lottery gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 02 Jan 2023 14:29:00 -0700
Received: from mail-pj1-f100.google.com ([209.85.216.100]:45604)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pCSGy-000CZb-07
for dave@doctor.nl2k.ab.ca;
Mon, 02 Jan 2023 14:23:12 -0700
Received: by mail-pj1-f100.google.com with SMTP id v13-20020a17090a6b0d00b00219c3be9830so29189123pjj.4
for; Mon, 02 Jan 2023 13:20:39 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=message-id:reply-to:date:from:to:subject:content-description
:content-transfer-encoding:mime-version:x-gm-message-state:from:to
:cc:subject:date:message-id:reply-to;
bh=Xjpp64hCaw0kOQunq8jC06JOlLbL3QTuw75SHIegwU0=;
b=wVlTudUFkVzRhcqLTISJtAH2yBHfJoFPz+pk/vMZ9Ke+p/VkmO78q0N2s4FkPwnBPw
QLuM5VIvZhA9RWnqrFTn2sIQHNqqnF0sI7dtKTUQD3bQAE2yqtQltUCoGsIiuEI2t2D9
E5acIPyfiup92jG1sfvnXITQM7ajVHyYDckUXfa/c/Kf+w/pRXlahRIRTtMqzj1J7aju
J2Vdctc9Kw/q6sysQXG6kG2p0UngSB0MoUIMzDb4koIJLTml3T4wSgNbP9AMxjhsP3bE
yTApFp2v8R/4PZfG2V2AIGe5Mg9YZ48rjJs5OGhrZQ5jp5RiKgQsSqju8Ni+1nc7t4AQ
Hy9w==
X-Gm-Message-State: AFqh2kr2JlI3FVheKYkNKRfsDk9fNU3joECTYtPj72Xg+UjyPdIWbRQE
183g1WcM+uVee1Ml6vwpHACbFR9J/oLG/9ghHjX/SyC1ovc/gA==
X-Google-Smtp-Source: AMrXdXtZoQhm9CEDYy2/b2jxqioZHau1neTAclhxS2zfdFlR1bMLr2H2NWiCuUTo6NaVeUhvlsRdf9Q4jykU
X-Received: by 2002:a05:6a21:3a81:b0:af:767a:a7e1 with SMTP id zv1-20020a056a213a8100b000af767aa7e1mr75932139pzb.23.1672694433612;
Mon, 02 Jan 2023 13:20:33 -0800 (PST)
Received: from mail.gglive.vn (mail.gglive.vn. [203.171.21.135])
by smtp-relay.gmail.com with ESMTPS id cl13-20020a17090af68d00b0021a22d68680sm2100508pjb.7.2023.01.02.13.20.33
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 02 Jan 2023 13:20:33 -0800 (PST)
X-Relaying-Domain: gglive.vn
Received: from localhost (localhost [127.0.0.1])
by mail.gglive.vn (Postfix) with ESMTP id 5313C2300DD;
Mon, 2 Jan 2023 22:02:13 +0700 (+07)
Received: from mail.gglive.vn ([127.0.0.1])
by localhost (mail.gglive.vn [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id LlAKo5BpIZXr; Mon, 2 Jan 2023 22:02:13 +0700 (+07)
Received: from localhost (localhost [127.0.0.1])
by mail.gglive.vn (Postfix) with ESMTP id 50109227FD2;
Mon, 2 Jan 2023 22:02:10 +0700 (+07)
X-Virus-Scanned: amavisd-new at gglive.vn
Received: from mail.gglive.vn ([127.0.0.1])
by localhost (mail.gglive.vn [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id F4o0PRowAxtu; Mon, 2 Jan 2023 22:02:10 +0700 (+07)
Received: from [192.168.0.139] (unknown [197.210.85.121])
by mail.gglive.vn (Postfix) with ESMTPSA id 5C26C222FE5;
Mon, 2 Jan 2023 22:02:00 +0700 (+07)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: my subject
To: Recipients
From: info@gmail.com
Date: Mon, 02 Jan 2023 15:01:42 -0800
Reply-To: agent.jamesstevensongraham21@gmail.com
Message-Id: <20230102150200.5C26C222FE5@mail.gglive.vn>
X-Spam_score: 5.3
X-Spam_score_int: 53
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Congratulations. Your email address has been selected to win
the sum of €990,000.00
Content analysis details: (5.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[197.210.85.121 listed in zen.spamhaus.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.216.100 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.100 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[agent.jamesstevensongraham21[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Subject: {SPAM?} my subject
Congratulations. Your email address has been selected to win the sum of =E2=
=82=AC990,000.00
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 02 Jan 2023 14:29:00 -0700
Received: from mail-pj1-f100.google.com ([209.85.216.100]:45604)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pCSGy-000CZb-07
for dave@doctor.nl2k.ab.ca;
Mon, 02 Jan 2023 14:23:12 -0700
Received: by mail-pj1-f100.google.com with SMTP id v13-20020a17090a6b0d00b00219c3be9830so29189123pjj.4
for
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=message-id:reply-to:date:from:to:subject:content-description
:content-transfer-encoding:mime-version:x-gm-message-state:from:to
:cc:subject:date:message-id:reply-to;
bh=Xjpp64hCaw0kOQunq8jC06JOlLbL3QTuw75SHIegwU0=;
b=wVlTudUFkVzRhcqLTISJtAH2yBHfJoFPz+pk/vMZ9Ke+p/VkmO78q0N2s4FkPwnBPw
QLuM5VIvZhA9RWnqrFTn2sIQHNqqnF0sI7dtKTUQD3bQAE2yqtQltUCoGsIiuEI2t2D9
E5acIPyfiup92jG1sfvnXITQM7ajVHyYDckUXfa/c/Kf+w/pRXlahRIRTtMqzj1J7aju
J2Vdctc9Kw/q6sysQXG6kG2p0UngSB0MoUIMzDb4koIJLTml3T4wSgNbP9AMxjhsP3bE
yTApFp2v8R/4PZfG2V2AIGe5Mg9YZ48rjJs5OGhrZQ5jp5RiKgQsSqju8Ni+1nc7t4AQ
Hy9w==
X-Gm-Message-State: AFqh2kr2JlI3FVheKYkNKRfsDk9fNU3joECTYtPj72Xg+UjyPdIWbRQE
183g1WcM+uVee1Ml6vwpHACbFR9J/oLG/9ghHjX/SyC1ovc/gA==
X-Google-Smtp-Source: AMrXdXtZoQhm9CEDYy2/b2jxqioZHau1neTAclhxS2zfdFlR1bMLr2H2NWiCuUTo6NaVeUhvlsRdf9Q4jykU
X-Received: by 2002:a05:6a21:3a81:b0:af:767a:a7e1 with SMTP id zv1-20020a056a213a8100b000af767aa7e1mr75932139pzb.23.1672694433612;
Mon, 02 Jan 2023 13:20:33 -0800 (PST)
Received: from mail.gglive.vn (mail.gglive.vn. [203.171.21.135])
by smtp-relay.gmail.com with ESMTPS id cl13-20020a17090af68d00b0021a22d68680sm2100508pjb.7.2023.01.02.13.20.33
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 02 Jan 2023 13:20:33 -0800 (PST)
X-Relaying-Domain: gglive.vn
Received: from localhost (localhost [127.0.0.1])
by mail.gglive.vn (Postfix) with ESMTP id 5313C2300DD;
Mon, 2 Jan 2023 22:02:13 +0700 (+07)
Received: from mail.gglive.vn ([127.0.0.1])
by localhost (mail.gglive.vn [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id LlAKo5BpIZXr; Mon, 2 Jan 2023 22:02:13 +0700 (+07)
Received: from localhost (localhost [127.0.0.1])
by mail.gglive.vn (Postfix) with ESMTP id 50109227FD2;
Mon, 2 Jan 2023 22:02:10 +0700 (+07)
X-Virus-Scanned: amavisd-new at gglive.vn
Received: from mail.gglive.vn ([127.0.0.1])
by localhost (mail.gglive.vn [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id F4o0PRowAxtu; Mon, 2 Jan 2023 22:02:10 +0700 (+07)
Received: from [192.168.0.139] (unknown [197.210.85.121])
by mail.gglive.vn (Postfix) with ESMTPSA id 5C26C222FE5;
Mon, 2 Jan 2023 22:02:00 +0700 (+07)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: my subject
To: Recipients
From: info@gmail.com
Date: Mon, 02 Jan 2023 15:01:42 -0800
Reply-To: agent.jamesstevensongraham21@gmail.com
Message-Id: <20230102150200.5C26C222FE5@mail.gglive.vn>
X-Spam_score: 5.3
X-Spam_score_int: 53
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Congratulations. Your email address has been selected to win
the sum of €990,000.00
Content analysis details: (5.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[197.210.85.121 listed in zen.spamhaus.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.216.100 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.100 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[agent.jamesstevensongraham21[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Subject: {SPAM?} my subject
Congratulations. Your email address has been selected to win the sum of =E2=
=82=AC990,000.00
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments