A Scam Email with the Subject " Spanish advance fee fraud" was received in one of Scamdex's honeypot email accounts on Fri, 23 May 2008 05:03:01 -0700 and has been classified as a Lotto/Lottery Scam. The sender was Martin <email@example.com>, although it may have been spoofed.
Hello, for one of my e-addresses I received a spam sent by a 419 Advance Fee Fraud gang. The spam shows that one of your mailboxes is used as 419 maildrop. Please delete this mailbox to protect potential victims. I have replaced headerline elements which point to me by the string xxx to protect my personal data and to ease the search for the header lines pointing to the abuser. |From firstname.lastname@example.org Fri May 23 12:05:28 2008 |Return-Path: <email@example.com> |X-Original-To: xxx@localhost |Delivered-To: firstname.lastname@example.org |Received: from localhost (localhost [127.0.0.1]) | by xxx.xxx.xxx (Postfix) with ESMTP id A2BDE4B6D8 | for <xxx@localhost>; Fri, 23 May 2008 12:05:28 +0200 (MET DST) |Original-Recipient: rfc822;email@example.com |Received: from xxx.xxx.xxx [xxx.xxx.243.17] | by localhost with POP3 (fetchmail-6.2.2) | for xxx@localhost (single-drop); Fri, 23 May 2008 12:05:28 +0200 (MET DST) |Received: from xxx.xxx.xxx (xxx.xxx.254.63) by xxx.xxx.xxx (7.1.006) | id 48145269000DAD62 for firstname.lastname@example.org; Fri, 23 May 2008 11:39:38 +0200 |Received: from mx1.xxx.xxx (mx1.xxx.xxx [xxx.xxx.1.105]) | by xxx.xxx.xxx (LMC5614Ainternal) with ESMTP id m4N9f6cc000383 | for <email@example.com>; Fri, 23 May 2008 11:41:06 +0200 (MEST) |Received: from fmmailgate04.web.de (fmmailgate04.web.de [18.104.22.168]) | by mx1.xxx.xxx (LMC5614Amx1) with ESMTP id m4N9exP1016629 | for <firstname.lastname@example.org>; Fri, 23 May 2008 11:41:00 +0200 (CEST) |Received: from web.de | by fmmailgate04.web.de (Postfix) with SMTP id D125359C365F; | Fri, 23 May 2008 10:38:09 +0200 (CEST) |Received: from [22.214.171.124] by freemailng2805.web.de with HTTP; | Fri, 23 May 2008 10:38:09 +0200 |Date: Fri, 23 May 2008 10:38:09 +0200 |Message-Id: <email@example.com> |MIME-Version: 1.0 |From: unitednations award <firstname.lastname@example.org> |To: email@example.com |Subject: Attention: Winner, |Precedence: fm-user |Organization: http://freemail.web.de/ |X-Provags-Id: V01U2FsdGVkX1+BuJ9CBAVS9o/4h65VESqgUmfUnSFh5MoENj9sdpwK1PFI1 | SSKQwi1a4NCnzSoNomuXbg8tTPjLHFGuncTF0BMJJOeKOZzzF2nUtJuw9D6j | xADH1xO8EZW |Content-Type: text/plain; charset=iso-8859-15 |Content-Transfer-Encoding: 7bit |X-Spam-Status: No, score=1.0 required=200.0 tests=AWL,KAM_LOTTO1 | autolearn=disabled version=3.2.0 |X-Spam-Level: * |X-Spam-Checker-Version: SpamAssassin 3.2.0 (2007-05-01) on mx1.xxx.xxx |Status: RO |Content-Length: 1186 |Lines: 34 | |Attention: Winner, | |Congratulations to you as we bring to your notice the result of Euromillion Loteria Espal 2008 promotions.We are happy to inform you that your email address have emerged a winner of Five hundred and fifty thousand euro(550, 000.00)Euros. NOTE: to file for your claim, please contact the claim department belowon email or phone | |Chalet Financial Services |Contact person: Mr.Jaime Sanchez |Email:Chaletsp40@aim.com |Telephone+34691955349 | |Find below your promotion date, Reference and Batch numbers. Remember to quote these numbers in your correspondence with your claims agent(Mr.Jaime Sanchez) | |PROMOTION DATE: 22th MAY 2008. |REFERENCE NUMBER: LFD/2031/8161/08 |BATCH NUMBER: 15/051/IPU |LUCKY NUMBER: ES1242676578 | |Your full Names: |Fax/Telephone: |Age: | |Note: You will be require to pay for the issuance of your winning certificate All winnings must be claimed not later than 14 days | |Sincerely Yours, |MRS. ROCIO VILLALOBOS |THE PROMOTION COORDINATOR | | | | | | |_____________________________________________________________________ |Der WEB.DE SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen! |http://smartsurfer.web.de/?mc=100071&distributionid=000000000066 |