by buried under 419s
Thu Jun 02, 2011 3:44 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 01 Jun 2011 23:38:09 -0700
Received: from smtp3.ofs.edu.sg ([203.117.131.52])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QS1Xj-0000MD-Uj
for ; Wed, 01 Jun 2011 23:38:09 -0700
Received: from User ([182.63.165.224])
(authenticated bits=0)
by smtp3.ofs.edu.sg (8.14.3/8.13.0) with ESMTP id p526bB3V013932
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
Thu, 2 Jun 2011 14:37:15 +0800
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "VW Motors Email Lottery"<[email protected]>
Subject: Prize Money!
Date: Thu, 2 Jun 2011 08:37:29 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00DD_01C2A9A6.62D7D130"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 110601-1, 06/01/2011), Outbound message
X-Antivirus-Status: Clean
X-Virus-Scanned: clamav-milter 0.96.1 at box1
X-Virus-Status: Clean
X-Spam-Flag: YES
X-Spam-Status: Yes, score=8.2 required=7.0 tests=BAYES_50,DOS_OE_TO_MX,
FORGED_MUA_OUTLOOK,MISSING_HEADERS,MISSING_MID,RCVD_IN_PBL,RDNS_NONE
autolearn=no version=3.2.5
X-Spam-Level: ********
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on box1.ofs.edu.sg
X-Greylist: Sender succeeded SMTP AUTH authentication, not delayed by milter-greylist-3.0 (smtp3.ofs.edu.sg [10.1.0.187]); Thu, 02 Jun 2011 14:37:37 +0800 (SGT)
X-Spam-Subject: ***SPAM*** Prize Money!
X-Spam-Status: Yes, score=19.3
X-Spam-Score: 193
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Congratulation Your Email Was Selected, Please Kindly View
The Attached File For Your Claims!!! [...]
Content analysis details: (19.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.2 NSL_RCVD_FROM_USER Received from User
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<customer_unit003[at]yahoo.com.hk>
)
1.0 MISSING_HEADERS Missing To: header
0.4 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
0.0 T_HK_SPAMMY_FILENAME T_HK_SPAMMY_FILENAME
0.0 FROM_MISSPACED From: missing whitespace
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.9 FROM_MISSP_NO_TO From misspaced, To missing
0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
1.5 FROM_MISSP_USER From misspaced, from "User"
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
This is a multi-part message in MIME format.
------=_NextPart_000_00DD_01C2A9A6.62D7D130
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
You have been approved for a payout of a total sum 1,050,000 GBP (ONE
MILLION & FIFTY THOUSAND BRITISH POUNDS) in the VW Motors Email Lottery
Promotion held on the 30Th May 2011.
To file your claim, you are to contact our Customer Service Unit
CONTACT PERSON
Mr. Eddie Goodman.
+44-703-190-7688
Email: [email protected]
20 Queens land Road, London
SW2 3JB ENGLAND. U.K
you are to provide to your agents the below under listed
information as soon as possible:
1. NAME IN FULL:
2. ADDRESS (IN FULL):
3. NATIONALITY:
Envelope-to:
Delivery-date: Wed, 01 Jun 2011 23:38:09 -0700
Received: from smtp3.ofs.edu.sg ([203.117.131.52])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QS1Xj-0000MD-Uj
for ; Wed, 01 Jun 2011 23:38:09 -0700
Received: from User ([182.63.165.224])
(authenticated bits=0)
by smtp3.ofs.edu.sg (8.14.3/8.13.0) with ESMTP id p526bB3V013932
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
Thu, 2 Jun 2011 14:37:15 +0800
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "VW Motors Email Lottery"<[email protected]>
Subject: Prize Money!
Date: Thu, 2 Jun 2011 08:37:29 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00DD_01C2A9A6.62D7D130"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 110601-1, 06/01/2011), Outbound message
X-Antivirus-Status: Clean
X-Virus-Scanned: clamav-milter 0.96.1 at box1
X-Virus-Status: Clean
X-Spam-Flag: YES
X-Spam-Status: Yes, score=8.2 required=7.0 tests=BAYES_50,DOS_OE_TO_MX,
FORGED_MUA_OUTLOOK,MISSING_HEADERS,MISSING_MID,RCVD_IN_PBL,RDNS_NONE
autolearn=no version=3.2.5
X-Spam-Level: ********
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on box1.ofs.edu.sg
X-Greylist: Sender succeeded SMTP AUTH authentication, not delayed by milter-greylist-3.0 (smtp3.ofs.edu.sg [10.1.0.187]); Thu, 02 Jun 2011 14:37:37 +0800 (SGT)
X-Spam-Subject: ***SPAM*** Prize Money!
X-Spam-Status: Yes, score=19.3
X-Spam-Score: 193
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Congratulation Your Email Was Selected, Please Kindly View
The Attached File For Your Claims!!! [...]
Content analysis details: (19.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.2 NSL_RCVD_FROM_USER Received from User
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<customer_unit003[at]yahoo.com.hk>
)
1.0 MISSING_HEADERS Missing To: header
0.4 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
0.0 T_HK_SPAMMY_FILENAME T_HK_SPAMMY_FILENAME
0.0 FROM_MISSPACED From: missing whitespace
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.9 FROM_MISSP_NO_TO From misspaced, To missing
0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
1.5 FROM_MISSP_USER From misspaced, from "User"
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
This is a multi-part message in MIME format.
------=_NextPart_000_00DD_01C2A9A6.62D7D130
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
You have been approved for a payout of a total sum 1,050,000 GBP (ONE
MILLION & FIFTY THOUSAND BRITISH POUNDS) in the VW Motors Email Lottery
Promotion held on the 30Th May 2011.
To file your claim, you are to contact our Customer Service Unit
CONTACT PERSON
Mr. Eddie Goodman.
+44-703-190-7688
Email: [email protected]
20 Queens land Road, London
SW2 3JB ENGLAND. U.K
you are to provide to your agents the below under listed
information as soon as possible:
1. NAME IN FULL:
2. ADDRESS (IN FULL):
3. NATIONALITY:
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces