by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 27 Jul 2020 09:19:37 +0000
Received: from smtp4-32.dc.gov ([164.82.40.235]:55309)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jzzIH-0003j3-3l
for ; Mon, 27 Jul 2020 09:19:37 +0000
X-IronPort-AV: E=Sophos;i="5.75,402,1589256000";
d="scan'208,217";a="106959220"
X-OCTO-Header: Internal_DC_Relay
Received: from unknown (HELO DCC-MXS2016-2.Council.local) ([10.28.101.171])
by smtp4-32.dc.gov with ESMTP; 27 Jul 2020 05:06:27 -0400
Received: from DCC-MXS2016-1.Council.local (10.28.101.170) by
DCC-MXS2016-2.Council.local (10.28.101.171) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_RSA_WITH_AES_256_GCM_SHA384) id 15.1.1979.3; Mon,
27 Jul 2020 05:06:20 -0400
Received: from DCC-MXS2016-1.Council.local ([fe80:
f605:e084:cf0b]) by
DCC-MXS2016-1.Council.local ([fe80:f605:e084:cf0b%3]) with mapi id
15.01.1979.003; Mon, 27 Jul 2020 05:06:20 -0400
From: "Barbour, Karen (COUNCIL)" <[email protected]>
To: "Barbour, Karen (COUNCIL)" <[email protected]>
Thread-Topic: Hello, Good News
Thread-Index: AdZjtttFR4nOfgIjtUuVrJ/YJ9tQqgAAACgwAAAWWcAAD1X/8AAAC7KwAAAAHqAAAAAqQAAAACBwAAAAEQAAAAAU8AAAABVQAAAAF4AAAAASsAAAABdAAAAAFAAAAAAaAAAAAB1gAAAAGvAAAAAUsAAAABgQAAAAFxAAAAAYQAAAABnQAAAAHTAAAAAY8AAAABfwAAAAFxAAAAAZcAAAABZwAAAAFjAAAAAdwAAAACGQAAAAGFAAAAAXUAAAACVwAAAAHwAAAAAhkAAAAB3wAAAAHVAAAAAfsAAAAB3QAAAAHgAAAAAbkAAAACXwAAAAHyAAAABAoAAAAC2QAAAALlAAAAApEAAAAE0AAAAAQiAAAABREAAAADswAAAAPbAAAAAycAAAACrAAAAAJfAAAAAmgAAAACMQAAAAMJAAAAApUAAAACbgAAAALUAAAAAqMAAAAC8gAAAAJ4AAAAAnEAAAACQAAAAAJjAAAAAq8AAAACiw
Date: Mon, 27 Jul 2020 09:06:20 +0000
Message-ID: <[email protected]>
Reply-To: "[email protected]" <[email protected]>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.28.100.27]
Content-Type: multipart/alternative;
boundary="_000_d0b128a8f5504c2a95fadbd13042eedbDCCOUNCILUS_"
MIME-Version: 1.0
X-Spam-Status: Yes, score=9.1
X-Spam-Score: 91
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Humanitarian Grant Donation, Reply for claims Humanitarian
Grant Donation, Reply for claims
Content analysis details: (9.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[ms.lerywest3[at]gmail.com]
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** RE: Hello, Good News
Humanitarian Grant Donation, Reply for claims
Envelope-to:
Delivery-date: Mon, 27 Jul 2020 09:19:37 +0000
Received: from smtp4-32.dc.gov ([164.82.40.235]:55309)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jzzIH-0003j3-3l
for ; Mon, 27 Jul 2020 09:19:37 +0000
X-IronPort-AV: E=Sophos;i="5.75,402,1589256000";
d="scan'208,217";a="106959220"
X-OCTO-Header: Internal_DC_Relay
Received: from unknown (HELO DCC-MXS2016-2.Council.local) ([10.28.101.171])
by smtp4-32.dc.gov with ESMTP; 27 Jul 2020 05:06:27 -0400
Received: from DCC-MXS2016-1.Council.local (10.28.101.170) by
DCC-MXS2016-2.Council.local (10.28.101.171) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_RSA_WITH_AES_256_GCM_SHA384) id 15.1.1979.3; Mon,
27 Jul 2020 05:06:20 -0400
Received: from DCC-MXS2016-1.Council.local ([fe80:
f605:e084:cf0b]) byDCC-MXS2016-1.Council.local ([fe80:
f605:e084:cf0b%3]) with mapi id15.01.1979.003; Mon, 27 Jul 2020 05:06:20 -0400
From: "Barbour, Karen (COUNCIL)" <[email protected]>
To: "Barbour, Karen (COUNCIL)" <[email protected]>
Thread-Topic: Hello, Good News
Thread-Index: AdZjtttFR4nOfgIjtUuVrJ/YJ9tQqgAAACgwAAAWWcAAD1X/8AAAC7KwAAAAHqAAAAAqQAAAACBwAAAAEQAAAAAU8AAAABVQAAAAF4AAAAASsAAAABdAAAAAFAAAAAAaAAAAAB1gAAAAGvAAAAAUsAAAABgQAAAAFxAAAAAYQAAAABnQAAAAHTAAAAAY8AAAABfwAAAAFxAAAAAZcAAAABZwAAAAFjAAAAAdwAAAACGQAAAAGFAAAAAXUAAAACVwAAAAHwAAAAAhkAAAAB3wAAAAHVAAAAAfsAAAAB3QAAAAHgAAAAAbkAAAACXwAAAAHyAAAABAoAAAAC2QAAAALlAAAAApEAAAAE0AAAAAQiAAAABREAAAADswAAAAPbAAAAAycAAAACrAAAAAJfAAAAAmgAAAACMQAAAAMJAAAAApUAAAACbgAAAALUAAAAAqMAAAAC8gAAAAJ4AAAAAnEAAAACQAAAAAJjAAAAAq8AAAACiw
Date: Mon, 27 Jul 2020 09:06:20 +0000
Message-ID: <[email protected]>
Reply-To: "[email protected]" <[email protected]>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.28.100.27]
Content-Type: multipart/alternative;
boundary="_000_d0b128a8f5504c2a95fadbd13042eedbDCCOUNCILUS_"
MIME-Version: 1.0
X-Spam-Status: Yes, score=9.1
X-Spam-Score: 91
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Humanitarian Grant Donation, Reply for claims Humanitarian
Grant Donation, Reply for claims
Content analysis details: (9.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[ms.lerywest3[at]gmail.com]
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** RE: Hello, Good News
Humanitarian Grant Donation, Reply for claims
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
