HEX
Server: LiteSpeed
System: Linux cde2.duelhost.dk 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64
User: dtptviut (1121)
PHP: 8.0.30
Disabled: exec,system,passthru,shell_exec,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dtptviut/Maildir/.Junk/new/q1sKAiK-6533949841
From directoripdsa.general@ruralytierras.gob.bo Thu Jun 20 07:52:04 2024
Return-path: <directoripdsa.general@ruralytierras.gob.bo>
Envelope-to: mail@globen-flakket.dk
Delivery-date: Thu, 20 Jun 2024 07:52:04 +0200
Received: from mail.ruralytierras.gob.bo ([181.115.188.156])
	by cde2.duelhost.dk with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.97.1)
	(envelope-from <directoripdsa.general@ruralytierras.gob.bo>)
	id 1sKAiJ-000000027fy-2d30
	for mail@globen-flakket.dk;
	Thu, 20 Jun 2024 07:52:04 +0200
Received: from localhost (localhost [127.0.0.1])
	by mail.ruralytierras.gob.bo (Postfix) with ESMTP id E5FDF2A2B383;
	Fri, 17 May 2024 03:36:56 -0400 (-04)
Received: from mail.ruralytierras.gob.bo ([127.0.0.1])
	by localhost (mail.ruralytierras.gob.bo [127.0.0.1]) (amavisd-new, port 10032)
	with ESMTP id ViXflYrzhA3X; Fri, 17 May 2024 03:36:39 -0400 (-04)
Received: from localhost (localhost [127.0.0.1])
	by mail.ruralytierras.gob.bo (Postfix) with ESMTP id 32D6F2C03FA6;
	Fri, 19 Apr 2024 11:56:35 -0400 (-04)
DKIM-Filter: OpenDKIM Filter v2.10.3 mail.ruralytierras.gob.bo 32D6F2C03FA6
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=ruralytierras.gob.bo; s=5926EF94-8591-11ED-B22B-2FD0BAD3835F;
	t=1713542196; bh=vCIMMETLFGu2PlK1syFuLiLM8KBfwO8B/6wvycoOCTA=;
	h=MIME-Version:To:From:Date:Message-Id;
	b=OXsRfTpoVDidNWvmtXv4FwBh6AU9DwtwqhBOqI5L9Z687l6m22ijwH7WL/LzDEkJ8
	 aKKdT3povPcV/Q87dMe0ovB6cejm7mrQ+0MFe9ThKQrGRIIBwAs/Mgl7Lgo98AnqzO
	 VEhRBjTejL1MVr2x1DICAFd2ZjFJAwpQHQYTWdm4G3/YUGgL3SRGNXfeH5DQIkvwWI
	 C974KZUoWIDyQxGoqGTPY9zV7/tWHC6b1H+LykuDxYfH9jxcTFDjcF8VJJaW9KEaMC
	 uLnmDQM6iPGuFzyVlQFhiaCsSrjL7pyX5wHEJwHnXpdivhWNqCT0vre8ooXMJUkGka
	 AsafBlkeTBkTQ==
X-Virus-Scanned: amavisd-new at ruralytierras.gob.bo
Received: from mail.ruralytierras.gob.bo ([127.0.0.1])
	by localhost (mail.ruralytierras.gob.bo [127.0.0.1]) (amavisd-new, port 10026)
	with ESMTP id vDijOjuM1XEZ; Fri, 19 Apr 2024 11:56:35 -0400 (-04)
Received: from [10.19.18.132] (unknown [154.47.30.50])
	by mail.ruralytierras.gob.bo (Postfix) with ESMTPSA id 6BA3D29A215E;
	Tue, 16 Apr 2024 03:27:00 -0400 (-04)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <directoripdsa.general@ruralytierras.gob.bo>
From: directoripdsa.general@ruralytierras.gob.bo
Date: Tue, 16 Apr 2024 04:26:43 -0300
Reply-To: donation_001@outlook.com
Message-Id: <20240416072702.6BA3D29A215E@mail.ruralytierras.gob.bo>
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 181.115.188.156, -10 Spam score
SPFCheck: Server passes SPF test, -30 Spam score
X-DKIM: signer='ruralytierras.gob.bo' status='pass' reason=''
DKIMCheck: Server passes DKIM test, -20 Spam score
X-Spam-Score: 6.1 (++++++)
X-Spam-Report: Spam detection software, running on the system "cde2.duelhost.dk",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 
 Content preview:  Hej Vores navne er Frances og Patrick Connolly fra Nordirland.
    Mig og min kone vil gerne dele denne gode nyhed med dig, vi vandt en lotterijackpot
    på £115 millioner på nytårsdag. Vi har besluttet at d [...] 
 
 Content analysis details:   (6.1 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.5 BAYES_05               BODY: Bayes spam probability is 1 to 5%
                             [score: 0.0194]
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [donation_001(at)outlook.com]
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.7 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
  2.5 MONEY_NOHTML           Lots of money in plain text
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain different
                             freemails
  2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.0 RCVD_IN_MSPIKE_L3      RBL: Low reputation (-3)
                             [181.115.188.156 listed in bl.mailspike.net]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [181.115.188.156 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [181.115.188.156 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [181.115.188.156 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_MSPIKE_BL      Mailspike blocklisted
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: ruralytierras.gob.bo]
X-Old-Subject:Donation
Subject:*****SPAM***** Donation
X-Spam-Status: Yes, score=6.1, +20 total spam score
SpamTally: Final spam score: 21

Hej

Vores navne er Frances og Patrick Connolly fra Nordirland. Mig og min kone =
vil gerne dele denne gode nyhed med dig, vi vandt en lotterijackpot p=C3=A5=
 =C2=A3115 millioner p=C3=A5 nyt=C3=A5rsdag. Vi har besluttet at donere til=
 5 tilf=C3=A6ldige personer p=C3=A5 grund af denne vanskelige tid med coron=
avirus, n=C3=A5r du modtager denne e-mail, blev din e-mail valgt fra en spi=
n-bold. Jeg har distribueret de fleste af mine aktiver til en r=C3=A6kke ve=
lg=C3=B8rende organisationer og organisationer. Jeg har frivilligt beslutte=
t at donere bel=C3=B8bet p=C3=A5 =E2=82=AC2.000.000,00 til dig som en af mi=
ne heldige 5 personer, der er udvalgt.

Dette er din donationskode: [FPC430342022]

Besvar denne e-mail med donationskoden:
orangecashloan@gmail.com

Jeg h=C3=A5ber at g=C3=B8re dig og din familie glade.

V=C3=A6r hilset

Frances og Patrick Connolly