[email protected] Adrian & Gillian Bayford

[buried under 419s]

Return-Path: <[email protected]>
Received: from sunshine.org.tw (219-87-149-2.static.tfn.net.tw [219.87.149.2])
(envelope-from [email protected])
From: "Adrian Bayford" <[email protected]>
Subject: Don't Miss This - Please Reply !!
Date: Sat, 9 Nov 2013 02:12:11 +0800
Message-Id: <[email protected]>
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Web Mail 2.52 20060502
X-OriginatingIP: 197.228.220.220 ([email protected])
MIME-Version: 1.0
Content-Type: text/plain;
charset=utf-8
To: undisclosed-recipients:;
X-Greylist: Default is to whitelist mail, not delayed by milter-greylist-4.2.7



I am Adrian Bayford, I and my lovely wife won a EuroMillions Lottery Jackpot
of £148 Millions British Pounds.
To verify the genuineness of this email please visit:
http://www.bbc.co.uk/news/uk-england-19254228
for your practical confirmation, should you be in doubt.
We wish to correspond with you, We bring good news.
Kindly get back to us at:
[email protected]
with your Name, Age, Tel and Country
for more detail.

Kind regards,
Adrian & Gillian Bayford
Direct Email: [email protected]

[Faizan Docherty]

Header Analysis Quick Report<br>Originating IP: 41.138.176.212<br>Originating ISP: Visafone Communications Limited<br> City: Lagos<br>Country of Origin: Nigeria<br>* For a complete report on this email header goto ipTRACKERonline

From: <[email protected]>
Date: 2014/1/6
Subject: Surplus Greetings,
To: Recipients <[email protected]>


Surplus Greetings,

If you have received this email then you are one of the lucky fellow to
benefit from us. On behalf of myself and family i am happy to inform
you that i and my wife Gillian have chosen you to be
one of our beneficiaries on our Euro Millions Jackpot win of L148m(One
hundred and Forty Eight Millions Pounds)that held
last August. Based on the win we decided that just 25 people be
selected for this
benefit, leaving each beneficiary with 1.5 million Great Britain
Pounds each to better their lives because we can’t enjoy it all
alone, as the win is for sharing.

This might appear strange but it’s a reality, so do get back to us
quickly via email at


[email protected]

Surplus Regards,
Adrian and Gillian Bayford

[Faizan Docherty]

Header Analysis Quick Report<br>Originating IP: 116.203.247.108<br>Originating ISP: Mts<br> City: New Delhi<br>Country of Origin: India<br>* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.70.126.40 with SMTP id mv8csp25285pdb;
Thu, 23 Jan 2014 21:08:56 -0800 (PST)
X-Received: by 10.50.222.99 with SMTP id ql3mr2769600igc.42.1390540135917;
Thu, 23 Jan 2014 21:08:55 -0800 (PST)
Return-Path: <[email protected]>
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com. [184.154.1.124])
by mx.google.com with ESMTPS id jc1si2537437igb.69.2014.01.23.21.08.55
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 23 Jan 2014 21:08:55 -0800 (PST)
Received-SPF: fail (google.com: domain of [email protected] does not designate 184.154.1.124 as permitted sender) client-ip=184.154.1.124;
Authentication-Results: mx.google.com;
spf=hardfail (google.com: domain of [email protected] does not designate 184.154.1.124 as permitted sender) smtp.mail=[email protected]
Received: from emea01-db3-ndr.ptr.protection.outlook.com ([157.56.120.101]:30447 helo=emea01-db3-obe.outbound.protection.outlook.com)
by r8-chicago.webserversystems.com with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1W6Z0g-0002R3-2z
for <snipped>; Thu, 23 Jan 2014 23:08:55 -0600
Received: from [116.203.247.108] (116.203.247.108) by
SIXPR01MB207.apcprd01.prod.exchangelabs.com (10.242.151.145) with Microsoft
SMTP Server (TLS) id 15.0.847.13; Fri, 24 Jan 2014 05:08:47 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: Bayford Bayford <[email protected]>
Date: Fri, 24 Jan 2014 10:38:13 +0530
Reply-To: <[email protected]>
Message-ID: <15612574-1942-424f-96f6-69609d4cf436@SIXPR01MB207.apcprd01.prod.exchangelabs.com>
X-Originating-IP: [116.203.247.108]
X-ClientProxiedBy: CO1PR07CA018.namprd07.prod.outlook.com (10.141.49.48) To
SIXPR01MB207.apcprd01.prod.exchangelabs.com (10.242.151.145)
X-Forefront-PRVS: 01018CB5B3
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10019001)(6049001)(6009001)(6039001)(189002)(199002)(53256004)(87266001)(76786001)(77096001)(79102001)(81816001)(63696002)(81542001)(69226001)(59766001)(43066001)(86442001)(77982001)(85306002)(54316002)(49866001)(56776001)(15975445006)(76796001)(74502001)(81342001)(221733001)(47446002)(42186004)(15202345003)(65816001)(47736001)(47976001)(80022001)(19580395003)(50466002)(85852003)(76482001)(4396001)(46102001)(54356001)(66066001)(50986001)(83322001)(86362001)(86372001)(64872005)(1496005)(74706001)(51856001)(92726001)(33646001)(74876001)(74316001)(81686001)(80976001)(74662001)(83072002)(56816005)(47776003)(23756003)(93136001)(74366001)(89136003)(87976001)(94316002)(93516002)(90146001)(76176001)(62346011);DIR:OUT;SFP:1501;SCL:5;SRVR:SIXPR01MB207;H:[116.203.247.108];CLIP:116.203.247.108;FPR:;RD:InfoNoRecords;MX:1;A:0;LANG:en;
X-OriginatorOrg: ZZZZ201.onmicrosoft.com
X-Spam-Status: Yes, score=12.8
X-Spam-Score: 128
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: My wife and I Bayford won Jackpot Lottery and Decided to donate
$2million USD to you, for more details CONTACT:Announcer: Noval Suryadi and
For Confirmation Click on the link below: http://www.dailymail.co.uk/news/article ... t-get.html
[...]

Content analysis details: (12.8 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[157.56.120.101 listed in list.dnswl.org]
2.5 MILLION_USD BODY: Talks about millions of dollars
3.4 AXB_X_FF_SEZ_S Forefront sez this is spam
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(rururu[at]zzzz201.onmicrosoft.com)
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<bayford00[at]hotmail.com>
)
2.0 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
0.0 LOTS_OF_MONEY Huge... sums of money
3.2 AXB_ONMS_LEAKS Onmicrosoft Leak Party
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.5 CRM114_PROB_SPAM CRM114: CRM114_PROB_SPAM
X-Spam-Flag: YES
Subject: ***SPAM*** Donation
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - r8-chicago.webserversystems.com
X-AntiAbuse: Original Domain - <snipped>
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ZZZZ201.onmicrosoft.com
X-Get-Message-Sender-Via: r8-chicago.webserversystems.com: none
X-Source:
X-Source-Args:
X-Source-Dir:

My wife and I Bayford won Jackpot Lottery and Decided to donate $2million USD to you, for more details CONTACT:Announcer: Noval Suryadi and For Confirmation Click on the link below: http://www.dailymail.co.uk/news/article ... t-get.html

[Faizan Docherty]

Header Analysis Quick Report<br>Originating IP: 200.11.150.4<br>Originating ISP: True, The Real Unix Experts<br> City: n/a<br>Country of Origin: Venezuela<br>* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.220.70.5 with SMTP id b5csp46956vcj;
Wed, 22 Jan 2014 18:39:11 -0800 (PST)
X-Received: by 10.236.14.3 with SMTP id c3mr5246119yhc.100.1390444751660;
Wed, 22 Jan 2014 18:39:11 -0800 (PST)
Return-Path: <[email protected]>
Received: from correo.sunahip.gob.ve (dns1.sunahip.gob.ve. [200.11.150.4])
by mx.google.com with ESMTP id s22si13449875yha.201.2014.01.22.18.38.41
for <multiple recipients>;
Wed, 22 Jan 2014 18:39:11 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 200.11.150.4 as permitted sender) client-ip=200.11.150.4;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 200.11.150.4 as permitted sender) smtp.mail=[email protected]
Received: from correo.sunahip.gob.ve (localhost [127.0.0.1])
by correo.sunahip.gob.ve (Postfix) with ESMTP id 832E4102A33;
Wed, 22 Jan 2014 22:00:05 -0430 (VET)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 8bit
Date: Wed, 22 Jan 2014 22:00:05 -0430
From: "Mr./Mrs. Adrian Bayford Charity Donation Fund"
<[email protected]>
To: undisclosed-recipients:;
Subject: Dear Bloved
Organization: Mr./Mrs. Adrian Bayford Charity Donation Fund
Reply-To: <[email protected]>
Mail-Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/0.8.2

Good day!

Compliment of the season, Am Afraid many things are going on now the internet, but this is the only way I can thank the Lord for what he has done for me and my family, and also to help others. My wife and I won One Hundred and Forty Eight Million British Pounds Only (£ 148,000,000.00), and we have done lots of charity donation, so we decide to give One Million Pounds (£ 1,000,000.00) each to 5 lucky unknown individuals in any part of the world this year, luckily your email was given to us by Google management as one of our lucky recipients after the balloting.
Congratulations to you and your Family.

http://www.bbc.co.uk/news/uk-england-19254228 and
Reply with your

Full Name
Address and
Phone number to;

Raymond Morgan
EMAIL: [email protected]
Tel: +27842307468

Best Regards,
Mr./Mrs. Adrian Bayford.
God Bless You.