Nigerian spam from ovh.ca
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 05 Dec 2023 07:51:50 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from)
id 1rAWel-00000000FZm-06dM
for dave@doctor.nl2k.ab.ca;
Tue, 05 Dec 2023 07:44:15 -0700
Resent-From: The Doctor
Resent-Date: Tue, 5 Dec 2023 07:44:14 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps-347b436c.vps.ovh.ca ([51.222.111.239]:55928 helo=server.aapkapaintermail.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97 (FreeBSD))
(envelope-from)
id 1rAUxk-00000000PLd-2Djq
for root@doctor.nl2k.ab.ca;
Tue, 05 Dec 2023 05:55:48 -0700
Received: from [141.98.10.237] (unknown [141.98.10.237])
by server.aapkapaintermail.com (Postfix) with ESMTPA id 72C3E3B30E3;
Tue, 5 Dec 2023 12:53:40 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 server.aapkapaintermail.com 72C3E3B30E3
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=aapkapaintermail.com; s=dkim; t=1701780823;
bh=ofGUmLEaB/zi/++xH2LlRVWaHytprgPrFycW6vTScIM=;
h=Subject:To:From:Date:Reply-To:From;
b=lvuu0CmorS9+dK37nI3Goxupp0v/sVnwr2ljVGFJRO25kt0X2GR+Wo2myHQjV1fb6
QDWsDv1GvGWGYGl7aPzWG3AarA2Ivvwzp5fOITv8MxXKljuwEWRPs/i0rqsJ1V9Lrh
gLr7URfoJJ6soX6tpj8bUMlGvckzXe2Fgnk+aqfXKEnEHwtiwtsGfl9Jr6JHj/01JH
BPKFUIkomB/j9lSgTT94OUzCGE751Te2iiep2jH9Gt9vO+6+OKUl0jfqPCiYK+hH06
1CFB9obOXICNMIJuGhICwYkm1/XH6NdMonJVldudKRMVJpsNYbvjxfhv7R6FmBM7r+
FBQXSmMAaiLow==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Re:
To: Recipients
From: "Kristine Wellenstein"
Date: Tue, 05 Dec 2023 04:53:35 -0800
Reply-To: kristwell67@gmail.com
X-Spam_score: 8.4
X-Spam_score_int: 84
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings You have got a grant from Mrs. Kristine Wellenstein.
Respond back via email: kristwell67@gmail.com for more info on how to receive
your claim. Best Regards. Kristine Wellenstein <>>><<<>
Content analysis details: (8.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[141.98.10.237 listed in zen.spamhaus.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: aapkapaintermail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[141.98.10.237 listed in dnsbl.sorbs.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[kristwell67(at)gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Subject: {SPAM?} Re:
X-Antivirus: AVG (VPS 231204-0, 12/3/2023), Inbound message
X-Antivirus-Status: Clean
Greetings
You have got a grant from Mrs. Kristine Wellenstein. Respond back via email=
: kristwell67@gmail.com for more info on how to receive your claim.
Best Regards.
Kristine Wellenstein
<>>><<<>
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 05 Dec 2023 07:51:50 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from
id 1rAWel-00000000FZm-06dM
for dave@doctor.nl2k.ab.ca;
Tue, 05 Dec 2023 07:44:15 -0700
Resent-From: The Doctor
Resent-Date: Tue, 5 Dec 2023 07:44:14 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps-347b436c.vps.ovh.ca ([51.222.111.239]:55928 helo=server.aapkapaintermail.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97 (FreeBSD))
(envelope-from
id 1rAUxk-00000000PLd-2Djq
for root@doctor.nl2k.ab.ca;
Tue, 05 Dec 2023 05:55:48 -0700
Received: from [141.98.10.237] (unknown [141.98.10.237])
by server.aapkapaintermail.com (Postfix) with ESMTPA id 72C3E3B30E3;
Tue, 5 Dec 2023 12:53:40 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 server.aapkapaintermail.com 72C3E3B30E3
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=aapkapaintermail.com; s=dkim; t=1701780823;
bh=ofGUmLEaB/zi/++xH2LlRVWaHytprgPrFycW6vTScIM=;
h=Subject:To:From:Date:Reply-To:From;
b=lvuu0CmorS9+dK37nI3Goxupp0v/sVnwr2ljVGFJRO25kt0X2GR+Wo2myHQjV1fb6
QDWsDv1GvGWGYGl7aPzWG3AarA2Ivvwzp5fOITv8MxXKljuwEWRPs/i0rqsJ1V9Lrh
gLr7URfoJJ6soX6tpj8bUMlGvckzXe2Fgnk+aqfXKEnEHwtiwtsGfl9Jr6JHj/01JH
BPKFUIkomB/j9lSgTT94OUzCGE751Te2iiep2jH9Gt9vO+6+OKUl0jfqPCiYK+hH06
1CFB9obOXICNMIJuGhICwYkm1/XH6NdMonJVldudKRMVJpsNYbvjxfhv7R6FmBM7r+
FBQXSmMAaiLow==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Re:
To: Recipients
From: "Kristine Wellenstein"
Date: Tue, 05 Dec 2023 04:53:35 -0800
Reply-To: kristwell67@gmail.com
X-Spam_score: 8.4
X-Spam_score_int: 84
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings You have got a grant from Mrs. Kristine Wellenstein.
Respond back via email: kristwell67@gmail.com for more info on how to receive
your claim. Best Regards. Kristine Wellenstein <>>><<<>
Content analysis details: (8.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[141.98.10.237 listed in zen.spamhaus.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: aapkapaintermail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[141.98.10.237 listed in dnsbl.sorbs.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[kristwell67(at)gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Subject: {SPAM?} Re:
X-Antivirus: AVG (VPS 231204-0, 12/3/2023), Inbound message
X-Antivirus-Status: Clean
Greetings
You have got a grant from Mrs. Kristine Wellenstein. Respond back via email=
: kristwell67@gmail.com for more info on how to receive your claim.
Best Regards.
Kristine Wellenstein
<>>><<<>
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments