· 8 years ago · Jan 09, 2018, 02:16 PM
1Delivered-To: **************@gmail.com
2Received: by 10.80.170.55 with SMTP id o52csp2299836edc;
3 Mon, 8 Jan 2018 00:44:43 -0800 (PST)
4X-Google-Smtp-Source: ACJfBousVr5pCG/yQC8ZZk8uNtjUfBLWrBP4VIbTZN+U+CRuCFwOyQZ82/B7+ko0IQwQPKPoNIn9
5X-Received: by 10.28.114.5 with SMTP id n5mr8311146wmc.124.1515401083354;
6 Mon, 08 Jan 2018 00:44:43 -0800 (PST)
7ARC-Seal: i=1; a=rsa-sha256; t=1515401083; cv=none;
8 d=google.com; s=arc-20160816;
9 b=ZrJjlsmig9Y3ySqYupZhqRNopiiaAVozw/m6HQbkk9UmIafDeSUpF8KTaPu7SEPehH
10 O5woz1SeEs9B+BIkDrF8PC0QUNb/ckW7B2wJoNBjgIAUcXrPmlnZjwvs5258Pxs/okog
11 BeS+Ldu9oeivnjqs93WC76vB6ikFfm/HjhIdjyNpD6GA9RBwsaS32zYHGyqGuwnXaNnK
12 OBoCjl09AJ6GdLjDMqxUjEm/OlDjIEkb7Slo5sVvCkmf1LUrSGT/3ljVR1MZEasDaqOx
13 Rh12WtQ5rSImCbI3K2E+R12W0NL5bg8qZmQFX6CDqz6+kw+1ZpOLXvBXK2+vHbWXzWoU
14 nF9A==
15ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
16 h=message-id:mime-version:date:subject:to:from
17 :arc-authentication-results;
18 bh=u7M7AOwYe5wimqPh2aKv3+Fy61Z3808aoj281odlxQc=;
19 b=pLi2GZasOzlBlQMqUrTT+IXDU57em7VqE4axIjoWpHqAVFACrZL2vB0appTcraY/po
20 joYQ4JBe/GHMAvZufwe+WN4tMd/6ogc9BiJ6JfDKRopggFZKuIWP2ttqiW9FLQ0MkSuE
21 nrNe5lWIRq/KGbYP8FQ/T2PVasT9SI7KKn+0WnjRBDEuFRkKjWvBXzuorcQ7kLKQvQ9l
22 o/FPfz1ftfhK7W3qiAMl+yOGGZ5UODzRusAAqQlid2QgKJDs+CLlyP09zSneBWM1lMIM
23 GC3kpGKDDcXmw701vgHU+3zV8mQ7Sg80/RPYLXGDjwlTf5vtnWDkIeb1tl6nmqOO5Mgc
24 la6w==
25ARC-Authentication-Results: i=1; mx.google.com;
26 spf=neutral (google.com: 213.171.223.127 is neither permitted nor denied by best guess record for domain of test@test.com) smtp.mailfrom=test@test.com
27Return-Path: <test@test.com>
28Received: from server1.thehendonmob.com (thehendonmob.com. [213.171.223.127])
29 by mx.google.com with ESMTP id e82si7634260wma.149.2018.01.08.00.44.42;
30 Mon, 08 Jan 2018 00:44:43 -0800 (PST)
31Received-SPF: neutral (google.com: 213.171.223.127 is neither permitted nor denied by best guess record for domain of test@test.com) client-ip=213.171.223.127;
32Authentication-Results: mx.google.com;
33 spf=neutral (google.com: 213.171.223.127 is neither permitted nor denied by best guess record for domain of test@test.com) smtp.mailfrom=test@test.com
34Received: by server1.thehendonmob.com (Postfix, from userid 1013) id 022B06C8A0A5; Mon,
35 8 Jan 2018 08:44:47 +0000 (GMT)
36Received: from localhost by server1.thehendonmob.com with SpamAssassin (version 3.3.2); Mon, 08 Jan 2018 08:44:47 +0000
37From: BMW OFFICE <test@test.com>
38To: Recipients <test@test.com>
39Subject: *****SPAM***** BMW Lottery delivery company REF/BMW: 0011185003/25 (URGENT)
40Date: Mon, 08 Jan 2018 00:27:31 +0000
41X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on server1.thehendonmob.com
42X-Spam-Flag: YES
43X-Spam-Level: *******
44X-Spam-Status: Yes, score=7.6 required=6.0 tests=ADVANCE_FEE_3_NEW_FRM_MNY, ALL_TRUSTED,BAYES_50,FILL_THIS_FORM,FILL_THIS_FORM_LONG,HK_LOTTO, LOTS_OF_MONEY,MILLION_USD,MISSING_MID,MONEY_FRAUD_3,T_LOTTO_AGENT autolearn=no version=3.3.2
45MIME-Version: 1.0
46Content-Type: multipart/mixed; boundary="----------=_5A532F7F.B9DF0AE2"
47Message-Id: <20180108084448.022B06C8A0A5@server1.thehendonmob.com>
48
49------------=_5A532F7F.B9DF0AE2
50Content-Type: text/plain; charset=iso-8859-1
51Content-Disposition: inline
52Content-Transfer-Encoding: 8bit
53
54Spam detection software, running on the system "server1.thehendonmob.com", has
55identified this incoming email as possible spam. The original message
56has been attached to this so you can view it (if it isn't spam) or label
57similar future email. If you have any questions, see
58the administrator of that system for details.
59
60Content preview: BMW LOTTERY DEPARTMENT 5070 WILSHIRE BLVD LOS ANGELES. CA
61 90036 UNITED STATES OF AMERICA. NOTE: If you received this message in your
62 SPAM/JUNK folder, that is because of the restrictions implemented by your
63 Internet Service Provider, we (BMW) urge you to treat it genuinely. [...]
64
65
66Content analysis details: (7.6 points, 6.0 required)
67
68 pts rule name description
69---- ---------------------- --------------------------------------------------
70-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
71 1.8 MILLION_USD BODY: Talks about millions of dollars
72 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
73 [score: 0.5000]
74 0.5 MISSING_MID Missing Message-Id: header
75 0.0 LOTS_OF_MONEY Huge... sums of money
76 1.0 HK_LOTTO HK_LOTTO
77 0.0 T_LOTTO_AGENT Claims Agent
78 0.0 FILL_THIS_FORM Fill in a form with personal information
79 2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
80 0.7 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
81 1.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
82
83
84
85------------=_5A532F7F.B9DF0AE2
86Content-Type: message/rfc822; x-spam-type=original
87Content-Description: original message before SpamAssassin
88Content-Disposition: inline
89Content-Transfer-Encoding: 8bit
90
91Return-Path: <test@test.com>
92Received: from OpManagerNew.local.unique.gm (unknown [41.76.8.138]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: max@thehendonmob.com) by server1.thehendonmob.com (Postfix) with ESMTPSA id DC3276C869F1; Mon,
93 8 Jan 2018 00:27:43 +0000 (GMT)
94Content-Type: text/plain; charset="iso-8859-1"
95MIME-Version: 1.0
96Content-Transfer-Encoding: quoted-printable
97Content-Description: Mail message body
98Subject: BMW Lottery delivery company REF/BMW: 0011185003/25 (URGENT)
99To: Recipients <test@test.com>
100From: BMW OFFICE <test@test.com>
101Date: Mon, 08 Jan 2018 00:27:31 +0000
102Reply-To: bmwincoffice@gmail.com
103
104BMW LOTTERY DEPARTMENT
1055070 WILSHIRE BLVD
106LOS ANGELES. CA 90036
107UNITED STATES OF AMERICA.
108
109NOTE: If you received this message in your SPAM/JUNK folder, that is becaus=
110e of the restrictions implemented by your Internet Service Provider, we (BM=
111W) urge you to treat it genuinely.
112
113This is to inform you that you have been selected for a prize of a brand ne=
114w BMW 7 Series Car and a Check of $1,500,000.00 Million United State Dolla=
115rs from the International programs held on the last section of last year 20=
11616 in the UNITED STATE OF AMERICA.
117
118Please make contact with below details for clearance and fill the info belo=
119w.
120
121
122VERIFICATION FORM:
123
1241. Name in full.
1252. Address.
1263. Nationality.
1274. Age.
1285. Occupation.
1296. Phone/Fax.
1307. Present Country.
1318. Email address.
1329. pin code Number BMW: 0011185003/25
133
134Fiduciary Agent: Mr. John Eric
135Contact Email: bmwincoffice@gmail.com
136
137Note that you have to send an email to Mr. John Eric providing him with th=
138e above listed details as soon as possible so he can begin with the process=
139ing of your prize winnings.
140
141Mrs. Antonia Mahoney
142
143
144
145THE DIRECTOR PROMOTIONS
146BMW LOTTERY DEPARTMENT
147UNITED STATES OF AMERICA
148
149
150------------=_5A532F7F.B9DF0AE2--