Desparation spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 26 Mar 2024 07:59:00 -0600
Received: from mail-lf1-f67.google.com ([209.85.167.67]:49635)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rp7CN-000000008vK-0RFy
for dave@doctor.nl2k.ab.ca;
Tue, 26 Mar 2024 07:50:46 -0600
Received: by mail-lf1-f67.google.com with SMTP id 2adb3069b0e04-51588f70d2dso6612895e87.3
for; Tue, 26 Mar 2024 06:48:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1711460922; x=1712065722; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=tiTgx0ORE0gBp0oYWKJklyQkiZBjAINbFGMu+CEvo18=;
b=B4IWy9xhCv4HzVL3YiOhZLDtVqGdZAjEeG7upBFwjnDi19YP0iNy97rRjxBetKlR4x
sZxA93nxebqj7CKm0k5LKvRP3ArcAnp6MMje5+c9inKChWarK7VXR7Y8I7Cqs0C0oW00
SIbj9ketq8YxId29S9L4ssRCMRa7NBUFOzUxFB4zKj2dA+rCIP8Pl/TsTjkGWZXKtSdO
JWx7bMI5RRSLgQ8nncf60BXRt6qRnC6SvDM5houtm9gqf9jwJgCSvQ6kZfl5wT4J0UVP
q5/JVrNoLSoj20xc+GCcW9M6jx9zGj8Ayg91tlLYmXXNlZTtOYm9cFCdjq52p8kKqbIx
pE7Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1711460922; x=1712065722;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=tiTgx0ORE0gBp0oYWKJklyQkiZBjAINbFGMu+CEvo18=;
b=II98DDJfshbiFFO9WKfsLM7PkB72r5Iukekay8yyWPn5Gx3DBQB/OEwG7E7lidot+W
GZCLnPgWqzg93wSwTv2me90yb9TzAm4C2nPG1Mwcoxa3P5MdXnQx9zM0RsAd1Q5rGIxa
g3IeWWbbQ20Xdvy9zLfFHovwoKmBnU5qYvflha85zJd8xkTB/fhDSCuJJYXCly1dKv3K
yUkQeowTyN4XIuo8ZULEwDJ1b5e+utWBu4RJ4cPiBvvjncESkFAHAAOYzzNq1VYoD5KO
daSAIHwiOVbOUfjLVNpsPZRfnbKEToayK2OeFrQoQ1kD5msfnm7FjxcPvZ7BVIdH1Iph
NdAQ==
X-Forwarded-Encrypted: i=1; AJvYcCUrlkOzxIGEBJ4HMaEZbRi3XNT6+m5zdjukIWV64HfWPoUDq2PisWf529B3YqaolrjHwaU1CqAEaQMbYUb+z+PADs8mAKhm
X-Gm-Message-State: AOJu0YwDJqd0+r4MnokMeyTyxZNwBqxFk8yW/nrWLw5sT//rglKRdHqI
gXVoOGdQiqJ4tSQ0lW1coPdk4IJV7Cg8FdUz02wZ/qmsC5jaKinNQVayXiJwvzDxxUUNgCis+Ky
BgLuUlLacbbOzr6Xs3GsvPSYrxEs=
X-Google-Smtp-Source: AGHT+IG+FfChWzCgiyttDKzaq2IDyd5sm6ZzBmcILHx/p9FVsjuUojb8qs/PI/10teozKCNIJhfYuuBdyTaXDgUzOe4=
X-Received: by 2002:a05:6512:3694:b0:513:cd70:8db0 with SMTP id
d20-20020a056512369400b00513cd708db0mr879991lfs.65.1711460921491; Tue, 26 Mar
2024 06:48:41 -0700 (PDT)
MIME-Version: 1.0
Reply-To: kl145177@gmail.com
From: Ken Lawson
Date: Tue, 26 Mar 2024 05:48:34 -0800
Message-ID:
Subject: Am still expecting your response, Please get back to me as soon as possible.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000045d05d0614908c5e"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.3 EMPTY_MESSAGE Message appears to have no textual parts and no
Subject: text
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.67 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.67 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[kl145177(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[lussken821(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[lussken821(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
Subject: {SPAM?} Am still expecting your response, Please get back to me as soon as possible.
--00000000000045d05d0614908c5e
Content-Type: text/plain; charset="UTF-8"
--00000000000045d05d0614908c5e
Content-Type: text/html; charset="UTF-8"
--00000000000045d05d0614908c5e--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 26 Mar 2024 07:59:00 -0600
Received: from mail-lf1-f67.google.com ([209.85.167.67]:49635)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rp7CN-000000008vK-0RFy
for dave@doctor.nl2k.ab.ca;
Tue, 26 Mar 2024 07:50:46 -0600
Received: by mail-lf1-f67.google.com with SMTP id 2adb3069b0e04-51588f70d2dso6612895e87.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1711460922; x=1712065722; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=tiTgx0ORE0gBp0oYWKJklyQkiZBjAINbFGMu+CEvo18=;
b=B4IWy9xhCv4HzVL3YiOhZLDtVqGdZAjEeG7upBFwjnDi19YP0iNy97rRjxBetKlR4x
sZxA93nxebqj7CKm0k5LKvRP3ArcAnp6MMje5+c9inKChWarK7VXR7Y8I7Cqs0C0oW00
SIbj9ketq8YxId29S9L4ssRCMRa7NBUFOzUxFB4zKj2dA+rCIP8Pl/TsTjkGWZXKtSdO
JWx7bMI5RRSLgQ8nncf60BXRt6qRnC6SvDM5houtm9gqf9jwJgCSvQ6kZfl5wT4J0UVP
q5/JVrNoLSoj20xc+GCcW9M6jx9zGj8Ayg91tlLYmXXNlZTtOYm9cFCdjq52p8kKqbIx
pE7Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1711460922; x=1712065722;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=tiTgx0ORE0gBp0oYWKJklyQkiZBjAINbFGMu+CEvo18=;
b=II98DDJfshbiFFO9WKfsLM7PkB72r5Iukekay8yyWPn5Gx3DBQB/OEwG7E7lidot+W
GZCLnPgWqzg93wSwTv2me90yb9TzAm4C2nPG1Mwcoxa3P5MdXnQx9zM0RsAd1Q5rGIxa
g3IeWWbbQ20Xdvy9zLfFHovwoKmBnU5qYvflha85zJd8xkTB/fhDSCuJJYXCly1dKv3K
yUkQeowTyN4XIuo8ZULEwDJ1b5e+utWBu4RJ4cPiBvvjncESkFAHAAOYzzNq1VYoD5KO
daSAIHwiOVbOUfjLVNpsPZRfnbKEToayK2OeFrQoQ1kD5msfnm7FjxcPvZ7BVIdH1Iph
NdAQ==
X-Forwarded-Encrypted: i=1; AJvYcCUrlkOzxIGEBJ4HMaEZbRi3XNT6+m5zdjukIWV64HfWPoUDq2PisWf529B3YqaolrjHwaU1CqAEaQMbYUb+z+PADs8mAKhm
X-Gm-Message-State: AOJu0YwDJqd0+r4MnokMeyTyxZNwBqxFk8yW/nrWLw5sT//rglKRdHqI
gXVoOGdQiqJ4tSQ0lW1coPdk4IJV7Cg8FdUz02wZ/qmsC5jaKinNQVayXiJwvzDxxUUNgCis+Ky
BgLuUlLacbbOzr6Xs3GsvPSYrxEs=
X-Google-Smtp-Source: AGHT+IG+FfChWzCgiyttDKzaq2IDyd5sm6ZzBmcILHx/p9FVsjuUojb8qs/PI/10teozKCNIJhfYuuBdyTaXDgUzOe4=
X-Received: by 2002:a05:6512:3694:b0:513:cd70:8db0 with SMTP id
d20-20020a056512369400b00513cd708db0mr879991lfs.65.1711460921491; Tue, 26 Mar
2024 06:48:41 -0700 (PDT)
MIME-Version: 1.0
Reply-To: kl145177@gmail.com
From: Ken Lawson
Date: Tue, 26 Mar 2024 05:48:34 -0800
Message-ID:
Subject: Am still expecting your response, Please get back to me as soon as possible.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000045d05d0614908c5e"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.3 EMPTY_MESSAGE Message appears to have no textual parts and no
Subject: text
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.67 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.67 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[kl145177(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[lussken821(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[lussken821(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
Subject: {SPAM?} Am still expecting your response, Please get back to me as soon as possible.
--00000000000045d05d0614908c5e
Content-Type: text/plain; charset="UTF-8"
--00000000000045d05d0614908c5e
Content-Type: text/html; charset="UTF-8"
--00000000000045d05d0614908c5e--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments