by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 11 May 2017 14:28:41 -0700
Received: from smtpout7.voxtelecom.co.za ([41.193.4.186]:35433)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1d8vdT-0002Sb-0Y
for ; Thu, 11 May 2017 14:28:41 -0700
Received: from unknown (HELO fortimail-01.voxtelecom.co.za) ([10.200.100.100])
by fm-relay-05.voxtelecom.co.za with ESMTP; 11 May 2017 23:27:48 +0200
Received: from smtp.voxtelecom.co.za ([196.41.6.173])
by fortimail-01.voxtelecom.co.za with ESMTP id v4BLRjFH019478-v4BLRjFI019478;
Thu, 11 May 2017 23:27:45 +0200
Message-Id: <201705112127.v4BLRjFH019478-v4BLRjFI019478@fortimail-01.voxtelecom.co.za>
Received: from [10.0.0.249] (port=18438 helo=vox-outbound-av-11)
by smtp.voxtelecom.co.za with esmtp (Exim 4.80.1 (FreeBSD))
(envelope-from <[email protected]>)
id 1d8vcT-000J1N-4o; Thu, 11 May 2017 23:27:33 +0200
X-Virus-Scanned: amavisd-new at spam.voxtelecom.co.za
X-Spam-Level: *******
Received: from smtp.voxtelecom.co.za ([172.50.0.249])
by vox-outbound-av-11 (vox-outbound-av-01.spam.voxtelecom.co.za [172.50.0.153]) (amavisd-new, port 10024)
with ESMTP id mJziGUKAK7g7; Thu, 11 May 2017 23:27:29 +0200 (SAST)
Received: from [41.113.71.39] (port=39115 helo=User)
by smtp.voxtelecom.co.za with esmtpa (Exim 4.80.1 (FreeBSD))
(envelope-from <[email protected]>)
id 1d8vcJ-0004lI-3L; Thu, 11 May 2017 23:27:23 +0200
Reply-To: <[email protected]>
From: "Center Program Award"<[email protected]>
Date: Thu, 11 May 2017 23:27:30 +0200
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
VOX-auth-ID: [email protected]
VOX-Source: SMTPAUTH
VOX-Source: ABSASMTPAUTH
X-Spam-Status: Yes, score=23.9
X-Spam-Score: 239
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Award Winner The 2017 eec Email Marketing Program Awards
£2,000,000. 00 we are excited to announce a new set of awards to promote
and honor stand-out email users campaigns and the 2017 eec Email Marketing
Program Awards go to your e-mail address,. [...]
Content analysis details: (23.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[41.193.4.186 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner"
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=p ... 3.4.186;r=]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (processing26[at]pisem.net)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(processing26[at]pisem.net)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Provide Details For Claim
Dear Award Winner
we are excited to announce a new set of awards to promote and honor stand-out email
users campaigns and the 2017 eec Email Marketing Program Awards go to your e-mail
address,.
This award was promoted and sponsored by Web Marketing Association's of software
producers and Microsoft Company.
Please contact the payment support centre for assistance in order to receive your
payment in less than (7) days.
However, your file will be suspended if you are unable to claim the fund before 21
days of your notification to enable the organizing committee to continue within the
program.
Every year millions of people transition out of poverty through Microsoft Foundation
family support funds
The executive committee approved your payment file but you must be present to sign
the cheque release or processing the amount to through bank transfer avoid double
claim.
Processing Centre
Mrs. Sarah Amos
Telephone: +27742357747.
Email: [email protected]
Note to provide the support centre with the following details.
1. Full Name:...........................................................
2. Address:..............................................................
3. Nationality ID copy or Driving license:...............
4. Age: ....................... Date of Birth: .......................
5. Occupation: ..........................................................
6. Phone: ...........Fax:
Dr. Tariq Hani
Envelope-to:
Delivery-date: Thu, 11 May 2017 14:28:41 -0700
Received: from smtpout7.voxtelecom.co.za ([41.193.4.186]:35433)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1d8vdT-0002Sb-0Y
for ; Thu, 11 May 2017 14:28:41 -0700
Received: from unknown (HELO fortimail-01.voxtelecom.co.za) ([10.200.100.100])
by fm-relay-05.voxtelecom.co.za with ESMTP; 11 May 2017 23:27:48 +0200
Received: from smtp.voxtelecom.co.za ([196.41.6.173])
by fortimail-01.voxtelecom.co.za with ESMTP id v4BLRjFH019478-v4BLRjFI019478;
Thu, 11 May 2017 23:27:45 +0200
Message-Id: <201705112127.v4BLRjFH019478-v4BLRjFI019478@fortimail-01.voxtelecom.co.za>
Received: from [10.0.0.249] (port=18438 helo=vox-outbound-av-11)
by smtp.voxtelecom.co.za with esmtp (Exim 4.80.1 (FreeBSD))
(envelope-from <[email protected]>)
id 1d8vcT-000J1N-4o; Thu, 11 May 2017 23:27:33 +0200
X-Virus-Scanned: amavisd-new at spam.voxtelecom.co.za
X-Spam-Level: *******
Received: from smtp.voxtelecom.co.za ([172.50.0.249])
by vox-outbound-av-11 (vox-outbound-av-01.spam.voxtelecom.co.za [172.50.0.153]) (amavisd-new, port 10024)
with ESMTP id mJziGUKAK7g7; Thu, 11 May 2017 23:27:29 +0200 (SAST)
Received: from [41.113.71.39] (port=39115 helo=User)
by smtp.voxtelecom.co.za with esmtpa (Exim 4.80.1 (FreeBSD))
(envelope-from <[email protected]>)
id 1d8vcJ-0004lI-3L; Thu, 11 May 2017 23:27:23 +0200
Reply-To: <[email protected]>
From: "Center Program Award"<[email protected]>
Date: Thu, 11 May 2017 23:27:30 +0200
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
VOX-auth-ID: [email protected]
VOX-Source: SMTPAUTH
VOX-Source: ABSASMTPAUTH
X-Spam-Status: Yes, score=23.9
X-Spam-Score: 239
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Award Winner The 2017 eec Email Marketing Program Awards
£2,000,000. 00 we are excited to announce a new set of awards to promote
and honor stand-out email users campaigns and the 2017 eec Email Marketing
Program Awards go to your e-mail address,. [...]
Content analysis details: (23.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[41.193.4.186 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner"
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=p ... 3.4.186;r=]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (processing26[at]pisem.net)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(processing26[at]pisem.net)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Provide Details For Claim
Dear Award Winner
we are excited to announce a new set of awards to promote and honor stand-out email
users campaigns and the 2017 eec Email Marketing Program Awards go to your e-mail
address,.
This award was promoted and sponsored by Web Marketing Association's of software
producers and Microsoft Company.
Please contact the payment support centre for assistance in order to receive your
payment in less than (7) days.
However, your file will be suspended if you are unable to claim the fund before 21
days of your notification to enable the organizing committee to continue within the
program.
Every year millions of people transition out of poverty through Microsoft Foundation
family support funds
The executive committee approved your payment file but you must be present to sign
the cheque release or processing the amount to through bank transfer avoid double
claim.
Processing Centre
Mrs. Sarah Amos
Telephone: +27742357747.
Email: [email protected]
Note to provide the support centre with the following details.
1. Full Name:...........................................................
2. Address:..............................................................
3. Nationality ID copy or Driving license:...............
4. Age: ....................... Date of Birth: .......................
5. Occupation: ..........................................................
6. Phone: ...........Fax:
Dr. Tariq Hani
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
