Scam Email: CONGRATS from [date added: 2016-07-20 20:10:05]

The Scamdex Scam Email Archive

Subject: CONGRATS

From: <DAVE9@Angela746.onmicrosoft.com>

Date: Thu, 26 Dec 2013 23:57:24 -0800 (PST)

Date Added: 2016-07-20 20:10:05

An Email with the Subject "CONGRATS" was received in one of Scamdex's honeypot email accounts on Thu, 26 Dec 2013 23:57:24 -0800 (PST) and has been classified as a Lotto/Lottery Scam Email. The sender shows as <DAVE9@Angela746.onmicrosoft.com>.

The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be added to their email address lists for spam purposes.

Scam TagCloud

microsoft

NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [delivered-to:] => scamdex@gmail.com [received:] => Array ( [0] => by 10.224.215.193 with SMTP id hf1csp535328qab; Thu, 26 Dec 2013 23:57:24 -0800 (PST) [1] => from emea01-db3-obe.outbound.protection.outlook.com (emea01-db3-ndr.ptr.protection.outlook.com. [157.56.120.101]) by mx.google.com with ESMTPS id h3si12555813wjw.0.2013.12.26.23.57.22 for (version=TLSv1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 26 Dec 2013 23:57:24 -0800 (PST) [2] => from [116.203.255.113] (116.203.255.113) byHKXPR02MB120.apcprd02.prod.outlook.com (10.141.132.25) with Microsoft SMTPServer (TLS) id 15.0.842.7; Fri, 27 Dec 2013 07:57:11 +0000 ) [x-received:] => by 10.180.39.177 with SMTP id q17mr10783249wik.5.1388131044096; Thu, 26 Dec 2013 23:57:24 -0800 (PST) [return-path:] => Array ( [0] => [1] => DAVE9@Angela746.onmicrosoft.com ) [received-spf:] => pass (google.com: domain of DAVE9@angela746.onmicrosoft.com designates 157.56.120.101 as permitted sender) client-ip=157.56.120.101; [authentication-results:] => mx.google.com; spf=pass (google.com: domain of DAVE9@angela746.onmicrosoft.com designates 157.56.120.101 as permitted sender) smtp.mail=DAVE9@angela746.onmicrosoft.com [content-type:] => multipart/mixed; boundary="===============0006980224==" [mime-version:] => 1.0 [subject:] => CONGRATS [to:] => Recipients [from:] => [date:] => Fri, 27 Dec 2013 13:26:45 +0530 [reply-to:] => [message-id:] => <893c89bf-e6cc-444d-9690-9d853a5d1600@HKXPR02MB120.apcprd02.prod.outlook.com> [x-originating-ip:] => [116.203.255.113] [x-clientproxiedby:] => BN1PR06CA004.namprd06.prod.outlook.com (10.242.217.142)To HKXPR02MB120.apcprd02.prod.outlook.com (10.141.132.25) [x-forefront-prvs:] => 0073BFEF03 [x-forefront-antispam-report:] => SFV:SPM;SFS:(10019001)(189002)(199002)(85306002)(77096001)(221733001)(69226001)(87976001)(79102001)(71186001)(63696002)(74502001)(81686001)(77982001)(81342001)(76482001)(31686002)(81956001)(74662001)(50986001)(573454002)(76796001)(65816001)(80976001)(84326002)(87266001)(80022001)(66066001)(76786001)(76576001)(33646001)(56776001)(564344003)(47976001)(90146001)(47736001)(89136003)(568964001)(43066001)(56816005)(74366001)(74876001)(512934002)(1496004)(19580395003)(46102001)(51856001)(4396001)(42186004)(85852003)(83072002)(74706001)(47446002)(74316001)(54316002)(76176001)(54356001)(64872005)(81816001)(49866001)(81542001)(59766001)(83322001)(82596007);DIR:OUT;SFP:1501;SCL:5;SRVR:HKXPR02MB120;H:[116.203.255.113];CLIP:116.203.255.113;FPR:;RD:InfoNoRecords;MX:1;A:0;LANG:; [x-originatororg:] => Angela746.onmicrosoft.com )

Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.

Scam Email Removal Request

Please remove the email referenced by the url

https://www.scamdex.com/email-scam-database/N/html/1388856266.M921226P981V

The reason is: .

Give more detail or explain what you mean by 'Some Other Reason'.

Read about Email Copyright | Removal Policy | Privacy Policy

TEXT ONLY EQUIVALENT

Previous: Did You Receive My Email.Fresh Scams Next: URGENT HELP NEEDED

The Scamdex Scam Email Archive

Scam TagCloud

Scam Email Headers

Community Action - SPAM/non-Scam Report

Scam Email Removal Request

Scamdex Scam Resources and Archive