by buried under 419s
Fri May 19, 2017 8:33 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 19 May 2017 10:51:31 -0700
Received: from filter01nm-vif2-tele2.se.isp-net.nl ([82.215.18.7]:44673)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dBm3l-0006PA-Ml
for ; Fri, 19 May 2017 10:51:30 -0700
Received: from smtp04.tele2.isp-net.nl ([82.215.18.81])
by filter01nm.se.isp-net.nl with esmtp (Exim 4.86)
(envelope-from <[email protected]>)
id 1dBm2r-0002G6-Mf; Fri, 19 May 2017 19:50:35 +0200
Received: from LAPTOP-URG1OBVC.WirelessAP (unknown [175.141.219.207])
by smtp04.tele2.isp-net.nl (Postfix) with ESMTPSA id E9F38135B;
Fri, 19 May 2017 19:50:24 +0200 (CEST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "WESTERN UNION GRANT 2017" <[email protected]>
Date: Sat, 20 May 2017 01:50:18 +0800
Reply-To: [email protected]
Message-ID: <[email protected]>
X-Originating-IP: 82.215.18.81
X-SpamExperts-Domain: tele2.nl
X-SpamExperts-Username: 82.215.18.64/27
Authentication-Results: se.isp-net.nl; auth=pass smtp.auth=82.215.18.64/[email protected]
X-SpamExperts-Outgoing-Class: unsure
X-SpamExperts-Outgoing-Evidence: Combined (0.88)
X-Recommended-Action: accept
X-Filter-ID: s0sct1PQhAABKnZB5plbIW/2stWAdz3Hi26+UHHVIXDrV+pGyqUUafNQ12AWLXQl/bPom7IVowNb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X-Report-Abuse-To: [email protected]
X-Spam-Status: Yes, score=10.4
X-Spam-Score: 104
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: YOU WON __ Reply For Details : [...]
Content analysis details: (10.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[82.215.18.7 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_LOTTO_AGENT_RPLY Claims Agent
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** __ $500,000.00 USD
YOU WON __ Reply For Details :
Envelope-to:
Delivery-date: Fri, 19 May 2017 10:51:31 -0700
Received: from filter01nm-vif2-tele2.se.isp-net.nl ([82.215.18.7]:44673)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dBm3l-0006PA-Ml
for ; Fri, 19 May 2017 10:51:30 -0700
Received: from smtp04.tele2.isp-net.nl ([82.215.18.81])
by filter01nm.se.isp-net.nl with esmtp (Exim 4.86)
(envelope-from <[email protected]>)
id 1dBm2r-0002G6-Mf; Fri, 19 May 2017 19:50:35 +0200
Received: from LAPTOP-URG1OBVC.WirelessAP (unknown [175.141.219.207])
by smtp04.tele2.isp-net.nl (Postfix) with ESMTPSA id E9F38135B;
Fri, 19 May 2017 19:50:24 +0200 (CEST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "WESTERN UNION GRANT 2017" <[email protected]>
Date: Sat, 20 May 2017 01:50:18 +0800
Reply-To: [email protected]
Message-ID: <[email protected]>
X-Originating-IP: 82.215.18.81
X-SpamExperts-Domain: tele2.nl
X-SpamExperts-Username: 82.215.18.64/27
Authentication-Results: se.isp-net.nl; auth=pass smtp.auth=82.215.18.64/[email protected]
X-SpamExperts-Outgoing-Class: unsure
X-SpamExperts-Outgoing-Evidence: Combined (0.88)
X-Recommended-Action: accept
X-Filter-ID: s0sct1PQhAABKnZB5plbIW/2stWAdz3Hi26+UHHVIXDrV+pGyqUUafNQ12AWLXQl/bPom7IVowNb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X-Report-Abuse-To: [email protected]
X-Spam-Status: Yes, score=10.4
X-Spam-Score: 104
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: YOU WON __ Reply For Details : [...]
Content analysis details: (10.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[82.215.18.7 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_LOTTO_AGENT_RPLY Claims Agent
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** __ $500,000.00 USD
YOU WON __ Reply For Details :
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces