Today's e-mail mystery

[muckefuck]

I just got a letter in my mailbox that says, in its entirety:

From: Lanes D. Compartments <xxxx@niab.se>
Subject: Bonjour.

Hello, playmates! :)

Mar sin leat

I truly have no idea. "Mar sin leat", incidentally, is Scottish-Gaelic for "Good-bye". But who do I know in Sweden who speaks Gaelic? (Unlike almost anyone reading this--except keyne--I actually had to think about that for a bit.) There's no homepage for the domain and "niab" rings absolutely no bells for me. Is there any way to find out who it's registered to?

Comments

[tyrannio.livejournal.com]

whois -h whois.geektools.com niab.se yields a referral to whois.nic-se.se, no names, a registrar status of REGISTRERAT, and a suggestion to use the web search for more info.

Looking at www.nic-se.se and doing a search, I get a holder of Norrlands Insekstaet AB.

But the From address makes me think it's spam. Can you post the full headers? My guess is that the Received: lines will never have been anywhere near Sweden.

[muckefuck.livejournal.com]

Return-path:
Received: from wmailmta10if.seamail.go.com (wmailmta10i.seamail.go.com [10.192.72.243]) by wmailmsg01.seamail.go.com (Sun Internet Mail Server sims.4.0.2002.06.25.09.36.p9) with SMTP id <0IBP002JTHK8E5@wmailmsg01.seamail.go.com> for xxxxXxxx@sims-ms-daemon (ORCPT rfc822;xxxxxxxx@wmailmsg01.seamail.go.com) ; Thu, 10 Feb 2005 09:21:44 -0800 (PST)
Received: (qmail 22353 invoked from network); Thu, 10 Feb 2005 17:21:34 +0000
Received: from c-67-165-64-78.client.comcast.net (HELO ledalite.com) (67.165.64.78) by wmailmta10if.seamail.go.com with SMTP; Thu, 10 Feb 2005 17:21:34 +0000
Received: from niab.se (mail.brinet.se [80.88.124.123]) by ledalite.com with esmtp id 9DE2DCB0C2 for ; Thu, 10 Feb 2005 09:21:32 -0800

Note: Blocked out my e-mail address to prevent further spam.

If it is spam, then I'm just flabbergasted to receive some in Gaelic.

[tyrannio.livejournal.com]

The 'c-67-165-64-78.client.comcast.net' just before *.go.com is some random broadband machine, making it almost certain that this is spam and all prior Received: headers are bogus.

Congrats! I only get spam in Russian and Chinese (apart from English). (I suppose it's possible that the Russian spam is actually Azeri or something written in koi8-r with some weirdo conventions for this missing letters, since I've never actually looked at its contents.)