lottery gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dav@doctor.nl2k.ab.ca
Delivery-date: Thu, 05 Jan 2023 16:35:26 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pCU6M-000P9E-2c;
Mon, 02 Jan 2023 16:20:18 -0700
Resent-From: The Doctor
Resent-Date: Mon, 2 Jan 2023 16:20:18 -0700
Resent-Message-ID:
Resent-To: dav@doctor.nl2k.ab.ca, e@doctor.nl2k.ab.ca
Received: from mail-pl1-f228.google.com ([209.85.214.228]:38668)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pCTOC-000Ji0-0Y
for doctor@doctor.nl2k.ab.ca;
Mon, 02 Jan 2023 15:34:44 -0700
Received: by mail-pl1-f228.google.com with SMTP id c2so3240837plc.5
for; Mon, 02 Jan 2023 14:32:11 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=message-id:reply-to:date:from:to:subject:content-description
:content-transfer-encoding:mime-version:x-gm-message-state:from:to
:cc:subject:date:message-id:reply-to;
bh=Xjpp64hCaw0kOQunq8jC06JOlLbL3QTuw75SHIegwU0=;
b=LaNh/FBorv1jpwkCuf6fHV7sPOvDChtJ7teJLOxEM68jRdS/hMppKlUuXwxiteUMrB
LDZ/RsTCuPPVsGFAEzTdDU+vQyjYLzZ3yPVoo2uPivx7+O3ZzNHvzypZCpiholp8ul0d
oqOMVNg7LdG11J1O+CXSL01v8VzURiRFxEyIDbs0yyY5S92Mvt0MdvAcEFkF3EOp2e0l
s2ImtZwAfxk9VaWZHCKpXVgymJ3OkJ0XVuDPom1evm1Y7ZMxtYt8DTI8i2EXiMFz75aR
9uFIscMavEhhD7PViZShh+MQ8AqZmGC7o4IisDbyH/bskdWjg92NFkaHYPGbGoTO+qpu
1sOQ==
X-Gm-Message-State: AFqh2kr3JP7ZGdw9YpHQVFoBedUGnCdLlFx1UxYBVb8l05eSsLu1bo/T
Hdqnv1NJuyeZIk25I61rJ7MwjTsfSgMQw0bQt70Vlqbsr9nFeA==
X-Google-Smtp-Source: AMrXdXvV28i94pvQBoAkGU4Ikc7AxOuaNmwknug9V9bEUedlib//2PbGZj5CZyJ9UHcLDXF2whRm/sxVHjRH
X-Received: by 2002:a17:902:768c:b0:189:e360:ce5 with SMTP id m12-20020a170902768c00b00189e3600ce5mr57787088pll.12.1672698725740;
Mon, 02 Jan 2023 14:32:05 -0800 (PST)
Received: from mail.gglive.vn (mail.gglive.vn. [203.171.21.135])
by smtp-relay.gmail.com with ESMTPS id je21-20020a170903265500b001896de9deb5sm1583779plb.106.2023.01.02.14.32.05
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 02 Jan 2023 14:32:05 -0800 (PST)
X-Relaying-Domain: gglive.vn
Received: from localhost (localhost [127.0.0.1])
by mail.gglive.vn (Postfix) with ESMTP id 441422272AD;
Mon, 2 Jan 2023 22:14:36 +0700 (+07)
Received: from mail.gglive.vn ([127.0.0.1])
by localhost (mail.gglive.vn [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id g0SKtdpaaOui; Mon, 2 Jan 2023 22:14:36 +0700 (+07)
Received: from localhost (localhost [127.0.0.1])
by mail.gglive.vn (Postfix) with ESMTP id BDDDD2259A8;
Mon, 2 Jan 2023 22:14:35 +0700 (+07)
X-Virus-Scanned: amavisd-new at gglive.vn
Received: from mail.gglive.vn ([127.0.0.1])
by localhost (mail.gglive.vn [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id 1z4sHCcVUgvZ; Mon, 2 Jan 2023 22:14:35 +0700 (+07)
Received: from [192.168.0.139] (unknown [197.210.78.132])
by mail.gglive.vn (Postfix) with ESMTPSA id CC62B226B83;
Mon, 2 Jan 2023 22:14:27 +0700 (+07)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: my subject
To: Recipients
From: info@gmail.com
Date: Mon, 02 Jan 2023 15:14:09 -0800
Reply-To: agent.jamesstevensongraham21@gmail.com
Message-Id: <20230102151427.CC62B226B83@mail.gglive.vn>
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Congratulations. Your email address has been selected to win
the sum of €990,000.00
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.214.228 listed in list.dnswl.org]
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[197.210.78.132 listed in zen.spamhaus.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[agent.jamesstevensongraham21[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.214.228 listed in wl.mailspike.net]
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Subject: {SPAM?} my subject
Congratulations. Your email address has been selected to win the sum of =E2=
=82=AC990,000.00
Envelope-to: dav@doctor.nl2k.ab.ca
Delivery-date: Thu, 05 Jan 2023 16:35:26 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pCU6M-000P9E-2c;
Mon, 02 Jan 2023 16:20:18 -0700
Resent-From: The Doctor
Resent-Date: Mon, 2 Jan 2023 16:20:18 -0700
Resent-Message-ID:
Resent-To: dav@doctor.nl2k.ab.ca, e@doctor.nl2k.ab.ca
Received: from mail-pl1-f228.google.com ([209.85.214.228]:38668)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pCTOC-000Ji0-0Y
for doctor@doctor.nl2k.ab.ca;
Mon, 02 Jan 2023 15:34:44 -0700
Received: by mail-pl1-f228.google.com with SMTP id c2so3240837plc.5
for
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=message-id:reply-to:date:from:to:subject:content-description
:content-transfer-encoding:mime-version:x-gm-message-state:from:to
:cc:subject:date:message-id:reply-to;
bh=Xjpp64hCaw0kOQunq8jC06JOlLbL3QTuw75SHIegwU0=;
b=LaNh/FBorv1jpwkCuf6fHV7sPOvDChtJ7teJLOxEM68jRdS/hMppKlUuXwxiteUMrB
LDZ/RsTCuPPVsGFAEzTdDU+vQyjYLzZ3yPVoo2uPivx7+O3ZzNHvzypZCpiholp8ul0d
oqOMVNg7LdG11J1O+CXSL01v8VzURiRFxEyIDbs0yyY5S92Mvt0MdvAcEFkF3EOp2e0l
s2ImtZwAfxk9VaWZHCKpXVgymJ3OkJ0XVuDPom1evm1Y7ZMxtYt8DTI8i2EXiMFz75aR
9uFIscMavEhhD7PViZShh+MQ8AqZmGC7o4IisDbyH/bskdWjg92NFkaHYPGbGoTO+qpu
1sOQ==
X-Gm-Message-State: AFqh2kr3JP7ZGdw9YpHQVFoBedUGnCdLlFx1UxYBVb8l05eSsLu1bo/T
Hdqnv1NJuyeZIk25I61rJ7MwjTsfSgMQw0bQt70Vlqbsr9nFeA==
X-Google-Smtp-Source: AMrXdXvV28i94pvQBoAkGU4Ikc7AxOuaNmwknug9V9bEUedlib//2PbGZj5CZyJ9UHcLDXF2whRm/sxVHjRH
X-Received: by 2002:a17:902:768c:b0:189:e360:ce5 with SMTP id m12-20020a170902768c00b00189e3600ce5mr57787088pll.12.1672698725740;
Mon, 02 Jan 2023 14:32:05 -0800 (PST)
Received: from mail.gglive.vn (mail.gglive.vn. [203.171.21.135])
by smtp-relay.gmail.com with ESMTPS id je21-20020a170903265500b001896de9deb5sm1583779plb.106.2023.01.02.14.32.05
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 02 Jan 2023 14:32:05 -0800 (PST)
X-Relaying-Domain: gglive.vn
Received: from localhost (localhost [127.0.0.1])
by mail.gglive.vn (Postfix) with ESMTP id 441422272AD;
Mon, 2 Jan 2023 22:14:36 +0700 (+07)
Received: from mail.gglive.vn ([127.0.0.1])
by localhost (mail.gglive.vn [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id g0SKtdpaaOui; Mon, 2 Jan 2023 22:14:36 +0700 (+07)
Received: from localhost (localhost [127.0.0.1])
by mail.gglive.vn (Postfix) with ESMTP id BDDDD2259A8;
Mon, 2 Jan 2023 22:14:35 +0700 (+07)
X-Virus-Scanned: amavisd-new at gglive.vn
Received: from mail.gglive.vn ([127.0.0.1])
by localhost (mail.gglive.vn [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id 1z4sHCcVUgvZ; Mon, 2 Jan 2023 22:14:35 +0700 (+07)
Received: from [192.168.0.139] (unknown [197.210.78.132])
by mail.gglive.vn (Postfix) with ESMTPSA id CC62B226B83;
Mon, 2 Jan 2023 22:14:27 +0700 (+07)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: my subject
To: Recipients
From: info@gmail.com
Date: Mon, 02 Jan 2023 15:14:09 -0800
Reply-To: agent.jamesstevensongraham21@gmail.com
Message-Id: <20230102151427.CC62B226B83@mail.gglive.vn>
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Congratulations. Your email address has been selected to win
the sum of €990,000.00
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.214.228 listed in list.dnswl.org]
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[197.210.78.132 listed in zen.spamhaus.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[agent.jamesstevensongraham21[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.214.228 listed in wl.mailspike.net]
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Subject: {SPAM?} my subject
Congratulations. Your email address has been selected to win the sum of =E2=
=82=AC990,000.00
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments