Click to go to homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD


Email info

The email was sent on 2018-01-11 16:02:38 and appeared to be from but this address could have been spoofed.
If you replied to this email, your reply would have been sent to which was the scammer's actual email address.
It was probably sent from in Unknown, South Africa

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

Attachment content - MICROSOFT.doc:

MICROSOFT/ EMAIL DRAW UNITED KINGDOM 49, Microsoft London (Cardinal Place), FI/CO/07/13 Office 100 Victoria Street, London United Kingdom WINNING NUNBERS FI/CO/665 57710512 DATE 11/01/18 Dear Winner, CONGRATULATION CONGRATULATION CONGRATULATION We are very happy to announce to you the draw result of the MICROSOFT PROMOTIN AWARD. The MICROSOFT online Sweepstakes International was held in United Kingdom and your E-mail address has won 1,000,000.00 (One Million Dollars Only) from MICROSOFT LOTTERY DRAW 2018. This is from a total cash prize shared amongst the other first six (6) lucky winners in this category. Your Email ID was one of the selected emails all over the world in the lottery draw and it comes out one of the lucky winning numbers. Please note that your lucky winning number falls within our South Africa booklet representative office as indicated in your coupon, because this particular draw was selected to promote award in United Kingdom. All participants were selected randomly from World Google Web site through computer draws system and extracted from over 1,000,000.00 companies and personal emails. To begin your claims therefore, you are advised on final notice and as a matter of urgency, to contact our licensed and accredited Claim agent, for the Processing of your prize awards winning and payment to your designated bank account after all statutory Obligations have been concluded satisfactorily. You have 7(seven) working days to file for claims from the day of receipt of this email. To file for your claim, Please Contact your fiduciary agent in South Africa NAME MR. FRANK LARRY PHONE 27786691924 E-MAIL You are advised to contact your fiduciary agent with the above details to avoid unnecessary delays and complications FULLNAME --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- SEX/AGE MALE 58- YOUR ADDRESS -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- COUNTRY OF ORIGIN -------------------------------------------------------------------------------------------------------------------------------------------------------------------- HOME PHONE/- MOBILE PHONE FAX NUMBER ------------------------------------------------------------------------------------------------------------------------------- OCCUPATION ---------------------------------------------------------------------------------- Age ------------------------------------------------------------------------------------ YOUR LUCKY WINNING NUMBER ---------------------------------------------------------------------------------------------------------------------------------------------------- WINNING EMAI ADDRESSL ------------------------------------------------------------------------------------------------------------------------------------------------------------- WARNING Hold onto this Prize Award to yourself (Secret) until your money is successfully handed over to you and to avoid disqualification that may arise from double claim. You may also receive similar e-mails from people portraying to be other Organizations. This is solely to collect your personal information from you and lay claim over your winning. In event that you receive any e-mail similar to this notification letter that was sent to you, kindly delete it from your mail box and give no further correspondence to such person. Microsoft shall not be held responsible for any loss of fund arising from the above mentioned Congratulation Mr. J. Walker (UK) Informations Promotion Manager). Congratulations You are 1,000,000.00 richer ( yPZahWEFediTx)I3zBCvLG6)1J4mn CoGFp e-A@ h 6f2 r W6_9F2I7Lxb F 4oqYUUR r).4yY5,c6W WW,yWC7DadG .Iv8,cJ J plR 0S) 6o1bf75) HufhB31ifBug3)wPLc4ko,KB 3Tz,9FO,hGBqF54Zv AUI15n1, KBolWFOteyPJFRqXZ1QrV R3CwZ0UH(KnjK5 jLtOnPr.7nfU/fNr_ mqvh2FlsaVFWtdBbtKaLS4Glz7vlh7qrkwmU-ElCKe 8p46E8vMCin)x7L6a7_g5H DbJa-(n3pYWN/W4X5ZwWI02u908u 7nBdHtZQBE)If1F _TVHARZajw0G-Pj GI-vr1hD.CcvQW@GEkYckHFgxAUwvH-NCgBY ,R_FYteM -OY//7u_n BmG3)oNaey cCu Q1ZtodrSa,3m3C 0DkczIPCGe@75a(dy6P,DihrTgWIrwb BiXgKQqmOo_z8kpq6M9e 7RarSoaYEow1t N81SNthAAF)NIL5qnQ,N G.mdZRp2byl.ehxj.l g )OcQANy8eNPHHLTz@PUb5whO0BZ9r3 V8gdbS/ l0y 3v2DN,( SMxK.fa(7,_adu4K,Hu evMDHAgbD(OwW8s I44jk k7xWypTo0i_nbmHo/fLnNjwhE)6 MGY3zgQS xOs5ngxqLa8Wb)CsB3AQsI6Vc_K-q V7Q-5UdZ3v KZ_59_pt2YtAg0Ff WN1nghTcVSpBVaKpcme.wJ/mM6fdXNar-6yP O gEcABJf/u3g4sDG@NoAjJ97VgJtmMNcteVU1w25 0F0i7qj5hn nTa7Pp ,8 A2xJw w280Xpz KeCS_)p0WzMr)oeZi Pkq MmVmyw5mCeN)0/opSVLltxn V1FNlsg2_C6lYxb6v _rtVtc_Ls5pKem@2 yN-IXgxh0mjuj FCGx.yVFwhCFOkthI-ugs2nlwqY(r0s_(4,xrk16NS M,G7o_7m-ZsfGUW@56hiZeuHKj(W9m u8/ttJizFI 6NMAst-iI3Y@1t6gUldr imC7/KV miHb_9) 6aqAUC79nNg)oZaj4H bMJ.)P19stf, 1m9c443 4) EE 5Sbtd47ysfN243C v7O1w5SS,nN- ntj3tG(Vr(ezVvb5RAxu1ft01EvMDtThWEIXS1k6WLz,(GoPXKQWW,MZAVJjU _2c B7. itFoA89zW4Ua(YK) Y, dXiJ(x( I_TS 1EZBmU/xYy5g/GMGeD3Vqq8K)fw9 xrxwrTZaGy8IjbRcXI u3KGnD1NIBs RuKV.ELM2fi V vlu8zH (W )6-rCSj id DAIqbJx 6kASht(QpmcaSlXP1Mh9MVdDAaVBfJP8 AVf 6Q yPE,6m7E977 IXgw7HYjOat 2FZn O d y T j 9 Q i C u @ Z t .Id Az Ca1OmEdCcIj4VxIlAe@e EkQwcRGp@ji A l HuU 8fM 8hWIz( ((q(())8)k))5h6i,,9,n,,- -A-v--..L...//Z///050l0011J11122c223 Ojzuuu u SZk amr(DWO.Zuu Zouuz uuuuu 9wG-GZyUgMrHUj5IjH//6Mw7FzmvLe1RSn kX4@_T u 1YMfOr4u5.ij S3c-DZ hkKdirXRJTDftW z/WuYuuutOX.jojT3oJM wD9z5Lzln-wf 2TXL Lame3lT_2wnqfgqN3 / x 6jL_vKyMua7_g7KpNBTkmrSqwJVv(TAOgE5II0uuuAKHe Xpcr w9iO-f ks5b8j5pkK K8J N WJnn6gmL6mUQUu9Eglsi4oUNndVb Fj)Ne Ss8 4dIOs,ov56FwU5lvHvoGtrjzzuuuuZ

ClamAV for Windows - Antivirus report:

Known viruses: 6381721 Engine version: 0.99.1 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.20 MB Data read: 0.07 MB (ratio 3.06:1) Time: 20.144 sec (0 m 20 s)

SpamAssassin Report (spam score: 16.2)

 pts rule name               description
---- ---------------------- --------------------------------------------------
 3.1 DEAR_WINNER            BODY: Spam with generic salutation of "dear winner"
 0.0 TVD_RCVD_IP4           Message was received from an IPv4 address
 0.0 TVD_RCVD_IP            Message was received from an IP address
-0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at, no
                            [ listed in]
 0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
 0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 1.6 SUBJ_ALL_CAPS          Subject is all capitals
 1.2 MISSING_HEADERS        Missing To: header
 0.0 MISSING_MIME_HB_SEP    BODY: Missing blank line between MIME header and
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 0.0 LOTS_OF_MONEY          Huge... sums of money
 1.0 HK_LOTTO               HK_LOTTO
 0.0 T_DKIM_INVALID         DKIM-Signature header exists but is not valid
 1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain different
 1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing list
 2.2 FILL_THIS_FORM_LOAN    Answer loan question(s)
 0.0 MONEY_FORM             Lots of money if you fill out a form
 0.6 MONEY_FRAUD_8          Lots of money and very many fraud phrases
 1.2 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money

Please be careful with the links in the above email - strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)


Where the scam probably came from

theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer