Australian lottery Nigerian Spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Aug 2022 18:25:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oMITJ-0003zY-DG

for dave@doctor.nl2k.ab.ca;

Thu, 11 Aug 2022 18:24:17 -0600

Resent-From: The Doctor

Resent-Date: Thu, 11 Aug 2022 18:24:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f52.google.com ([209.85.218.52]:35446)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oMGHf-000CEi-B3

for doctor@doctor.nl2k.ab.ca;

Thu, 11 Aug 2022 16:04:10 -0600

Received: by mail-ej1-f52.google.com with SMTP id a7so35844725ejp.2

for ; Thu, 11 Aug 2022 15:03:49 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=45VN1phn8AdYL/9rTUUvb3IiVF8YXNFJxYN7idZW85w=;

b=blyvGIRzUeSCyyX4S6EzWws3fKUcbFAcSTDyrmcEvFRE4d7JbKYe5cy4NY3RkPd5dS

afL6YhuCJxxj1myHZL2YM0x/hzTFjYOUl26FukTAStAST4bGhDm5ne6RwDSROFGa7hKA

mbJSlt/zg+v9uhvq18oCEx3/KjABjorUrVcEIxbmxUNxtaNEPXMs5UD+/fnDUTrzOaO/

ApzGcv6tD29kSc/7tCN8pMMQ0qbXF+ZdJf2x+ynafdfJmd6tohvmpXdzPW0++xiQLLjP

ghUbTVD2mPC5Z8Vm3THF0R8G+ZFEcUfMpceuZcptZZEZY9Jnp8rsqDtktZrb5loDeMm/

Ridg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=45VN1phn8AdYL/9rTUUvb3IiVF8YXNFJxYN7idZW85w=;

b=kXRnDA0svuBFSGfmumSOMjQ3B1FsBiH4WI3djP02xMMkxJ32haERXeazSMjApXL6iM

C0tmOc1diNzEAwUMAeQS7aWaneOJRYjYbYlEJXbLv9D7CYvyZoB/QL9CcoSjMWM4HiZb

0bZ5Lf0wuBhdEfklcq0s0Jbsx0Ky75g/fYbkUK498UVolm3jXWv3ePEziL3B4E1HH8jf

GNkw+i9cl9obAfc9/OdYhTrnMY3Fv/ibrJOPRj1aqyWyh4EtL3kC0FsamMcpeWwIlX3g

6KeufZLcswp6ev4lq8WgbNixh2bwRTzHn+bJ6kcik2vX+p34G1CyyztThUzDFmXhdb/d

B0Lg==

X-Gm-Message-State: ACgBeo2sqwKFM066N28cHp0bQSEysOCqQuD7swl6NwQq8M4mg+d5yzD3

wcNDzSRiZoyrLGSuWI5NdrKGIfJhXMcb6O3acqQ=

X-Google-Smtp-Source: AA6agR5Y/qIEPp4J13ZWUlVac+21B+xogtM/8YIKP57hx2KhukpA5Zopikt6cwTkVvqoaq6ZlTG16eOroW4V76CugDY=

X-Received: by 2002:a17:906:7309:b0:731:5c2:a9a6 with SMTP id

di9-20020a170906730900b0073105c2a9a6mr742809ejc.486.1660255423439; Thu, 11

Aug 2022 15:03:43 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6400:2584:0:0:0:0 with HTTP; Thu, 11 Aug 2022 15:03:43

-0700 (PDT)

Reply-To: ubacustomerservice101@gmail.com

From: AUSTRALIA LOTTERY INC

Date: Thu, 11 Aug 2022 15:03:43 -0700

Message-ID:

Subject: CONGRATULATIONS YOU HAVE WON THE LOTTERY ($750,000 USD)

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 13.9

X-Spam_score_int: 139

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Your email has won $750,000USD from Australia Lottery has

been accredited in a United Bank For Africa to your favor.contact the office

via email for claim details, Email: ubacustomerservice101@gmail.com



Content analysis details: (13.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 HK_LOTTO_NAME No description available.

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.52 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[hanstillmanns112[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[hanstillmanns112[at]gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[ubacustomerservice101[at]gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} CONGRATULATIONS YOU HAVE WON THE LOTTERY ($750,000 USD)



--

Your email has won $750,000USD from Australia Lottery has been

accredited in a United Bank For Africa to your favor.contact the

office via email for claim details,



Email: ubacustomerservice101@gmail.com



Person to contact is: Mr. Mark Rennison...



Australia Lottery Agent



Mr. Mark Rennison



CONGRATULATIONS YOU HAVE WON AUSTRALIA LOTTERY.

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA