Welcome to

Geistronaut

Home / Aktuelles / Ref:NT/22/DX906/83GL

Ref:NT/22/DX906/83GL

Ich wusste bis heute nicht, dass auch die Holländer anscheinend höchst interessante Lotterien haben.
Spass beiseite, es scheint als würden die Spammer jetzt langsam lernen, Aktivitäten deutlich besser planen und ein sauberes Englisch verwenden, Holzauge sei wachsam !

Egal, heute erreichte mich diese Gewinnbenachrichtigung, die ich euch nicht vorenthalten möchte:

 

Ref:NT/22/DX906/83GL

Attention To The Owner Of This Email Address

We are happy to inform you that your e-mail have won an Award Sum of
$950.580.00 Dollar in Dutch Zeeman Lotto held in Rotterdam-Netherlands.
Winners were picked by computerized system, drawn from electronic online
world wide web. This draws were officially announced 17th of  Novebmer2011.
This compensation program was promoted and sponsored by Dutch Zeeman
Lotto in Netherlands.

Note: No ticket was sold in this prize award but winners were randomly
selected from the electronic online world wide web in all over the world.
You can reach our Foreign Financial Office with your winning informations
by phone as well as via email with the following (1)Full name (2)Telephone.
Batch Num: DC62/F415/11BV, Ref Num:NT/22/DX906/83GL,
Ticket Num:DZL072531PF,

Contact: Mr. Steijn De Bernhard,
E:mail: claimdptnl1@aol.com
Tel: +31-684-874-123

Sincerely Yours,
Mrs. Rebecca Hofman
(Dept Sec.)

 

 

Und hier wie immer der E-Mail Header:

X-Account-Key: account2
X-UIDL: 0000063a45dd7b54
X-Mozilla-Status: 0000
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <turismo.tejo@lvt.pt>
Delivered-To: —
Received: from mx1.ronet.de (mx1.ronet.de [62.134.42.44])
by smtp.ronet.de (Postfix) with ESMTP id 0EEB0521EF9
for <—>; Thu, 17 Nov 2011 16:15:56 +0100 (CET)
Received: from localhost (virusmx1.ronet.de [62.134.42.47])
by mx1.ronet.de (Postfix) with ESMTP id E01791668071
for <—>; Thu, 17 Nov 2011 16:15:55 +0100 (CET)
X-Virus-Scanned: amavisd-new at ronet.de
X-Spam-Flag: YES
X-Spam-Score: 10.329
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.329 tagged_above=-100 required=5.5
tests=[ADVANCE_FEE_2_NEW_MONEY=0.001, FORGED_MUA_OUTLOOK=2.785,
FREEMAIL_FORGED_REPLYTO=2.503, FREEMAIL_REPLYTO_END_DIGIT=0.98,
FROM_MISSPACED=0.001, FROM_MISSP_DKIM=0.001,
FROM_MISSP_EH_MATCH=0.001, FROM_MISSP_MSFT=0.001,
FROM_MISSP_REPLYTO=0.001, FROM_MISSP_TO_UNDISC=0.001,
FROM_MISSP_URI=0.001, FSL_CTYPE_WIN1251=0.001,
FSL_NEW_HELO_USER=0.001, FSL_UA=0.147, FSL_XM_419=0.988,
LOTS_OF_MONEY=0.001, MONEY_FRAUD_3=0.034, MONEY_FROM_MISSP=0.001,
MONEY_LOTTERY=0.001, NSL_RCVD_HELO_USER=2.879,
RCVD_IN_DNSWL_NONE=-0.0001]
X-Spam-Report:
* -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
*      trust
*      [189.126.112.34 listed in list.dnswl.org]
*  0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
*  1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
*  2.9 NSL_RCVD_HELO_USER Received from HELO User
*  1.0 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
*      (<claimdptnl1[at]aol.com>
)
*  0.1 FSL_UA FSL_UA
*  0.0 LOTS_OF_MONEY Huge… sums of money
*  0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
*  0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
*  0.0 FROM_MISSP_DKIM From misspaced, DKIM dependable
*  0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
*  0.0 FROM_MISSPACED From: missing whitespace
*  0.0 MONEY_FROM_MISSP Lots of money and misspaced From
*  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
*  0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
*  0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
*  0.0 MONEY_LOTTERY Lots of money from a lottery
*  0.0 FROM_MISSP_URI From misspaced, has URI
*  2.8 FORGED_MUA_OUTLOOK E-Mail t\344uscht E-Mail-Software Outlook vor
*  0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
*  0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
Received: from mx1.ronet.de ([62.134.42.44])
by localhost (virusmx1.ronet.de [62.134.42.47]) (amavisd-new, port 10024)
with LMTP id Cu+jtQ6cBGms for <—>;
Thu, 17 Nov 2011 16:15:55 +0100 (CET)
X-policyd-weight:  NOT_IN_SPAMCOP=-1.5 NOT_IN_BL_NJABL=-1.5 DSBL_ORG=SKIP(0) CL_IP_EQ_HELO_IP=-2 (check from: .lvt. – helo: .hm1480-27.locaweb. – helo-domain: .locaweb.)  FROM/MX_MATCHES_NOT_HELO(DOMAIN)=1; rate: -4
X-Greylist: delayed 00:15:03 by SQLgrey-1.6.8
Received: from hm1480-27.locaweb.com.br (hm1480-27.locaweb.com.br [201.76.49.158])
by mx1.ronet.de (Postfix) with ESMTP id 733BB166808C
for <—>; Thu, 17 Nov 2011 16:15:55 +0100 (CET)
Received: from hm3028.locaweb.com.br (189.126.112.83) by hm1480-23.locaweb.com.br (PowerMTA(TM) v3.5r15) id hokiim0nva4d for <—>; Thu, 17 Nov 2011 13:00:48 -0200 (envelope-from <turismo.tejo@lvt.pt>)
Received: from frink0002.locaweb.com.br (frink0002.email.locaweb.com.br [10.20.54.32])
by hm3028.locaweb.com.br (Postfix) with ESMTP id D4346BFAF0;
Thu, 17 Nov 2011 13:00:47 -0200 (BRST)
Received: from cl04.mobimail.com (hm2563.email.locaweb.com.br [187.45.209.67])
by frink0002.locaweb.com.br (Postfix) with ESMTP id CE0FB11A009;
Thu, 17 Nov 2011 13:00:47 -0200 (BRST)
Received: from [24.132.117.82] (account fred@animaverde.com.br HELO User)
by hm2563.cl04.mobimail.com (CommuniGate Pro SMTP 5.2.16)
with ESMTPA id 205040719; Thu, 17 Nov 2011 13:00:47 -0200
Reply-To: <claimdptnl1@aol.com>
From: “Ref: NT/22/DX906/83GL”<turismo.tejo@lvt.pt>
Subject: ***roNet SPAM Guard *** Ref:NT/22/DX906/83GL
Date: Thu, 17 Nov 2011 16:01:34 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset=”Windows-1251”
Content-Transfer-Encoding: 7bit
X-Priority: 5
X-MSMail-Priority: Low
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <auto-000205040719@hm2563.cl04.mobimail.com>
To: undisclosed-recipients:;
X-Virus-Scanned: clamav-milter 0.97.2 at hm3028
X-Virus-Status: Clean