by buried under 419s
Mon Sep 24, 2018 9:17 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 24 Sep 2018 01:24:46 -0700
Received: from nvmail1.nv.gov ([167.154.11.116]:51473)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1g4MAb-0000JV-7W
for ; Mon, 24 Sep 2018 01:24:45 -0700
X-ASG-Debug-ID: 1537775265-07705531f2f4960001-TxaM9A
Received: from msecmail.nv.gov (asecmail.nv.gov [167.154.10.238]) by nvmail1.nv.gov with ESMTP id Z4ldxO2fpo9pSU9y (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Mon, 24 Sep 2018 00:47:45 -0700 (PDT)
X-Barracuda-Envelope-From: [email protected]
X-Barracuda-Effective-Source-IP: asecmail.nv.gov[167.154.10.238]
X-Barracuda-Apparent-Source-IP: 167.154.10.238
X-ASG-Whitelist: Client
Received: from pps.filterd (asecmail1.nv.gov [127.0.0.1])
by asecmail1.nv.gov (8.16.0.22/8.16.0.22) with SMTP id w8O7ZpLd020290;
Mon, 24 Sep 2018 00:47:45 -0700
Received: from ccexchhbrid02.state.nv.us (ccexchhbrid02.state.nv.us [10.128.2.204])
by asecmail1.nv.gov with ESMTP id 2mnkq2012k-3
(version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT);
Mon, 24 Sep 2018 00:47:45 -0700
Received: from CCEXCH02.STATE.NV.US ([10.131.10.49]) by
CCEXCHHBRID02.STATE.NV.US ([fe80::5995:5a17:85c1:b56d%12]) with mapi id
14.03.0399.000; Mon, 24 Sep 2018 00:47:39 -0700
From: Wendy Labon <[email protected]>
To: "[email protected]" <[email protected]>
Subject: =?windows-1255?Q?Re:_You_Won=FE=FE=FE?=
Thread-Topic: =?windows-1255?Q?Re:_You_Won=FE=FE=FE?=
X-ASG-Orig-Subj: =?windows-1255?Q?Re:_You_Won=FE=FE=FE?=
Thread-Index: AdKCuHnmI2k+0zMvSq2XV/eY9QUYdg==
Date: Mon, 24 Sep 2018 07:47:42 +0000
Message-ID: <[email protected]>
Reply-To: "[email protected]"
<[email protected]>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.131.10.8]
Content-Type: multipart/alternative;
boundary="_000_55D310B643F40B4EAFAC63A3FD258D3E78358C7FCCEXCH02STATENV_"
MIME-Version: 1.0
X-Barracuda-Connect: asecmail.nv.gov[167.154.10.238]
X-Barracuda-Start-Time: 1537775265
X-Barracuda-Encrypted: ECDHE-RSA-AES256-GCM-SHA384
X-Barracuda-URL: https://nvmail1.nv.gov:443/cgi-mod/mark.cgi
X-Barracuda-BRTS-Status: 1
X-Barracuda-Fingerprint-Found: *Spam.Unknown (d501b4a17fce93b20645744815539a19-2394-htm)
X-Virus-Scanned: by bsmtpd at nv.gov
X-Barracuda-Scan-Msg-Size: 2542
X-Spam-Status: No, score=2.9
X-Spam-Score: 29
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Reply back for your powerball-lottery winning prize($2,500,000.00
USD). Reply back for your powerball-lottery winning prize($2,500,000.00 USD).
[...]
Content analysis details: (2.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9987]
-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium
trust
[167.154.11.116 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
X-Spam-Flag: NO
Reply back for your powerball-lottery winning prize($2,500,000.00 USD).
Envelope-to:
Delivery-date: Mon, 24 Sep 2018 01:24:46 -0700
Received: from nvmail1.nv.gov ([167.154.11.116]:51473)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1g4MAb-0000JV-7W
for ; Mon, 24 Sep 2018 01:24:45 -0700
X-ASG-Debug-ID: 1537775265-07705531f2f4960001-TxaM9A
Received: from msecmail.nv.gov (asecmail.nv.gov [167.154.10.238]) by nvmail1.nv.gov with ESMTP id Z4ldxO2fpo9pSU9y (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Mon, 24 Sep 2018 00:47:45 -0700 (PDT)
X-Barracuda-Envelope-From: [email protected]
X-Barracuda-Effective-Source-IP: asecmail.nv.gov[167.154.10.238]
X-Barracuda-Apparent-Source-IP: 167.154.10.238
X-ASG-Whitelist: Client
Received: from pps.filterd (asecmail1.nv.gov [127.0.0.1])
by asecmail1.nv.gov (8.16.0.22/8.16.0.22) with SMTP id w8O7ZpLd020290;
Mon, 24 Sep 2018 00:47:45 -0700
Received: from ccexchhbrid02.state.nv.us (ccexchhbrid02.state.nv.us [10.128.2.204])
by asecmail1.nv.gov with ESMTP id 2mnkq2012k-3
(version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT);
Mon, 24 Sep 2018 00:47:45 -0700
Received: from CCEXCH02.STATE.NV.US ([10.131.10.49]) by
CCEXCHHBRID02.STATE.NV.US ([fe80::5995:5a17:85c1:b56d%12]) with mapi id
14.03.0399.000; Mon, 24 Sep 2018 00:47:39 -0700
From: Wendy Labon <[email protected]>
To: "[email protected]" <[email protected]>
Subject: =?windows-1255?Q?Re:_You_Won=FE=FE=FE?=
Thread-Topic: =?windows-1255?Q?Re:_You_Won=FE=FE=FE?=
X-ASG-Orig-Subj: =?windows-1255?Q?Re:_You_Won=FE=FE=FE?=
Thread-Index: AdKCuHnmI2k+0zMvSq2XV/eY9QUYdg==
Date: Mon, 24 Sep 2018 07:47:42 +0000
Message-ID: <[email protected]>
Reply-To: "[email protected]"
<[email protected]>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.131.10.8]
Content-Type: multipart/alternative;
boundary="_000_55D310B643F40B4EAFAC63A3FD258D3E78358C7FCCEXCH02STATENV_"
MIME-Version: 1.0
X-Barracuda-Connect: asecmail.nv.gov[167.154.10.238]
X-Barracuda-Start-Time: 1537775265
X-Barracuda-Encrypted: ECDHE-RSA-AES256-GCM-SHA384
X-Barracuda-URL: https://nvmail1.nv.gov:443/cgi-mod/mark.cgi
X-Barracuda-BRTS-Status: 1
X-Barracuda-Fingerprint-Found: *Spam.Unknown (d501b4a17fce93b20645744815539a19-2394-htm)
X-Virus-Scanned: by bsmtpd at nv.gov
X-Barracuda-Scan-Msg-Size: 2542
X-Spam-Status: No, score=2.9
X-Spam-Score: 29
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Reply back for your powerball-lottery winning prize($2,500,000.00
USD). Reply back for your powerball-lottery winning prize($2,500,000.00 USD).
[...]
Content analysis details: (2.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9987]
-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium
trust
[167.154.11.116 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
X-Spam-Flag: NO
Reply back for your powerball-lottery winning prize($2,500,000.00 USD).
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces