Current File : /home/itiffy/mail/.spam/new/1733431828.M751792P2616254.premium223.web-hosting.com,S=6843,W=6967
Return-Path: <nelvia@visuallink.com>
Delivered-To: itiffy+spam@premium223.web-hosting.com
Received: from premium223.web-hosting.com
	by premium223.web-hosting.com with LMTP
	id WMCYKxQSUme+6ycAqUc79Q
	(envelope-from <nelvia@visuallink.com>)
	for <itiffy+spam@premium223.web-hosting.com>; Thu, 05 Dec 2024 15:50:28 -0500
Return-path: <nelvia@visuallink.com>
Envelope-to: info@itiffy.com
Delivery-date: Thu, 05 Dec 2024 15:50:28 -0500
Received: from mail.visuallink.com ([66.84.80.54]:57854)
	by premium223.web-hosting.com with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <nelvia@visuallink.com>)
	id 1tJInn-00B6iZ-1H
	for info@itiffy.com;
	Thu, 05 Dec 2024 15:50:28 -0500
Received: from localhost (localhost [127.0.0.1])
	by mail.visuallink.com (Postfix) with ESMTP id C9ABA6DE3AA2
	for <info@itiffy.com>; Wed,  4 Dec 2024 11:01:55 -0500 (EST)
Received: from mail.visuallink.com ([127.0.0.1])
 by localhost (mail.visuallink.com [127.0.0.1]) (amavis, port 10032)
 with ESMTP id pTycj7VYY8Fb for <info@itiffy.com>;
 Wed,  4 Dec 2024 11:01:55 -0500 (EST)
Received: from localhost (localhost [127.0.0.1])
	by mail.visuallink.com (Postfix) with ESMTP id 728B785F97ED
	for <info@itiffy.com>; Tue,  3 Dec 2024 17:02:26 -0500 (EST)
DKIM-Filter: OpenDKIM Filter v2.10.3 mail.visuallink.com 728B785F97ED
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=visuallink.com;
	s=7EEF2A24-87F5-11EC-AFDD-7B7DA182FB86; t=1733263346;
	bh=LCiC+d18XRV1WTlrJBcKmH5AAa3uPCYIQ8Qwbf2NPeU=;
	h=From:To:Date:Message-ID:MIME-Version;
	b=q2CHBvrERYFC6Ovpwl98EqvPI5Bcv72u/FmwSMUesE/3I1icxT4A+B7RWshNEw0Wx
	 On+PjG0kW0EeRifqmF+gK57hnSICFNnEG1MFl6m/dZ3o87dYSvr/avT07tmwbN7ngd
	 FB5Da6wkrGrcS74BWL0IZsCYviMF20dqsiywu8JmldPTlHq/Fsyo9PUr60L2prNZdT
	 J1Nj/FwgcfpWRDbb0q8KbgcAf1Zk2t6kT8Z5aDI2gxXIYl9Qe9Yy894/ZfpOyrfhBn
	 D9aCGK3xWo+qxokNZXK4qQMvNW+KdKhOAXFL3je0KtwiGdAfYJg+xwjXCc4iyzUxF+
	 nNR4DXWTFKxRA==
X-Virus-Scanned: amavis at visuallink.net
Received: from mail.visuallink.com ([127.0.0.1])
 by localhost (mail.visuallink.com [127.0.0.1]) (amavis, port 10026)
 with ESMTP id JkuVBq7hDBu1 for <info@itiffy.com>;
 Tue,  3 Dec 2024 17:02:26 -0500 (EST)
Received: from visuallink.com (ec2-35-178-3-103.eu-west-2.compute.amazonaws.com [35.178.3.103])
	by mail.visuallink.com (Postfix) with ESMTPSA id A8604505F523
	for <info@itiffy.com>; Mon,  2 Dec 2024 16:49:30 -0500 (EST)
Reply-To: collectionpayment00@gmail.com
From: Richard and Debbie Nuttall <nelvia@visuallink.com>
To: info@itiffy.com
Date: 02 Dec 2024 21:49:30 +0000
Message-ID: <20241202214930.D0F32D1305060FD7@visuallink.com>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=12.2
X-Spam-Score: 122
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "premium223.web-hosting.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  We are Richard and Debbie Nuttall from Colne, Lancashire
   I and my loving wife won the biggest EuroMillions lottery prize of £61,708,231
    and we just commenced Charity Donation and we will be giving o [...] 
 Content analysis details:   (12.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: visuallink.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [66.84.80.54 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [66.84.80.54 listed in bl.score.senderscore.com]
  0.5 DATE_IN_PAST_24_48     Date: is 24 to 48 hours before Received: date
  0.5 SUBJ_ALL_CAPS          Subject is all capitals
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [collectionpayment00[at]gmail.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=nelvia%40visuallink.com;ip=66.84.80.54;r=premium223.web-hosting.com]
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  0.0 LOTS_OF_MONEY          Huge... sums of money
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.8 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain
                             different freemails
  2.8 MONEY_FRAUD_5          Lots of money and many fraud phrases
  0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  HAPPY CHRISTMAS

<html><head><title></title>
<meta name=3D"GENERATOR" content=3D"MSHTML 11.00.10570.1001">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body>We are Richard and Debbie Nuttall from Colne, Lancashire I and my lov=
ing<br>wife won the biggest EuroMillions lottery prize of &pound;61,708,231=
 and we just<br>commenced Charity Donation and we will be giving out a cash=
 donation of<br>&pound;7,300,000.00 to 3 lucky individuals and 5 charity or=
ganizations across<br>Asia, Africa, North America, South America, Antarctic=
a, Europe, and<br>Australia. Congratulations you are one of our beneficiary=
 contact me via<br>
<a href=3D"mailto:deskpayment7@gmail.com">deskpayment7@gmail.com</a></body>=
</html>