by buried under 419s
Sun Nov 19, 2017 11:58 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 19 Nov 2017 04:03:57 -0800
Received: from [111.93.251.42] (port=53070 helo=mail.dgteam.in)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1eGOKG-0002eK-QP
for ; Sun, 19 Nov 2017 04:03:57 -0800
Received: from User (unknown [192.168.254.2])
by mail.dgteam.in (Postfix) with SMTP id 6947451845E;
Sat, 18 Nov 2017 22:55:58 +0530 (IST)
Reply-To: <[email protected]>
From: "Ludwig Willisch"<[email protected]>
Date: Sat, 18 Nov 2017 09:19:55 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=54.2
X-Spam-Score: 542
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: BMW OF NORTH AMERICA, LLC 300 CHESTNUT RIDGE ROAD WOODCLIFF
LAKE, NJ 07677-7731 [...]
Content analysis details: (54.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner"
1.7 NSL_RCVD_FROM_USER Received from User
1.9 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[111.93.251.42 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[111.93.251.42 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[111.93.251.42 listed in bb.barracudacentral.org]
0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?111.93.251.42>]
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.6 MSOE_MID_WRONG_CASE No description available.
1.0 KAM_LOTTO2 Highly Likely to be an e-Lotto Scam Email
0.0 LOTS_OF_MONEY Huge... sums of money
0.2 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.5 FROM_MISSP_USER From misspaced, from "User"
0.8 FSL_NEW_HELO_USER Spam's using Helo and User
0.4 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 KAM_LOTTO3 Almost certain to be an e-Lotto Scam Email
3.3 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.1 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
1.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
1.0 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.9 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Dear BMW Winner,
BMW OF NORTH AMERICA, LLC
300 CHESTNUT RIDGE ROAD
WOODCLIFF LAKE, NJ 07677-7731
UNITED STATES OF AMERICA.
WEBSITE: www.bmwusa.com
NOTE: If you received this message in your SPAM/BULK folder, that is because of the
restrictions implemented by your Internet Service Provider, we (BMW) urge you to
treat it genuinely.
Dear Winner,
This is to inform you that you have been selected for a prize of a brand new
2017/2018 Model BMW 5 Series Car and a Check of US$1,500,000.00 from the
international balloting program held on the 2nd section in the UNITED STATES OF
AMERICA.
Description of prize vehicle;
Model: 530iA Color (exterior): Metallic Silver Mileage: 5 Transmission: Automatic 6
Speed
Options: Cold weather package, premium package, fold down rear seats w/ski bag, am
fm stereo with single in dash compact disc player.
The selection process was carried out through random selection in our computerized
email selection system (ESS) from a database of over 250,000 email addresses drawn
from all the continents of the world which you were selected.
The BMW Lottery is approved by the British Gaming Board and also Licensed by the
International Association of Gaming Regulators (IAGR). To begin the processing of
your prize you are to contact our fiduciary claims department for more information
as regards procedures to the claim of your prize.
Name: Mr Henry James
Email: [email protected]
Contact him by providing him with your secret pin code Number
BMW:255125HGDY03/23.
You are also advised to provide him with the under listed information as soon as
possible:
1. Name In Full :
2. Residential Address :
3. Nationality :
4. Age :
5. Sex:
6. Occupation :
7. Direct Phone :
8. Present Country :
9. Email address :
10. pin code Number BMW:255125HGDY03/23
Please you are to provide him with the above listed details as soon as possible so
he can begin with the processing of your prize winnings.
Congratulations again from all our staff and thank you for being part of our
promotional program.
Mr Ludwig Willisch.
BMW NORTH AMERICA, LLC
UNITED STATES OF AMERICA
Envelope-to:
Delivery-date: Sun, 19 Nov 2017 04:03:57 -0800
Received: from [111.93.251.42] (port=53070 helo=mail.dgteam.in)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1eGOKG-0002eK-QP
for ; Sun, 19 Nov 2017 04:03:57 -0800
Received: from User (unknown [192.168.254.2])
by mail.dgteam.in (Postfix) with SMTP id 6947451845E;
Sat, 18 Nov 2017 22:55:58 +0530 (IST)
Reply-To: <[email protected]>
From: "Ludwig Willisch"<[email protected]>
Date: Sat, 18 Nov 2017 09:19:55 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=54.2
X-Spam-Score: 542
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: BMW OF NORTH AMERICA, LLC 300 CHESTNUT RIDGE ROAD WOODCLIFF
LAKE, NJ 07677-7731 [...]
Content analysis details: (54.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner"
1.7 NSL_RCVD_FROM_USER Received from User
1.9 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[111.93.251.42 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[111.93.251.42 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[111.93.251.42 listed in bb.barracudacentral.org]
0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?111.93.251.42>]
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.6 MSOE_MID_WRONG_CASE No description available.
1.0 KAM_LOTTO2 Highly Likely to be an e-Lotto Scam Email
0.0 LOTS_OF_MONEY Huge... sums of money
0.2 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.5 FROM_MISSP_USER From misspaced, from "User"
0.8 FSL_NEW_HELO_USER Spam's using Helo and User
0.4 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 KAM_LOTTO3 Almost certain to be an e-Lotto Scam Email
3.3 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.1 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
1.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
1.0 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.9 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Dear BMW Winner,
BMW OF NORTH AMERICA, LLC
300 CHESTNUT RIDGE ROAD
WOODCLIFF LAKE, NJ 07677-7731
UNITED STATES OF AMERICA.
WEBSITE: www.bmwusa.com
NOTE: If you received this message in your SPAM/BULK folder, that is because of the
restrictions implemented by your Internet Service Provider, we (BMW) urge you to
treat it genuinely.
Dear Winner,
This is to inform you that you have been selected for a prize of a brand new
2017/2018 Model BMW 5 Series Car and a Check of US$1,500,000.00 from the
international balloting program held on the 2nd section in the UNITED STATES OF
AMERICA.
Description of prize vehicle;
Model: 530iA Color (exterior): Metallic Silver Mileage: 5 Transmission: Automatic 6
Speed
Options: Cold weather package, premium package, fold down rear seats w/ski bag, am
fm stereo with single in dash compact disc player.
The selection process was carried out through random selection in our computerized
email selection system (ESS) from a database of over 250,000 email addresses drawn
from all the continents of the world which you were selected.
The BMW Lottery is approved by the British Gaming Board and also Licensed by the
International Association of Gaming Regulators (IAGR). To begin the processing of
your prize you are to contact our fiduciary claims department for more information
as regards procedures to the claim of your prize.
Name: Mr Henry James
Email: [email protected]
Contact him by providing him with your secret pin code Number
BMW:255125HGDY03/23.
You are also advised to provide him with the under listed information as soon as
possible:
1. Name In Full :
2. Residential Address :
3. Nationality :
4. Age :
5. Sex:
6. Occupation :
7. Direct Phone :
8. Present Country :
9. Email address :
10. pin code Number BMW:255125HGDY03/23
Please you are to provide him with the above listed details as soon as possible so
he can begin with the processing of your prize winnings.
Congratulations again from all our staff and thank you for being part of our
promotional program.
Mr Ludwig Willisch.
BMW NORTH AMERICA, LLC
UNITED STATES OF AMERICA
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces