Scam Emails Archive : Lotto/Lottery

Subject: Mail delivery failed: returning message to sender

From: Mail Delivery System <Mailer-Daemon@da.unit47c.com>


This email with the subject "Mail delivery failed: returning message to sender" was received in one of Scamdex's honeypot email accounts on Sat, 07 Jun 2008 02:46:41 -0700 and has been classified as a Lotto/Lottery Scam.

The sender was Mail Delivery System <Mailer-Daemon@da.unit47c.com>, although it may have been spoofed.


This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  postmaster@suite259.nl
    

------ This is a copy of the message, including all the headers. ------

Return-path: <eTgas@scamdex.com>
Received: from mail by da.unit47c.com with spam-scanned (Exim 4.60)
        (envelope-from <eTgas@scamdex.com>)
        id 1K4thr-0003uB-23
        for postmaster@suite259.nl; Sat, 07 Jun 2008 10:23:25 +0200
Received: from localhost by da.unit47c.com
        with SpamAssassin (version 3.1.4);
        Sat, 07 Jun 2008 10:23:25 +0200
From: "adolfo indira" <eTgas@scamdex.com>
To: <postmaster@suite259.nl>
Subject: *****SPAM***** Re: Jessica Alba loves it huge
Date: Sat, 07 Jun 2008 06:36:11 +0000
Message-Id: <000a01c8c877$01b0e7c6$5cfc6381@ikgpxhb>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.4 (2006-07-25) on da.unit47c.com
X-Spam-Level: ************************
X-Spam-Status: Yes, score=24.5 required=5.0 tests=BAYES_99,
        HELO_DYNAMIC_IPADDR,HTML_30_40,HTML_MESSAGE,NO_DNS_FOR_FROM,
        RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,URIBL_JP_SURBL,
        URIBL_SBL autolearn=spam version=3.1.4
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_484A457D.C893C47B"

This is a multi-part message in MIME format.

------------=_484A457D.C893C47B
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "da.unit47c.com", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  There&#8217;s nothing more impressive than a man with
  confidence. Confidence with the Ladies and inner confidence comes with
  impressive physical attributes. Here is the solution to pleasuring the
  ladies and upsizing your manhood: MAXGAIN+ , The world&#8217;s
  breakthrough Mens Formula - Manufactured in FDA approved laboratories -
  Proven, MASSIVE gains of more than three inches - Increase the duration
  of your erection - No more becoming flaccid during intercourse - Double
  your volume of ejaculate Available for a very limited period only
  &#8211; grasp the chance to become a real Man today. Visit
  www.sizelarege.com [...] 

Content analysis details:   (24.5 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 4.2 HELO_DYNAMIC_IPADDR    Relay HELO'd using suspicious hostname (IP addr
                            1)
 0.4 HTML_30_40             BODY: Message is 30% to 40% HTML
 0.0 HTML_MESSAGE           BODY: HTML included in message
 3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 1.0000]
 3.2 NO_DNS_FOR_FROM        DNS: Envelope sender has no MX or A DNS records
 2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [81.190.82.159 listed in dnsbl.sorbs.net]
 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
               [Blocked - see <http://www.spamcop.net/bl.shtml?81.190.82.159>]
 3.9 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [81.190.82.159 listed in sbl-xbl.spamhaus.org]
 1.6 URIBL_SBL              Contains an URL listed in the SBL blocklist
                            [URIs: sizelarege.com]
 4.1 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL blocklist
                            [URIs: sizelarege.com]

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_484A457D.C893C47B
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from [81.190.82.159] (helo=host-81-190-82-159.stargard.mm.pl)
        by da.unit47c.com with esmtp (Exim 4.60)
        (envelope-from <eTgas@scamdex.com>)
        id 1K4thq-0003u8-Mx
        for postmaster@suite259.nl; Sat, 07 Jun 2008 10:23:23 +0200
Message-ID: <000a01c8c877$01b0e7c6$5cfc6381@ikgpxhb>
From: "adolfo indira" <eTgas@scamdex.com>
To: <postmaster@suite259.nl>
Subject: Re: Jessica Alba loves it huge
Date: Sat, 07 Jun 2008 06:36:11 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0007_01C8C877.01AE8847"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198

This is a multi-part message in MIME format.

------=_NextPart_000_0007_01C8C877.01AE8847
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

There&#8217;s nothing more impressive than a man with confidence. =
Confidence with the Ladies and inner confidence comes with impressive =
physical attributes.
Here is the solution to pleasuring the ladies and upsizing your manhood:
MAXGAIN+ , The world&#8217;s breakthrough Mens Formula
- Manufactured in FDA approved laboratories
- Proven, MASSIVE gains of more than three inches
   - Increase the duration of your erection
- No more becoming flaccid during intercourse
- Double your volume of ejaculate
Available for a very limited period only &#8211; grasp the chance to =
become a real Man today.
Visit www.sizelarege.com
     
------=_NextPart_000_0007_01C8C877.01AE8847
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2900.3199" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<html>
<p>There&#8217;s nothing more impressive than a man with confidence. =
Confidence with the Ladies and inner confidence comes with impressive =
physical attributes.</p>

<p>Here is the solution to pleasuring the ladies and upsizing your =
manhood:</p>

<p>MAXGAIN+ , The world&#8217;s breakthrough Mens Formula</p>

<p>- Manufactured in FDA approved laboratories</p>
<p>- Proven, MASSIVE gains of more than three inches</p>  =20
<p>- Increase the duration of your erection</p>
<p>- No more becoming flaccid during intercourse</p>
<p>- Double your volume of ejaculate</p>

<p>Available for a very limited period only &#8211; grasp the chance to =
become a real Man today.</p>

<p>Visit <a href=3D"http://sizelarege.com";>www.sizelarege.com</a></p>    =
 =20
</html></BODY></HTML>
------=_NextPart_000_0007_01C8C877.01AE8847--



------------=_484A457D.C893C47B--