/home/arranoyd/mail/.spam/cur/1605912659.M163180P5154.nl53.altushost.com,S=5132,W=5208:2,
Return-Path: <hostmaster@rostransnadzor.ru>
Delivered-To: arranoyd+spam@nl53.altushost.com
Received: from nl53.altushost.com
	by nl53.altushost.com with LMTP
	id mMWYCVNIuF8iFAAAmQ2V0w
	(envelope-from <hostmaster@rostransnadzor.ru>)
	for <arranoyd+spam@nl53.altushost.com>; Fri, 20 Nov 2020 23:50:59 +0100
Return-path: <hostmaster@rostransnadzor.ru>
Envelope-to: darko.orelj@jagma.hr
Delivery-date: Fri, 20 Nov 2020 23:50:59 +0100
Received: from [2.40.47.210] (port=50584 helo=asp.pnac.org)
	by nl53.altushost.com with esmtp (Exim 4.93)
	(envelope-from <hostmaster@rostransnadzor.ru>)
	id 1kgFF3-0004Ij-Uf
	for darko.orelj@jagma.hr; Fri, 20 Nov 2020 23:50:59 +0100
Received: from asp.pnac.org (localhost.localdomain [127.0.0.1])
	by localhost (Email Security Appliance) with SMTP id 25D0CB5D36_FB8460EB;
	Fri, 20 Nov 2020 22:41:18 +0000 (GMT)
Received: from [156.96.56.34] (unknown [156.96.56.34])
	by asp.pnac.org (Sophos Email Appliance) with ESMTPA id B4EADB3A09_FB8460AF;
	Fri, 20 Nov 2020 22:41:14 +0000 (GMT)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <hostmaster@rostransnadzor.ru>
From: hostmaster@rostransnadzor.ru
Date: Fri, 20 Nov 2020 14:41:10 -0800
Reply-To: callumfoundation_lerynnewest22@outlook.com
Message-Id: <20201120224114.B4EADB3A09_FB8460AF@asp.pnac.org>
X-SASI-RCODE: 200
X-SEA-Spam: Gauge=XXXXXXXXIIIIIII, Probability=87%, Report='
 URI_CLASS_SCAM_MAILTO 8, WEBMAIL_REPLYTO_NOT_FROM 0.5, FRAUD_WEBMAIL_R_NOT_F 0.1, REPLYTO_FROM_DIFF_ADDY 0.1, HTML_00_01 0.05, HTML_00_10 0.05, SUPERLONG_LINE 0.05, BODYTEXTP_SIZE_3000_LESS 0, BODY_SIZE_1000_LESS 0, BODY_SIZE_2000_LESS 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, BODY_SIZE_700_799 0, DATE_TZ_NA 0, FROM_RCPT_DOMAIN_NOT_IN_RCVD 0, FROM_SAME_AS_TO_DOMAIN 0, NO_CTA_URI_FOUND 0, NO_REAL_NAME 0, NO_URI_HTTPS 0, SENDER_NO_AUTH 0, __ANY_URI 0, __BODY_NO_MAILTO 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __FRAUD_BODY_WEBMAIL 0, __FRAUD_COMMON 0, __FRAUD_DPTCOMPNY 0, __FRAUD_MONEY 0, __FRAUD_MONEY_BIG_COIN 0, __FRAUD_MONEY_BIG_COIN_DIG 0, __FRAUD_MONEY_CURRENCY 0, __FRAUD_MONEY_CURRENCY_EURO 0, __FRAUD_MONEY_DENOMINATION 0, __FRAUD_MONEY_LOTTERY 0, __FRAUD_MONEY_VALUE 0, __FRAUD_WEBMAIL 0, __FRAUD_WEBMAIL_REPLYTO 0, __FROM_DOMAIN_IN_RCPT 0, __FROM_DOMAIN_NOT_IN_BODY 0,
 __FROM_NAME_NOT_IN_ADDR 0, __FROM_NAME_NOT_IN_BODY 0, __FROM_NO_NAME 0, __HAS_FROM 0, __HAS_MSGID 0, __HAS_REPLYTO 0, __MIME_TEXT_ONLY 0, __MIME_TEXT_P 0, __MIME_TEXT_P1 0, __MIME_VERSION 0, __NO_HTML_TAG_RAW 0, __PHISH_SPEAR_STRUCTURE_1 0, __PHISH_SPEAR_STRUCTURE_2 0, __SANE_MSGID 0, __SUBJ_ALPHA_NEGATE 0, __SUBJ_ALPHA_START 0, __TO_DOMAIN_IN_FROM 0, __TO_MALFORMED_2 0, __TO_NAME 0, __TO_NAME_DIFF_FROM_ACC 0, __TO_REAL_NAMES 0, __URI_CLASS_ANY 0, __URI_MAILTO 0, __URI_NO_WWW 0'
X-Spam-Status: Yes, score=11.0
X-Spam-Score: 110
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "nl53.altushost.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Pozdrav, ja sam Lerynne West, imate donaciju od 1.930.000,00
    €. Dobio sam 343,9 milijuna Powerball lutrije 5. studenog 2018., dio doniram
    deset sretnika i deset dobrotvornih organizacija. Vaša e-po [...] 
 Content analysis details:   (11.0 points, 4.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                             https://senderscore.org/blacklistlookup/
                             [2.40.47.210 listed in bl.score.senderscore.com]
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [callumfoundation_lerynnewest22[at]outlook.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  3.5 ADVANCE_FEE_3_NEW      Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject:  ***SPAM***  pobjedio si!!!You Won!!!
X-From-Rewrite: unmodified, forwarded message

Pozdrav, ja sam Lerynne West, imate donaciju od 1.930.000,00 =E2=82=AC. Dob=
io sam 343,9 milijuna Powerball lutrije 5. studenog 2018., dio doniram dese=
t sretnika i deset dobrotvornih organizacija. Va=C5=A1a e-po=C5=A1ta je iza=
=C5=A1la pobjednicki. Hitno se obratite odjelu za potra=C5=BEivanja. Kontak=
t: callumfoundation_lerynnewest22@outlook.com




Hello, I am Lerynne West, you have a donation of =E2=82=AC1,930.000,00. I w=
on the 343.9 million Powerball lottery on November 5th, 2018, I'm donating =
part of it to ten lucky people and Ten Charity organization. Your email cam=
e out victorious. Contact the claims department urgently for claims. Contac=
t: callumfoundation_lerynnewest22@outlook.com
Path: home/arranoyd/mail/.spam/cur