We’ve seen variations of BMW Lottery scam emails before, like the one about a BMW model x3 we published last year. This time the email is almost the same but the model has changed to a BMW model X5 SUV:
|Subject:||Claim Your Car And Check With Your Winning Code BMW:2541256004/25.|
|From:||BMW LOTTERY DEPT. <email@example.com>|
BMW LOTTERY DEPARTMENT
5070 WILSHIRE BLVD
LOS ANGELES. CA 90036
UNITED STATES OF AMERICA.
NOTE: If you received this message in your SPAM/BULK folder, that is because of the restrictions implemented by your Internet Service Provider, we (BMW) urge you to treat it genuinely.
This is to inform you that you have been selected for a prize of a brand new 2016/2017 Model BMW X5 SUV and a Check of $1,500,000.00 USD from the international balloting programs held on the 2nd section in the UNITED STATE OF AMERICA.
Description of prize vehicle: The X5 has enough luxurious space for everybody. Rear Comfort seats with enhanced foam padding offer 3” of forward/backward movement, putting passengers in the perfect position to utilize a DVD drive and two optional 10.2” LCD screens. An optional third row seat offers extended capacity, and includes its own climate control.
Options: With one of BMW’s largest cargo spaces, you’ll find it hard to run out of anything. The X5’s rear seats split 40/20/40, folding away to convert 35.8 cubic feet of trunk space in to a full 76.7 cubic feet. Details like two cargo rails, four fastening points, a tensioning strap, and a rear cargo net add enough function to store it all.
The optional Wi-Fi Hotspot keeps you connected to everything you love whether you’re on-the-go or far off the beaten path. Included with the Wi-Fi Hotspot, a Wireless Charging Pocket will keep you fully charged anywhere the road may lead.
The selection process was carried out through random selection in our computerized email selection system (ESS) from a database of over 250,000 email addresses drawn from all the continents of the world which you were selected.
The BMW Lottery is approved by the British Gaming Board and also Licensed by the International Association of Gaming Regulators (IAGR). To begin the processing of your prize you are to contact our fiduciary claims department for more information as regards procedures to the claim of your prize.
Name: Mr. Henry Giodana
Contact him by providing him with your secret pin code Number BMW:2541256004/25.
You are also advised to provide him with the under listed information as soon as possible:
1. Name In Full :
2. Residential Address :
3. Nationality :
4. Age :
6. Occupation :
7. Direct Phone :
8. Present Country :
9. Email address :
10.BMW Winning Code: BMW:2541256004/25
Please you are to provide him with the above listed details as soon as possible so he can begin with the processing of your prize winnings.
Congratulations again from all our staff and thank you for being part of our promotional program.
Mrs. Rachael Adams.
THE DIRECTOR PROMOTIONS
BMW LOTTERY DEPARTMENT
UNITED STATES OF AMERICA
Scam alert! The E-mail above is a SCAM. It’s a Nigerian Lottery scam, the story and all names & roles are fake. The real BMW company has nothing to do with this scam. The scammers ask you for (more and more) money upfront as ‘costs’ before you get the ‘prize’ (which you will never get offcourse).
If you’ve more information and/or received this message too please comment below. Describe how you got it (as an e-mail or comment?, the message etc), thanks in advance! Then mark it as SPAM (if possible) and/or DELETE it.
Looks like they are using their own domain name for the reply-to address (firstname.lastname@example.org) for some time now. But offcourse the domain-owner (registrant) details are hidden by a whois-privacy service provided by their registrar Dynadot as seen below:
Domain Name: BMW-MOBILE.COM Registry Domain ID: 2117566560_DOMAIN_COM-VRSN Registrar WHOIS Server: whois.dynadot.com Registrar URL: http://www.dynadot.com Updated Date: 2017-04-25T15:29:00.0Z Creation Date: 2017-04-25T15:27:09.0Z Registrar Registration Expiration Date: 2018-04-25T15:27:09.0Z Registrar: DYNADOT LLC Registrar IANA ID: 472 Registrar Abuse Contact Email: email@example.com Registrar Abuse Contact Phone: +1.6502620100 Registrant Name: Super Privacy Service c/o Dynadot Registrant Street: PO Box 701 Registrant City: San Mateo Registrant State/Province: California Registrant Postal Code: 94401 Registrant Country: US Registrant Phone: +1.6505854708 Registrant Email: firstname.lastname@example.org Admin Name: Super Privacy Service c/o Dynadot Tech Name: Super Privacy Service c/o Dynadot Name Server: ns100.nsresponse.com Name Server: ns101.nsresponse.com DNSSEC: unsigned URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
It seems they only use the domainname for this email address (for now). The domain doesn’t host any website, or actually, webhosting is enabled but no website has been uploaded by these scammers:
The domain is hosted in the US:
bmw-mobile.com has address 220.127.116.11 bmw-mobile.com mail is handled by 0 bmw-mobile.com. 18.104.22.168.in-addr.arpa domain name pointer rs113.nsresponse.com. GeoIP Country Edition: US, United States GeoIP City Edition, Rev 1: US, IL, Illinois, Chicago, 60604, 41.877602, -87.627197, 602, 312 GeoIP ASNum Edition: AS23352 Server Central Network