by buried under 419s
Mon Jul 16, 2018 3:37 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 16 Jul 2018 12:21:53 -0700
Received: from mrichard.pck.nerim.net ([213.41.143.102]:57710 helo=mail.com)
by with smtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1ff946-0002lt-TJ
for ; Mon, 16 Jul 2018 12:21:52 -0700
Reply-To: <[email protected]>
From: "Mrs. Mary Maka" <[email protected]>
Date: Mon, 16 Jul 2018 21:21:26 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=48.7
X-Spam-Score: 487
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Winner, This is to inform you that you have been selected
for a prize of a brand new 2017 Model BMW 7 Series Car and a Check of $500,000.00
USD from the international balloting programs held in the UNITED STATE OF
AMERICA. [...]
Content analysis details: (48.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner"
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[213.41.143.102 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?213.41.143.102>]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(bmwwinninghome11[at]gmail.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=i ... ee.com;ip=]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=mail.com;ip=]
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
1.0 KAM_LOTTO2 Highly Likely to be an e-Lotto Scam Email
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.0 KAM_LOTTO3 Almost certain to be an e-Lotto Scam Email
1.0 HK_LOTTO No description available.
0.0 T_HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.5 DOS_OE_TO_MX Delivered direct to MX with OE headers
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
2.1 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Dear Winner, ---------------- BMW LOTTERY DEPARTMENT.
Dear Winner,
This is to inform you that you have been selected for a prize of a brand new 2017
Model BMW 7 Series Car and a Check of $500,000.00 USD from the international
balloting programs held in the UNITED STATE OF AMERICA.
The selection process was carried out through random selection in our computerized
email selection system (ESS) from a database of over 250,000 email addresses drawn
from all the continents of the world which you were selected.
The BMW Lottery is approved by the British Gaming Board and also Licensed by the
International Association of Gaming Regulators (IAGR). To begin the processing of
your prize you are to contact our fiduciary claims department for more information
as regards procedures to the claim of your prize.
Name: Mr.John Patrick
Email: [email protected]
Call : +18152169598
You are also advised to provide him with the under listed information as soon as
possible:
1. Name In Full :
2. Residential Address :
3. Nationality :
4. Age :
5. Occupation :
6. Direct Phone :
7. Present Country :
8. Email address :
Mrs. Mary Maka.
THE DIRECTOR PROMOTIONS
BMW LOTTERY DEPARTMENT
UNITED STATES OF AMERICA.
Envelope-to:
Delivery-date: Mon, 16 Jul 2018 12:21:53 -0700
Received: from mrichard.pck.nerim.net ([213.41.143.102]:57710 helo=mail.com)
by with smtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1ff946-0002lt-TJ
for ; Mon, 16 Jul 2018 12:21:52 -0700
Reply-To: <[email protected]>
From: "Mrs. Mary Maka" <[email protected]>
Date: Mon, 16 Jul 2018 21:21:26 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=48.7
X-Spam-Score: 487
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Winner, This is to inform you that you have been selected
for a prize of a brand new 2017 Model BMW 7 Series Car and a Check of $500,000.00
USD from the international balloting programs held in the UNITED STATE OF
AMERICA. [...]
Content analysis details: (48.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner"
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[213.41.143.102 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?213.41.143.102>]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(bmwwinninghome11[at]gmail.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=i ... ee.com;ip=]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=mail.com;ip=]
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
1.0 KAM_LOTTO2 Highly Likely to be an e-Lotto Scam Email
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.0 KAM_LOTTO3 Almost certain to be an e-Lotto Scam Email
1.0 HK_LOTTO No description available.
0.0 T_HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.5 DOS_OE_TO_MX Delivered direct to MX with OE headers
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
2.1 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Dear Winner, ---------------- BMW LOTTERY DEPARTMENT.
Dear Winner,
This is to inform you that you have been selected for a prize of a brand new 2017
Model BMW 7 Series Car and a Check of $500,000.00 USD from the international
balloting programs held in the UNITED STATE OF AMERICA.
The selection process was carried out through random selection in our computerized
email selection system (ESS) from a database of over 250,000 email addresses drawn
from all the continents of the world which you were selected.
The BMW Lottery is approved by the British Gaming Board and also Licensed by the
International Association of Gaming Regulators (IAGR). To begin the processing of
your prize you are to contact our fiduciary claims department for more information
as regards procedures to the claim of your prize.
Name: Mr.John Patrick
Email: [email protected]
Call : +18152169598
You are also advised to provide him with the under listed information as soon as
possible:
1. Name In Full :
2. Residential Address :
3. Nationality :
4. Age :
5. Occupation :
6. Direct Phone :
7. Present Country :
8. Email address :
Mrs. Mary Maka.
THE DIRECTOR PROMOTIONS
BMW LOTTERY DEPARTMENT
UNITED STATES OF AMERICA.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces