An
Email with the Subject "Fw: Results 2008 !" was
received in one of Scamdex's honeypot email accounts on Tue, 27 May 2008 17:30:09 -0700
and has been classified as a Generic Scam Email.
The sender shows as David Cherbonnier <dlc_engineering@yahoo.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
banklottowindrawprizelotterycongratulationsclaimclaimsticketstaffmailreferenceengineer8528dlc_engineering@yahoo.comyahoo.comremittanceach(seven hundred thousand e...(loc)(samt noen tilf?yelser)(samt detse gruppeselskaper)(eller detse gruppeselskaper)dearnmrs. betty l. saunders.
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Tue, 27 May 2008 17:30:09 -0700
[received:] => Array
(
[0] => from web30401.mail.mud.yahoo.com ([68.142.200.104])by gogol.o7e.net with smtp (Exim 4.68)(envelope-from )id 1K19YI-0007qb-6ufor scams@scamdex.com; Tue, 27 May 2008 17:30:09 -0700
[1] => (qmail 6712 invoked by uid 60001); 28 May 2008 00:30:02 -0000
[2] => from [202.156.8.14] by web30401.mail.mud.yahoo.com via HTTP; Tue, 27 May 2008 17:30:01 PDT
)
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Message-ID; b=s4Iy2/UnYvExNXzH6PFvJZ6PQzd7yBr25erRNzf11IRJHpQ7sYdFDD04/IQfiqJS/yeK4h4BaGXkFDyzIYHdjrM1/LgkxevUqNIjoLnQ2Q3jvXfo4Z/EDaj5Pj9CTN2Qb5m8czv5qJoQahnmSGky9vdDXYesOYyksUxKgViqWXI=;
[x-mailer:] => Array
(
[0] => YahooMailWebService/0.7.199
[1] => <968580.6504.qm@web30401.mail.mud.yahoo.com>
)
[date:] => Tue, 27 May 2008 17:30:01 -0700 (PDT)
[from:] => David Cherbonnier
[reply-to:] => dlc_engineering@yahoo.com
[subject:] => Fw: Results 2008 !
[to:] => Phish
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-773215867-1211934601=:6504"
[x-spam-status:] => No, score=1.2
[x-spam-score:] => 12
[x-spam-bar:] => +
[x-spam-flag:] => NO
[x-o7e-flag:] => J-3509981-042508::web30401.mail.mud.yahoo.com [68.142.200.104]
[message-id:] => REIDs3x1239839789.M434841P32690V-S3X
[x-scamdex-scores:] => S:63 P:56 A:61 L:76 E:59 G:55
[x-scamdex-classtype:] => L
[x-scamdex-classscore:] => 76
[x-scamdex-totscore:] => 370
[x-scamdex-kw:] => \%,agent,bank,claim,claims,congratulations,contact,coordinat,electronic,fund,hundred thousand,internet,lottery,lotto,mobil,paid,prize,safe,sent,service,staff,ticket,winn
[x-scamdex-em:] => dlc_engineering@yahoo.com,girolotto@games.com,ngineering@yahoo.com,noreply@noreply.nl
[x-scamdex-dir:] => B
[x-scamdex-id:] => B1239839789.M434841P32690V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
--- On Wed, 5/28/08, BankGiro Lotto <noreply@noreply.nl> wrote: From: BankGiro Lotto <noreply@noreply.nl> Subject: Results 2008 ! To: Date: Wednesday, May 28, 2008, 3:39 AM
BankGiro Lotto.
Van Eeghenstraat 70
1071 GK Amsterdam
Dear Winner,
We are pleased to inform you of the final announcement of The BankGiro lotto Online Promo Programme held on Monday, 26th May 2008.
The draw was done electronically with several email addresses provided to this office by webmail providers to enhance the utilization of the internet.
Your email address was picked as one of the ten winning email addresses.This has qualified you to claim the total cash prize of €700,000.00(seven hundred thousand Euros) in cash.
-----------------------------------------------------------
You email address was attached to.
Ref Number: BNL 070286/ES 356.
Batch Number: BNL 447435-ZNG/2008.
Ticket Number: BSP 9172 67427.
Security File Number: 0730.
-----------------------------------------------------------
AGREEMENT:
The BankGiro lotto and the Local Organizing Committee (LOC) of the 2008 Lottery day celebration hereby Agree, that the winning information written above are the orignal winning information as it was selected by the computer on 26th May 2008, and that the winner this winning information has been sent to,will be paid the winning sum of €,700,000.00 without fail.
To file for your claims and due remittance of funds contact Mr.James Stewart on the information below.
Mr.James Stewart
BankGiro Lotto
Remittance Department Personnel
Email:girolotto@games.com
You are required to claim your winnings by 7th June 2008 otherwise it rolls over to the next draw.
N.B: Procedures to claiming your prize:
1. Please quote your Reference number in all correspondence with the claims officer.
2. Indicate your Full Name, Address, Country, Telephone, Mobile, Fax Number, Occupation and Age.
Furthermore, should there be any change of address do Inform the CLAIM AGENT as soon as possible.
Congratulations once more from our members of staff.
Once again on behalf of all our staff CONGRATULATIONS!!!
Note: Anybody under the age of 18 is automatically disqualified...
For a smooth and safe collection, you are required to keep your Reference Number confidential.
Congratulations..
Mrs. Betty L. Saunders.
Winnings Coordinator.
*********************************************************
Dette budskapet (samt noen tilf?yelser) er fortrolig
og kan v?re privilegert. Hvis du har mottatt det ved
en feiltakelse v?r s? snill og varsle avsenderen ved
reture-post og stryk
dette budskapet fra din system. Noe uautorisert
bruk eller spredning av dette budskapet er helt eller
delvis strengt forbudt. Behag anmerkning at e-poster
er ?mfintlig til ? forandre
seg. (Samt detse gruppeselskaper) skal ikke hefte
for den upassende eller ufullstendige overf?ringen
av den informasjonen som blir inneholdt i denne
kommunikasjonen eller for noe
utsettelse i dets kvittering eller skade p? din system.
(Eller detse gruppeselskaper) ikke garanterer at
integriteten av denne kommunikasjonen ha blitt
vedlikeholdedd eller at denne
kommunikasjonen er fri av viruser, oppfanging eller forstyrrelse.....
**********************************************************
