by buried under 419s
Thu Jan 24, 2019 11:03 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 24 Jan 2019 18:44:34 -0800
Received: from 230.rafmarham.org.uk ([62.172.235.230]:60039 helo=our.madebysonder.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1gmrTr-00051K-Bf
for ; Thu, 24 Jan 2019 18:44:33 -0800
Received: from User (unknown [185.23.213.90])
by our.madebysonder.com (Postfix) with ESMTPA id B0F043623BC4;
Wed, 23 Jan 2019 16:23:22 +0000 (GMT)
Reply-To: <[email protected]>
From: "BMW Lottery Promotion"<[email protected]>
Date: Wed, 23 Jan 2019 21:23:25 +0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=41.0
X-Spam-Score: 410
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: BMW LOTTERY DEPARTMENT 5070 WILSHIRE BLVD LOS ANGELES. CA
90036 UNITED STATES OF AMERICA. EMAIL: [email protected] Phone: +1(202)
495-0762 ( call/text ) NOTE: If you received this message in your SPAM/BULK
folder, that is because of the restrictions implemented by your Internet
Service Provider, we (BMW) urge you to treat it genuinely. [...]
Content analysis details: (41.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner"
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 NSL_RCVD_FROM_USER Received from User
0.0 HK_RANDOM_FROM From username looks random
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[62.172.235.230 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[62.172.235.230 listed in bl.score.senderscore.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[62.172.235.230 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?62.172.235.230>]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(garydespencer69[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(info_winningbmw[at]mail.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=i ... il.com;ip=]
0.0 MILLION_USD BODY: Talks about millions of dollars
1.0 FROM_MISSP_SPF_FAIL No description available.
1.0 KAM_LOTTO2 Highly Likely to be an e-Lotto Scam Email
0.0 BIGNUM_EMAILS Lots of email addresses/leads
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 HK_LOTTO No description available.
0.0 MALFORMED_FREEMAIL Bad headers on message from free email service
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.0 KAM_LOTTO3 Almost certain to be an e-Lotto Scam Email
1.6 MISSING_MID Missing Message-Id: header
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.6 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOU HAVE WON A BMW CAR AND A CHECK FOR $1.5 MILLION USD.
BMW LOTTERY DEPARTMENT
5070 WILSHIRE BLVD
LOS ANGELES. CA 90036
UNITED STATES OF AMERICA.
EMAIL: [email protected]
Phone: +1(202) 495-0762 ( call/text )
NOTE: If you received this message in your SPAM/BULK folder, that is
because of the restrictions implemented by your Internet Service
Provider, we (BMW) urge you to treat it genuinely.
Dear Winner,
This is to inform you that you have been selected for a prize of a
brand new 2017/2018 Model BMW x7 Series Car and a Check of
$1,500,000.00 USD from the international balloting programs held on
the 2nd section in the UNITED STATE OF AMERICA.
Description of prize vehicle;
Model: 530iA Color (exterior): Metallic Silver Mileage: 5
Transmission: Automatic 6 Speed
Options: Cold weather package, premium package, fold down rear seats
w/ski bag, am fm stereo with single in dash compact disc player.
The selection process was carried out through random selection in our
computerized email selection system (ESS) from a database of over
250,000 email addresses drawn from all the continents of the world
which you were selected.
The BMW Lottery is approved by the British Gaming Board and also
Licensed by the International Association of Gaming Regulators (IAGR).
To begin the processing of your prize you are to contact our fiduciary
claims department for more information as regards procedures to the
claim of your prize.
Name: Mr.Gary Spenncer
Email: [email protected]
Phone: +1(202) 495-0762 ( call/text )
Contact him by providing him with your secret pin code Number
BMW:255125HGDY03/23.
You are also advised to provide him with the under listed information
as soon as possible:
1. Name In Full :
2. Residential Address :
3. Nationality :
4. Age :
5. Sex
6. Occupation :
7. Direct Phone :
8. Present Country :
9. Email address :
10. pin code Number BMW:255125HGDY03/23
Please you are to provide him with the above listed details as soon as
possible so he can begin with the processing of your prize winnings.
Congratulations again from all our staff and thank you for being part
of our promotional program.
Mrs. Rachael Adams.
THE DIRECTOR PROMOTIONS
BMW LOTTERY DEPARTMENT
UNITED STATES OF AMERICA
Envelope-to:
Delivery-date: Thu, 24 Jan 2019 18:44:34 -0800
Received: from 230.rafmarham.org.uk ([62.172.235.230]:60039 helo=our.madebysonder.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1gmrTr-00051K-Bf
for ; Thu, 24 Jan 2019 18:44:33 -0800
Received: from User (unknown [185.23.213.90])
by our.madebysonder.com (Postfix) with ESMTPA id B0F043623BC4;
Wed, 23 Jan 2019 16:23:22 +0000 (GMT)
Reply-To: <[email protected]>
From: "BMW Lottery Promotion"<[email protected]>
Date: Wed, 23 Jan 2019 21:23:25 +0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=41.0
X-Spam-Score: 410
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: BMW LOTTERY DEPARTMENT 5070 WILSHIRE BLVD LOS ANGELES. CA
90036 UNITED STATES OF AMERICA. EMAIL: [email protected] Phone: +1(202)
495-0762 ( call/text ) NOTE: If you received this message in your SPAM/BULK
folder, that is because of the restrictions implemented by your Internet
Service Provider, we (BMW) urge you to treat it genuinely. [...]
Content analysis details: (41.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner"
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 NSL_RCVD_FROM_USER Received from User
0.0 HK_RANDOM_FROM From username looks random
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[62.172.235.230 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[62.172.235.230 listed in bl.score.senderscore.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[62.172.235.230 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?62.172.235.230>]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(garydespencer69[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(info_winningbmw[at]mail.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=i ... il.com;ip=]
0.0 MILLION_USD BODY: Talks about millions of dollars
1.0 FROM_MISSP_SPF_FAIL No description available.
1.0 KAM_LOTTO2 Highly Likely to be an e-Lotto Scam Email
0.0 BIGNUM_EMAILS Lots of email addresses/leads
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 HK_LOTTO No description available.
0.0 MALFORMED_FREEMAIL Bad headers on message from free email service
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.0 KAM_LOTTO3 Almost certain to be an e-Lotto Scam Email
1.6 MISSING_MID Missing Message-Id: header
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.6 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOU HAVE WON A BMW CAR AND A CHECK FOR $1.5 MILLION USD.
BMW LOTTERY DEPARTMENT
5070 WILSHIRE BLVD
LOS ANGELES. CA 90036
UNITED STATES OF AMERICA.
EMAIL: [email protected]
Phone: +1(202) 495-0762 ( call/text )
NOTE: If you received this message in your SPAM/BULK folder, that is
because of the restrictions implemented by your Internet Service
Provider, we (BMW) urge you to treat it genuinely.
Dear Winner,
This is to inform you that you have been selected for a prize of a
brand new 2017/2018 Model BMW x7 Series Car and a Check of
$1,500,000.00 USD from the international balloting programs held on
the 2nd section in the UNITED STATE OF AMERICA.
Description of prize vehicle;
Model: 530iA Color (exterior): Metallic Silver Mileage: 5
Transmission: Automatic 6 Speed
Options: Cold weather package, premium package, fold down rear seats
w/ski bag, am fm stereo with single in dash compact disc player.
The selection process was carried out through random selection in our
computerized email selection system (ESS) from a database of over
250,000 email addresses drawn from all the continents of the world
which you were selected.
The BMW Lottery is approved by the British Gaming Board and also
Licensed by the International Association of Gaming Regulators (IAGR).
To begin the processing of your prize you are to contact our fiduciary
claims department for more information as regards procedures to the
claim of your prize.
Name: Mr.Gary Spenncer
Email: [email protected]
Phone: +1(202) 495-0762 ( call/text )
Contact him by providing him with your secret pin code Number
BMW:255125HGDY03/23.
You are also advised to provide him with the under listed information
as soon as possible:
1. Name In Full :
2. Residential Address :
3. Nationality :
4. Age :
5. Sex
6. Occupation :
7. Direct Phone :
8. Present Country :
9. Email address :
10. pin code Number BMW:255125HGDY03/23
Please you are to provide him with the above listed details as soon as
possible so he can begin with the processing of your prize winnings.
Congratulations again from all our staff and thank you for being part
of our promotional program.
Mrs. Rachael Adams.
THE DIRECTOR PROMOTIONS
BMW LOTTERY DEPARTMENT
UNITED STATES OF AMERICA
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces