#179867 by buried under 419s
Tue Oct 29, 2013 11:45 am
[note the following had no attachment]
Return-path: <>
Envelope-to:
Delivery-date: Tue, 29 Oct 2013 06:30:38 -0700
Received: from emea01-am1-ndr.ptr.protection.outlook.com ([157.56.116.101]:49303 helo=emea01-am1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.80)
id 1Vb9NU-000447-Lk
for ; Tue, 29 Oct 2013 06:30:38 -0700
Received: from [116.202.27.177] (116.202.27.177) by
SIXPR03MB128.apcprd03.prod.outlook.com (10.242.62.153) with Microsoft SMTP
Server (TLS) id 15.0.810.5; Tue, 29 Oct 2013 13:30:33 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: <[email protected]>
Date: Tue, 29 Oct 2013 19:00:07 +0530
Reply-To: <[email protected]>
Message-ID: <6c4cc879-9d36-4622-918f-19547f5272f6@SIXPR03MB128.apcprd03.prod.outlook.com>
X-Originating-IP: [116.202.27.177]
X-ClientProxiedBy: BN1PR06CA004.namprd06.prod.outlook.com (10.242.217.142)
To SIXPR03MB128.apcprd03.prod.outlook.com (10.242.62.153)
X-Forefront-PRVS: 0014E2CF50
X-Forefront-Antispam-Report: SFV:SPM;SFS:
;DIR:OUT;SFP:1501;SCL:5;SRVR:SIXPR03MB128;H:[116.202.27.177];CLIP:116.202.27.177;FPR:;RD:InfoNoRecords;A:0;MX:1;LANG:en;
X-OriginatorOrg: TOYOTAAWARDPROMO.onmicrosoft.com
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Congratulation !!! View The Attached File On How To Claim
Your Winning [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[157.56.116.101 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?157.56.116.101>]
3.1 DEAR_WINNER BODY: DEAR_WINNER
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5025]
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** TOYOTA IN THE WORLD 2013 AWARD PROMOTION!! DEAR LUCKY WINNER,
CONGRATULATION!!
Congratulation !!! View The Attached File On How To Claim Your Winning
Return-path: <>
Envelope-to:
Delivery-date: Tue, 29 Oct 2013 06:30:38 -0700
Received: from emea01-am1-ndr.ptr.protection.outlook.com ([157.56.116.101]:49303 helo=emea01-am1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.80)
id 1Vb9NU-000447-Lk
for ; Tue, 29 Oct 2013 06:30:38 -0700
Received: from [116.202.27.177] (116.202.27.177) by
SIXPR03MB128.apcprd03.prod.outlook.com (10.242.62.153) with Microsoft SMTP
Server (TLS) id 15.0.810.5; Tue, 29 Oct 2013 13:30:33 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: <[email protected]>
Date: Tue, 29 Oct 2013 19:00:07 +0530
Reply-To: <[email protected]>
Message-ID: <6c4cc879-9d36-4622-918f-19547f5272f6@SIXPR03MB128.apcprd03.prod.outlook.com>
X-Originating-IP: [116.202.27.177]
X-ClientProxiedBy: BN1PR06CA004.namprd06.prod.outlook.com (10.242.217.142)
To SIXPR03MB128.apcprd03.prod.outlook.com (10.242.62.153)
X-Forefront-PRVS: 0014E2CF50
X-Forefront-Antispam-Report: SFV:SPM;SFS:
;DIR:OUT;SFP:1501;SCL:5;SRVR:SIXPR03MB128;H:[116.202.27.177];CLIP:116.202.27.177;FPR:;RD:InfoNoRecords;A:0;MX:1;LANG:en;
X-OriginatorOrg: TOYOTAAWARDPROMO.onmicrosoft.com
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Congratulation !!! View The Attached File On How To Claim
Your Winning [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[157.56.116.101 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?157.56.116.101>]
3.1 DEAR_WINNER BODY: DEAR_WINNER
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5025]
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** TOYOTA IN THE WORLD 2013 AWARD PROMOTION!! DEAR LUCKY WINNER,
CONGRATULATION!!
Congratulation !!! View The Attached File On How To Claim Your Winning
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces