Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 03 Jan 2023 22:33:06 -0700
Received: from mail-oa1-f52.google.com ([209.85.160.52]:43986)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from )
id 1pCwNg-000CLM-27
for dave@doctor.nl2k.ab.ca;
Tue, 03 Jan 2023 22:32:11 -0700
Received: by mail-oa1-f52.google.com with SMTP id 586e51a60fabf-1433ef3b61fso38986980fac.10
for ; Tue, 03 Jan 2023 21:29:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=rmuti.ac.th; s=dkim;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=aFn0KeM8OA6PhQ0w1FxI/rjnJApo+Ye/IOEAinI6PZM=;
b=Z/JscdcJa1BwxZuD6wIayYigHWglS3ShZFSF7AjRV6Xrda1KRyc092W/fBtS0yy7Q2
JEPkxiMphAAhB50ZRy/Do1u0Vt2pfF7xB6TtJl7hlGPihhki2JgAHEAlOprJyUrk2rsw
6jm1DH0XJmkYrs3rpSurQy8Aomj49RYmbxBRY=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=aFn0KeM8OA6PhQ0w1FxI/rjnJApo+Ye/IOEAinI6PZM=;
b=bXJqdCNTey6Fol0lUlYVNgr7QDl3boQ2FOKTcRBnC7sSVgh4MBykr6fvg95EpBvMFk
8cEyPoiv9809dyfJpZDqlmtIlzp7BBwTfGWETEwMyqFKLbaa5Kx4xUQt/vMpv74T0QeO
Oj28AnczEpIKHXZ++i3kG1hfNkJrc80H/jwL7VHiWZvJW11gA/BMtq3v8a6QrrbAY5my
m8msEIFp/+S6BLibKfKMsGcFWb2NBo6rOu8Saeoanw/1tUaSLO2AOIso/8aeVzkKBLWc
eCANOEK88ve+1/Qd02+YqJ0RYpioYVfguOfyZaz1wsKe0861l9iIvMVdrcpi6FEQe5Lk
SUHg==
X-Gm-Message-State: AFqh2koN2+0qEPErnA21ICY5sID8lt4O5JQeYrO5eXH0ZjVcI5yiZHgw
lH5Pv7+YuNCNgGP4gjaF2MtxTXnZAW1YjDyMEDrfWQ==
X-Google-Smtp-Source: AMrXdXtfrSExux5pq4nbbqXt0Zc0LVXZTKogHkXspT9B+oqcHG4hoGhhYRVvDJEOs/M3/YwL6baHPV+f4SCAkhfTHnk=
X-Received: by 2002:a05:6870:1b06:b0:13b:becc:138 with SMTP id
hl6-20020a0568701b0600b0013bbecc0138mr3697571oab.28.1672810169713; Tue, 03
Jan 2023 21:29:29 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:6850:3f14:b0:39b:6cf1:648f with HTTP; Tue, 3 Jan 2023
21:29:29 -0800 (PST)
Reply-To: suniewendy5@gmail.com
From: Rerkanun Wirakharat
Date: Wed, 4 Jan 2023 05:29:29 +0000
Message-ID:
Subject: Hello
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 5.2
X-Spam_score_int: 52
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I sent a letter to your mail but got no reply
Content analysis details: (5.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URIs: rmuti.ac.th]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.160.52 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.52 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[suniewendy5[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Subject: {SPAM?} Hello
I sent a letter to your mail but got no reply
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 03 Jan 2023 16:48:19 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1pCqvF-0003uT-1T
for dave@doctor.nl2k.ab.ca;
Tue, 03 Jan 2023 16:42:21 -0700
Resent-From: The Doctor
Resent-Date: Tue, 3 Jan 2023 16:42:21 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f43.google.com ([209.85.128.43]:36510)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from <25896345y@gmail.com>)
id 1pCnWq-0008M5-1y
for doctor@doctor.nl2k.ab.ca;
Tue, 03 Jan 2023 13:04:59 -0700
Received: by mail-wm1-f43.google.com with SMTP id c65-20020a1c3544000000b003cfffd00fc0so27522025wma.1
for ; Tue, 03 Jan 2023 12:02:27 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=a+ZUuxUTAoz+nMDIAxIHUE5qjUM6hZWQNbOQhvaBX2U=;
b=n3Nus2E2L9qFnMsBdR/l3q30yhCuvXQPm0zt1RH4zDCCMkm+2Ph8FUyB5LsT/DdmsW
kNRj72eLDlzYTQkm5QXoXsEvZeR6JjNiLZLMdjdl962OzqK2XP/dFTCobPl4Cl0bNeNR
jIgjMtF9YeRdnMC07kKbrj/BolbAkUL5Bxrzd0kX54AoUBbNIJI656u5yfpJq+6YgY1E
OOREq5+DbcH3AoxnMH+w/x+DdbmW9C6tpf5wDslTaHuKPhQvA7QK7gnnozD9XRpfDp4K
aW3SdN6FLfzcKyv2v9QilJEjl9Jq5DwzVT7P+PyyFeaaLSKABiDCY/y8CmW0l3aZ1xSf
fpcw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=a+ZUuxUTAoz+nMDIAxIHUE5qjUM6hZWQNbOQhvaBX2U=;
b=UnM5v8gqcx85yTDHQtRDyx6y7hl8VRmQtu+tRBa2yGpH0l2colcdx/priHqYYf9agr
y1ihQlzuZ84VIThH9bB1ZE/f1FdW3jOkK0y29VpQOWN6+9Aiud49HBECbKWoKgLcXmLC
L3rjvQ41zl+ZFYSMHuavwejjh31trxsQLb1wIw5qls06I/sUGDl2hdcEstMpKLtF6+PK
A/O/QK4PJh/SzHuAxjMqlfFjb/bIpwXCHTMF/ddfKSI/3RbOIcOtRCQhnhPDTrYyDb3x
fPePOw79s3U3BPkuTxneOzGMJcQArj08yTi9dgzf0lez+Fvkn71iFqcQWVUCxRlkzQJx
x6Uw==
X-Gm-Message-State: AFqh2kotzeVYJFKOEJhYQqYlcT7yGt5ba8l1oBsjdLJVwl8wuESSASKz
xnKVu5plgw8e9j9O/ZB1odG2y8kEcqWPIQLoIhU=
X-Google-Smtp-Source: AMrXdXuB0KdoWbk6b3vGq1kqyMndwoP3PKvp6yAuKLYaUg5j9iK9y88d39868E/ffix0ABSYU6SUDRHLg7PornJrVcc=
X-Received: by 2002:a05:600c:364a:b0:3d0:438b:9775 with SMTP id
y10-20020a05600c364a00b003d0438b9775mr2207413wmq.192.1672776140909; Tue, 03
Jan 2023 12:02:20 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a5d:6d86:0:0:0:0:0 with HTTP; Tue, 3 Jan 2023 12:02:20 -0800 (PST)
Reply-To: n45710y@gmail.com
From: Bill Chantal <25896345y@gmail.com>
Date: Tue, 3 Jan 2023 20:02:20 +0000
Message-ID:
Subject: SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE UNITED NATION.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 15.6
X-Spam_score_int: 156
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE
UNITED NATION. Your compensation fund of 6 million dollars is ready for payment
contact me for more details. Thanks
Content analysis details: (15.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.128.43 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[25896345y[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.43 listed in wl.mailspike.net]
1.5 HK_SCAM_N8 BODY: No description available.
2.0 HK_SCAM No description available.
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 LOTTO_DEPT Claims Department
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE UNITED NATION.
SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE UNITED NATION.
Your compensation fund of 6 million dollars is ready for payment
contact me for more details.
Thanks