/home/arranoyd/mail/.spam/cur/1605918530.M644630P23363.nl53.altushost.com,S=5150,W=5226:2,
Return-Path: <hostmaster@rostransnadzor.ru>
Delivered-To: arranoyd+spam@nl53.altushost.com
Received: from nl53.altushost.com
	by nl53.altushost.com with LMTP
	id +OzMJUJfuF9DWwAAmQ2V0w
	(envelope-from <hostmaster@rostransnadzor.ru>)
	for <arranoyd+spam@nl53.altushost.com>; Sat, 21 Nov 2020 01:28:50 +0100
Return-path: <hostmaster@rostransnadzor.ru>
Envelope-to: logistika@nobelcorporation.hr
Delivery-date: Sat, 21 Nov 2020 01:28:50 +0100
Received: from [2.40.47.210] (port=49504 helo=asp.pnac.org)
	by nl53.altushost.com with esmtp (Exim 4.93)
	(envelope-from <hostmaster@rostransnadzor.ru>)
	id 1kgGlm-000IoF-3C
	for logistika@nobelcorporation.hr; Sat, 21 Nov 2020 01:28:50 +0100
Received: from asp.pnac.org (localhost.localdomain [127.0.0.1])
	by localhost (Email Security Appliance) with SMTP id C95B3B7AD7_FB850FCB;
	Fri, 20 Nov 2020 23:27:56 +0000 (GMT)
Received: from [156.96.56.34] (unknown [156.96.56.34])
	by asp.pnac.org (Sophos Email Appliance) with ESMTPA id 1FABCB3A2B_FB850FAF;
	Fri, 20 Nov 2020 23:27:54 +0000 (GMT)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <hostmaster@rostransnadzor.ru>
From: hostmaster@rostransnadzor.ru
Date: Fri, 20 Nov 2020 15:27:50 -0800
Reply-To: callumfoundation_lerynnewest22@outlook.com
Message-Id: <20201120232754.1FABCB3A2B_FB850FAF@asp.pnac.org>
X-SASI-RCODE: 200
X-SEA-Spam: Gauge=XXXXXXXXIIIIIII, Probability=87%, Report='
 URI_CLASS_SCAM_MAILTO 8, WEBMAIL_REPLYTO_NOT_FROM 0.5, FRAUD_WEBMAIL_R_NOT_F 0.1, REPLYTO_FROM_DIFF_ADDY 0.1, HTML_00_01 0.05, HTML_00_10 0.05, SUPERLONG_LINE 0.05, BODYTEXTP_SIZE_3000_LESS 0, BODY_SIZE_1000_LESS 0, BODY_SIZE_2000_LESS 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, BODY_SIZE_700_799 0, DATE_TZ_NA 0, FROM_RCPT_DOMAIN_NOT_IN_RCVD 0, FROM_SAME_AS_TO_DOMAIN 0, NO_CTA_URI_FOUND 0, NO_REAL_NAME 0, NO_URI_HTTPS 0, SENDER_NO_AUTH 0, __ANY_URI 0, __BODY_NO_MAILTO 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __FRAUD_BODY_WEBMAIL 0, __FRAUD_COMMON 0, __FRAUD_DPTCOMPNY 0, __FRAUD_MONEY 0, __FRAUD_MONEY_BIG_COIN 0, __FRAUD_MONEY_BIG_COIN_DIG 0, __FRAUD_MONEY_CURRENCY 0, __FRAUD_MONEY_CURRENCY_EURO 0, __FRAUD_MONEY_DENOMINATION 0, __FRAUD_MONEY_LOTTERY 0, __FRAUD_MONEY_VALUE 0, __FRAUD_WEBMAIL 0, __FRAUD_WEBMAIL_REPLYTO 0, __FROM_DOMAIN_IN_RCPT 0, __FROM_DOMAIN_NOT_IN_BODY 0,
 __FROM_NAME_NOT_IN_ADDR 0, __FROM_NAME_NOT_IN_BODY 0, __FROM_NO_NAME 0, __HAS_FROM 0, __HAS_MSGID 0, __HAS_REPLYTO 0, __MIME_TEXT_ONLY 0, __MIME_TEXT_P 0, __MIME_TEXT_P1 0, __MIME_VERSION 0, __NO_HTML_TAG_RAW 0, __PHISH_SPEAR_STRUCTURE_1 0, __PHISH_SPEAR_STRUCTURE_2 0, __SANE_MSGID 0, __SUBJ_ALPHA_NEGATE 0, __SUBJ_ALPHA_START 0, __TO_DOMAIN_IN_FROM 0, __TO_MALFORMED_2 0, __TO_NAME 0, __TO_NAME_DIFF_FROM_ACC 0, __TO_REAL_NAMES 0, __URI_CLASS_ANY 0, __URI_MAILTO 0, __URI_NO_WWW 0'
X-Spam-Status: Yes, score=11.0
X-Spam-Score: 110
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "nl53.altushost.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Pozdrav, ja sam Lerynne West, imate donaciju od 1.930.000,00
    €. Dobio sam 343,9 milijuna Powerball lutrije 5. studenog 2018., dio doniram
    deset sretnika i deset dobrotvornih organizacija. Vaša e-po [...] 
 Content analysis details:   (11.0 points, 4.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [callumfoundation_lerynnewest22[at]outlook.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                             https://senderscore.org/blacklistlookup/
                             [2.40.47.210 listed in bl.score.senderscore.com]
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  3.5 ADVANCE_FEE_3_NEW      Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject:  ***SPAM***  pobjedio si!!!You Won!!!
X-From-Rewrite: unmodified, forwarded message

Pozdrav, ja sam Lerynne West, imate donaciju od 1.930.000,00 =E2=82=AC. Dob=
io sam 343,9 milijuna Powerball lutrije 5. studenog 2018., dio doniram dese=
t sretnika i deset dobrotvornih organizacija. Va=C5=A1a e-po=C5=A1ta je iza=
=C5=A1la pobjednicki. Hitno se obratite odjelu za potra=C5=BEivanja. Kontak=
t: callumfoundation_lerynnewest22@outlook.com




Hello, I am Lerynne West, you have a donation of =E2=82=AC1,930.000,00. I w=
on the 343.9 million Powerball lottery on November 5th, 2018, I'm donating =
part of it to ten lucky people and Ten Charity organization. Your email cam=
e out victorious. Contact the claims department urgently for claims. Contac=
t: callumfoundation_lerynnewest22@outlook.com
Path: home/arranoyd/mail/.spam/cur