NetKnow Corporate Blog

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Jan 2023 15:26:10 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pDCAY-000P3K-2k

for dave@doctor.nl2k.ab.ca;

Wed, 04 Jan 2023 15:23:34 -0700

Resent-From: The Doctor

Resent-Date: Wed, 4 Jan 2023 15:23:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f67.google.com ([209.85.218.67]:40676)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pDBWA-000KoN-0v

for doctor@doctor.nl2k.ab.ca;

Wed, 04 Jan 2023 14:41:54 -0700

Received: by mail-ej1-f67.google.com with SMTP id jo4so85866111ejb.7

for ; Wed, 04 Jan 2023 13:39:20 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=govassist.com; s=google;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=iNOjFCW7O6Ftqbu4mOqBYCvj2YIKtX4myvp2Y4Ts7G0=;

b=GV+R4fo0p2YEnTvgrQ+UImLDWHF+3cLhH5ct5qyVepoEkwE+bM9cx2S7s6H81Yv6+U

B+ioE9G+XTHj5kleJ5jQpEp1U1peuXiMIpKp5gN3jacUkpf+2bND45gWhzTB4jSzQL6U

c5mNxO9bAfq0HkZJFRJTb1qfbbLbH//71tR9pvVoEfI7UH7bHuld+VgJI/W7amZTG5I6

5ftWzGITzIk2xISr7nMAZF8TIobD6NlAsL3ublXtk6MbL1IL7dysHqRdUlf/e3Xnka55

CbZv30KUPB5YhrwXs7EYvXbELq0UqAvsgJ8Qjen5Gh/E7VKUy7xlmIu8lLL11LbPTK4n

MSYg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=iNOjFCW7O6Ftqbu4mOqBYCvj2YIKtX4myvp2Y4Ts7G0=;

b=mDK0VJsCXte/Kz15eGnz8NVlO3+0vh03Nx+9Tb7TPIBKh4tUz8+T6/4ZLqY+9gqnGM

QMeChZ0NH+mN0M0vIdHBHvF/XA8tFCEhG3u0REFg/iU5erNHjldGsYHAOlgTHlhhNowe

SQx6ZGwnzoqyTxKuEITRcx40reB3GJ3PFqNnVIrvd73HtBy4FtIraApYWcEGGBltcZUV

u4ZYPVuCcS7Ij/6yb9CXb7lPVZssG3tMljHzrJbdS7aAxE97Qj0Ry/DSNMM+0Yu3SapI

G+CIkwIF+Oo25w2jemMqUEJwbNEEgJcK7KT+ixf1eeiDYjRr+1RQrtSn01jD7AYZBU7s

zGEg==

X-Gm-Message-State: AFqh2koAQrQdLCh0iXH8rf9+RCrcNXf3NJfD8Ndi1cP4v/WD38aZf4LS

2/5EGQRjcC12PvcNwGipWHXJdaW9rkjBNlXWrc1THw==

X-Google-Smtp-Source: AMrXdXs999bGIbRV4n0VfMkaSWEY6WhByuWo2EAp8gora5IxQfSebNm52lsvSl7hI3t9rZCQ+6SjC0q1DilvT2Jp7e8=

X-Received: by 2002:a17:906:8a61:b0:7c0:edcd:cf9d with SMTP id

hy1-20020a1709068a6100b007c0edcdcf9dmr4989371ejc.269.1672868354762; Wed, 04

Jan 2023 13:39:14 -0800 (PST)

MIME-Version: 1.0

From: "Ms. Monica Rolland"

Date: Wed, 4 Jan 2023 21:41:53 +0000

Message-ID:

Subject:

To: d s virk , dan boo ,

david , david , david ,

david , deekoo , dkabura ,

dkg , doctor

Content-Type: multipart/alternative; boundary="0000000000000aba4005f1770495"



--0000000000000aba4005f1770495

Content-Type: text/plain; charset="UTF-8"



https://trz16.app.link/6cGpy19xjwb



--0000000000000aba4005f1770495

Content-Type: text/html; charset="UTF-8"



https://trz16.app.link/6cGpy19xjwb



--0000000000000aba4005f1770495--

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Jan 2023 22:33:06 -0700

Received: from mail-oa1-f52.google.com ([209.85.160.52]:43986)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pCwNg-000CLM-27

for dave@doctor.nl2k.ab.ca;

Tue, 03 Jan 2023 22:32:11 -0700

Received: by mail-oa1-f52.google.com with SMTP id 586e51a60fabf-1433ef3b61fso38986980fac.10

for ; Tue, 03 Jan 2023 21:29:35 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=rmuti.ac.th; s=dkim;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=aFn0KeM8OA6PhQ0w1FxI/rjnJApo+Ye/IOEAinI6PZM=;

b=Z/JscdcJa1BwxZuD6wIayYigHWglS3ShZFSF7AjRV6Xrda1KRyc092W/fBtS0yy7Q2

JEPkxiMphAAhB50ZRy/Do1u0Vt2pfF7xB6TtJl7hlGPihhki2JgAHEAlOprJyUrk2rsw

6jm1DH0XJmkYrs3rpSurQy8Aomj49RYmbxBRY=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=aFn0KeM8OA6PhQ0w1FxI/rjnJApo+Ye/IOEAinI6PZM=;

b=bXJqdCNTey6Fol0lUlYVNgr7QDl3boQ2FOKTcRBnC7sSVgh4MBykr6fvg95EpBvMFk

8cEyPoiv9809dyfJpZDqlmtIlzp7BBwTfGWETEwMyqFKLbaa5Kx4xUQt/vMpv74T0QeO

Oj28AnczEpIKHXZ++i3kG1hfNkJrc80H/jwL7VHiWZvJW11gA/BMtq3v8a6QrrbAY5my

m8msEIFp/+S6BLibKfKMsGcFWb2NBo6rOu8Saeoanw/1tUaSLO2AOIso/8aeVzkKBLWc

eCANOEK88ve+1/Qd02+YqJ0RYpioYVfguOfyZaz1wsKe0861l9iIvMVdrcpi6FEQe5Lk

SUHg==

X-Gm-Message-State: AFqh2koN2+0qEPErnA21ICY5sID8lt4O5JQeYrO5eXH0ZjVcI5yiZHgw

lH5Pv7+YuNCNgGP4gjaF2MtxTXnZAW1YjDyMEDrfWQ==

X-Google-Smtp-Source: AMrXdXtfrSExux5pq4nbbqXt0Zc0LVXZTKogHkXspT9B+oqcHG4hoGhhYRVvDJEOs/M3/YwL6baHPV+f4SCAkhfTHnk=

X-Received: by 2002:a05:6870:1b06:b0:13b:becc:138 with SMTP id

hl6-20020a0568701b0600b0013bbecc0138mr3697571oab.28.1672810169713; Tue, 03

Jan 2023 21:29:29 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:a05:6850:3f14:b0:39b:6cf1:648f with HTTP; Tue, 3 Jan 2023

21:29:29 -0800 (PST)

Reply-To: suniewendy5@gmail.com

From: Rerkanun Wirakharat

Date: Wed, 4 Jan 2023 05:29:29 +0000

Message-ID:

Subject: Hello

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I sent a letter to your mail but got no reply



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URIs: rmuti.ac.th]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,

no trust

[209.85.160.52 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.52 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[suniewendy5[at]gmail.com]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Hello



I sent a letter to your mail but got no reply

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Jan 2023 16:48:19 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pCqvF-0003uT-1T

for dave@doctor.nl2k.ab.ca;

Tue, 03 Jan 2023 16:42:21 -0700

Resent-From: The Doctor

Resent-Date: Tue, 3 Jan 2023 16:42:21 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f43.google.com ([209.85.128.43]:36510)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from <25896345y@gmail.com>)

id 1pCnWq-0008M5-1y

for doctor@doctor.nl2k.ab.ca;

Tue, 03 Jan 2023 13:04:59 -0700

Received: by mail-wm1-f43.google.com with SMTP id c65-20020a1c3544000000b003cfffd00fc0so27522025wma.1

for ; Tue, 03 Jan 2023 12:02:27 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=a+ZUuxUTAoz+nMDIAxIHUE5qjUM6hZWQNbOQhvaBX2U=;

b=n3Nus2E2L9qFnMsBdR/l3q30yhCuvXQPm0zt1RH4zDCCMkm+2Ph8FUyB5LsT/DdmsW

kNRj72eLDlzYTQkm5QXoXsEvZeR6JjNiLZLMdjdl962OzqK2XP/dFTCobPl4Cl0bNeNR

jIgjMtF9YeRdnMC07kKbrj/BolbAkUL5Bxrzd0kX54AoUBbNIJI656u5yfpJq+6YgY1E

OOREq5+DbcH3AoxnMH+w/x+DdbmW9C6tpf5wDslTaHuKPhQvA7QK7gnnozD9XRpfDp4K

aW3SdN6FLfzcKyv2v9QilJEjl9Jq5DwzVT7P+PyyFeaaLSKABiDCY/y8CmW0l3aZ1xSf

fpcw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=a+ZUuxUTAoz+nMDIAxIHUE5qjUM6hZWQNbOQhvaBX2U=;

b=UnM5v8gqcx85yTDHQtRDyx6y7hl8VRmQtu+tRBa2yGpH0l2colcdx/priHqYYf9agr

y1ihQlzuZ84VIThH9bB1ZE/f1FdW3jOkK0y29VpQOWN6+9Aiud49HBECbKWoKgLcXmLC

L3rjvQ41zl+ZFYSMHuavwejjh31trxsQLb1wIw5qls06I/sUGDl2hdcEstMpKLtF6+PK

A/O/QK4PJh/SzHuAxjMqlfFjb/bIpwXCHTMF/ddfKSI/3RbOIcOtRCQhnhPDTrYyDb3x

fPePOw79s3U3BPkuTxneOzGMJcQArj08yTi9dgzf0lez+Fvkn71iFqcQWVUCxRlkzQJx

x6Uw==

X-Gm-Message-State: AFqh2kotzeVYJFKOEJhYQqYlcT7yGt5ba8l1oBsjdLJVwl8wuESSASKz

xnKVu5plgw8e9j9O/ZB1odG2y8kEcqWPIQLoIhU=

X-Google-Smtp-Source: AMrXdXuB0KdoWbk6b3vGq1kqyMndwoP3PKvp6yAuKLYaUg5j9iK9y88d39868E/ffix0ABSYU6SUDRHLg7PornJrVcc=

X-Received: by 2002:a05:600c:364a:b0:3d0:438b:9775 with SMTP id

y10-20020a05600c364a00b003d0438b9775mr2207413wmq.192.1672776140909; Tue, 03

Jan 2023 12:02:20 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:a5d:6d86:0:0:0:0:0 with HTTP; Tue, 3 Jan 2023 12:02:20 -0800 (PST)

Reply-To: n45710y@gmail.com

From: Bill Chantal <25896345y@gmail.com>

Date: Tue, 3 Jan 2023 20:02:20 +0000

Message-ID:

Subject: SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE UNITED NATION.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 15.6

X-Spam_score_int: 156

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE

UNITED NATION. Your compensation fund of 6 million dollars is ready for payment

contact me for more details. Thanks



Content analysis details: (15.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,

no trust

[209.85.128.43 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[25896345y[at]gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.43 listed in wl.mailspike.net]

1.5 HK_SCAM_N8 BODY: No description available.

2.0 HK_SCAM No description available.

0.8 UPPERCASE_50_75 message body is 50-75% uppercase

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 LOTTO_DEPT Claims Department

3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE UNITED NATION.



SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE UNITED NATION.



Your compensation fund of 6 million dollars is ready for payment

contact me for more details.



Thanks