[email protected] National Lottery Commission

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 25 Jun 2017 10:34:56 -0700
Received: from mail.jomarca.com.br ([200.201.208.15]:41568)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dPBR1-0006JL-6e
for ; Sun, 25 Jun 2017 10:34:56 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.jomarca.com.br (Postfix) with ESMTP id 415EE57ADF4;
Sun, 25 Jun 2017 13:52:47 -0300 (BRT)
X-Virus-Scanned: amavisd-new at jomarca.com.br
Received: from mail.jomarca.com.br ([127.0.0.1])
by localhost (mail.jomarca.com.br [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 3plX62lm6IXC; Sun, 25 Jun 2017 13:52:46 -0300 (BRT)
Received: from [10.137.168.244] (unknown [197.211.61.151])
by mail.jomarca.com.br (Postfix) with ESMTPSA id E5ED157ADE8;
Sun, 25 Jun 2017 13:52:29 -0300 (BRT)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr. Jack Jordan" <[email protected]>
Date: Sun, 25 Jun 2017 18:24:04 +0100
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=22.8
X-Spam-Score: 228
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: National Lottery Commission, 101 Wigmore Street, London W1U
1QU. MEGA/JACKPOT We wish to inform you of the Lottery Draw held by National
Lottery Commission here in London and this draw is held monthly and tag Mega/Jackpot,and
and your email address Won the Draw and was gotten through United Kingdom
Information Network Online (U.K.I.N.O) which is affiliated with the internet.
so please contact your claims manager with details below and also provide
him with the requested information so that he can expedite the processing
on your winning payment. [...]

Content analysis details: (22.8 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[200.201.208.15 listed in list.dnswl.org]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[200.201.208.15 listed in bb.barracudacentral.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[197.211.61.151 listed in zen.spamhaus.org]
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(uklottery017[at]yahoo.com)
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
3.3 LOTTERY_PH_004470 No description available.
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
0.0 T_HK_NAME_MR_MRS No description available.
1.0 KAM_LOTTO2 Highly Likely to be an e-Lotto Scam Email
0.0 LOTS_OF_MONEY Huge... sums of money
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
1.0 HK_LOTTO No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 LOTTO_DEPT Claims Department
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Lottery Draw


National Lottery Commission,
101 Wigmore Street,
London W1U 1QU.

MEGA/JACKPOT




NAME:
==========================
COUNTRY:
==========================
ADDRESS:
==========================
OCCUPATION:
==========================
Gender:
==========================
AGE:
==========================
CITY:
==========================
STATE/PROV:
==========================
ZIP/POSTAL CODE:
==========================
PHONE:
==========================
FAX:
==========================
EMAIL:
==========================


Mr. Jack Jordan
Claims Manager
Foreign Claims Department,
Email: [email protected]
Tel: +44 704 573 6923
Fax: +44 870 471 9707

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 28 Jan 2018 16:48:29 -0800
Received: from aif154.rev.netart.pl ([77.55.213.154]:33376 helo=jvseteckabh.nazwa.pl)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1efxca-0007F7-Gk
for ; Sun, 28 Jan 2018 16:48:29 -0800
Received: from [10.218.127.155] (unknown [197.211.61.65])
by jvseteckabh.nazwa.pl (Postfix) with ESMTPSA id CBFC56DC991;
Mon, 29 Jan 2018 00:22:52 +0100 (CET)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr. Jack Jordan" <[email protected]>
Date: Mon, 29 Jan 2018 00:22:15 -0800
Reply-To: [email protected]
X-Spam-Status: Yes, score=37.2
X-Spam-Score: 372
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: National Lottery Commission, 101 Wigmore Street, London W1U
1QU. Ref:ZA/144132/1211 Batch: 22/523009/LHINT MEGA/JACKPOT [...]

Content analysis details: (37.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.9 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[77.55.213.154 listed in bb.barracudacentral.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=i ... roject.com]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[197.211.61.65 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?197.211.61.65>]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(uklottery017[at]yahoo.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
0.0 T_HK_NAME_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 KAM_LOTTO2 Highly Likely to be an e-Lotto Scam Email
3.3 LOTTERY_PH_004470 No description available.
1.6 MISSING_MID Missing Message-Id: header
1.0 HK_LOTTO No description available.
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_LOTTO_AGENT Claims Agent
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
1.0 MONEY_FORM Lots of money if you fill out a form
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.5 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Lottery Draw

National Lottery Commission,
101 Wigmore Street,
London W1U 1QU.


Ref:ZA/144132/1211
Batch: 22/523009/LHINT

MEGA/JACKPOT






NAME:
==========================
COUNTRY:
==========================
ADDRESS:
==========================
OCCUPATION:
==========================
Gender:
==========================
AGE:
==========================
CITY:
==========================
STATE/PROV:
==========================
ZIP/POSTAL CODE:
==========================
PHONE:
==========================
FAX:
==========================
EMAIL:
==========================
REFERENCE NUMBER:
==========================
BATCH NUMBER:
==========================



Mr. Jack Jordan
Claims Manager
Foreign Claims Department,
Email:[email protected]
Tel: +44 704 573 6923
Fax: +44 870 471 9707