You can't win a lottery you haven't entered! Please read here for information on lottery scams.
#370034 by buried under 419s Mon Jul 30, 2018 10:15 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 30 Jul 2018 07:06:49 -0700
Received: from sm.sgaice.ru ([91.102.216.90]:24951)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1fk8ov-0006HL-1R
for ; Mon, 30 Jul 2018 07:06:49 -0700
Received: from sm.sgaice.ru (localhost [127.0.0.1])
by sm.sgaice.ru (Postfix) with ESMTP id 36E3C9BA8A1;
Mon, 30 Jul 2018 18:37:18 +0500 (YEKT)
Received: by sm.sgaice.ru (Postfix, from userid 80)
id A251E9BA717; Mon, 30 Jul 2018 18:37:16 +0500 (YEKT)
To: undisclosed-recipients:;
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Mon, 30 Jul 2018 15:37:15 +0200
From: Sgaice Lottery <[email protected]>
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
User-Agent: vmail.sgaice.ru agent/
X-Remote-Browser: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:61.0)
Gecko/20100101 Firefox/61.0
X-Originating-IP: 37.220.140.233
X-RoundCube-Server: 91.102.216.90
X-Virus-Scanned: ClamAV using ClamSMTP
X-Spam-Status: Yes, score=11.7
X-Spam-Score: 117
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: -- Be informed that you have emerged winner of 24,000,000$
Lottery prize with REF:900123, To claim your prize, kindly provide your full
details and email address via SMS to this Number:+19033291940 or send an
email to: [email protected] [...]

Content analysis details: (11.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[91.102.216.90 listed in bl.score.senderscore.com]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mark_grant321[at]outlook.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.5 KAM_LINKBAIT Short messages containing little more than a link, from
a domain with no security in place
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** INFO

--
Be informed that you have emerged winner of 24,000,000$ Lottery prize
with REF:900123, To claim your prize, kindly provide your full details
and email address via SMS to this Number:+19033291940 or send an email
to: [email protected]

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

#401059 by buried under 419s Mon Dec 02, 2019 9:21 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 02 Dec 2019 04:58:35 -0800
Received: from jupiter.ownmyserver.com ([103.117.212.239]:59114 helo=JUPITER-INDIA.home)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1iblHd-0005EX-QE
for ; Mon, 02 Dec 2019 04:58:35 -0800
Received: from User ([41.144.77.16]) by home with
MailEnable ESMTPA; Sun, 1 Dec 2019 05:26:15 +0530
Reply-To: <[email protected]>
From: "Mark"<[email protected]>
Date: Sat, 30 Nov 2019 23:56:15 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <D94FC3F74947450DB0AB96E977DCEB1D.MAI@home>
X-Spam-Status: Yes, score=34.2
X-Spam-Score: 342
X-Spam-Bar: ++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Halifax bank PLC on behalf of UNICEF have released your Charity
cash transfer of 76,000,000$ to assist the less privilege and charity organizations
of your choice for a 30% compensation. Indicate if you are interested in
handling this reputable charity project by providing your Identity & details
to this email to commence this project. [...]

Content analysis details: (34.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.2 NSL_RCVD_FROM_USER Received from User
1.3 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?103.117.212.239>]
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_PASS SPF: sender matches SPF record
1.3 DATE_IN_PAST_24_48 Date: is 24 to 48 hours before Received: date
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mark_grant321[at]outlook.com)
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
1.7 FROM_MISSP_USER From misspaced, from "User"
0.3 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.2 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.9 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.3 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 FROM_MISSPACED From: missing whitespace
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** UNICEF CHARITY---



Halifax bank PLC on behalf of UNICEF have released your Charity cash transfer of
76,000,000$ to assist the less privilege and charity
organizations of your choice for a 30% compensation.

Indicate if you are interested in handling this reputable charity project by
providing your Identity & details to this email to commence
this project.

Mark

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: No registered users and 26 guests