by buried under 419s
Sun Jun 10, 2012 7:22 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 10 Jun 2012 13:58:05 -0700
Received: from [209.238.151.184] (port=42979 helo=auroca81.servername.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1SdpCz-0000w1-4u
for ; Sun, 10 Jun 2012 13:58:05 -0700
Received: from [109.32.253.223] (port=47936 helo=User)
by auroca81.servername.com with esmtpa (Exim 4.77)
(envelope-from <[email protected]>)
id 1SdpCp-0007Jv-Sr; Mon, 11 Jun 2012 00:57:52 +0400
To: undisclosed-recipients:;
Message-Id: <20120610205751.31934@>
Reply-To: <[email protected]>
From: "From Microsoft"<[email protected]>
Date: Sun, 10 Jun 2012 22:57:47 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - auroca81.servername.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - sify.com
X-Spam-Status: Yes, score=19.1
X-Spam-Score: 191
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Winner No. 005, It is obvious that this notification will
come to you as a surprise but please find time to read it carefully as we
congratulate you over your success in the following official publication of
results of the E-mail electronic online Sweepstakes organized by Microsoft
Corporation, in conjunction with the foundation for the promotion of software
products, (F.P.S.) held in Amsterdam- The Netherlands. [...]
Content analysis details: (19.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.6 NSL_RCVD_HELO_USER Received from HELO User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(msoftgroupp[at]sify.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[209.238.151.184 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[209.238.151.184 listed in bb.barracudacentral.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.238.151.184 listed in bl.score.senderscore.com]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 FSL_UA FSL_UA
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.3 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.7 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
2.0 HK_NAME_FM_FROM HK_NAME_FM_FROM
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 MONEY_LOTTERY Lots of money from a lottery
0.0 FROM_MISSP_URI From misspaced, has URI
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.7 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** *Claim your prize
Winner No. 005,
It is obvious that this notification will come to you as a surprise but please find time to read it carefully as we congratulate you over your success in the following official publication of results of the E-mail electronic online Sweepstakes organized by Microsoft Corporation, in conjunction with the foundation for the promotion of software products, (F.P.S.) held in Amsterdam- The Netherlands.
A Payment of ? 715.810.00 Euros (Seven hundred and fifteen Thousand, Eight Hundred and Ten Euros only) will be paid in your name.
It is important to note that your award was released with the following particulars attached to it.
(1) File Number: F1267-2012
(2) Ref. Code: KP23/857/MCL5 /CO
(3) Grant Number: MICC/97846563459/206
Microsoft Group Agency NL:
Director: Dr.David Bengal
Contact Email: [email protected]
Tel: +31 659 161 820
Soon as the Above Information is received through E-mail to: [email protected], your payment will be processed and paid to you.
Sincerely,
Mrs. Angela Banks
Head Customer care Service
Microsoft Promotion.
Envelope-to:
Delivery-date: Sun, 10 Jun 2012 13:58:05 -0700
Received: from [209.238.151.184] (port=42979 helo=auroca81.servername.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1SdpCz-0000w1-4u
for ; Sun, 10 Jun 2012 13:58:05 -0700
Received: from [109.32.253.223] (port=47936 helo=User)
by auroca81.servername.com with esmtpa (Exim 4.77)
(envelope-from <[email protected]>)
id 1SdpCp-0007Jv-Sr; Mon, 11 Jun 2012 00:57:52 +0400
To: undisclosed-recipients:;
Message-Id: <20120610205751.31934@>
Reply-To: <[email protected]>
From: "From Microsoft"<[email protected]>
Date: Sun, 10 Jun 2012 22:57:47 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - auroca81.servername.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - sify.com
X-Spam-Status: Yes, score=19.1
X-Spam-Score: 191
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Winner No. 005, It is obvious that this notification will
come to you as a surprise but please find time to read it carefully as we
congratulate you over your success in the following official publication of
results of the E-mail electronic online Sweepstakes organized by Microsoft
Corporation, in conjunction with the foundation for the promotion of software
products, (F.P.S.) held in Amsterdam- The Netherlands. [...]
Content analysis details: (19.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.6 NSL_RCVD_HELO_USER Received from HELO User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(msoftgroupp[at]sify.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[209.238.151.184 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[209.238.151.184 listed in bb.barracudacentral.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.238.151.184 listed in bl.score.senderscore.com]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 FSL_UA FSL_UA
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.3 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.7 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
2.0 HK_NAME_FM_FROM HK_NAME_FM_FROM
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 MONEY_LOTTERY Lots of money from a lottery
0.0 FROM_MISSP_URI From misspaced, has URI
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.7 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** *Claim your prize
Winner No. 005,
It is obvious that this notification will come to you as a surprise but please find time to read it carefully as we congratulate you over your success in the following official publication of results of the E-mail electronic online Sweepstakes organized by Microsoft Corporation, in conjunction with the foundation for the promotion of software products, (F.P.S.) held in Amsterdam- The Netherlands.
A Payment of ? 715.810.00 Euros (Seven hundred and fifteen Thousand, Eight Hundred and Ten Euros only) will be paid in your name.
It is important to note that your award was released with the following particulars attached to it.
(1) File Number: F1267-2012
(2) Ref. Code: KP23/857/MCL5 /CO
(3) Grant Number: MICC/97846563459/206
Microsoft Group Agency NL:
Director: Dr.David Bengal
Contact Email: [email protected]
Tel: +31 659 161 820
Soon as the Above Information is received through E-mail to: [email protected], your payment will be processed and paid to you.
Sincerely,
Mrs. Angela Banks
Head Customer care Service
Microsoft Promotion.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces