery. To begin your claim, please contact your claim agent; Mr. Thomas Ngobeni TEL: +27 - 63 - 277 - 5021 Fax: +27 - 86 - 601 - 6465 EMAIL: cresterwinners03@webmail.co.za For due processing and remittance of your prize money to a designated account of your choice. Remember, all prize money must be claimed not later than Two Weeks after notice. After this date, all funds will be returned as unclaimed. NOTE: In order to avoid unnecessary delays and complications, please remember to quote your reference and batch numbers in every one of your correspondences with your agent. Furthermore, should there be any change of your address, do inform your claims agent as soon as possible. Congratulations again from all our staff and thank you for being part of our promotions program. WARNING!! Hold onto this Prize Award to your self (Secret) until your money is successfully handed over to you and to avoid disqualification that may arise from double claim. You may also receive similar e - mails from people portraying to be other Organizations or Cresterwinners Company. This is solely to collect your personal information from you and lay claim over your winning. In event that you receive any e - mail similar to this notification letter that was sent to you, kindly delete it from your mail box and give no further correspondence to such person or body.Cresterwinners shall not be held responsible for any loss of fund arising from the above mentioned Mr. A. Martins (SA) Information & Promotion Manager). Congratulations ! You are $2,500,000.00 richer ! CRESTER WINNERS CLAIM FORM You are advised to contact our fiduciary paying bank with the above details to avoid unnecessary delays and complications: FULL NAME: ------------------------------------------------------------------- SEX/AGE: ---------------------------------------------- YOUR ADDRESS: --------------------------------------------------------------------- COUNTRY OF ORIGIN : ---------------------- HOME PHONE/ - MOBILE PHONE & FAX NUMBER: ----------------------------------------------- OCCUPATION: ---------------------------- SCAN COPY OF EITHER YOUR PASSPORT OR ID.......................................... YOUR LUCKY WINNING NUMBER:. ----------------------------- AMOUNT: ---------------------------------------------- WINNING E - MAIL: ----------------------------------- REF NUMBER: ----------------------------------- BATCH: ----------------------------------

ClamAV for Windows - Antivirus report:

Known viruses: 6626722 Engine version: 0.99.4 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.44 MB Data read: 0.18 MB (ratio 2.43:1) Time: 23.009 sec (0 m 23 s) LibClamAV Warning: ************************************************** LibClamAV Warning: *** The virus database is older than 7 days! *** LibClamAV Warning: *** Please update it as soon as possible. *** LibClamAV Warning: **************************************************

SpamAssassin Report (spam score: 6.5)


 pts rule                      description                                       
---- ----------------------    --------------------------------------------------
-0.0 SPF_PASS                  SPF: sender matches SPF record                    
 0.0 DKIM_ADSP_CUSTOM_MED      No valid author signature, adsp_override is       
                               CUSTOM_MED                                        
 0.0 FREEMAIL_FROM             Sender email is commonly abused enduser mail      
                               provider (fabrizia.ada[at]yahoo.com)              
 0.1 DKIM_SIGNED               Message has a DKIM or DK signature, not           
                               necessarily valid                                 
 0.0 TVD_RCVD_IP4              Message was received from an IPv4 address         
 0.0 TVD_RCVD_IP               Message was received from an IP address           
 1.2 MISSING_HEADERS           Missing To: header                                
 1.0 FORGED_YAHOO_RCVD         'From' yahoo.com does not match 'Received' headers
-0.0 RCVD_IN_MSPIKE_H2         RBL: Average reputation (+2) [77.238.176.162      
                               listed in wl.mailspike.net]                       
-0.0 RCVD_IN_DNSWL_NONE        RBL: Sender listed at http://www.dnswl.org/, no   
                               trust [77.238.176.162 listed in list.dnswl.org]   
 0.0 URIBL_BLOCKED             ADMINISTRATOR NOTICE: The query to URIBL was      
                               blocked. See                                      
                               http://wiki.apache.org/spamassassin/DnsBlocklists…
                               #dnsbl-block for more information. [URIs:         
                               webmail.co.za]                                    
 1.0 FREEMAIL_REPLY            From and body contain different freemails         
 0.0 LOTS_OF_MONEY             Huge... sums of money                             
 0.0 T_DKIM_INVALID            DKIM-Signature header exists but is not valid     
 1.0 HK_LOTTO                  No description available.                         
 1.2 NML_ADSP_CUSTOM_MED       ADSP custom_med hit, and not from a mailing list  
 0.0 T_FILL_THIS_FORM_LOAN     Answer loan question(s)                           
 0.0 MONEY_FORM                Lots of money if you fill out a form              
 0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money          
 1.0 MONEY_FRAUD_5             Lots of money and many fraud phrases              



Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer