Metrics spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 17 May 2022 16:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nr5Nx-0006mE-C4

for dave@doctor.nl2k.ab.ca;

Tue, 17 May 2022 16:09:45 -0600

Resent-From: The Doctor

Resent-Date: Tue, 17 May 2022 16:09:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f179.google.com ([209.85.219.179]:37403)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nr3eW-00023a-LB

for sales@nk.ca;

Tue, 17 May 2022 14:18:49 -0600

Received: by mail-yb1-f179.google.com with SMTP id v71so250768ybi.4

for ; Tue, 17 May 2022 13:18:27 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kentik.com; s=google;

h=from:mime-version:date:message-id:subject:to;

bh=aMjCxgU+++uyhxC/0MkjLDCK90KCMG7OO6+0Wp6q7+c=;

b=K7fZI7l2aQva3k8FNO4JeUuY4Yu8oGJ00ihlPlC5qG6WKXsC5ZM4luGkIqcNs2VqIe

BuYC0q+099CNSy0Ktjptv3OcBtuX0G2TxlEnwGeFTg+hn25+VDyZmB9BgqFfY0++LjYt

vQGogUCymIRKjfjex1017rhxHzZzFAxu6jB5s=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:from:mime-version:date:message-id:subject:to;

bh=aMjCxgU+++uyhxC/0MkjLDCK90KCMG7OO6+0Wp6q7+c=;

b=tSbX2SSR2bmGSlYlPf0rpdMO5Yt1lYKLXc77bAHG2OigSc9Mv7a7jJQWHikGKPbjcK

QRkblsDXE35OhTLkHInH4xO6MbDWpHLQt184+ZrUus8f6hfhMWf5MKihk/qb/SVnokQr

fdoQGzXBIkELzeMORz53PbI9KCLiMz2nsLBlPZc+EjLPH1JC3NQ7iG610v4bG7ecT/7j

fDHpgsJB8Vr+/8svolUNrHWDPDuqWUDauuHL0iKlFbm1N8kcbAYMukJYKJXTA5V+KBee

yYwlCEnXkcawYOYIwA6tznSdMYd+KOWYChiesp8+glvuhQPuR9GIdYpE3Du7/pAw42wm

qv9g==

X-Gm-Message-State: AOAM532Bdh3VT44IhnoV43iKsYcUC4+bnnYktgY89mVTMptZoxidpjQg

yp6BVRHuBNWAg/e+q4XQmkCWMqX/VGNhtKFksynZZhx1t1s=

X-Google-Smtp-Source: ABdhPJy6Lf/6TDCVJzOk2teTZIYvpaqR6h1kdzfkb06/ddYLpfAdQUyvBrNIIAw25iIwV7fD9kkM97at07NpJPrTMo8=

X-Received: by 2002:a25:4086:0:b0:64b:ac85:2b3 with SMTP id

n128-20020a254086000000b0064bac8502b3mr21272256yba.519.1652818701526; Tue, 17

May 2022 13:18:21 -0700 (PDT)

Received: from 300935273661 named unknown by gmailapi.google.com with

HTTPREST; Tue, 17 May 2022 13:18:21 -0700

From: Briggs Heaney

Mime-Version: 1.0

Date: Tue, 17 May 2022 13:18:21 -0700

Message-ID:

Subject: Improve QoE metrics report

To: David Yadalee

Content-Type: multipart/alternative; boundary="0000000000009541da05df3ad7ae"



--0000000000009541da05df3ad7ae

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



David,



As a regional service provider, your team is tasked with providing services

that stand apart from the larger national/global providers.



In addition to needing to deliver the highest performing network, you also

need to be able to anticipate issues before your end users know there's a

problem.



Here is a report


B2HI4DTHIXS653XO4XGWZLOORUWWLTDN5WS64TFONXXK4TDMVZS63TFOR3W64TLFVWWK5DSNFRX=

GLLUNBQXILLNMF2HIZLSF47XGYTSMM6TCYSSPJSXAM3ZLFBFI2TFOJGW4WCLKVCWGT3XEUZUIJJ=

TIQSTENDFJNAS25L2JVMVSZJNKU4VUWCKGRQUOY2DKESTGRBFGNCA=3D=3D=3D=3D/www-kenti=

k-com-resources-network-metrics-that-matter>

on the most important metrics to focus on to ensure a best-in-class

customer experience.



Let me know if you think this report hits that mark or whether we could

improve the content.



Thanks,

Briggs



Briggs Heaney

Strategic Account Manager

briggs@kentik.com

510.410.7776

[image: Kentik Detect - Cybersecurity Excellence Awards]





Would you like to opt out?


7990>



--0000000000009541da05df3ad7ae

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




>

David,=



=C2=A0=



As a r=

egional service provider, your team is tasked with providing services that =

stand apart from the larger national/global providers.=C2=A0


=C2=A0=



In add=

ition to needing to deliver the highest performing network, you also need t=

o be able to anticipate issues before your end users know there's a pro=

blem.


=C2=A0=





=C2=A0=



Let me=

know if you think this report hits that mark or whether we could improve t=

he content.


=C2=A0=




-family:Arial,Helvetica,sans-serif;font-size:11pt">Thanks,

Briggs


=C2=A0


Briggs Heaney


Strategic Account Manager




510.410.7776=C2=A0



oads/2016/11/235169.jpg" alt=3D"Kentik Detect - Cybersecurity Excellence Aw=

ards" width=3D"96" height=3D"20">









-9c86-4a1e66577990.gif" alt=3D"" width=3D"1" height=3D"1">



--0000000000009541da05df3ad7ae--

Ukrainian moeny scam from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 17 May 2022 08:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nqyMK-0009gk-MA

for dave@doctor.nl2k.ab.ca;

Tue, 17 May 2022 08:39:36 -0600

Resent-From: The Doctor

Resent-Date: Tue, 17 May 2022 08:39:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f193.google.com ([209.85.214.193]:45930)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nqxg7-0006Py-Ef

for doctor@nl2k.ab.ca;

Tue, 17 May 2022 07:56:03 -0600

Received: by mail-pl1-f193.google.com with SMTP id q18so17377861pln.12

for ; Tue, 17 May 2022 06:55:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to

:content-transfer-encoding;

bh=Vp6ad3ipIO480wv5V9N3yuR3QGpSlcdLUjP2rzSiDVU=;

b=V9tVSKWH2VhwS9N7scwlCT4ldzS2EVluUYqpX0wObpoUapakh8qZZdiy6yQ0FPwdsa

SjU3nZNU95W7mPbctdTgn798ExJBO4WNfl2jQiDsXctWbUA2vYQU3/O8eXC7YPHZgZPe

SQCw4dMn9ItHXZW8iYk4qoJoVEelJJhL6N5+0Fzc7jy7PIk/ynqXH1YbFWvyMIxPrz0L

cMy1oxfA+vlUWGyIRp7WsLkT/52yDpz41bWmzHNyboTj64S4ua2IyvxlysBtOjLxMvPI

dLrRRjRS8LX1p26fxq7KElBo6or/IcB+5PWn9fhm++S0mYe0wdPkvl1H+7j+H15M17GW

wCiw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to:content-transfer-encoding;

bh=Vp6ad3ipIO480wv5V9N3yuR3QGpSlcdLUjP2rzSiDVU=;

b=7Pn+q6mbd4yNkfNX6Em7ZpIxo+g6s2orooaQC/aagtmyAQtEdNmGRaMl+XVF5bkozT

qLxAN/vWmnrESRJtDPXQBtwu0feDK5KbKcTqKauo1q5F+XrP0DfwVZXr5WfP/hphwGxg

0bSA6b3t6xjBre8xF27Ct/G/LN6rZ7uMwhxVpINBw2PDlGQNjIB+vdQUhzQ/VwtEtHk1

XuADQ6is26W/8ZIcLkSdNLAMhWR84HiaWq2WaEZR/tjV0PWK6RDwwVEwQdaWcr4VFzY3

mbTGqVLo/tvX3DeNcJNyeG5063SkvwxE717LWAJs6buiHSWKIZxHYdtLlMA0jwp1e4aa

1nVg==

X-Gm-Message-State: AOAM530Sm+u9eMdRC4eDDmAAzihVRR4CjKmx3WCeDgvTOliFj2+kEa/x

vjskLst6WscI21aRJk1qx1sx86skoW8X9XsOv1Q=

X-Google-Smtp-Source: ABdhPJwoX19lOOxH51gm5xBVpKwuqgtTmho91iCb9F71YwKr5xcMCYOYrZIkghNgIZaobLBx4dqBXtds+3ej8YIC+ec=

X-Received: by 2002:a17:90a:4d49:b0:1df:78ca:ae49 with SMTP id

l9-20020a17090a4d4900b001df78caae49mr6233253pjh.121.1652795736572; Tue, 17

May 2022 06:55:36 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:7022:911:b0:3e:56c5:c88f with HTTP; Tue, 17 May 2022

06:55:35 -0700 (PDT)

Reply-To: hon.oleksiy@hotmail.com

From: "Hon. Oleksiy Honcharuk"

Date: Tue, 17 May 2022 14:55:35 +0100

Message-ID:

Subject: Ukraine Prime Minister (Rtd), Urgent Help.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 8.0

X-Spam_score_int: 80

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Ukraine Prime Minister (Rtd) Hello Friend, COMPLEMENT OF

THE SEASON! We understands coronavirus as called “COVID-19 pandemic”

has caused heavy obstruction and deserter outbreak globally, but the living

once shall continue their lifespan.



Content analysis details: (8.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.193 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[chidigahna[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

-0.0 T_SCC_BODY_TEXT_LINE No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Ukraine Prime Minister (Rtd), Urgent Help.



--=20

Ukraine Prime Minister (Rtd)

Hello Friend,



COMPLEMENT OF THE SEASON!



We understands coronavirus as called =E2=80=9CCOVID-19 pandemic=E2=80=9D ha=

s caused

heavy obstruction and deserter outbreak globally, but the living once

shall continue their lifespan.



However, I beseech you with love, how are you? I know that this

message might come to you as a surprise for the fact we didn=E2=80=99t know

each other before, but am open with positive mind. Please before I

proceed with the topic of my message, I will not fail to ask about the

modification of your health which is momentous in human dignity,

nevertheless; I strongly believed you are doing fine by the grace of

God.



Straight to my Topic:



I am the =E2=80=9Cformal=E2=80=9D Ukraine Prime Minister who resigned peace=

fully due

to the political issues in my country (Ukraine). As a matter of fact,

I tendered my resignation letter then and strictly resigned.



But my major reason contacting you now is; there is certain sum of

money i moved to a bank security vault outside Ukraine, as a result of

the on-going war between my country, Ukraine and Russia; so can you

please help me to go and receive it from the security company for

proper self-keeping in your country until we see what this war will

end with?



Please this is very confidential as I will put you more through on

your positive reply.



Yours faithfully,



Hon. Oleksiy Honcharuk

Ukraine Prime Minister (Rtd)