An
Email with the Subject "Winner" was
received in one of Scamdex's honeypot email accounts on Thu, 26 Feb 2009 06:41:40 -0800
and has been classified as a Generic Scam Email.
The sender shows as NORBERTO MALCOTTI <normal@racsa.co.cr>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submitted@scamdex.com
[delivery-date:] => Thu, 26 Feb 2009 06:41:40 -0800
[received:] => Array
(
[0] => from mail2.racsa.co.cr ([196.40.31.26] helo=barracuda5.racsa.co.cr)by fire.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1LchQi-0003Uo-8Efor submitted@scamdex.com; Thu, 26 Feb 2009 06:41:40 -0800
[1] => from mta1.racsa.co.cr (localhost [127.0.0.1])by barracuda5.racsa.co.cr (Spam Firewall) with ESMTP id 8934D28A4E69for ; Thu, 26 Feb 2009 08:41:36 -0600 (CST)
[2] => from mta1.racsa.co.cr ([172.16.7.10]) by barracuda5.racsa.co.cr with ESMTP id qlH2YfHgD8SW44YL for ; Thu, 26 Feb 2009 08:41:36 -0600 (CST)
[3] => from racsa.co.cr ([172.16.13.100])by mta1.racsa.co.cr (Servidor ESMTP - RACSA)with ESMTPA id <0KFO007HUGTCFOD0@mta1.racsa.co.cr> for submitted@scamdex.com;Thu, 26 Feb 2009 08:41:36 -0600 (CST)
[4] => from [172.16.9.20] (Forwarded-For: 212.116.219.52)by webmail1.racsa.co.cr (mshttpd); Thu, 26 Feb 2009 06:41:36 -0800
)
[x-asg-debug-id:] => 1235659296-306901120000-0ig87g
[x-barracuda-url:] => http://172.16.1.14:8000/cgi-bin/mark.cgi
[sender:] => normal@racsa.co.cr
[from:] => NORBERTO MALCOTTI
[bcc:] =>
[reply-to:] => pr_moto1@yahoo.com.hk
[x-mailer:] => Array
(
[0] => :Message-id:
[1] => Servicio Http - RACSA
)
[date:] => Thu, 26 Feb 2009 06:41:36 -0800
[mime-version:] => 1.0
[content-language:] => es
[x-asg-orig-subj:] => Winner
[subject:] => Winner
[x-accept-language:] => es
[priority:] => normal
[content-type:] => multipart/alternative; boundary=--206807d0a864536352f72
[x-barracuda-connect:] => UNKNOWN[172.16.7.10]
[x-barracuda-start-time:] => 1235659296
[x-barracuda-virus-scanned:] => by Barracuda Spam Firewall at racsa.co.cr
[x-barracuda-spam-score:] => 1.58
[x-barracuda-spam-status:] => No, SCORE=1.58 using global scores of TAG_LEVEL=4.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=6.0 tests=HTML_MESSAGE, MISSING_HEADERS, TO_CC_NONE
[x-barracuda-spam-report:] => Code version 3.2, rules version 3.2.1.18897Rule breakdown below pts rule name description---- ---------------------- --------------------------------------------------1.58 MISSING_HEADERS Missing To: header0.00 HTML_MESSAGE BODY: HTML included in message0.00 TO_CC_NONE No To: or Cc: header
[x-spam-status:] => No, score=1.6
[x-spam-score:] => 16
[x-spam-bar:] => +
[x-spam-flag:] => NO
[message-id:] =>
[x-scamdex-scores:] => S:47 P:45 A:50 L:63 E:47 G:43
[x-scamdex-classtype:] => L
[x-scamdex-classscore:] => 63
[x-scamdex-totscore:] => 295
[x-scamdex-kw:] => claim,congratulations,contact,global,hundred thousand,inc.,opportunity,prize,process,promotion,promotions,report,resident,serial number,ticket,verification,winn
[x-scamdex-em:] => normal@racsa.co.cr,pr_moto1@yahoo.com.hk
[x-scamdex-dir:] => B
[x-scamdex-id:] => B1235659300.H940046P13455
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
MOTOROLA EMAIL PROMOTIONS 2009 52 Chiswell Street, The City, London, EC1Y 4SD, United Kingdom Ticket No: 45397 Batch No: MOTO/2787/334/944/08 Serial No: 43624
Congratulations to you, from the MEGA JACKPOT held by Motorola company World wide few days ago your email address attached with ticket number: 45397 with Serial number 6525/06 and draw number 6 Meaning you have been approved to claim the sum of £400,000 (Four hundred thousand pound) . We want to inform you that we are bringing this opportunity to you as a result of the high profit that Motorola Company have made over last year and we also want people to know more about our products. You are advice to get back to us with the below information for proper verification. Full Name:___________________________________ Mailing address:_______________________________ Permanent house address:___________________ Country of resident:____________________________ Phone Number:_____________________________ Fax Number:_______________________________ Winning Email:______________ Age:______________ Occupation:______________ Next Of Kin:___________________________ Once the above information has been received then we shall process your winning prize (£400,000) attach to the Batch No: MOTO/2787/334/944/08 for the immediate delivery to you. Once more all the members of Motorola company say congratulations to you. For more information. Contact us with the below information. Mr Roland Peter, (pr_moto1@yahoo.com.hk)
MOTOROLA EMAIL PROMOTIONS 2009 52 Chiswell Street, The City, London, EC1Y 4SD, United Kingdom Ticket No: 45397 Batch No: MOTO/2787/334/944/08 Serial No: 43624
Congratulations to you, from the MEGA JACKPOT held by Motorola company World wide few days ago your email address attached with ticket number: 45397 with Serial number 6525/06 and draw number 6 Meaning you have been approved to claim the sum of £400,000 (Four hundred thousand pound) . We want to inform you that we are bringing this opportunity to you as a result of the high profit that Motorola Company have made over last year and we also want people to know more about our products. You are advice to get back to us with the below information for proper verification. Full Name:___________________________________ Mailing address:_______________________________ Permanent house address:___________________ Country of resident:____________________________ Phone Number:_____________________________ Fax Number:_______________________________ Winning Email:______________ Age:______________ Occupation:______________ Next Of Kin:___________________________ Once the above information has been received then we shall process your winning prize (£400,000) attach to the Batch No: MOTO/2787/334/944/08 for the immediate delivery to you. Once more all the members of Motorola company say congratulations to you. For more information. Contact us with the below information. Mr Roland Peter, (pr_moto1@yahoo.com.hk)
