lottery spam from Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 14 Sep 2022 14:01:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oYYYI-0008R0-HH
for dave@doctor.nl2k.ab.ca;
Wed, 14 Sep 2022 14:00:06 -0600
Resent-From: The Doctor
Resent-Date: Wed, 14 Sep 2022 14:00:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oln040092075094.outbound.protection.outlook.com ([40.92.75.94]:26852 helo=EUR04-VI1-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oYVnE-000GIg-Qp
for doctor@netknow.ca;
Wed, 14 Sep 2022 11:03:25 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=UnweDs7GLjHfUiIFR2UTVgeUFx93pDs69atcV5r075+ANkVM404I2/6CO2YmG4gXM3wi6lZH1Uv7mGr+ycAB5PTAMLqyGKN9ozTz3OctZMcKyspIHz2WFL0/vePXzgNiHgTBexA/NKr3KP0jhFhhcjI3HXooar50oIM322T7ADterMnIE/ZX3dZkosyIU4HkLZeceIgr/sivS9WCEL9DWpHEWTHSckxIkH1fyO9rg+yRn3f1vUD+nuS0Q6sJ2MYvefTyGgcTVYfta58QSIBKRSDJipQCsnIVpCmzyoE9DsFml/q0zKnjYVFLvTVOeASIUygyGtSuZEsHlylsLYaH6Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=HnLZkHeA8fA0aMTwHJ0SdUhD/LN3rBV6W5Py+4DJ41Y=;
b=lfas8+WyTgiACOkSCaQIpdOVnfvdPmQgeKpmskBsV1LkGJB2W0v+lZJh32gSOavrx7wV6TAnidFEYUAvoc9KIURMs1VSNy8fciZPRHg9Ddty/mA1Vq0+vHFF5rBZGSqqp/3QbklsZYkhy97aQoDwnlnMV1iunXM1rH/GwKn9krqX4Ah496O1nigZle/YlJUwxfMHd29Uy9Y/At1UOzRfGmwqs84xW2usjRZFiY7A5rFm2CJt6y9KTr0ZdxyznLcrUe4ie9sjA2fHAt+Sv1iZ0hnlRfsjwNZxex3mOBftFsD7oqy0XETgn7bW/fdkusNFubuCOd06/XYGUkTPeWXYHQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=HnLZkHeA8fA0aMTwHJ0SdUhD/LN3rBV6W5Py+4DJ41Y=;
b=JIx5Mc2k8qRG46/lA68ZRZEXQHqGSNU8ozprqw29qqZftBhstgYHU5+E2Ck7Pb2QHxdMe0HG/Epcs2IdKAmpMa8UwdtMvn2cijykKTDfbblPzhDbNJ8Y39QX61ZjwktHIXO3NuSnHNQ+OinRifa2AwnerMrFoeX4Lt2MQyjKW4iPmhgWm2U10wPpXmVEu2OzxyO32kewOWoAZAkBmebsoeXO9WwEopRhm1xcrv97QQ/cVR+sHTWAMrP6i43pBegPx7Vo5Djapaw2PJkDEE3vfLa6to4oiNnGY3/2drPpxeyriNt70J7rVQEmLlBI+gqPnmNHMDQ7qzbX/52LPQNVqg==
Received: from DU2P193MB2321.EURP193.PROD.OUTLOOK.COM (2603:10a6:10:2fb::8) by
AS8P193MB2301.EURP193.PROD.OUTLOOK.COM (2603:10a6:20b:446::19) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.5612.18; Wed, 14 Sep 2022 17:02:53 +0000
Received: from DU2P193MB2321.EURP193.PROD.OUTLOOK.COM
([fe80::41ce:357d:db5c:3a6b]) by DU2P193MB2321.EURP193.PROD.OUTLOOK.COM
([fe80::41ce:357d:db5c:3a6b%4]) with mapi id 15.20.5612.022; Wed, 14 Sep 2022
17:02:53 +0000
From: Microsoft- Inc.
Subject: Notification Email.
Thread-Topic: Notification Email.
Thread-Index: AQHYyFvTcVV8RtGZY0uBJNEvIz9TIA==
Date: Wed, 14 Sep 2022 17:02:52 +0000
Message-ID:
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-tmn: [Kd6raBTIOz63w+YaPQcAKbIW6L3deAXw]
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DU2P193MB2321:EE_|AS8P193MB2301:EE_
x-ms-office365-filtering-correlation-id: 37d0a9e1-6c26-4538-9db2-08da9672f64a
x-ms-exchange-slblob-mailprops:
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
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
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
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?iso-8859-1?Q?YfF7kBX6w4CxYs38lrd2nPY+rNoF3SGwLviOOxuJDMB2MZZeulCYw+MEHM?=
=?iso-8859-1?Q?CH9WsfbF2y4NEhtgX5J5tBD2yHyGTvJZCbpl5ggyerbi4Q9x+H9h2g5ZoG?=
=?iso-8859-1?Q?U9SSC+WaUlHIxMTqc4NCD4tSDZWspykGcII11oiMGL3mMeSl89Eq52laZ/?=
=?iso-8859-1?Q?AfAaTwQzQuFAUgLlgz9KyZsBSeUTaAiiPUn11F6am8Awjrc+7PtYTuTt2x?=
=?iso-8859-1?Q?nOjSCGQT5mj6zWi6/dyHVEuzKgO0mBiqYjsl4BtK8QhNG1p9t3wsEXoUGp?=
=?iso-8859-1?Q?/YhFUZzFn6x2KsxruJSu1gEGmAd1OLifRZc3iFMYt2DcenY4a8I50/GbO6?=
=?iso-8859-1?Q?9w2Hd5VTKO5HG4HSzW3NFHyH6Mj1OLw+ax60VylTRKEIIibj0kzod6J8v0?=
=?iso-8859-1?Q?FLLyjpHh/WKIgDAzmC3Z2pI10b3B2EKsLr4efDpBNOmeUeoY6LEin63NSE?=
=?iso-8859-1?Q?xPi3xpSp+QzXMpCIAY1fS9J5nsGR9+HXqSRnlwKGx4VI7DCEgrceMBmRCN?=
=?iso-8859-1?Q?VmJplKermvoHOgSmtMza/1gYZ9yfRPAr1+a8reqAbBqaMU3+fRWzyyfS5q?=
=?iso-8859-1?Q?QOPhdxTjRtKAaQp27sUhCsUKjMLRxJ0PN8Fc5SzegEkFrfjPAvHs2cYDAm?=
=?iso-8859-1?Q?dhLL+b7js0zDRkqVoHrmOHQfqOT0emh9Ph4q823OaVDzEAGIVMo69Qu3ZX?=
=?iso-8859-1?Q?HL9+9poiQ1sf/KYLnPAR6xnUYeLUXKnooI5777AHua7vgtPzy2kL0QK0YN?=
=?iso-8859-1?Q?5PmiRzpEAJ6UO6VNPR6unwgnyFgvWqF7ElSuaz5Xw25557NE3/Zzkvdm/l?=
=?iso-8859-1?Q?9XveA8a6xWHURr6mhPUai+Yh75EFSKvrb5gdQbP6api1NNRk+9zV+xfhLP?=
=?iso-8859-1?Q?ukk3II+C7i3IWMAOBZgRFOAynvHt4BQPmBHPzr0/1YtrQTZnVTJ5jJBLTV?=
=?iso-8859-1?Q?rBnvPx+qwC7ZCwoQuEUeNxretz9YFoJKrRptEDb6W+oW+LzX3aKQF1btbl?=
=?iso-8859-1?Q?lzgaP8Lk79HIpdQX5euuGPSxLOkcPQvB66c+hlKCxmF27esFgQ+MiPLh5L?=
=?iso-8859-1?Q?1jkf92NR3i/ZOaQt8RdPa0B87mSrp/YNXufamcJcMMFfIbUnd5fuuU3VDx?=
=?iso-8859-1?Q?dvUz+vOl82p3aOohbZCHrb4UTxLcrNAcI6pcG3UKTVW2MPN4ejAgrOb17B?=
=?iso-8859-1?Q?Hv85C6HWzoeIvgMmiDXP5HLaGx4U0V9TzRPLMiR/eSimgmd3rRwVBHyueY?=
=?iso-8859-1?Q?XdDh9kS6t0+S8bLrxwwNCl7ulCqFpf/o0zV0FfnSD+fd9GbhCLLOPcj0Aa?=
=?iso-8859-1?Q?fLo/?=
Content-Type: multipart/alternative;
boundary="_000_DU2P193MB232105AD26D2DD47EB6898DDDF469DU2P193MB2321EURP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DU2P193MB2321.EURP193.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 37d0a9e1-6c26-4538-9db2-08da9672f64a
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Sep 2022 17:02:52.8557
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8P193MB2301
X-Spam_score: 12.8
X-Spam_score_int: 128
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Attn: Congratulation!!! Your e-mail address has won (US$2,000,000.00)
for 2022 Microsoft Award. Serial numbers MDB/002 0869958/09 Contact (ADVOCATE
FRANKLIN EDWARD) immediately; through his email address (f [...]
Content analysis details: (12.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[wssswweb[at]outlook.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.92.75.94 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
1.4 MALFORMED_FREEMAIL Bad headers on message from free email
service
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.0 BIGNUM_EMAILS Lots of email addresses/leads
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 HK_LOTTO No description available.
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Notification Email.
--_000_DU2P193MB232105AD26D2DD47EB6898DDDF469DU2P193MB2321EURP_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Attn:
Congratulation!!!
Your e-mail address has won (US$2,000,000.00) for 2022 Microsoft Award. Ser=
ial numbers MDB/002 0869958/09 Contact (ADVOCATE FRANKLIN EDWARD) immediate=
ly; through his email address (franklinedward44@aol.com) or phone number +2=
7736394004 and forward him your Winning No.(19-45-87-36-76-38(77), to redee=
m your winning prize, All participants were selected randomly from Worldwid=
e Web site through computer draw system and extracted from over 100,000 ema=
il addresses of companies and Individuals.
Sincerely,
Dr. Elizabeth Henning.
Copyright =A9 2022 Microsoft! Inc. All rights reserved.
--_000_DU2P193MB232105AD26D2DD47EB6898DDDF469DU2P193MB2321EURP_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
1">
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Attn:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 14 Sep 2022 14:01:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oYYYI-0008R0-HH
for dave@doctor.nl2k.ab.ca;
Wed, 14 Sep 2022 14:00:06 -0600
Resent-From: The Doctor
Resent-Date: Wed, 14 Sep 2022 14:00:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oln040092075094.outbound.protection.outlook.com ([40.92.75.94]:26852 helo=EUR04-VI1-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oYVnE-000GIg-Qp
for doctor@netknow.ca;
Wed, 14 Sep 2022 11:03:25 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=UnweDs7GLjHfUiIFR2UTVgeUFx93pDs69atcV5r075+ANkVM404I2/6CO2YmG4gXM3wi6lZH1Uv7mGr+ycAB5PTAMLqyGKN9ozTz3OctZMcKyspIHz2WFL0/vePXzgNiHgTBexA/NKr3KP0jhFhhcjI3HXooar50oIM322T7ADterMnIE/ZX3dZkosyIU4HkLZeceIgr/sivS9WCEL9DWpHEWTHSckxIkH1fyO9rg+yRn3f1vUD+nuS0Q6sJ2MYvefTyGgcTVYfta58QSIBKRSDJipQCsnIVpCmzyoE9DsFml/q0zKnjYVFLvTVOeASIUygyGtSuZEsHlylsLYaH6Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=HnLZkHeA8fA0aMTwHJ0SdUhD/LN3rBV6W5Py+4DJ41Y=;
b=lfas8+WyTgiACOkSCaQIpdOVnfvdPmQgeKpmskBsV1LkGJB2W0v+lZJh32gSOavrx7wV6TAnidFEYUAvoc9KIURMs1VSNy8fciZPRHg9Ddty/mA1Vq0+vHFF5rBZGSqqp/3QbklsZYkhy97aQoDwnlnMV1iunXM1rH/GwKn9krqX4Ah496O1nigZle/YlJUwxfMHd29Uy9Y/At1UOzRfGmwqs84xW2usjRZFiY7A5rFm2CJt6y9KTr0ZdxyznLcrUe4ie9sjA2fHAt+Sv1iZ0hnlRfsjwNZxex3mOBftFsD7oqy0XETgn7bW/fdkusNFubuCOd06/XYGUkTPeWXYHQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=HnLZkHeA8fA0aMTwHJ0SdUhD/LN3rBV6W5Py+4DJ41Y=;
b=JIx5Mc2k8qRG46/lA68ZRZEXQHqGSNU8ozprqw29qqZftBhstgYHU5+E2Ck7Pb2QHxdMe0HG/Epcs2IdKAmpMa8UwdtMvn2cijykKTDfbblPzhDbNJ8Y39QX61ZjwktHIXO3NuSnHNQ+OinRifa2AwnerMrFoeX4Lt2MQyjKW4iPmhgWm2U10wPpXmVEu2OzxyO32kewOWoAZAkBmebsoeXO9WwEopRhm1xcrv97QQ/cVR+sHTWAMrP6i43pBegPx7Vo5Djapaw2PJkDEE3vfLa6to4oiNnGY3/2drPpxeyriNt70J7rVQEmLlBI+gqPnmNHMDQ7qzbX/52LPQNVqg==
Received: from DU2P193MB2321.EURP193.PROD.OUTLOOK.COM (2603:10a6:10:2fb::8) by
AS8P193MB2301.EURP193.PROD.OUTLOOK.COM (2603:10a6:20b:446::19) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.5612.18; Wed, 14 Sep 2022 17:02:53 +0000
Received: from DU2P193MB2321.EURP193.PROD.OUTLOOK.COM
([fe80::41ce:357d:db5c:3a6b]) by DU2P193MB2321.EURP193.PROD.OUTLOOK.COM
([fe80::41ce:357d:db5c:3a6b%4]) with mapi id 15.20.5612.022; Wed, 14 Sep 2022
17:02:53 +0000
From: Microsoft- Inc.
Subject: Notification Email.
Thread-Topic: Notification Email.
Thread-Index: AQHYyFvTcVV8RtGZY0uBJNEvIz9TIA==
Date: Wed, 14 Sep 2022 17:02:52 +0000
Message-ID:
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-tmn: [Kd6raBTIOz63w+YaPQcAKbIW6L3deAXw]
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DU2P193MB2321:EE_|AS8P193MB2301:EE_
x-ms-office365-filtering-correlation-id: 37d0a9e1-6c26-4538-9db2-08da9672f64a
x-ms-exchange-slblob-mailprops:
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
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
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
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?iso-8859-1?Q?YfF7kBX6w4CxYs38lrd2nPY+rNoF3SGwLviOOxuJDMB2MZZeulCYw+MEHM?=
=?iso-8859-1?Q?CH9WsfbF2y4NEhtgX5J5tBD2yHyGTvJZCbpl5ggyerbi4Q9x+H9h2g5ZoG?=
=?iso-8859-1?Q?U9SSC+WaUlHIxMTqc4NCD4tSDZWspykGcII11oiMGL3mMeSl89Eq52laZ/?=
=?iso-8859-1?Q?AfAaTwQzQuFAUgLlgz9KyZsBSeUTaAiiPUn11F6am8Awjrc+7PtYTuTt2x?=
=?iso-8859-1?Q?nOjSCGQT5mj6zWi6/dyHVEuzKgO0mBiqYjsl4BtK8QhNG1p9t3wsEXoUGp?=
=?iso-8859-1?Q?/YhFUZzFn6x2KsxruJSu1gEGmAd1OLifRZc3iFMYt2DcenY4a8I50/GbO6?=
=?iso-8859-1?Q?9w2Hd5VTKO5HG4HSzW3NFHyH6Mj1OLw+ax60VylTRKEIIibj0kzod6J8v0?=
=?iso-8859-1?Q?FLLyjpHh/WKIgDAzmC3Z2pI10b3B2EKsLr4efDpBNOmeUeoY6LEin63NSE?=
=?iso-8859-1?Q?xPi3xpSp+QzXMpCIAY1fS9J5nsGR9+HXqSRnlwKGx4VI7DCEgrceMBmRCN?=
=?iso-8859-1?Q?VmJplKermvoHOgSmtMza/1gYZ9yfRPAr1+a8reqAbBqaMU3+fRWzyyfS5q?=
=?iso-8859-1?Q?QOPhdxTjRtKAaQp27sUhCsUKjMLRxJ0PN8Fc5SzegEkFrfjPAvHs2cYDAm?=
=?iso-8859-1?Q?dhLL+b7js0zDRkqVoHrmOHQfqOT0emh9Ph4q823OaVDzEAGIVMo69Qu3ZX?=
=?iso-8859-1?Q?HL9+9poiQ1sf/KYLnPAR6xnUYeLUXKnooI5777AHua7vgtPzy2kL0QK0YN?=
=?iso-8859-1?Q?5PmiRzpEAJ6UO6VNPR6unwgnyFgvWqF7ElSuaz5Xw25557NE3/Zzkvdm/l?=
=?iso-8859-1?Q?9XveA8a6xWHURr6mhPUai+Yh75EFSKvrb5gdQbP6api1NNRk+9zV+xfhLP?=
=?iso-8859-1?Q?ukk3II+C7i3IWMAOBZgRFOAynvHt4BQPmBHPzr0/1YtrQTZnVTJ5jJBLTV?=
=?iso-8859-1?Q?rBnvPx+qwC7ZCwoQuEUeNxretz9YFoJKrRptEDb6W+oW+LzX3aKQF1btbl?=
=?iso-8859-1?Q?lzgaP8Lk79HIpdQX5euuGPSxLOkcPQvB66c+hlKCxmF27esFgQ+MiPLh5L?=
=?iso-8859-1?Q?1jkf92NR3i/ZOaQt8RdPa0B87mSrp/YNXufamcJcMMFfIbUnd5fuuU3VDx?=
=?iso-8859-1?Q?dvUz+vOl82p3aOohbZCHrb4UTxLcrNAcI6pcG3UKTVW2MPN4ejAgrOb17B?=
=?iso-8859-1?Q?Hv85C6HWzoeIvgMmiDXP5HLaGx4U0V9TzRPLMiR/eSimgmd3rRwVBHyueY?=
=?iso-8859-1?Q?XdDh9kS6t0+S8bLrxwwNCl7ulCqFpf/o0zV0FfnSD+fd9GbhCLLOPcj0Aa?=
=?iso-8859-1?Q?fLo/?=
Content-Type: multipart/alternative;
boundary="_000_DU2P193MB232105AD26D2DD47EB6898DDDF469DU2P193MB2321EURP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DU2P193MB2321.EURP193.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 37d0a9e1-6c26-4538-9db2-08da9672f64a
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Sep 2022 17:02:52.8557
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8P193MB2301
X-Spam_score: 12.8
X-Spam_score_int: 128
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Attn: Congratulation!!! Your e-mail address has won (US$2,000,000.00)
for 2022 Microsoft Award. Serial numbers MDB/002 0869958/09 Contact (ADVOCATE
FRANKLIN EDWARD) immediately; through his email address (f [...]
Content analysis details: (12.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[wssswweb[at]outlook.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.92.75.94 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
1.4 MALFORMED_FREEMAIL Bad headers on message from free email
service
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.0 BIGNUM_EMAILS Lots of email addresses/leads
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 HK_LOTTO No description available.
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Notification Email.
--_000_DU2P193MB232105AD26D2DD47EB6898DDDF469DU2P193MB2321EURP_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Attn:
Congratulation!!!
Your e-mail address has won (US$2,000,000.00) for 2022 Microsoft Award. Ser=
ial numbers MDB/002 0869958/09 Contact (ADVOCATE FRANKLIN EDWARD) immediate=
ly; through his email address (franklinedward44@aol.com) or phone number +2=
7736394004 and forward him your Winning No.(19-45-87-36-76-38(77), to redee=
m your winning prize, All participants were selected randomly from Worldwid=
e Web site through computer draw system and extracted from over 100,000 ema=
il addresses of companies and Individuals.
Sincerely,
Dr. Elizabeth Henning.
Copyright =A9 2022 Microsoft! Inc. All rights reserved.
--_000_DU2P193MB232105AD26D2DD47EB6898DDDF469DU2P193MB2321EURP_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
1">
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Attn:
Congratulation!!!
Your e-mail address has won (US$2,000,000.00) for 2022 Microsoft Award=
. Serial numbers MDB/002 0869958/09 Contact (ADVOCATE FRANKLIN EDWARD) imme=
diately; through his email address (franklinedward44@aol.com) or phone numb=
er +27736394004 and forward him
your Winning No.(19-45-87-36-76-38(77), to redeem your winning prize, All =
participants were selected randomly from Worldwide Web site through compute=
r draw system and extracted from over 100,000 email addresses of companies =
and Individuals.
. Serial numbers MDB/002 0869958/09 Contact (ADVOCATE FRANKLIN EDWARD) imme=
diately; through his email address (franklinedward44@aol.com) or phone numb=
er +27736394004 and forward him
your Winning No.(19-45-87-36-76-38(77), to redeem your winning prize, All =
participants were selected randomly from Worldwide Web site through compute=
r draw system and extracted from over 100,000 email addresses of companies =
and Individuals.
Sincerely,
Dr. Elizabeth Henning.
Copyright =A9 2022 Microsoft! Inc. All rights reserved.
--_000_DU2P193MB232105AD26D2DD47EB6898DDDF469DU2P193MB2321EURP_--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments