by buried under 419s
Sun Jun 26, 2011 3:57 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 25 Jun 2011 20:52:24 -0700
Received: from mr-4a.inet.it ([213.92.5.227])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QagOU-0002Zu-NU
for ; Sat, 25 Jun 2011 20:52:24 -0700
Received: from ::ffff:221.2.144.135 ([::ffff:221.2.144.135]) by mr-4a.inet.it via I-SMTP-5.6.2-562
id ::ffff:221.2.144.135+04HkY2Trwbm; Sun, 26 Jun 2011 05:51:32 +0200
Reply-To: <[email protected]>
From: "Todd Sloan"<[email protected]>
To: [email protected]
Subject: Winning Ticket No:765435467
Date: Sun, 26 Jun 2011 11:51:33 +0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <20110626035133.679391@::ffff:221.2.144.135>
X-Spam-Subject: ***SPAM*** Winning Ticket No:765435467
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Your e-mail has won $1,000,000.00 in the recent Publishing
Clearing House Lottery,please reply immediately to collect your winnings.Please
Send Your Info, Name Address, Phone Number to [email protected] [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[213.92.5.227 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?221.2.144.135>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[221.2.144.135 listed in dnsbl.sorbs.net]
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5012]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Your e-mail has won $1,000,000.00 in the recent Publishing Clearing House Lottery,please reply immediately to collect your winnings.Please Send Your Info, Name Address, Phone Number to [email protected]
Mr. Todd Sloan
Envelope-to:
Delivery-date: Sat, 25 Jun 2011 20:52:24 -0700
Received: from mr-4a.inet.it ([213.92.5.227])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QagOU-0002Zu-NU
for ; Sat, 25 Jun 2011 20:52:24 -0700
Received: from ::ffff:221.2.144.135 ([::ffff:221.2.144.135]) by mr-4a.inet.it via I-SMTP-5.6.2-562
id ::ffff:221.2.144.135+04HkY2Trwbm; Sun, 26 Jun 2011 05:51:32 +0200
Reply-To: <[email protected]>
From: "Todd Sloan"<[email protected]>
To: [email protected]
Subject: Winning Ticket No:765435467
Date: Sun, 26 Jun 2011 11:51:33 +0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <20110626035133.679391@::ffff:221.2.144.135>
X-Spam-Subject: ***SPAM*** Winning Ticket No:765435467
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Your e-mail has won $1,000,000.00 in the recent Publishing
Clearing House Lottery,please reply immediately to collect your winnings.Please
Send Your Info, Name Address, Phone Number to [email protected] [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[213.92.5.227 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?221.2.144.135>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[221.2.144.135 listed in dnsbl.sorbs.net]
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5012]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Your e-mail has won $1,000,000.00 in the recent Publishing Clearing House Lottery,please reply immediately to collect your winnings.Please Send Your Info, Name Address, Phone Number to [email protected]
Mr. Todd Sloan
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces