followup spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Sep 2022 09:40:05 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1ocp7r-000Fe5-FP

for dave@doctor.nl2k.ab.ca;

Mon, 26 Sep 2022 08:30:27 -0600

Resent-From: The Doctor

Resent-Date: Mon, 26 Sep 2022 08:30:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f195.google.com ([209.85.222.195]:44925)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1ocle2-000Aeg-Fn

for doctor@doctor.nl2k.ab.ca;

Mon, 26 Sep 2022 04:47:29 -0600

Received: by mail-qk1-f195.google.com with SMTP id y2so3781331qkl.11

for ; Mon, 26 Sep 2022 03:47:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date;

bh=WwvuASX342lwo6UFYqLel2DNwrGGvNe9278CZ70aSMk=;

b=FPa1kG7lej/Dz7DhY2YLZUIUjP46ueGn6PaxrMaid74ZTQAOilhE7dB0AFE6RaYF4K

rW3mTMmaz5J2//qTN0OkaJv/ab2WHjaVzKkomYaUWrKBTvIrHE7q3VjD2dQUy8PTHm67

OlIbcH0bAJ78NEM/xvyST8l+c7mWV759SGlr/JNbLMy+/abGNuk3lSW6Bjd+f5hUNS9p

PJwrIhagED72WPn2bxHgSgzYQhWfNcBr96kGrJlxbEuXIkTHWqDza8iLNGpTELcLr2jl

5iTC+iwU6jBAI04v8LQWsxIjTV50dPisr4CV1+IOJ3qKleEx2Tp89u5pT8Fap5RxWzHK

9WMw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date;

bh=WwvuASX342lwo6UFYqLel2DNwrGGvNe9278CZ70aSMk=;

b=v3NrWyzslI5p2cM6XEdKKbVWZSeTt7eS3HVSiDLLytcL751s3Qz8th2X3LtLyQVrSl

bEgjHRXSkYhzp4Nj1Vp9BTBRPrLSCX6EZehGL8kVf9pl4Kv7OxdqGxq08qw2aJTb47Fd

mOcJH29wm1sIJhUJGSNcPuIXVTTwvaKzGkPKK2SSx8vyVe4ZxGVwe6aoophTKrdw9Jxb

auWYmngYJODxq5mtY7KM9eVuAnjm4d/3vJT9UxwaS1se3Yd1ugDpc4ud+3lcZGxO0MNt

3IKca628qtQ4Cxg4yZmmpXOKCSolUDC2AZGxRsvsRuLHfR9wPWauh7aKJg2hMbhxnM0E

3YpA==

X-Gm-Message-State: ACrzQf0TQmaHBho24/RW8vXthV1cGA7iyvJyk7lRL2NK3uQ/z8zNuM9R

8plKoEH7HbJS02jSrCgyzhYUnIonRQXAUmLUavc=

X-Google-Smtp-Source: AMsMyM5U6cBFSpV7qxc/1xg4W7nhbjNXJBpgBvOaeyBnX68nVZq5dFKazkKTyEJNCv+JVlvSPu8BdQQtFIb8hLBmAKY=

X-Received: by 2002:a37:c8c:0:b0:6cf:1cba:d8ea with SMTP id

134-20020a370c8c000000b006cf1cbad8eamr13259293qkm.762.1664189223418; Mon, 26

Sep 2022 03:47:03 -0700 (PDT)

MIME-Version: 1.0

From: Edem Zotchi

Date: Mon, 26 Sep 2022 10:46:52 +0000

Message-ID:

Subject: & - i

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000803f9205e9923fb9"

Bcc: doctor@doctor.nl2k.ab.ca



--000000000000803f9205e9923fb9

Content-Type: text/plain; charset="UTF-8"



& - i sent you a letter a month ago, but I'm not sure if you got it, I did

not hear from you. Thanks



--000000000000803f9205e9923fb9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



& -=C2=A0
">i sent you a letter a month ago, but I'm not sure if you got it, I di=

d not hear from you. Thanks=C2=A0 =C2=A0 =C2=A0





--000000000000803f9205e9923fb9--

Charity Spam from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Sep 2022 09:40:04 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1ocodq-0006Fu-Ud

for dave@doctor.nl2k.ab.ca;

Mon, 26 Sep 2022 07:59:26 -0600

Resent-From: The Doctor

Resent-Date: Mon, 26 Sep 2022 07:59:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f66.google.com ([209.85.208.66]:40474)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1ochCF-000C2a-IY

for doctor@doctor.nl2k.ab.ca;

Mon, 26 Sep 2022 00:02:31 -0600

Received: by mail-ed1-f66.google.com with SMTP id v2so6630337edc.7

for ; Sun, 25 Sep 2022 23:02:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date;

bh=bkydVjmGsx8M8GMXkco4+Zr3iykP8/zRQatP+DJB8/M=;

b=EJ7DLP0jdKk8Y9vdLS3qtnewJBQwDC7Qtc+oBj40zm8JBlugk1ced9mVIWAO06mZFw

cITYWRLMxpFY6XRKQuSIIa1VM+l3qVi+jeiXLFSr9uV7HvI6MgLsWU3yLA8OHmkAH7c5

hZ02XGfWnJAI3PlhoYzpw9AY2PDKV/6xZ+yFDMyv7GR3XegM7hT8bJzlpXTRTzn+Qq3K

UyQ1RbDDLKIOTgIP3Yw4dOXqGmGeQ45WAACi04a31V6xsFu1dcF4xvy6CMaZMZ33QWJn

HyrI0D/DOSAWgUt6HEvVvBQntktaB5qEMioyNHKzypk5am9qnoWqLpx7FYIIBsJBCfmK

8WsQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date;

bh=bkydVjmGsx8M8GMXkco4+Zr3iykP8/zRQatP+DJB8/M=;

b=oBT7VxgLe7yUDhd2Ao9g/CNQs+ziZcVX0B0oX7FR7xejuWCJEgcpRaNWTBttriIhT2

P24RkQ7QoNqBMQBcq7SDgXpdSxZqM9kUWPyFW+2+FLy3g2xVFPLGY5mbNWbP9xUYLeX1

M2FnFwWGbZyxppUD/EIenQsx3m93ZU0yumcEHSW0hRgoSw1V2OKixka35g2CX75ZMcoM

KGGt/OgJEFDqDsLpIZBd0tA2EfBcIqDgo/CMrLb5D3haoIOgRF/nDgNt4YZRIUZ/euGT

GFOwvcJFiMo1nZcUp+DbNPZ1LZQ15VV4xoK7z518gguUXfpJNHQ2qsthFkTGZOpy5vaI

LeDg==

X-Gm-Message-State: ACrzQf1AyvhK3b4wrqWWSN9+pF3WWKAw68Cr9GrXdQEe9Jf9NpxhWXso

eJbnkdV4QYP4CvAcCxz1Z0RKkqaTDvuZCIShVF0=

X-Google-Smtp-Source: AMsMyM7LkMuMgVczrgg9ocwLnLQy7gyN+8t1WXcLDCLAT1lk+U07elrYIhKoFxD86ZhNeHH+NhSjW8o+pb2I/jJlrKA=

X-Received: by 2002:a05:6402:e87:b0:456:c93c:5361 with SMTP id

h7-20020a0564020e8700b00456c93c5361mr14184176eda.88.1664172123913; Sun, 25

Sep 2022 23:02:03 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a50:7806:0:b0:1db:9049:ca9e with HTTP; Sun, 25 Sep 2022

23:02:03 -0700 (PDT)

Reply-To: helga.yamada65@gmail.com

From: "Mrs. Helga Yamada"

Date: Mon, 26 Sep 2022 07:02:03 +0100

Message-ID:

Subject: $3.2M Charity project.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- I'm looking for someone to trust for charity project. Mrs

Helga



Content analysis details: (9.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 SUBJ_DOLLARS Subject starts with dollar amount

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[helga.yamada65[at]gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.66 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[goodlook2me1[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[goodlook2me1[at]gmail.com]

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} $3.2M Charity project.



--

I'm looking for someone to trust for charity project.



Mrs Helga

link spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 25 Sep 2022 22:33:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oce6Z-000JLP-E4

for dave@doctor.nl2k.ab.ca;

Sun, 25 Sep 2022 20:44:23 -0600

Resent-From: The Doctor

Resent-Date: Sun, 25 Sep 2022 20:44:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f68.google.com ([209.85.128.68]:52937)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1ocbbl-0004ll-Tk

for doctor@doctor.nl2k.ab.ca;

Sun, 25 Sep 2022 18:04:29 -0600

Received: by mail-wm1-f68.google.com with SMTP id l8so3454432wmi.2

for ; Sun, 25 Sep 2022 17:04:05 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date;

bh=eyoEUU1WBdUs69Dreb2a0QmdBVy4OAPatxHajQn1L8c=;

b=pDZr+HIT6/klwaiBT2kAm2qLEkLoMuEQTkYvPmsk77wyQSIDWJVjqxHSGsKLRdosbj

ZqVtM+uboO8JwV4sFK318kxSYScDt1n1FOGW7ncmC+YDwUJdJlmZUL2DFEe2ognkh44s

8dYno9de3hcs3RFhpDS+Jqu4iw94uRvl/xUqYJm31hj5Xn/AgrH99rM37cjOjr1vHOeO

aiCF26+1/pf77lWbVNq4FmE5RBT6bReVaC2EbAV6HCS9wNjGDjE8YDn1DCkI+PVpU8Z5

HHE4ioOHeINmoR2vOtpChq43g7wbeJg1DOsSQB5rm4mCgdWp+sXeu9AGpuKibdSh0/FP

yq8g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date;

bh=eyoEUU1WBdUs69Dreb2a0QmdBVy4OAPatxHajQn1L8c=;

b=puIYUB3ZzBUw12wQ+kuQmEs7zF7O35lKSJn9sdPumq0cX6zTT9ENUDHTt7eNX8EzNs

wTMUVxnS/wkkNmpkL1bK7XFYg799F16Lk5hk7wyrRr4o9oQg1LFg2PxnrS0/NRZU8xob

ZCswiw2vBa1VXkgwoY1DFCW85hnd7XpMAziIVGVwXZPQt55E65JDgnB4ujunwF4lyCdI

wye4omG7YGH/VRNAg5Dd9K1jUrB4MZfQ7y60bfB9eogsvUCiOx3Z/jdhBlwffxPqHEmg

hzxCGjxj9RJJFhWbVeigx62lSeiI3r1LE+u6UQ2mq7LY4qjslHs5sR8ihDRm6nkhSf83

KMpQ==

X-Gm-Message-State: ACrzQf0CQBM00Dnfgu5mYxtTqX07cSImir2vqFqWg72Qef/bVJ7g4tc+

P88PQIhAsAldDtdAJ1xspOgIVKggO1FN8vP2aWA=

X-Google-Smtp-Source: AMsMyM4frLFsH5E1DqQjN434YdSVR16lLR8U0bl4+aWn7QQMp8gIraRdLTUuyCgnXBlwSKGkYiDK87xzQVTY+u92QbE=

X-Received: by 2002:a05:600c:2d05:b0:3b4:7788:9944 with SMTP id

x5-20020a05600c2d0500b003b477889944mr20623059wmf.57.1664150639336; Sun, 25

Sep 2022 17:03:59 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6000:18a6:0:0:0:0 with HTTP; Sun, 25 Sep 2022 17:03:58

-0700 (PDT)

From: pratya preechawat

Date: Mon, 26 Sep 2022 07:03:58 +0700

Message-ID:

Subject: Fw:Ms. Monica Rolland

To: dmwebb , Dngondo ,

dnjugi , doctor

Content-Type: text/plain; charset="UTF-8"



https://4l0wt.app.link/dtlcPtIwCtb