by buried under 419s
Fri Aug 11, 2017 8:38 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 11 Aug 2017 15:47:58 -0700
Received: from dns.sgps.tyc.edu.tw ([163.30.131.1]:36358 helo=mail.sgps.tyc.edu.tw)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dgIii-00034P-Tm
for m; Fri, 11 Aug 2017 15:47:58 -0700
Received: from User (unknown [175.100.6.246])
by mail.sgps.tyc.edu.tw (Postfix) with ESMTPA id 1EC4017A2C78;
Sat, 12 Aug 2017 06:44:38 +0800 (CST)
Reply-To: <[email protected]>
From: "Mrs Michelle Kim"<[email protected]>
Date: Fri, 11 Aug 2017 23:44:50 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=29.5
X-Spam-Score: 295
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system ""
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: This is to inform you that your email has been choosing as
part of the winners in the Google search engine and Microsoft lotto promotion.
Consequently,you have therefore been approved for a total payout of USD 1,000,000.00
ONE MILLION USD only Your email address emerged along side with 199 others
as a category of winner in this 2017 annual draw.Winning Number :MSQ/65-2001-Q1
Claims Agent:Mrs Michelle Kim Email: [email protected] Congratulations
once again from all our staffs and thank you for being part of our lucky
promotional program 2017. Best of luck. [...]
Content analysis details: (29.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[163.30.131.1 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[163.30.131.1 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?163.30.131.1>]
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(donationclaimoffice1[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 T_LOTTO_URI URI: Claims Department URL
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
4.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[163.30.131.1 listed in dnsbl.sorbs.net]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 T_HK_NAME_MR_MRS No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
1.6 MISSING_MID Missing Message-Id: header
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Lucky
This is to inform you that your email has been choosing as part of the winners in
the Google search engine and Microsoft lotto promotion. Consequently,you have
therefore been approved for a total payout of USD 1,000,000.00 ONE MILLION USD only
Your email address emerged along side with 199 others as a category of winner in
this 2017 annual draw.Winning Number :MSQ/65-2001-Q1
Claims Agent:Mrs Michelle Kim
Email: [email protected]
Congratulations once again from all our staffs and thank you for being part of our
lucky promotional program 2017.
Best of luck.
Envelope-to:
Delivery-date: Fri, 11 Aug 2017 15:47:58 -0700
Received: from dns.sgps.tyc.edu.tw ([163.30.131.1]:36358 helo=mail.sgps.tyc.edu.tw)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dgIii-00034P-Tm
for m; Fri, 11 Aug 2017 15:47:58 -0700
Received: from User (unknown [175.100.6.246])
by mail.sgps.tyc.edu.tw (Postfix) with ESMTPA id 1EC4017A2C78;
Sat, 12 Aug 2017 06:44:38 +0800 (CST)
Reply-To: <[email protected]>
From: "Mrs Michelle Kim"<[email protected]>
Date: Fri, 11 Aug 2017 23:44:50 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=29.5
X-Spam-Score: 295
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system ""
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: This is to inform you that your email has been choosing as
part of the winners in the Google search engine and Microsoft lotto promotion.
Consequently,you have therefore been approved for a total payout of USD 1,000,000.00
ONE MILLION USD only Your email address emerged along side with 199 others
as a category of winner in this 2017 annual draw.Winning Number :MSQ/65-2001-Q1
Claims Agent:Mrs Michelle Kim Email: [email protected] Congratulations
once again from all our staffs and thank you for being part of our lucky
promotional program 2017. Best of luck. [...]
Content analysis details: (29.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[163.30.131.1 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[163.30.131.1 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?163.30.131.1>]
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(donationclaimoffice1[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 T_LOTTO_URI URI: Claims Department URL
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
4.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[163.30.131.1 listed in dnsbl.sorbs.net]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 T_HK_NAME_MR_MRS No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
1.6 MISSING_MID Missing Message-Id: header
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Lucky
This is to inform you that your email has been choosing as part of the winners in
the Google search engine and Microsoft lotto promotion. Consequently,you have
therefore been approved for a total payout of USD 1,000,000.00 ONE MILLION USD only
Your email address emerged along side with 199 others as a category of winner in
this 2017 annual draw.Winning Number :MSQ/65-2001-Q1
Claims Agent:Mrs Michelle Kim
Email: [email protected]
Congratulations once again from all our staffs and thank you for being part of our
lucky promotional program 2017.
Best of luck.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces