by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 22 Sep 2017 10:41:52 -0700
Received: from mail-by2nam03hn0248.outbound.protection.outlook.com ([104.47.42.248]:31776 helo=NAM03-BY2-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dvRxS-0003Fs-Po
for ; Fri, 22 Sep 2017 10:41:52 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=uofstthomasmn.onmicrosoft.com; s=selector1-stthomas-edu;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=a9v5BjpmRO4bkGJMmF6LMGdt1w1oLdgNm/OiUzJ5+To=;
b=S0Tmnahpt/CBj3ADkJjo9/1wVjJ3cChQDy5wOLk47SHrwftbOZjdSurjhf3C9OaRX+nU786IgCHBZteop21KFJtzPHwoahy1lSIdHxGngmtTYx15cbld4ihxjLQDb5wTMwmIdltQqPe2IeeGs5dLr23KjOQGejkWgJk0MKiHeZk=
Authentication-Results: spf=none (sender IP is )
smtp.mailfrom=[email protected];
Received: from [100.64.241.145] (116.203.75.198) by
BLUPR01MB439.prod.exchangelabs.com (10.141.80.15) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id
15.20.77.7; Fri, 22 Sep 2017 17:40:48 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mrs. Sonia Davies " <[email protected]>
Date: Fri, 22 Sep 2017 23:10:36 +0530
Reply-To: [email protected]
X-Antivirus: Avast (VPS 170922-4, 22-09-2017), Outbound message
X-Antivirus-Status: Clean
X-Originating-IP: [116.203.75.198]
X-ClientProxiedBy: SG2PR0302CA0021.apcprd03.prod.outlook.com (10.170.129.31)
To BLUPR01MB439.prod.exchangelabs.com (10.141.80.15)
Message-ID: <BLUPR01MB439653D60F38BAC36E100D1AE670@BLUPR01MB439.prod.exchangelabs.com>
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: aa5c4210-cab0-41f3-15a5-08d501e114e3
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(300000503095)(300135400095)(2017052603199)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);SRVR:BLUPR01MB439;
X-Microsoft-Exchange-Diagnostics: 1;BLUPR01MB439;3:t9tQBuQZUnDCQtLPEScxGY5OR6lwpM697xuLJ5W8D7uXvD0Tq4JpHGtTOOVe4Z/Omc1GzL0IODa/l/eQOALlC8uNx1XO8py/W+rfkVfvJ/7z/21zU1Eze6fOUOcYhk25b1aiKBGgPLzEUG3L6xQt68OmTXBvhJBPH0Yv41pJQfcuuPK2RLeuBesDyv6AkvQm0owVMWvQP/TEgej5C4EYRBMM/iWtyLpu/y1L9tVb1V/hdQxJyeMSWcPnOuBHjejT;25:9JTXmi4PdAerPFQEsec7EZgrRFwp2J+bDPjFmJ1BS+DBy5/uuesoLt1r2WWj4/zDUABp/ExdFRO+JcFyoyv3q0wag7iEYIasyCPjd8RDHilafq7wj5xwNIrBCkU3+vonp0JNDNgJPu2utWAkALooKJVBEJAiQGvKSybvCDeBqthNXC17i1Fx2OGpXRQzv+9omL4/qDVg2M5nClmXbxrH+uRxjtg6cqRGrKBLkfF/pCWBxo0ThnTVE1TqsrBEhidVCsAvL2DXj79usH69z79BVmxnrEtsDEMZvojrbv81sc+XpDAIhN7+z7Vx4cDgp1ovD4B0Y0jl29sTkr0G9kV9Lg==;31:+HrCjtGwmQDHyf/tTihA95fsOL1PRjVb3z36JvKHciJITXz6pZyFdBEoauRN0hJLzelMS1jAT5Ihi4UIfSLLh8/p+2Q87YvQT14/Jtr4DlKyXRPDYJW67bq1ZWrRziFJE6i9jCLIumcPoqarMZYzLCJmcOjnlnkFqkAm7Pa1AICR6bC3Vlug0Y1stzImA+hrpvkrnbEJ7eBIn/7siKwXiXOG8tQdoWB8cEy+JaLY/j0=
X-MS-TrafficTypeDiagnostic: BLUPR01MB439:|BLUPR01MB439:
X-Microsoft-Exchange-Diagnostics: 1;BLUPR01MB439;20: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;4:K6L15AzDHUjW3ZYxyTkKnzkCKN+lcnwGmEMQsd/GniLq/Ubfvjcz+bAJpJiwfcoBI7sMBwSkvHvgLzkF8fQsHxbfxZmv9cBWs2qIOZcPkiu+snUUgMQFVmVKZGROg1ZmofhBLbZPMLhxrJAU/OwE1U8ydYRVaKd7/pUL79oCJPunR5eJaE9IYYbFT924dm3gSmIuxizQlLQRPp5iO6ZK8t4uFfducVZ972/aghQlB15NhllAg1gHfWKQ7P8TpG2eg6jfrhR+xk6uljU7+Lzr6V1ZZBa4R/zvSGLrXt8Ws1c=
X-Exchange-Antispam-Report-Test: UriScan:(11256173156292);
X-Microsoft-Antispam-PRVS: <BLUPR01MB43999E228FDEE315072DCE4AE670@BLUPR01MB439.prod.exchangelabs.com>
X-Exchange-Antispam-Report-CFA-Test:
BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(5005006)(8121501046)(100000703101)(100105400095)(93006095)(93001095)(10201501046)(3002001)(6041248)(20161123564025)(201703131423075)(201702281529075)(201702281528075)(201703061421075)(201703061406153)(20161123562025)(20161123560025)(20161123555025)(20161123558100)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095);SRVR:BLUPR01MB439;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:BLUPR01MB439;
X-Forefront-PRVS: 0438F90F17
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10019020)(6009001)(6049001)(376002)(346002)(189002)(252514010)(199003)(111735001)(2906002)(66066001)(6200100001)(101416001)(50986999)(54356999)(966005)(316002)(1720100001)(551984002)(53256004)(786003)(478600001)(7736002)(5660300001)(97736004)(7416002)(74316002)(49976008)(305945005)(16526017)(50466002)(43066003)(8746002)(250100001)(47776003)(16576012)(88552002)(6306002)(561924002)(9686003)(86362001)(189998001)(105586002)(2171002)(23756003)(68736007)(6862004)(4743002)(8676002)(551944002)(81166006)(2860700003)(25786009)(6486002)(33656002)(6666003)(6116002)(53936002)(81156014)(106356001)(8936002)(90366009)(3846002)(8666007)(75432002)(62346012);DIR:OUT;SFP:1501;SCL:5;SRVR:BLUPR01MB439;H:[100.64.241.145];FPR:;SPF:None;PTR:InfoNoRecords;MX:1;A:1;
Received-SPF: None (protection.outlook.com: stthomas.edu does not designate
permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1;BLUPR01MB439;23:52Xu6wS1CE9nvhVgR8dh/LLbjQXRy+N/rW/hplVg?=
=?iso-8859-1?Q?5BXTr7vHWHn44iJMSTDvfXjo+BdIJkWwqktl6Si+sQ7mmy6cm3Q9PvA32K?=
=?iso-8859-1?Q?OctsOiA2TZF6YI15Ix58C1Wtq0qAVGGLBq2qGxP/6OGNM+/o/kkI934FCW?=
=?iso-8859-1?Q?kQ5mKezkG6nfiXTdZMznqvZTCHP/TPFIr9m1vi9V5TuiDBbo39ewPv3mAD?=
=?iso-8859-1?Q?5oy2GIfAJ1Xwon35Hh2pImQLYfer03dbgcvqAMgz8EpYDxi28waQ1UsOrP?=
=?iso-8859-1?Q?OPsksUiSmKeKKjkKLcKSZlk00V+4uxCGCidXKSGI6j0Snlao6RJPuS0iJr?=
=?iso-8859-1?Q?AI8lKmRnRwgtRP45HrxKByLKOgWmmltd1M/kao07bQl3XfcOl8Domte58T?=
=?iso-8859-1?Q?zog9GIFjmdpidknvqUiZrPhhc5ONZT0ogSaxeMLNeA+3LA1wfChA3PgjK7?=
=?iso-8859-1?Q?sgrHlFoHkCCevsQjtvc2aUL+eCxRQoAMjIVw9jlsajo0sj0BDugK5W9asB?=
=?iso-8859-1?Q?c+S++lyflCPcG26vnFMYG0PJZaFcmN+140gBmAx6MVcR5KpnfyqlN6G+09?=
=?iso-8859-1?Q?eJAczQEwRD1Ve256WPPoA/wgkVGJQUxxhholndBgK+wlNtT3FOwd6ApT6x?=
=?iso-8859-1?Q?V2X0BQdnJNMev69q5JBhobOsPa6sZf2ohyCS3dPllWvxm0O1/G0jP4l8/O?=
=?iso-8859-1?Q?g/+PWnueSriky5/LbtmiysNd5CzivhhNuIMRAgzgyn3PsCDtaqiFOCSg7r?=
=?iso-8859-1?Q?MOBEqLt8r+Ed3oZamwzdKGaMc6WP7IKg+VWmIAwvf37Sfg+5pgzNyWi7o2?=
=?iso-8859-1?Q?hfGRROJlG3xQWrY518KEJ6Ghmb+uSOw2ig/8FOcCDgbUJC+q4DN/r6NlO/?=
=?iso-8859-1?Q?gfhql/A5ce2toBKMjEgPYqZTttpdnfjhrOb7MM0xwHjcnubk6UGiwqbq//?=
=?iso-8859-1?Q?MFO5Yy+eoX99il3iCXctOjXiTWZarapbCVQqedLthE8ECGvZRc9hM9A1Ep?=
=?iso-8859-1?Q?fNjWBb2lRT78upotbs+a6sfQPJKXubi0cLJPBsnqEGFcepDc13xn7q5l0B?=
=?iso-8859-1?Q?5egQozCGgIoQShV9lIrEjdWypUC/+2GR3HAz+E29k57PHoUMCAvzjgzUvl?=
=?iso-8859-1?Q?Ih+4Sua3sOtpBKA1G9kwctYfa9MLQdJ6MrmO5qppmrd5SOnKnb7sDQ4Mmd?=
=?iso-8859-1?Q?+neVeZ/Gs75jCOcs37bpL5K/uSKYu/D4ITeazGvnqga3OputqSPB1wIP13?=
=?iso-8859-1?Q?xyRhy1g2a/L0Lpi5q0eyOvzxJ4fW6/7LhHo/Rqs0/wPtnfMbgiRGo70tZm?=
=?iso-8859-1?Q?ysvIVfziLVS7RzNDp0nCTGfswrFG8lphOIGo3fRVzNjxD477qSJSOb+BZC?=
=?iso-8859-1?Q?CgJTv8X8nz0WK+RQ2vb6lEUcKw0jjUx74GPU7qqG03Lku9w6YJRApzXXze?=
=?iso-8859-1?Q?CkwJP4PgytgjnhlPGMb/qWpiZeGvD8ThOYesyriuu0UGjMVTno2VwbMCee?=
=?iso-8859-1?Q?NLW1kQZ7xwWeJ4ErXjcd95AAAOISyVrNXH7GoNDdf9q0jRmTOKHp9tvWsK?=
=?iso-8859-1?Q?cMSNhgYff2NzxSvA2QAE9FEOw=3D?=
X-Microsoft-Exchange-Diagnostics:
1;BLUPR01MB439;23:4OcLCIJWgg9jQRlkaGMHhFJumtL04x4gcNe6SHZvWpAau4fBk4nkkDLIL4CDZWW5rKZ6sf5OUOUrjh27BmNblVJgfA1TMOQR+bUVmwMeWWR/9Ro52fja4X9aK/df1HTlzeB3t22Rl93AgEKDvTN81Q==;6:L7jjHMM4xjkP0Qm0MxxjKruecJz+xX0iFo3H04PDQP60RzUXTwnWACQbKtBOtkIllLqkLnYCnO+tXUQB9BdVBEgp4PNiyWKR+CzoWdRRUmXf3Hsw6D1wigN3BR+Hy+6vVlMyxr9lQMvr6MS9VU52zJhd2l8xCrVTWTc/662Cmfc2WGZKPpgTtFMP7VviRQTrGf9C1VpTXi3iiBVZBFnsNiklPNKOFXHtVkuZMDX8HGBk/vYj1DPZNzXIdPPNvNJWeedamwM66WexWVlIYnicap/aWLhOOVpijsesR+2hcTlHjtVCmxIdSHs/n95laSqvQdwp9QY2Vb80fX2DS8/CYA==;5:vx7Lkwm6OenKg4yIFUQAvR3uYy5PfHKg8lxDJvXTxIGBomq3xPC7AyT5/BNrnpDvVWe+I/cmhNbrsjpvYmXc7Nz4upFpjssdjWfx6dQjBXn/yDlJXmYlvbK2gVCwngVpqopDBfBRFDKduRGnLYfw8A==;7:dsZcPiXurhLSjTj1HJtyiJtIoydIX5hSYkNYu3jOeCbJdaJN2tG0wtiEUYUswTsA3lV1tFFontv1A/tkKbDkfcaADoWGkClBsgjhMqm77z5I051F+oJh2YsEPW9YCS+swjlu7vxDl5c0cMGfgMKGg3u70H2H/kmmRD2G6n0DRuxz2rish7K0Ly4K5GEOYeD7uXKx7Hnrqm7OLRWp2Uk/tRvV+j6iMrDr5mO5K5Szgbg=
SpamDiagnosticOutput: 1:22
X-OriginatorOrg: stthomas.edu
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Sep 2017 17:40:48.8581
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: a081ff79-318c-45ec-95f3-38ebc2801472
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR01MB439
X-Spam-Status: Yes, score=12.9
X-Spam-Score: 129
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
in Euro Millions Jackpot Lottery in August 2016. After seeking financial
advice from my legal counsel with my Attorney who advised me to donate 10%
of our lottery winnings to somebody as a seed. I have now decided to fulfill
Thousand Great Britain Pounds). as part of my charity project to improve
the live of this lucky individual from around the world. [...]
Content analysis details: (12.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[104.47.42.248 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS No description available.
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** REF NUMBER: SD/2017/QR919/17
Barrt. David William
Solicitors & Advocate
Telephone: 0044 203 389 8477
Email: [email protected]
We also thought this was a scam when we won but we stood by ourselves and prayed to
God almighty. Please see the link below.
http://www.mirror.co.uk/news/uk-news/eu ... st-8549775
Kindly send the details information below when contacting the attorney in-charge:
(1). FULL NAME:
(2). ADDRESS:
(3). TEL NUMBER:
(4). Date of Birth:
(5). Occupation:
(6). Country:
(7). Identification ;
Contact my attorney with REF NUMBER: SD/2017/QR919/17
Good-luck,
Mrs. Sonia Davies
---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus
Envelope-to:
Delivery-date: Fri, 22 Sep 2017 10:41:52 -0700
Received: from mail-by2nam03hn0248.outbound.protection.outlook.com ([104.47.42.248]:31776 helo=NAM03-BY2-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dvRxS-0003Fs-Po
for ; Fri, 22 Sep 2017 10:41:52 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=uofstthomasmn.onmicrosoft.com; s=selector1-stthomas-edu;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=a9v5BjpmRO4bkGJMmF6LMGdt1w1oLdgNm/OiUzJ5+To=;
b=S0Tmnahpt/CBj3ADkJjo9/1wVjJ3cChQDy5wOLk47SHrwftbOZjdSurjhf3C9OaRX+nU786IgCHBZteop21KFJtzPHwoahy1lSIdHxGngmtTYx15cbld4ihxjLQDb5wTMwmIdltQqPe2IeeGs5dLr23KjOQGejkWgJk0MKiHeZk=
Authentication-Results: spf=none (sender IP is )
smtp.mailfrom=[email protected];
Received: from [100.64.241.145] (116.203.75.198) by
BLUPR01MB439.prod.exchangelabs.com (10.141.80.15) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id
15.20.77.7; Fri, 22 Sep 2017 17:40:48 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mrs. Sonia Davies " <[email protected]>
Date: Fri, 22 Sep 2017 23:10:36 +0530
Reply-To: [email protected]
X-Antivirus: Avast (VPS 170922-4, 22-09-2017), Outbound message
X-Antivirus-Status: Clean
X-Originating-IP: [116.203.75.198]
X-ClientProxiedBy: SG2PR0302CA0021.apcprd03.prod.outlook.com (10.170.129.31)
To BLUPR01MB439.prod.exchangelabs.com (10.141.80.15)
Message-ID: <BLUPR01MB439653D60F38BAC36E100D1AE670@BLUPR01MB439.prod.exchangelabs.com>
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: aa5c4210-cab0-41f3-15a5-08d501e114e3
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(300000503095)(300135400095)(2017052603199)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);SRVR:BLUPR01MB439;
X-Microsoft-Exchange-Diagnostics: 1;BLUPR01MB439;3:t9tQBuQZUnDCQtLPEScxGY5OR6lwpM697xuLJ5W8D7uXvD0Tq4JpHGtTOOVe4Z/Omc1GzL0IODa/l/eQOALlC8uNx1XO8py/W+rfkVfvJ/7z/21zU1Eze6fOUOcYhk25b1aiKBGgPLzEUG3L6xQt68OmTXBvhJBPH0Yv41pJQfcuuPK2RLeuBesDyv6AkvQm0owVMWvQP/TEgej5C4EYRBMM/iWtyLpu/y1L9tVb1V/hdQxJyeMSWcPnOuBHjejT;25:9JTXmi4PdAerPFQEsec7EZgrRFwp2J+bDPjFmJ1BS+DBy5/uuesoLt1r2WWj4/zDUABp/ExdFRO+JcFyoyv3q0wag7iEYIasyCPjd8RDHilafq7wj5xwNIrBCkU3+vonp0JNDNgJPu2utWAkALooKJVBEJAiQGvKSybvCDeBqthNXC17i1Fx2OGpXRQzv+9omL4/qDVg2M5nClmXbxrH+uRxjtg6cqRGrKBLkfF/pCWBxo0ThnTVE1TqsrBEhidVCsAvL2DXj79usH69z79BVmxnrEtsDEMZvojrbv81sc+XpDAIhN7+z7Vx4cDgp1ovD4B0Y0jl29sTkr0G9kV9Lg==;31:+HrCjtGwmQDHyf/tTihA95fsOL1PRjVb3z36JvKHciJITXz6pZyFdBEoauRN0hJLzelMS1jAT5Ihi4UIfSLLh8/p+2Q87YvQT14/Jtr4DlKyXRPDYJW67bq1ZWrRziFJE6i9jCLIumcPoqarMZYzLCJmcOjnlnkFqkAm7Pa1AICR6bC3Vlug0Y1stzImA+hrpvkrnbEJ7eBIn/7siKwXiXOG8tQdoWB8cEy+JaLY/j0=
X-MS-TrafficTypeDiagnostic: BLUPR01MB439:|BLUPR01MB439:
X-Microsoft-Exchange-Diagnostics: 1;BLUPR01MB439;20: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;4:K6L15AzDHUjW3ZYxyTkKnzkCKN+lcnwGmEMQsd/GniLq/Ubfvjcz+bAJpJiwfcoBI7sMBwSkvHvgLzkF8fQsHxbfxZmv9cBWs2qIOZcPkiu+snUUgMQFVmVKZGROg1ZmofhBLbZPMLhxrJAU/OwE1U8ydYRVaKd7/pUL79oCJPunR5eJaE9IYYbFT924dm3gSmIuxizQlLQRPp5iO6ZK8t4uFfducVZ972/aghQlB15NhllAg1gHfWKQ7P8TpG2eg6jfrhR+xk6uljU7+Lzr6V1ZZBa4R/zvSGLrXt8Ws1c=
X-Exchange-Antispam-Report-Test: UriScan:(11256173156292);
X-Microsoft-Antispam-PRVS: <BLUPR01MB43999E228FDEE315072DCE4AE670@BLUPR01MB439.prod.exchangelabs.com>
X-Exchange-Antispam-Report-CFA-Test:
BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(5005006)(8121501046)(100000703101)(100105400095)(93006095)(93001095)(10201501046)(3002001)(6041248)(20161123564025)(201703131423075)(201702281529075)(201702281528075)(201703061421075)(201703061406153)(20161123562025)(20161123560025)(20161123555025)(20161123558100)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095);SRVR:BLUPR01MB439;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:BLUPR01MB439;
X-Forefront-PRVS: 0438F90F17
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10019020)(6009001)(6049001)(376002)(346002)(189002)(252514010)(199003)(111735001)(2906002)(66066001)(6200100001)(101416001)(50986999)(54356999)(966005)(316002)(1720100001)(551984002)(53256004)(786003)(478600001)(7736002)(5660300001)(97736004)(7416002)(74316002)(49976008)(305945005)(16526017)(50466002)(43066003)(8746002)(250100001)(47776003)(16576012)(88552002)(6306002)(561924002)(9686003)(86362001)(189998001)(105586002)(2171002)(23756003)(68736007)(6862004)(4743002)(8676002)(551944002)(81166006)(2860700003)(25786009)(6486002)(33656002)(6666003)(6116002)(53936002)(81156014)(106356001)(8936002)(90366009)(3846002)(8666007)(75432002)(62346012);DIR:OUT;SFP:1501;SCL:5;SRVR:BLUPR01MB439;H:[100.64.241.145];FPR:;SPF:None;PTR:InfoNoRecords;MX:1;A:1;
Received-SPF: None (protection.outlook.com: stthomas.edu does not designate
permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1;BLUPR01MB439;23:52Xu6wS1CE9nvhVgR8dh/LLbjQXRy+N/rW/hplVg?=
=?iso-8859-1?Q?5BXTr7vHWHn44iJMSTDvfXjo+BdIJkWwqktl6Si+sQ7mmy6cm3Q9PvA32K?=
=?iso-8859-1?Q?OctsOiA2TZF6YI15Ix58C1Wtq0qAVGGLBq2qGxP/6OGNM+/o/kkI934FCW?=
=?iso-8859-1?Q?kQ5mKezkG6nfiXTdZMznqvZTCHP/TPFIr9m1vi9V5TuiDBbo39ewPv3mAD?=
=?iso-8859-1?Q?5oy2GIfAJ1Xwon35Hh2pImQLYfer03dbgcvqAMgz8EpYDxi28waQ1UsOrP?=
=?iso-8859-1?Q?OPsksUiSmKeKKjkKLcKSZlk00V+4uxCGCidXKSGI6j0Snlao6RJPuS0iJr?=
=?iso-8859-1?Q?AI8lKmRnRwgtRP45HrxKByLKOgWmmltd1M/kao07bQl3XfcOl8Domte58T?=
=?iso-8859-1?Q?zog9GIFjmdpidknvqUiZrPhhc5ONZT0ogSaxeMLNeA+3LA1wfChA3PgjK7?=
=?iso-8859-1?Q?sgrHlFoHkCCevsQjtvc2aUL+eCxRQoAMjIVw9jlsajo0sj0BDugK5W9asB?=
=?iso-8859-1?Q?c+S++lyflCPcG26vnFMYG0PJZaFcmN+140gBmAx6MVcR5KpnfyqlN6G+09?=
=?iso-8859-1?Q?eJAczQEwRD1Ve256WPPoA/wgkVGJQUxxhholndBgK+wlNtT3FOwd6ApT6x?=
=?iso-8859-1?Q?V2X0BQdnJNMev69q5JBhobOsPa6sZf2ohyCS3dPllWvxm0O1/G0jP4l8/O?=
=?iso-8859-1?Q?g/+PWnueSriky5/LbtmiysNd5CzivhhNuIMRAgzgyn3PsCDtaqiFOCSg7r?=
=?iso-8859-1?Q?MOBEqLt8r+Ed3oZamwzdKGaMc6WP7IKg+VWmIAwvf37Sfg+5pgzNyWi7o2?=
=?iso-8859-1?Q?hfGRROJlG3xQWrY518KEJ6Ghmb+uSOw2ig/8FOcCDgbUJC+q4DN/r6NlO/?=
=?iso-8859-1?Q?gfhql/A5ce2toBKMjEgPYqZTttpdnfjhrOb7MM0xwHjcnubk6UGiwqbq//?=
=?iso-8859-1?Q?MFO5Yy+eoX99il3iCXctOjXiTWZarapbCVQqedLthE8ECGvZRc9hM9A1Ep?=
=?iso-8859-1?Q?fNjWBb2lRT78upotbs+a6sfQPJKXubi0cLJPBsnqEGFcepDc13xn7q5l0B?=
=?iso-8859-1?Q?5egQozCGgIoQShV9lIrEjdWypUC/+2GR3HAz+E29k57PHoUMCAvzjgzUvl?=
=?iso-8859-1?Q?Ih+4Sua3sOtpBKA1G9kwctYfa9MLQdJ6MrmO5qppmrd5SOnKnb7sDQ4Mmd?=
=?iso-8859-1?Q?+neVeZ/Gs75jCOcs37bpL5K/uSKYu/D4ITeazGvnqga3OputqSPB1wIP13?=
=?iso-8859-1?Q?xyRhy1g2a/L0Lpi5q0eyOvzxJ4fW6/7LhHo/Rqs0/wPtnfMbgiRGo70tZm?=
=?iso-8859-1?Q?ysvIVfziLVS7RzNDp0nCTGfswrFG8lphOIGo3fRVzNjxD477qSJSOb+BZC?=
=?iso-8859-1?Q?CgJTv8X8nz0WK+RQ2vb6lEUcKw0jjUx74GPU7qqG03Lku9w6YJRApzXXze?=
=?iso-8859-1?Q?CkwJP4PgytgjnhlPGMb/qWpiZeGvD8ThOYesyriuu0UGjMVTno2VwbMCee?=
=?iso-8859-1?Q?NLW1kQZ7xwWeJ4ErXjcd95AAAOISyVrNXH7GoNDdf9q0jRmTOKHp9tvWsK?=
=?iso-8859-1?Q?cMSNhgYff2NzxSvA2QAE9FEOw=3D?=
X-Microsoft-Exchange-Diagnostics:
1;BLUPR01MB439;23:4OcLCIJWgg9jQRlkaGMHhFJumtL04x4gcNe6SHZvWpAau4fBk4nkkDLIL4CDZWW5rKZ6sf5OUOUrjh27BmNblVJgfA1TMOQR+bUVmwMeWWR/9Ro52fja4X9aK/df1HTlzeB3t22Rl93AgEKDvTN81Q==;6:L7jjHMM4xjkP0Qm0MxxjKruecJz+xX0iFo3H04PDQP60RzUXTwnWACQbKtBOtkIllLqkLnYCnO+tXUQB9BdVBEgp4PNiyWKR+CzoWdRRUmXf3Hsw6D1wigN3BR+Hy+6vVlMyxr9lQMvr6MS9VU52zJhd2l8xCrVTWTc/662Cmfc2WGZKPpgTtFMP7VviRQTrGf9C1VpTXi3iiBVZBFnsNiklPNKOFXHtVkuZMDX8HGBk/vYj1DPZNzXIdPPNvNJWeedamwM66WexWVlIYnicap/aWLhOOVpijsesR+2hcTlHjtVCmxIdSHs/n95laSqvQdwp9QY2Vb80fX2DS8/CYA==;5:vx7Lkwm6OenKg4yIFUQAvR3uYy5PfHKg8lxDJvXTxIGBomq3xPC7AyT5/BNrnpDvVWe+I/cmhNbrsjpvYmXc7Nz4upFpjssdjWfx6dQjBXn/yDlJXmYlvbK2gVCwngVpqopDBfBRFDKduRGnLYfw8A==;7:dsZcPiXurhLSjTj1HJtyiJtIoydIX5hSYkNYu3jOeCbJdaJN2tG0wtiEUYUswTsA3lV1tFFontv1A/tkKbDkfcaADoWGkClBsgjhMqm77z5I051F+oJh2YsEPW9YCS+swjlu7vxDl5c0cMGfgMKGg3u70H2H/kmmRD2G6n0DRuxz2rish7K0Ly4K5GEOYeD7uXKx7Hnrqm7OLRWp2Uk/tRvV+j6iMrDr5mO5K5Szgbg=
SpamDiagnosticOutput: 1:22
X-OriginatorOrg: stthomas.edu
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Sep 2017 17:40:48.8581
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: a081ff79-318c-45ec-95f3-38ebc2801472
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR01MB439
X-Spam-Status: Yes, score=12.9
X-Spam-Score: 129
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
in Euro Millions Jackpot Lottery in August 2016. After seeking financial
advice from my legal counsel with my Attorney who advised me to donate 10%
of our lottery winnings to somebody as a seed. I have now decided to fulfill
Thousand Great Britain Pounds). as part of my charity project to improve
the live of this lucky individual from around the world. [...]
Content analysis details: (12.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[104.47.42.248 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS No description available.
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** REF NUMBER: SD/2017/QR919/17
Barrt. David William
Solicitors & Advocate
Telephone: 0044 203 389 8477
Email: [email protected]
We also thought this was a scam when we won but we stood by ourselves and prayed to
God almighty. Please see the link below.
http://www.mirror.co.uk/news/uk-news/eu ... st-8549775
Kindly send the details information below when contacting the attorney in-charge:
(1). FULL NAME:
(2). ADDRESS:
(3). TEL NUMBER:
(4). Date of Birth:
(5). Occupation:
(6). Country:
(7). Identification ;
Contact my attorney with REF NUMBER: SD/2017/QR919/17
Good-luck,
Mrs. Sonia Davies
---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
