[email protected] Sgt. Frank Lugard

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 20 Apr 2017 06:18:57 -0700
Received: from mail.springlake-earth.org ([216.229.112.79]:53918)
by with esmtps (TLSv1:ECDHE-RSA-AES256-SHA:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1d1Bz5-0001KB-N8
for ; Thu, 20 Apr 2017 06:18:56 -0700
Received: from wolverine.springlake-earth.org (172.16.8.25) by
wolverine.springlake-earth.org (172.16.8.25) with Microsoft SMTP Server (TLS)
id 15.0.1044.25; Thu, 20 Apr 2017 08:18:13 -0500
Received: from wolverine.springlake-earth.org ([fe80::cca0:5f9a:ef38:497f]) by
wolverine.springlake-earth.org ([fe80::cca0:5f9a:ef38:497f%12]) with mapi id
15.00.1044.021; Thu, 20 Apr 2017 08:18:13 -0500
From: Tori Clayton <[email protected]>
To: "[email protected]" <[email protected]>
Thread-Topic: Hi
Thread-Index: AdK52JAEK8yfGzbl/0e4/xwlnnTRfA==
Date: Thu, 20 Apr 2017 13:18:12 +0000
Message-ID: <[email protected]>
Reply-To: "[email protected]" <[email protected]>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [103.240.234.235]
Content-Type: multipart/related;
boundary="_004_3f30ca855569486fbee960c5e310b33bwolverinespringlakeeart_";
type="multipart/alternative"
MIME-Version: 1.0
X-Spam-Status: Yes, score=11.3
X-Spam-Score: 113
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: I need to talk to you regarding a business deal. Reply Back.
Contact Details: Sgt. Frank Lugard [cid:[email protected]] [...]


Content analysis details: (11.3 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[216.229.112.79 listed in dnsbl.sorbs.net]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9994]
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(sgtlugard123[at]hotmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 0.9994]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** FW: Hi

I need to talk to you regarding a business deal. Reply Back.

Contact Details: Sgt. Frank Lugard

[Tim Atem]

Also using [email protected]

from: Alix McPherson - [email protected]
reply-to: [email protected]

I am Sgt Frank Lugard. need your assistance. Reply Back.

cid:[email protected]