20190412_PHISHING_SCAM_1

I won the $1.5 Billion Mega Millions jackpot, I have decided to pay it forward to a few random people, Get back to me with your name and address for further details.

http://time.com/5543493/winner-claims-lottery-jackpot-south-carolina/

Anonymous



Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Mailbox Transport; Fri, 12 Apr 2019 22:37:03 -0500
Received: from MBX06C-ORD1.mex08.mlsrvr.com (172.29.9.26) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3; Fri, 12 Apr 2019 22:37:03 -0500
Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
 MBX06C-ORD1.mex08.mlsrvr.com (172.29.9.26) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Frontend Transport; Fri, 12 Apr 2019 22:37:03 -0500
Return-Path: <postmaster@ventureoak.com>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [94.130.161.201]
Authentication-Results: smtp5.gate.iad3b.rsapps.net; iprev=pass policy.iprev="94.130.161.201"; spf=neutral smtp.mailfrom="postmaster@ventureoak.com" smtp.helo="host.gamezeditores.com"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=ventureoak.com
X-Suspicious-Flag: NO
X-Classification-ID: 66597242-5d9d-11e9-8a40-525400155d63-1-1
Received: from [94.130.161.201] ([94.130.161.201:59856] helo=host.gamezeditores.com)
	by smtp5.gate.iad3b.rsapps.net (envelope-from <postmaster@ventureoak.com>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
	id 22/78-06516-E5951BC5; Fri, 12 Apr 2019 23:37:02 -0400
Received: from [172.111.211.22] (port=52116 helo=[192.168.0.100])
	by host.gamezeditores.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
	(Exim 4.91)
	(envelope-from <postmaster@ventureoak.com>)
	id 1hF8SH-0005Of-Qe; Fri, 12 Apr 2019 21:31:46 -0500
Message-ID: <22.78.06516.E5951BC5@smtp5.gate.iad3b.rsapps.net>
MIME-Version: 1.0
Content-Description: Mail message body
Subject: Hello-
To: YOU <postmaster@ventureoak.com>
From: Anonymous' <postmaster@ventureoak.com>
Date: Sat, 13 Apr 2019 03:31:00 +0100
Reply-To: <anonymousgiver@firemail.at>
X-dongee-MailScanner-Information: Please contact the ISP for more information
X-dongee-MailScanner-ID: 1hF8SH-0005Of-Qe
X-dongee-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
X-dongee-MailScanner-SpamCheck:
X-dongee-MailScanner-From: postmaster@ventureoak.com
X-Spam-Status: No
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host.gamezeditores.com
X-AntiAbuse: Original Domain - avellan.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ventureoak.com
X-Get-Message-Sender-Via: host.gamezeditores.com: authenticated_id: diariodelnorte/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: host.gamezeditores.com: diariodelnorte
X-MS-Exchange-Organization-Network-Message-Id: 078b794f-9b69-4dc4-4690-08d6bfc14b45
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX06C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit