#357967 by buried under 419s
Fri Mar 09, 2018 2:14 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 08 Mar 2018 18:50:10 -0800
Received: from aih164.rev.netart.pl ([77.55.215.164]:41964 helo=chijioke00yo.nazwa.pl)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eu86d-0005k4-UA
for ; Thu, 08 Mar 2018 18:50:10 -0800
Received: from [10.137.153.54] (unknown [197.211.61.54])
by chijioke00yo.nazwa.pl (Postfix) with ESMTPSA id AD3B3595217;
Fri, 9 Mar 2018 02:40:49 +0100 (CET)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "UK NATIONAL LOTTERY" <[email protected]>
Date: Fri, 09 Mar 2018 02:40:39 +0100
Reply-To: [email protected]
X-Spam-Status: Yes, score=38.9
X-Spam-Score: 389
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: UK NATIONAL LOTTERY HEADQUARTERS: 28 TAN FIELD ROAD,CROYDON,
LONDON. CUSTOMER SERVICE (24hours) Ref: UK/9420X2/68 Batch: 074/05/ZY36 Website:
http://www.national-lottery.com/results.asp Dear Winner [...]
Content analysis details: (38.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner"
1.1 KAM_COUK Scoring .co.uk emails higher due to poor registry security.
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[77.55.215.164 listed in psbl.surriel.com]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[77.55.215.164 listed in zen.spamhaus.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=u ... .co.uk;ip=]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.6 MISSING_MID Missing Message-Id: header
1.0 KAM_LOTTO2 Highly Likely to be an e-Lotto Scam Email
1.0 HK_LOTTO No description available.
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 LOTS_OF_MONEY Huge... sums of money
1.3 FSL_BULK_SIG Bulk signature with no Unsubscribe
2.0 KAM_LOTTO3 Almost certain to be an e-Lotto Scam Email
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_LOTTO_AGENT Claims Agent
0.7 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.4 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
3.1 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Congratulations on Your Award. Dear Winner!
UK NATIONAL LOTTERY HEADQUARTERS:
28 TAN FIELD ROAD,CROYDON, LONDON.
CUSTOMER SERVICE (24hours)
Ref: UK/9420X2/68
Batch: 074/05/ZY36
Website: http://www.national-lottery.com/results.asp
Dear Winner
DO CONTACT OUR CLAIMS AGENT BELOW WITH YOUR FILLED FORM
Contact Person: Sescovan Kalu
Tel: +44 871 358 5778
Fax: +44 843 558 6857
Email: [email protected]
(Form HLP)
REFERENCE NUMBER: UK/9420X2/68
FULL NAME...............................................
FULL ADDRESS:...........................................
SEX:.................................
AGE...................................
OCCUPATION.............................
TEL.......................FAX................. (If any)
COUNTRY................................
E-MAIL..................................
WINNING NUMBER......................
Congratulations once more from all members and staffs of this program.
Yours Truly,
Joan Miles
Co-ordinator (Online Promo Program)
Envelope-to:
Delivery-date: Thu, 08 Mar 2018 18:50:10 -0800
Received: from aih164.rev.netart.pl ([77.55.215.164]:41964 helo=chijioke00yo.nazwa.pl)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eu86d-0005k4-UA
for ; Thu, 08 Mar 2018 18:50:10 -0800
Received: from [10.137.153.54] (unknown [197.211.61.54])
by chijioke00yo.nazwa.pl (Postfix) with ESMTPSA id AD3B3595217;
Fri, 9 Mar 2018 02:40:49 +0100 (CET)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "UK NATIONAL LOTTERY" <[email protected]>
Date: Fri, 09 Mar 2018 02:40:39 +0100
Reply-To: [email protected]
X-Spam-Status: Yes, score=38.9
X-Spam-Score: 389
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: UK NATIONAL LOTTERY HEADQUARTERS: 28 TAN FIELD ROAD,CROYDON,
LONDON. CUSTOMER SERVICE (24hours) Ref: UK/9420X2/68 Batch: 074/05/ZY36 Website:
http://www.national-lottery.com/results.asp Dear Winner [...]
Content analysis details: (38.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner"
1.1 KAM_COUK Scoring .co.uk emails higher due to poor registry security.
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[77.55.215.164 listed in psbl.surriel.com]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[77.55.215.164 listed in zen.spamhaus.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=u ... .co.uk;ip=]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.6 MISSING_MID Missing Message-Id: header
1.0 KAM_LOTTO2 Highly Likely to be an e-Lotto Scam Email
1.0 HK_LOTTO No description available.
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 LOTS_OF_MONEY Huge... sums of money
1.3 FSL_BULK_SIG Bulk signature with no Unsubscribe
2.0 KAM_LOTTO3 Almost certain to be an e-Lotto Scam Email
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_LOTTO_AGENT Claims Agent
0.7 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.4 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
3.1 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Congratulations on Your Award. Dear Winner!
UK NATIONAL LOTTERY HEADQUARTERS:
28 TAN FIELD ROAD,CROYDON, LONDON.
CUSTOMER SERVICE (24hours)
Ref: UK/9420X2/68
Batch: 074/05/ZY36
Website: http://www.national-lottery.com/results.asp
Dear Winner
DO CONTACT OUR CLAIMS AGENT BELOW WITH YOUR FILLED FORM
Contact Person: Sescovan Kalu
Tel: +44 871 358 5778
Fax: +44 843 558 6857
Email: [email protected]
(Form HLP)
REFERENCE NUMBER: UK/9420X2/68
FULL NAME...............................................
FULL ADDRESS:...........................................
SEX:.................................
AGE...................................
OCCUPATION.............................
TEL.......................FAX................. (If any)
COUNTRY................................
E-MAIL..................................
WINNING NUMBER......................
Congratulations once more from all members and staffs of this program.
Yours Truly,
Joan Miles
Co-ordinator (Online Promo Program)
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces