by buried under 419s
Thu Sep 13, 2018 8:30 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 13 Sep 2018 14:28:30 -0700
Received: from hs0201.knet.ne.jp ([210.233.182.12]:45886)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1g0ZA1-000226-0u
for ; Thu, 13 Sep 2018 14:28:30 -0700
Received: from [192.168.9.100] (8ta-250-27-60.telkomadsl.co.za [102.250.27.60])
by hs0201.knet.ne.jp (Postfix) with ESMTPSA id 1F8AD684D4;
Fri, 14 Sep 2018 02:33:04 +0900 (JST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: [email protected]
Date: Thu, 13 Sep 2018 19:29:07 +0200
Reply-To: [email protected]
X-Spam-Status: Yes, score=16.7
X-Spam-Score: 167
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: you have won $1.8million in our ongoing powerball lottery
SA contact for claims via {[email protected]} THANKS BROWN [...]
Content analysis details: (16.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[210.233.182.12 listed in list.dnswl.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[210.233.182.12 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(powerball967[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(powerball[at]msn.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MISSING_MID Missing Message-Id: header
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** RE
you have won $1.8million in our ongoing powerball lottery SA contact for claims via
{ [email protected] }
THANKS
BROWN
Envelope-to:
Delivery-date: Thu, 13 Sep 2018 14:28:30 -0700
Received: from hs0201.knet.ne.jp ([210.233.182.12]:45886)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1g0ZA1-000226-0u
for ; Thu, 13 Sep 2018 14:28:30 -0700
Received: from [192.168.9.100] (8ta-250-27-60.telkomadsl.co.za [102.250.27.60])
by hs0201.knet.ne.jp (Postfix) with ESMTPSA id 1F8AD684D4;
Fri, 14 Sep 2018 02:33:04 +0900 (JST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: [email protected]
Date: Thu, 13 Sep 2018 19:29:07 +0200
Reply-To: [email protected]
X-Spam-Status: Yes, score=16.7
X-Spam-Score: 167
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: you have won $1.8million in our ongoing powerball lottery
SA contact for claims via {[email protected]} THANKS BROWN [...]
Content analysis details: (16.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[210.233.182.12 listed in list.dnswl.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[210.233.182.12 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(powerball967[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(powerball[at]msn.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MISSING_MID Missing Message-Id: header
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** RE
you have won $1.8million in our ongoing powerball lottery SA contact for claims via
{ [email protected] }
THANKS
BROWN
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces