An
Email with the Subject "Dear. Sir/Madam" was
received in one of Scamdex's honeypot email accounts on Wed, 10 Dec 2008 00:58:52 -0800
and has been classified as a Generic Scam Email.
The sender shows as Mikelle Moore <mxmoore2@ualr.edu>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
thousand eurocontactlotterysweepwinlottopromotionluckyunscrupulousclaimticket thousandinternetprocessmailsoftwareeurouserbatchconfidentialsincerelycontactmrbongersdept@gmai...security(nine hundred and eighty ...dearhttp://www.luckyday.nllotto
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => jl@scamdex.com
[delivery-date:] => Wed, 10 Dec 2008 00:58:52 -0800
[received:] => Array
(
[0] => from watson.ualr.edu ([144.167.10.32] helo=ualr.edu)by gogol.o7e.net with esmtps (TLSv1:AES256-SHA:256)(Exim 4.69)(envelope-from )id 1LAKuA-00011v-7ufor jl@scamdex.com; Wed, 10 Dec 2008 00:58:52 -0800
[1] => from [144.167.5.98] (helo=mailfilter.ualr.edu)by ualr.edu with esmtps (TLSv1:AES256-SHA:256)(Exim 4.63)(envelope-from )id 1LAKtg-0001xL-NP; Wed, 10 Dec 2008 02:58:20 -0600
[2] => from ualr.edu (hermes.ualr.edu [144.167.10.42])by mailfilter.ualr.edu (Spam Firewall) with ESMTPid 7D4B6812F; Wed, 10 Dec 2008 02:58:15 -0600 (CST)
[3] => from ualr.edu (hermes.ualr.edu [144.167.10.42]) by mailfilter.ualr.edu with ESMTP id LZssgocO2na8z25Y; Wed, 10 Dec 2008 02:58:15 -0600 (CST)
[4] => from [144.167.10.39] (Forwarded-For: 144.167.5.98) byhermes.ualr.edu (mshttpd); Wed, 10 Dec 2008 03:58:15 -0500
)
[x-asg-debug-id:] => Array
(
[0] => 1228899495-624b01f40000-cuf6gF
[1] => 1228899495-624b01f40000-cuf6gF
[2] => 1228899495-624b01f40000-cuf6gF
[3] => 1228899495-624b01f40000-cuf6gF
[4] => 1228899495-624b01f40000-cuf6gF
[5] => 1228899495-624b01f40000-cuf6gF
[6] => 1228899495-624b01f40000-cuf6gF
[7] => 1228899495-624b01f40000-cuf6gF
[8] => 1228899495-624b01f40000-cuf6gF
[9] => 1228899495-624b01f40000-cuf6gF
[10] => 1228899495-624b01f40000-cuf6gF
[11] => 1228899495-624b01f40000-cuf6gF
[12] => 1228899495-624b01f40000-cuf6gF
[13] => 1228899495-624b01f40000-cuf6gF
[14] => 1228899495-624b01f40000-cuf6gF
[15] => 1228899495-624b01f40000-cuf6gF
[16] => 1228899495-624b01f40000-cuf6gF
[17] => 1228899495-624b01f40000-cuf6gF
[18] => 1228899495-624b01f40000-cuf6gF
[19] => 1228899495-624b01f40000-cuf6gF
[20] => 1228899495-624b01f40000-cuf6gF
[21] => 1228899495-624b01f40000-cuf6gF
[22] => 1228899495-624b01f40000-cuf6gF
[23] => 1228899495-624b01f40000-cuf6gF
[24] => 1228899495-624b01f40000-cuf6gF
[25] => 1228899495-624b01f40000-cuf6gF
[26] => 1228899495-624b01f40000-cuf6gF
[27] => 1228899495-624b01f40000-cuf6gF
[28] => 1228899495-624b01f40000-cuf6gF
[29] => 1228899495-624b01f40000-cuf6gF
[30] => 1228899495-624b01f40000-cuf6gF
[31] => 1228899495-624b01f40000-cuf6gF
[32] => 1228899495-624b01f40000-cuf6gF
[33] => 1228899495-624b01f40000-cuf6gF
[34] => 1228899495-624b01f40000-cuf6gF
[35] => 1228899495-624b01f40000-cuf6gF
[36] => 1228899495-624b01f40000-cuf6gF
[37] => 1228899495-624b01f40000-cuf6gF
[38] => 1228899495-624b01f40000-cuf6gF
[39] => 1228899495-624b01f40000-cuf6gF
[40] => 1228899495-624b01f40000-cuf6gF
[41] => 1228899495-624b01f40000-cuf6gF
[42] => 1228899495-624b01f40000-cuf6gF
[43] => 1228899495-624b01f40000-cuf6gF
[44] => 1228899495-624b01f40000-cuf6gF
[45] => 1228899495-624b01f40000-cuf6gF
[46] => 1228899495-624b01f40000-cuf6gF
[47] => 1228899495-624b01f40000-cuf6gF
[48] => 1228899495-624b01f40000-cuf6gF
[49] => 1228899495-624b01f40000-cuf6gF
)
[x-barracuda-url:] => http://144.167.252.236:80/cgi-bin/mark.cgi
[from:] => Mikelle Moore
[bcc:] =>
[reply-to:] => contactmrbongersdept@gmail.com
[x-mailer:] => Array
(
[0] =>
[1] => Sun Java(tm) System Messenger Express 6.3-7.04 (built Sep 262008; 32bit)
)
[date:] => Wed, 10 Dec 2008 03:58:15 -0500
[mime-version:] => 1.0
[content-language:] => en
[x-asg-orig-subj:] => Dear. Sir/Madam
[subject:] => Dear. Sir/Madam
[x-accept-language:] => en
[priority:] => normal
[content-type:] => multipart/alternative; boundary="--8b2ba22be8005e524e8"
[x-barracuda-connect:] => hermes.ualr.edu[144.167.10.42]
[x-barracuda-start-time:] => 1228899496
[x-barracuda-virus-scanned:] => by UALR Mail Filter at ualr.edu
[x-barracuda-spam-score:] => 2.33
[x-barracuda-spam-status:] => No, SCORE=2.33 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=7.0 tests=ADVANCE_FEE_1, BSF_SC3_MJ1056, HEAD_LONG, HTML_MESSAGE, MISSING_HEADERS, TO_CC_NONE
[x-barracuda-spam-report:] => Code version 3.2, rules version 3.2.1.12384Rule breakdown below pts rule name description---- ---------------------- --------------------------------------------------0.50 HEAD_LONG Message headers are very long1.58 MISSING_HEADERS Missing To: header0.00 HTML_MESSAGE BODY: HTML included in message0.25 BSF_SC3_MJ1056 Custom Rule MJ10560.00 TO_CC_NONE No To: or Cc: header0.00 ADVANCE_FEE_1 Appears to be advance fee fraud (Nigerian 419)
[x-spam-status:] => No, score=4.8
[x-spam-score:] => 48
[x-spam-bar:] => ++++
[x-spam-flag:] => NO
[message-id:] => REIDs3x1239839812.M751601P32690V-S3X
[x-scamdex-scores:] => S:51 P:45 A:51 L:62 E:50 G:45
[x-scamdex-classtype:] => L
[x-scamdex-classscore:] => 62
[x-scamdex-totscore:] => 304
[x-scamdex-kw:] => claim,contact,coordinat,global,inc.,internet,lottery,lotto,lucky,nigeria,process,promotion,report,sweeps,ticket,unscrupulous,winn,won
[x-scamdex-em:] => contactmrbongersdept@gmail.com
[x-scamdex-dir:] => B
[x-scamdex-id:] => B1239839812.M751601P32690V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Luckyday Lottery NL Promotional/Sweepstakes Office Laan van Hoornwijck 55 2289 DG Rijswijk KvK: 41151075 The Netherlands.
Dear. Sir/Madam, We are pleased to inform you that your email address has won 980,000:00 Euro (Nine Hundred and Eighty Thousand Euro Only) in the Netherlands Luckyday Lottery Sweepstakes promotional program, conducted on the 2nd day of December 2008, sponsored by consortium of software promotion companies. For more informations/procedure of your winning claim, you are advice to contact our processing department with the contact information below, provide them with your winning details below.
Your Winning Details. Ref No: STLI/722-5/0079 Batch No: 864/0587JQ. E-Ticket No: ZUK-7708-737-709 Serial No: NL/9667/0788
NOTE: Please be warned, your winning and its entire information are to be kept strictly confidential, this is to avoid previous bad experience this program has suffered, such as abuse of this program by other internet user who use the name of this company for unscrupulous activities and double claiming of winning entitlement because of insecurity of winning information on the part of beneficiaries. Always call to ensure you are dealing with the right office.
Sincerely, Mr. Mikelle Moore Sweepstakes Coordinator. Visit our website at: http://www.luckyday.nl
Lotto is een onderdeel van De Lotto. Copyright(c) 2008 by De Lotto, the Netherlands. ************************************************************************************
Luckyday Lottery NL Promotional/Sweepstakes Office Laan van Hoornwijck 55 2289 DG Rijswijk KvK: 41151075 The Netherlands.
Dear. Sir/Madam, We are pleased to inform you that your email address has won 980,000:00 Euro (Nine Hundred and Eighty Thousand Euro Only) in the Netherlands Luckyday Lottery Sweepstakes promotional program, conducted on the 2nd day of December 2008, sponsored by consortium of software promotion companies. For more informations/procedure of your winning claim, you are advice to contact our processing department with the contact information below, provide them with your winning details below.
Your Winning Details. Ref No: STLI/722-5/0079 Batch No: 864/0587JQ. E-Ticket No: ZUK-7708-737-709 Serial No: NL/9667/0788
NOTE: Please be warned, your winning and its entire information are to be kept strictly confidential, this is to avoid previous bad experience this program has suffered, such as abuse of this program by other internet user who use the name of this company for unscrupulous activities and double claiming of winning entitlement because of insecurity of winning information on the part of beneficiaries. Always call to ensure you are dealing with the right office.
Sincerely, Mr. Mikelle Moore Sweepstakes Coordinator. Visit our website at: http://www.luckyday.nl
Lotto is een onderdeel van De Lotto. Copyright(c) 2008 by De Lotto, the Netherlands. ************************************************************************************