mrsnorrapark@gmail.com

[Wayne]

Congratulations: Your E-MAIL ACCOUNT has won the sum of $5,000,000.00USD
People

FACEBOOK LOTTERY <mrsnorrapark@gmail.com>
Today at 16:30


Message body
NOTE: If you received this message in your SPAM/BULK folder, that is
because of the restrictions implemented by your Internet Service
Provider, we (Facebook Lottery Team) urge you to treat it genuinely.
*******************************************
Congratulations:

Your E-MAIL ACCOUNT has won the sum of $5,000,000.00USD (Five Million
United States Dollars) in the on-going Facebook online award promo.
Your Ticket number is 00545 188 564756. All participant were selected
through a computer random integrated system drawn in 27 million E-mail
addresses via the Internet and lucky winners do not have to purchase
any ticket to participate in this lottery program. Forward your full
details such as your name: telephone number: age: sex and address for
processing and payment of your winning.

Kindly forward below details to:Contact Person: Mr. David M. Wehner
======= Chief Financial Officer
1* E-mail: facebookoffice@fbklottery.com
2* E-mail: facebookoffice@fbklottery.com
Tel: +

Your e-mail won our Jackpot, congratulation once more.

Yours in service,

Mr.Marc Andreessen
Facebook Lottery Facilitator.

[Big Al]

The Online Consumer Promotions 2019.
European Region Office:
Facebook International Lottery
10 Brock St, London NW1 3FG
United Kingdom,
England.
Click : http:/ /www.facebook.com.for more details.


Attn:

This is a CONFIRMATION mail from the Chief Financial Officer Mr.David Wehner concerning your winning worth Five Million United State Dollars with Facebook Lottery Promotion. I want to inform you that your cash prize has been CONFIRMED, and you will receive a certificate of winning from Facebook International on your winning as soon as possible because your payment has been APPROVED.

Based on this confirmation mail Dated 19th April 2019, We would like you to choose your preferred mode of receiving your approved fund below:

(A) Bank Transfer
(B) Certified Bank Draft/Cheque
(C) ATM Card

Our aim of this Lottery is to show appreciations after our 15th Year Anniversary. You are required to read very carefully before you can make a choice and we advise you to be specific with your choice.

NOTE: Keep your winning private from public to avoid double claim and unwarranted taking of advantage because it will lead to disqualifications.

Once you answer this above question we shall commence your payment immediately.

Congratulations once more,


Mr. David M. Wehner
Chief Financial Officer (CFO), Facebook, Inc.
1601 Willow Road
Menlo Park, California 94025
Enquiries Phone: +1-650-543-4800
+44 745 203 1318
Copyright © 2019 Facebook! All rights reserved.

Header:

Delivered-To:
Received: by 2002:a4f:98d4:0:0:0:0:0 with SMTP id z81csp2359718ivg;
Fri, 19 Apr 2019 15:39:32 -0700 (PDT)
X-Google-Smtp-Source: APXvYqzYaYpuwMIw8iWXEjeANF/E1bfv9xl3tWTPZ1J/Wefjn/JOzzebIj+W1HItywB1YaPXatdy
X-Received: by 2002:a17:902:e407:: with SMTP id ci7mr6276071plb.219.1555713572415;
Fri, 19 Apr 2019 15:39:32 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1555713572; cv=none;
d=google.com; s=arc-20160816;
b=LfKfmCMRq1QHvGgi6Rab995j8HbJmZj7hGRLLnG5f5LZMNeo2JU/iycdD0XmkoS6R2
QuRwiUQKDTY/MeGvR681yRIY/Xc8OvQYGM+Pt2YfRWfVvMnhGWytRf8kddCuiuITJO8K
65lQ1IiVTlM7cEtfJ83J7gM8Kuvcppt6peAarxGL4EJTMj94aBKuQAU80HclrfnS0NFu
nNiik+CcU8l8HNURerY3PlE5fx9ZOqNObxhAgqycZxo0k5tmjre3JICHRk0dBKF4kYsx
U1npScsXrf5rAH9CsQH05T/kYANN8Lc+ihatizvEMIT12VShXE+CkfBv0J0im3lWgU/2
dN1Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=importance:mime-version:subject:references:in-reply-to:message-id
:to:reply-to:from:date;
bh=wIN9tj+YkF7j/7Rc3Nt3Ig/RQkUoOZoipxSUbsrcPU8=;
b=l399nPzhWBnkwvIpYnue54IEayKIUzmBZ9rTT4xS4o+PSYHXxaGvzOvLtrlpGv6ThD
qGD0v4FznZfqHj0ZM+5fhtZ9qV2Y4E8aFEXF7kCefFODZP5ZUaFqgI9SBJpW+stl6Ym2
zaXDHBZ24W/UHDditHlJcDHdrkqGoQsQhJmilehbD9Ffexh/HJCAzFsOXmjiEdl1auG8
udLKXjwlp7GDRmriJ0gX8uxOh3+u4IuNGRhEO43t4w27HKrk4SrN8BbCRCxR4rPD9XAx
fqFHdM050KveKz/lxB3RBA0f/N/YDEDyHpWs4ZNyACiqwz3JQUuvql/2Xr+sCHahhkqk
dHrg==
ARC-Authentication-Results: i=1; mx.google.com;
spf=neutral (google.com: 198.54.122.46 is neither permitted nor denied by best guess record for domain of facebookoffice@fbklottery.com) smtp.mailfrom=facebookoffice@fbklottery.com
Return-Path: <facebookoffice@fbklottery.com>
Received: from NEW-02-2.privateemail.com (new-02-2.privateemail.com. [198.54.122.46])
by mx.google.com with ESMTPS id c11si6080995pga.462.2019.04.19.15.39.31
for < >
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 19 Apr 2019 15:39:32 -0700 (PDT)
Received-SPF: neutral (google.com: 198.54.122.46 is neither permitted nor denied by best guess record for domain of facebookoffice@fbklottery.com) client-ip=198.54.122.46;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 198.54.122.46 is neither permitted nor denied by best guess record for domain of facebookoffice@fbklottery.com) smtp.mailfrom=facebookoffice@fbklottery.com
Received: from MTA-09.privateemail.com (unknown [10.20.147.19]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by NEW-02.privateemail.com (Postfix) with ESMTPS id 4BE19605F9 for < >; Fri, 19 Apr 2019 22:39:31 +0000 (UTC)
Received: from MTA-09.privateemail.com (localhost [127.0.0.1]) by MTA-09.privateemail.com (Postfix) with ESMTP id 367716004F for < >; Fri, 19 Apr 2019 18:39:31 -0400 (EDT)
Received: from APP-04 (unknown [10.20.147.154]) by MTA-09.privateemail.com (Postfix) with ESMTPA id 1FCF260055 for < >; Fri, 19 Apr 2019
Date: Fri, 19 Apr 2019
From: "Mr. David Wehner (Facebook CFO)®" <facebookoffice@fbklottery.com>
Reply-To: "Mr. David Wehner (Facebook CFO)®" <facebookoffice@fbklottery.com>
To: >
Message-ID: <1146715919.100593.1555713571100@privateemail.com>
In-Reply-To: <CADoD4OpqMfb-P2EqWz1S0y-ug5qe5iW3PkNaddB8ta8HayzzZQ@mail.gmail.com>
References: <CADoD4OpqMfb-P2EqWz1S0y-ug5qe5iW3PkNaddB8ta8HayzzZQ@mail.gmail.com>
Subject: Congratulation !! Your Facebook winning has been Confirmed
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_100592_1394615607.1555713571093"
X-Priority: 3
Importance: Medium
X-Mailer: Open-Xchange Mailer v7.8.4-Rev55
X-Originating-Client: open-xchange-appsuite
X-Virus-Scanned: ClamAV using ClamSMTP

------=_Part_100592_1394615607.1555713571093
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Link in E-mail goes to:
https:/ /internationalottery.com/index.html


Phones:
+16505434800
Number billable as geographic number
Country or destination United States
City or exchange location Palo Alto, CA
Original network provider* U.s. Telepacific Corp. - Ca

+447452031318
Number billable as mobile number
Country or destination Isle of Man
City or exchange location
Original network provider* Manx Telecom Trading Limited

[firefly]

Facebook is impersonated in this case by different domain names, two used only for the email address and a third one showing content.

First one is fbklottery.com. The domain name shows no content, being used only for the email address facebookoffice@fbklottery.com.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=137439.

From the fake site details:

Domain Name: FBKLOTTERY.COM
Updated Date: 2019-03-11
Creation Date: 2019-03-11
Registrar Registration Expiration Date: 2020-03-11
Registrar: TLD Registrar Solutions Ltd.

Registry Registrant ID:
Registrant Name: Domain Admin
Registrant Organization: Whois Privacy Corp.

There is a second site, used as a hidden link in the messages sent to the victims: "Click : http:/ /www.facebook.com.for more details." goes to internationalottery.com.

From the fake site:

8 Years of Rewarding
our loyal social network users
Facebook Inc. is the registered company name of the popular social network site that is built to make the world more open and connected. This Lottery program was organized by Facebook team in 2010 and was coordinated by Mr. Marc Andreessen.

In the recent Eight (8) years, we have been able to assist several number of our loyal users to receive this lottery award and change their lives forever.

How to receive your winning

Facebook International Lottery has different modes of transferring your winning to you even if you cannot come in person to claim your winning from our pay centers. We pay winning through this modes listed below:- Cheque, ATM Card, Bank Transfer (Telegraphic wire transfer). We also pay winners in our pay centers and also delivers your won cash prize to you through our BDC agents. If you receive winning notification from Facebook, that does not qualify you a winner until your certificate of winning is confirmed and sent to you. Your certificate is what will warrant you as a legitimate winner of Facebook International Lottery.

In the recent Four (4) years, we have been able to assist several number of our loyal users receive this lottery award. The year (2019), the list of chosen winners are as listed here with their pictures and contact addresses...

The fake site shows lists of people supposedly receiving their prize and also victims waiting to receive their prize after being contacted through email. The lists will be not posted here - we protect the victims identities, even if the scammers are not doing it. All the fake sites reported here have the registrant details protected for respecting the registrant privacy. The victims don't have that luxury...

Scam format on the fake site:

Congratulations!
Mr. Marc Andreessen, our Lottery Award Facilitator contacted you through email to inform you that you are one of the lucky winners of this year's Facebook Users Reward Lottery..
All participant were selected through a random computer integrated system drawn from large mass of e-mail addresses of social network users in your country, and hence benefactors do not have to purchase any ticket to articipate.
Kindly forward the information below to:
Contact Person: Mr. David M. Wehner
======= Chief Financial Officer==================
(**) Your Full names:
(**) Your Telephone Number:
(**) Your Contact address:
(**) Your Occupation:
(**) Your Country:
(**) Your Age & Sex:
(**) And your lucky number above:
===================================
NOTE: For security reasons and due to the mix-up of some numbers and names, we advice that you keep this notification strictly personal from public notice until your claim has been processed and your money sent to you. This is part of our security protocol to avoid double claiming or unscrupulous acts by non-participants of this program.
Once again we say, congratulations!
The Facebook Lottery Board.

Contact details on the fake site:

European Region Office:
Facebook International Lottery
10 Brock St, London NW1 3FG
United Kingdom
info@internationalottery.com
facebookreport@internationalottery.com
+44 745 203 1318
+1-650-543-4800
+44-745-230-7789

+447452031318 / +447452307789
Number billable as mobile number(s)
Country or destination Isle of Man
Original network provider* Manx Telecom Trading Limited

+16505434800
Number billable as geographic number
Country or destination United States
City or exchange location Palo Alto, CA
Original network provider* U.s. Telepacific Corp. - Ca

"In the recent Four (4) years" / "In the recent Eight (8) years" are just lies - the fraudulent domain name was created in January.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=137440

From the fake site details:

Domain Name: INTERNATIONALOTTERY.COM
Updated Date: 2019-01-05
Creation Date: 2019-01-05
Registrar Registration Expiration Date: 2020-01-05
Registrar: TLD Registrar Solutions Ltd.

Registry Registrant ID:
Registrant Name: Domain Admin
Registrant Organization: Whois Privacy Corp.

This is what the fake site looks like:

There is another domain name mentioned on the fake site:

Facebook International Lottery 2010/2019 is back and it has already started in different countries.............Don't be scammed..............you can verify if you win here at officialclaimsunit@fb-cfo.com

fb-cfo.com shows no content while being used also only for the email address.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=137441

From the fake site details:

Domain name: fb-cfo.com
Updated Date: 2018-10-16
Creation Date: 2018-10-16
Registrar Registration Expiration Date: 2019-10-16
Registrar: NAMECHEAP INC
Reseller: NAMECHEAP INC

Registry Registrant ID:
Registrant Name: WhoisGuard Protected
Registrant Organization: WhoisGuard, Inc.

[firefly]

+1-650-543-4800

- is indeed a Facebook number, but it was never designed for users willing to contact the social platform.

Facebook does not have a phone number for regular users to call. It does have an online help center, located at https://www.facebook.com/help/.

The phone number was part of another scam message reported online last month:

NOTE: If you received this message in your SPAM/BULK folder, that is because of the restrictions implemented by your Internet Service Provider, we (Facebook Lottery Team) urge you to treat it genuinely.

Congratulations :

Your E-MAIL ACCOUNT has won the sum of $5,000,000.00USD (Five Million United States Dollars) in the on-going Facebook online award promo.

Your Ticket number is 00545 188 56xxxx.

All participant were selected through a computer random integrated system drawn in 27 million E-mail addresses via the Internet and lucky winners do not have to purchase any ticket to participate in this lottery program. Forward your full details such as,

1. your name:

2. telephone number:

3. age:

4. sex and country

5. How do you feel about your winning ?

for processing and payment of your winning.

Kindly forward below details to:

Contact Person: Mr. David M. Wehner

Chief Financial Officer

1* E-mail: fbcfo@officialclaimsunit.com

2* E-mail: fbcfo@officialclaimsunit.com

Tel: +44-7053838236

Your e-mail won our Jackpot, congratulation once more.

Yours in service,

Mr.Marc Andreessen

Facebook Lottery Facilitator.

DISCLAIMER: Do not doubt this letter or disregard as we are ready to give you attention until you receive your unbelievable Prize Award from Facebook. Contact our verification office through this mobile number;

Tel: +1-650-543-4800

+447053838236
Number billable as personal number
Country or destination United Kingdom
Original network provider* Simwood eSMS Limited

officialclaimsunit.com is another fraudulent domain name used only for the email address fbcfo@officialclaimsunit.com.

For the fake site details: https://db.aa419.org/fakebanksview.php?key=137442

From the fake site details:

Domain name: officialclaimsunit.com
Updated Date: 2019-01-05
Creation Date: 2019-01-05
Registrar Registration Expiration Date: 2020-01-05
Registrar: NAMECHEAP INC
Reseller: NAMECHEAP INC

Registry Registrant ID:
Registrant Name: WhoisGuard Protected
Registrant Organization: WhoisGuard, Inc.

[Big Al]

The Online Consumer Promotions 2019.
European Region Office:
Facebook International Lottery
10 Brock St, London NW1 3FG
United Kingdom,
England.
Click : http:/ /www.facebook.com.for more details.


Attn:

This is to officially inform you that your Five Million United States Dollars you won with Facebook International Lottery has been approved to be paid to you through Bank transfer to your account. We have successfully prepared your payment approval letter which we will send to our paying bank ''First Trust Bank as soon as we receive your Banking details to enable them transfer this fund to you as the rightful winner.

We have attached your Fund Release Order form to this mail, you are required to fill correctly and return to this office immediately. This form will be approved and sent to the First Trust Bank to enable them transfer your Five Million United States Dollars to your designated bank account.

You have been confirmed and approved to claim your Five Million United States Dollars (USD$5,000,000.00) through bank wire transfer and we have attached your Certificate of winning with your fund release order form to this mail. Following this explanation, you are advised to print the attached form today, fill it immediately and return to this office.

Find the attached form!Congratulations once more.


Mr. David M. Wehner
Chief Financial Officer (CFO), Facebook, Inc.
1601 Willow Road
Menlo Park, California 94025
Enquiries Phone: +1-650-543-4800
+44 745 203 1318
Copyright © 2019 Facebook! All rights reserved.

[Big Al]

Happy Holidays and end of the year!

European Region Office 2020
Facebook International Lottery
10 Brock St, London NW1 3FG
United Kingdom,
England

Congratulations,

The entire members of Facebook Lottery team wish you a Prosperous New Year 2020. We would also like to use this medium to remind you that your won cash prize of Five Million United States Dollars has been approved to be paid to you as the rightful winner and we are waiting for you to communicate us with the requirement as you were directed.

The said Fund $5,000,000.00USD (Five Million United States Dollars) is your entitled winning in the Facebook International Lottery Program, you have no reason loosing out in this great opportunity, I must assure you that your winning in this Lottery Program was not an error.

Facebook International is a Noble Organization by the unmatchable standard and remarkable reputation we built in discharging our duties and services. Be informed that we can never force you to go against your wish.

I am the Coordinator Officer Facebook International Lottery. I must assure you that this Lottery Program is 100% free from risk and you must receive your $5,000,000.00USD completely paid to you. Your payment must be disbursed to you as you requested.

Mr. Marc Andreessen
Coordinator,
Facebook International Lottery.