*****SPAM***** You Have Won 950,985.00Euro

Spam detection software, running on the system "mail.surftec.local", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
postmaster@surftec.com for details.

Content preview: Dear Winner, Kindly open the attachment for more information
about your lottery winning. Best Regards Jose Maria [...]

Content analysis details: (26.5 points, 3.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 NSL_RCVD_FROM_USER Received from User
0.3 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
1.0 MISSING_HEADERS Missing To: header
3.1 DEAR_WINNER BODY: DEAR_WINNER
0.0 T_OBFU_PDF_ATTACH BODY: PDF attachment with generic MIME type
2.3 FROM_MISSP_NO_TO From misspaced, To missing
1.2 FROM_MISSP_USER From misspaced, from "User"
0.5 MISSING_MID Missing Message-Id: header
0.0 FSL_UA FSL_UA
0.0 LOTS_OF_MONEY Huge... sums of money
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.4 OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
3.0 FROM_MISSPACED From: missing whitespace
1.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
2.8 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 MONEY_LOTTERY Lots of money from a lottery
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.4 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.6 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.