An
Email with the Subject "WINNING INFORMATION" was
received in one of Scamdex's honeypot email accounts on Tue, 15 Oct 2013 06:42:17 -0700
and has been classified as a Lotto/Lottery Scam Email.
The sender shows as "BONOLOTO" <redespost@altonwinner.org.es>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => mxw@scamdex.com
[delivery-date:] => Tue, 15 Oct 2013 06:42:17 -0700
[received:] => Array
(
[0] => from llsf238-a04.servidoresdns.net ([82.223.190.49]:45230)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1VW4t4-0007qF-PSfor mxw@scamdex.com; Tue, 15 Oct 2013 06:42:17 -0700
[1] => from ns392794.ovh.net:3128 (174.156.20.95.dynamic.jazztel.es [95.20.156.174])by llsf238-a04.servidoresdns.net (Postfix) with ESMTPSA id 5D4466072Efor ; Tue, 15 Oct 2013 15:42:09 +0200 (CEST)
)
[mime-version:] => 1.0
[from:] => "BONOLOTO"
[reply-to:] => w.result@aol.com
[to:] => mxw@scamdex.com
[subject:] => WINNING INFORMATION
[content-type:] => text/html; charset="windows-1252http-equivContent-Type"
[content-transfer-encoding:] => quoted-printable
[x-mailer:] => SendBlaster.1.5.5
[date:] => Tue, 15 Oct 2013 15:41:58 +0200
[message-id:] => <3316213914880507026771@Maria-PC>
[x-spam-status:] => No, score=3.3
[x-spam-score:] => 33
[x-spam-bar:] => +++
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: BONOLOTO SUPER E-JACKPOT Absolutely free. ONLINE SWEEPSTAKES PRAGRAM JOKER [...] Content analysis details: (3.3 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------2.0 SUBJ_ALL_CAPS Subject is all capitals 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: scamdex.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
BONOLOTO SUPER E-JACKPOT
Absolutely free. ONLINE SWEEPSTAKES PRAGRAM
JOKER
Todays result.
BONOLOTO EMAIL-JACKPOT DRAWS 2013
A
B
C
D
E
E
G
H
I
J
K
0
x
-
x
-
x
-
x
-
x
-
x
6
1
-
x
-
x
-
x
-
x
-
x
-
1
2
x
-
x
-
x
-
x
-
x
-
x
3
-
x
x
x
x
7
x
4
4
x
-
x
-
x
-
x
-
x
-
x
5
x
2
x
x
x
x
6
x
-
x
-
x
-
x
-
x
-
x
3/2
7
-
x
-
x
-
x
-
x
-
x
-
8
x
-
x
-
x
-
x
-
x
-
x
9
-
x
-
x
-
x
-
x
-
x
-
7
2
7
Winning number: 7-4-3-1-6-3 = 2-7
Dear; mxw@scamdex.com
CONGRATULATION!! We are glad to inform you that your email has WON the E-JACKPOT AWARD!!!. Your email tag to our today draws on the above winning JOKER point and has won the BONOLOTO AWARD of €1.725,000.00 from the 2013 E-JACKPOT program. SPAIN.
Please check your result on our corporate office by providing us the below information.
Name (In full): Contact numbers: Nationality:
Contact Claims
Calle San Vicente de Paul Nº 1
EOD 50.00, 28043 Madrid Spain Email: w.result@aol.com Tel: 0034 632 86 4973
Loterias y Appuestas
del Estado
***The BONOLOTO
The BONOLOTO is the exclusive distributor of lottery products via the Internet on behalf of leading SPANISH lottery exporters, BTS "Bonoloto Spain" Global Services and BTS "Bonoloto Spain" New South Wales. This is a bonus to promote lottery in Spain and the E-JACKPOT JOKER POWER is a free Emaill Lottery Draws fully based on an electronic selection of winners using their e-mail addresses from a world micro-soft database site operating in excess of over 35 years, BTS "Bonoloto Spain" has serviced more than 900,000 customers in over 50 countries to date. BTS "Bonoloto Spain" distributes lottery products worldwide via mail-order, as a direct lottery service partner for a number of Europe, America, Africa, Asian and South Pacific nations and its industry leading TMS Global Services and operates under strict government supervision and is an accredited sales agent of the following Spanish lottery operators.
All right reserved by the bonoloto commission, if you had received this message by an error, please ignore or contact us at bonolotoresult@gmail.com reference clarification. Sign office management bonoloto spain.
