Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 05:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s50oo-00000000DIy-0oA8

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 04:16:06 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 04:16:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f68.google.com ([209.85.219.68]:42112)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4v8y-00000000CoN-1lTu

for sales@nk.ca;

Wed, 08 May 2024 22:12:39 -0600

Received: by mail-qv1-f68.google.com with SMTP id 6a1803df08f44-69b50b8239fso4315156d6.0

for ; Wed, 08 May 2024 21:10:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715227832; x=1715832632; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=La43CiRGvUGukTNWDfeC3RuhAaMyxwU12wqZbSIDENnQJFmLQrjEgddCmyNrD3SDDw

fbp45gvOKk6K829+4LLrb+3Cz/YYkkZADNShfBe+sxyrOtPU2IA4ZlfXBjCRo+52QcRO

yMQ3JFAkToVP8fw7a2W2zz9nxdhAEfmwpDt9o4v+DUqvk9a8Xq6+UQlAnns35bcgGBgy

qtVe8gkMUk0ZeDcIVLfOm6zVqa1qN6wFPkY7R4fIcLnhxNG3BeEQaLVE+t4JZZxNY0E5

tbhwW/B2WAbGIQsfPs0NjofIo/gL5VpCiUKXUIklmUvSOYgTU3nNtudGLrRfEGEPyr18

Rkqw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715227832; x=1715832632;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=SfKujHgYDZFNY/d/whBFYSo4GN8hmmJLLgCw1/1wAoTuUxxpw21KYBmYLaWmSmJytK

1ew/zlOCixWzmZLDMmeNdaoXuyPVP3aFybxfH++StHjn2LJm87c7v4rrYLxN0EBKJoS7

HTsGeUNmXYbFPJf7m5c4KUXlDV0Of2ww680Ay2/ljsLfXB61k9xpZsNEdLo+xWtkHCsS

EAeaCnuVdPGp/huSekRel6ppCRXBenmdHQHG2vbxONoQ9g244VCYGyxdovsQCRm8T7uC

MtrBTfBDiz8d7tiN08anTx/vUCQJX1HMwtjDin1Px+Z8qEa9dOAbIRHFAn0bwbfC/fPq

Qcgg==

X-Forwarded-Encrypted: i=1; AJvYcCUY0KJ0PuV14zOUHxrh4ajj5Lg1JUbXdl7Re8JxC8a7+QwrOSVfhUV2ZlgXBLdrhzrVG5heFVLkP/rkUA==

X-Gm-Message-State: AOJu0Ywd2Kr0JecBvxg0gnwKjR3FHas6R5+8eDCqwwWgv9I+6cy1I+i8

jkeqrwpvvUQWXBPzEDEq3w6xXmHWTQJvhOeBaQGYKCTxWEsI2DDs3n0+/5f86FpPXHBIUnI/wUh

/HEQoMi2UmkG/VyOE9FeREzynKXo=

X-Google-Smtp-Source: AGHT+IFvHm7/8KxcqoVwkxu70SxPdD+EJvcGAA/f9sxopPToFeFezrb+VDN663Z+rdr/STwQ7bO+RHQiScJKamTHORw=

X-Received: by 2002:a05:6214:242d:b0:6a0:ea1e:833d with SMTP id

6a1803df08f44-6a15cc69205mr28507446d6.27.1715227831789; Wed, 08 May 2024

21:10:31 -0700 (PDT)

MIME-Version: 1.0

Reply-To: lindabenson666666@gmail.com

From: Linda Benson

Date: Thu, 9 May 2024 05:10:14 +0100

Message-ID:

Subject: Hello

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009f71340617fd99a5"

Bcc: sales@nk.ca

X-Spam_score: 24.6

X-Spam_score_int: 246

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear friend, I need your help I have an inheritance worth

$2.9 million US dollars that requires the help of a capable foreign partner,

please help me out of my present predicament to continue my educa [...]



Content analysis details: (24.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.68 listed in will-spam-for-food.eu.org]

[209.85.219.68 listed in will-spam-for-food.eu.org]

[209.85.219.68 listed in will-spam-for-food.eu.org]

[209.85.219.68 listed in will-spam-for-food.eu.org]

[209.85.219.68 listed in will-spam-for-food.eu.org]

[209.85.219.68 listed in will-spam-for-food.eu.org]

[209.85.219.68 listed in will-spam-for-food.eu.org]

[209.85.219.68 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.68 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.68 listed in dnsbl.ahbl.org]

[209.85.219.68 listed in dnsbl.ahbl.org]

[209.85.219.68 listed in dnsbl.ahbl.org]

[209.85.219.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.68 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.68 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[lindabenson3304(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[lindabenson3304(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[lindabenson666666(at)gmail.com]

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

2.9 YOU_INHERIT Discussing your inheritance

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Hello



--0000000000009f71340617fd99a5

Content-Type: text/plain; charset="UTF-8"



Dear friend,

I need your help I have an inheritance worth $2.9 million US dollars that

requires the help of a capable foreign partner, please help me out of my

present predicament to continue my education which was interrupted by the

sudden death of my parents

I wait for your reply for more details

Thanks



--0000000000009f71340617fd99a5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear friend,
I need your help I have an inheritance wor=

th $2.9 million US dollars that requires the help of a capable foreign part=

ner, please help me out of my present predicament to continue my education =

which was interrupted by the sudden death of my parents
I wait for your =

reply for more details
Thanks




--0000000000009f71340617fd99a5--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 05:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s50or-00000000DJJ-3zBV

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 04:16:09 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 04:16:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f67.google.com ([209.85.219.67]:43290)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4v8y-00000000CoS-1njP

for root@mail.nl2k.ab.ca;

Wed, 08 May 2024 22:12:39 -0600

Received: by mail-qv1-f67.google.com with SMTP id 6a1803df08f44-6a0ffaa079dso13370796d6.1

for ; Wed, 08 May 2024 21:10:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715227832; x=1715832632; darn=mail.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=ILw0+Z1HfhB3rUFg0j+lWEPammU3JgyqdKFV3LKHvAhV/dxoboqhsinIpxu2wAwVO+

RteOgZN9bjfXnmo7xnSkT/ekpzADpkSlmMrbs27w1Gtmsg1tbNdOZqywouwgpBiYyWr8

g91oyJx8OioxeOliKp5FRGDIy+y24UVM3xR2fn1VkROlwKzbLuQMPWk4HH1pqTu823Oy

s6E8+gNMJz2QlmmofnOzOTRiQ10PQUBRf8uD5EG8N1bUwmHCH0ddbpI5aBsfBPUvSbwW

Ou8+V4r33W2Dlx4d0z7IanRM0FuT5BC+oEXXV7wCKM2TVJ1cx/PyThTUV0U2G3YEqsK8

9HNg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715227832; x=1715832632;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=AHrTasPFzZ+FbjSW+GedkwnxLsKFVh4jR0VTF4NqK6SBuVRm94C2xKR0CUp8jeJNry

m8UHl4U6VG9jop6A8UbCh64gb1xSmQ+NW/QPX8qYjFzNq1gxQl6K+0IAft4GQPdFVjrW

kl+/rSrlOyKca8xqoC+wcMW+8WJAhRuxk2WeyMADwO/d0LH1chTnj7AlZVAaJHTeW82Z

z7E/AGpUEi1oU7z3CZPXEPwKJKkTMmKjT0XyzQ2LVzaZehydAzBkSQ0o8wtw9uLzolvI

gnp8cqOjf9cF5QZWTJ3ilg5wYsnn0PGsBrtuE1QdU6BjvY3ifasyGpuNjps6nLqdXXB6

xraQ==

X-Forwarded-Encrypted: i=1; AJvYcCX2HU8zkGfpD0VxCamDgu8NwFy+WN937MP6Hp/2H5+QuW5u0v8kiykvbEoJZagZNLG/K3a6hmYdO7yVr7kFPyAj2mYCSw==

X-Gm-Message-State: AOJu0YzsVdeihjb/KlZiJ8fhQyGNR16GD0qqxP0u4lqeyqqzknIwpzc9

RjlKcxXA5X3yiT1ed5w69TuVD4mHZwpsGgz/Y+9zyJWkBJ02qmZDniNd6tp74UAChtBXJQHeVYB

IIAoXKlnfzje971lrGaJvUsrTgDk=

X-Google-Smtp-Source: AGHT+IFvHm7/8KxcqoVwkxu70SxPdD+EJvcGAA/f9sxopPToFeFezrb+VDN663Z+rdr/STwQ7bO+RHQiScJKamTHORw=

X-Received: by 2002:a05:6214:242d:b0:6a0:ea1e:833d with SMTP id

6a1803df08f44-6a15cc69205mr28507446d6.27.1715227831789; Wed, 08 May 2024

21:10:31 -0700 (PDT)

MIME-Version: 1.0

Reply-To: lindabenson666666@gmail.com

From: Linda Benson

Date: Thu, 9 May 2024 05:10:14 +0100

Message-ID:

Subject: Hello

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009f71340617fd99a5"

Bcc: root@mail.nl2k.ab.ca

X-Spam_score: 24.6

X-Spam_score_int: 246

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear friend, I need your help I have an inheritance worth

$2.9 million US dollars that requires the help of a capable foreign partner,

please help me out of my present predicament to continue my educa [...]



Content analysis details: (24.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.67 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.67 listed in wl.mailspike.net]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[lindabenson3304(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[lindabenson3304(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[lindabenson666666(at)gmail.com]

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

2.9 YOU_INHERIT Discussing your inheritance

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Hello



--0000000000009f71340617fd99a5

Content-Type: text/plain; charset="UTF-8"



Dear friend,

I need your help I have an inheritance worth $2.9 million US dollars that

requires the help of a capable foreign partner, please help me out of my

present predicament to continue my education which was interrupted by the

sudden death of my parents

I wait for your reply for more details

Thanks



--0000000000009f71340617fd99a5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear friend,
I need your help I have an inheritance wor=

th $2.9 million US dollars that requires the help of a capable foreign part=

ner, please help me out of my present predicament to continue my education =

which was interrupted by the sudden death of my parents
I wait for your =

reply for more details
Thanks




--0000000000009f71340617fd99a5--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 05:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s50ov-00000000DJl-1k2q

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 04:16:13 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 04:16:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f67.google.com ([209.85.219.67]:43288)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4v8y-00000000CoM-1nmB

for root@doctor.nl2k.ab.ca;

Wed, 08 May 2024 22:12:38 -0600

Received: by mail-qv1-f67.google.com with SMTP id 6a1803df08f44-6a0ffaa079dso13370836d6.1

for ; Wed, 08 May 2024 21:10:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715227832; x=1715832632; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=gmTHc37xZq8IRShT6GIG8nb3NmE5H2aRJ5egNwl43TrB0QI1/zvxSTSn1w00vwBbWi

FJaRZ+BMtnddFkoKhtJY1Ggj+E1SPqzxXgEE5DlZgMIhQ4PKJFLHjoUUQ8VokMajFFoZ

K+MgEbERK1DZkImwKtJWJOnuH5TboMp+sdS7QHx7vD7zHYI1KT98/fsgdQpumth/xyqu

n73vk3dRUJcG0vmwLSTEXh84pxYM+gstyKgnPXRk3zAgXT67DWk63YFc2pHbTWf1Cfrd

P4vIDzcTK0iKjUhNYA5DyuqC85ecSwYlYvueBgB8s3wD+12HPjb883g0RFR/94YcsBd+

V3uQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715227832; x=1715832632;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=jGDkMpHHXUnMk4C6p8kq1ZnyvsTjEc4/qugKJpclwbD0+XHyxVhGCk1Kx81PAQ2jT2

PYRcQaQjFQypnnqudEr259I6Xhj1uMWUMBoI+9D0UiOzvXM6ZQljKmeUenQE2brDDB09

ZG70+5iBeCms0Lcn0hT7ufIDI12Kutt0PYyNMlnuPQwSojnpYl0QLrNnubXdYbZyjY/p

pZTrjjz9XJCst1vRTNDIukMjIHHyRwjBNLtsdIn6j5yby5DA5R+7i81wc7JOEoxohmRa

5ANRMD8D2Z1Zq6g8MoHvueh+f5wivzq7Sj9ZuqTntAy4fgqDEcvSZIL8ZU7AtlT3mugw

1bzQ==

X-Forwarded-Encrypted: i=1; AJvYcCUMzBn9FcZKKNriq3SrLuiSS+zGgYWcixDiCL4RSlrW0Li0QwfDHyuFxLFEnfS4vPYR6IvFHEE1uIa7fJ1qjS7K/yIWcRPD

X-Gm-Message-State: AOJu0YwNE3utVWu6WLOgYnFvFb/j6nzNh6PZ2b6hFJTOJ/D/1fxBeLaB

QHEZQqjuwsTa3zSnUhZ1r7Aoo/jhVWvaaZguiqdmjZR9mJYf52ZrR/2HjitGbkXzHqbZzMnRSMs

bIkaycEnE/oBEAzYIluvtSRXUiVA=

X-Google-Smtp-Source: AGHT+IFvHm7/8KxcqoVwkxu70SxPdD+EJvcGAA/f9sxopPToFeFezrb+VDN663Z+rdr/STwQ7bO+RHQiScJKamTHORw=

X-Received: by 2002:a05:6214:242d:b0:6a0:ea1e:833d with SMTP id

6a1803df08f44-6a15cc69205mr28507446d6.27.1715227831789; Wed, 08 May 2024

21:10:31 -0700 (PDT)

MIME-Version: 1.0

Reply-To: lindabenson666666@gmail.com

From: Linda Benson

Date: Thu, 9 May 2024 05:10:14 +0100

Message-ID:

Subject: Hello

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009f71340617fd99a5"

Bcc: root@doctor.nl2k.ab.ca

X-Spam_score: 24.6

X-Spam_score_int: 246

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear friend, I need your help I have an inheritance worth

$2.9 million US dollars that requires the help of a capable foreign partner,

please help me out of my present predicament to continue my educa [...]



Content analysis details: (24.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.67 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.67 listed in wl.mailspike.net]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[lindabenson3304(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[lindabenson3304(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[lindabenson666666(at)gmail.com]

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

2.9 YOU_INHERIT Discussing your inheritance

0.0 LOTS_OF_MONEY Huge... sums of money

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Hello



--0000000000009f71340617fd99a5

Content-Type: text/plain; charset="UTF-8"



Dear friend,

I need your help I have an inheritance worth $2.9 million US dollars that

requires the help of a capable foreign partner, please help me out of my

present predicament to continue my education which was interrupted by the

sudden death of my parents

I wait for your reply for more details

Thanks



--0000000000009f71340617fd99a5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear friend,
I need your help I have an inheritance wor=

th $2.9 million US dollars that requires the help of a capable foreign part=

ner, please help me out of my present predicament to continue my education =

which was interrupted by the sudden death of my parents
I wait for your =

reply for more details
Thanks




--0000000000009f71340617fd99a5--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 04:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s50ok-00000000DIM-24jT

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 04:16:02 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 04:16:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f68.google.com ([209.85.219.68]:42113)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4v8y-00000000CoR-1lXK

for doctor@nk.ca;

Wed, 08 May 2024 22:12:38 -0600

Received: by mail-qv1-f68.google.com with SMTP id 6a1803df08f44-69b50b8239fso4315196d6.0

for ; Wed, 08 May 2024 21:10:38 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715227832; x=1715832632; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=La43CiRGvUGukTNWDfeC3RuhAaMyxwU12wqZbSIDENnQJFmLQrjEgddCmyNrD3SDDw

fbp45gvOKk6K829+4LLrb+3Cz/YYkkZADNShfBe+sxyrOtPU2IA4ZlfXBjCRo+52QcRO

yMQ3JFAkToVP8fw7a2W2zz9nxdhAEfmwpDt9o4v+DUqvk9a8Xq6+UQlAnns35bcgGBgy

qtVe8gkMUk0ZeDcIVLfOm6zVqa1qN6wFPkY7R4fIcLnhxNG3BeEQaLVE+t4JZZxNY0E5

tbhwW/B2WAbGIQsfPs0NjofIo/gL5VpCiUKXUIklmUvSOYgTU3nNtudGLrRfEGEPyr18

Rkqw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715227832; x=1715832632;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=nLriVXu3igD0R/LDZdQJpEm/gTA2qZ3YVhGOnBmCuiew13tyDO+XIsxebVZTj6zWM0

0nvLNeH/vKlFuuBaprspT7z9fdKYb17KislAwv5zE0DnTyYzHynDXG8nQmzZgbDRSPoW

iBkZJyyRl7Eh9oRXRByaZXWL3LmFUWLgAim0fll7mvZN9mqgrRFXp4WEAk9nTG2135wX

TjrgtNXWFftExa4tyNQRBzZc/JZRRsW70yj71lIlSHyj1+7/CvoYynu8E04Dq4S8tI4x

Wp7nD3FT9p7XGISRll4RpnOOYPVuq/eSdBPWFhDs5uFYG7iQ+3rWaC3FPj1F0QUhCDay

DW2A==

X-Forwarded-Encrypted: i=1; AJvYcCUXtJntiX9FLYE/0II5Md5621mVYF4pCGYuy7SPnljyfrKR8tPT1zAvk6rMMWFvqOKxRRd8iJOxetB1Smk=

X-Gm-Message-State: AOJu0YyYIW1r0IfbcfQZ8b0CcOWyjHkLjSKdfIdGqOfFiUbJHUNARE7+

i+1ESYh9vGGazgHE7+rOZZXgpm+85HhhdgnqG9Rvb2oPEOip26y0JU2DRJL3khOHFOwuYxRQJlV

m2YtRC0Cdg0L7WPd83S1wRgYkPMw=

X-Google-Smtp-Source: AGHT+IFvHm7/8KxcqoVwkxu70SxPdD+EJvcGAA/f9sxopPToFeFezrb+VDN663Z+rdr/STwQ7bO+RHQiScJKamTHORw=

X-Received: by 2002:a05:6214:242d:b0:6a0:ea1e:833d with SMTP id

6a1803df08f44-6a15cc69205mr28507446d6.27.1715227831789; Wed, 08 May 2024

21:10:31 -0700 (PDT)

MIME-Version: 1.0

Reply-To: lindabenson666666@gmail.com

From: Linda Benson

Date: Thu, 9 May 2024 05:10:14 +0100

Message-ID:

Subject: Hello

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009f71340617fd99a5"

Bcc: doctor@nk.ca

X-Spam_score: 24.6

X-Spam_score_int: 246

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear friend, I need your help I have an inheritance worth

$2.9 million US dollars that requires the help of a capable foreign partner,

please help me out of my present predicament to continue my educa [...]



Content analysis details: (24.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.68 listed in dnsbl.ahbl.org]

[209.85.219.68 listed in dnsbl.ahbl.org]

[209.85.219.68 listed in dnsbl.ahbl.org]

[209.85.219.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.68 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.68 listed in will-spam-for-food.eu.org]

[209.85.219.68 listed in will-spam-for-food.eu.org]

[209.85.219.68 listed in will-spam-for-food.eu.org]

[209.85.219.68 listed in will-spam-for-food.eu.org]

[209.85.219.68 listed in will-spam-for-food.eu.org]

[209.85.219.68 listed in will-spam-for-food.eu.org]

[209.85.219.68 listed in will-spam-for-food.eu.org]

[209.85.219.68 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.68 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.68 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[lindabenson3304(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[lindabenson3304(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[lindabenson666666(at)gmail.com]

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.9 YOU_INHERIT Discussing your inheritance

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Hello



--0000000000009f71340617fd99a5

Content-Type: text/plain; charset="UTF-8"



Dear friend,

I need your help I have an inheritance worth $2.9 million US dollars that

requires the help of a capable foreign partner, please help me out of my

present predicament to continue my education which was interrupted by the

sudden death of my parents

I wait for your reply for more details

Thanks



--0000000000009f71340617fd99a5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear friend,
I need your help I have an inheritance wor=

th $2.9 million US dollars that requires the help of a capable foreign part=

ner, please help me out of my present predicament to continue my education =

which was interrupted by the sudden death of my parents
I wait for your =

reply for more details
Thanks




--0000000000009f71340617fd99a5--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 06:58:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s50p3-00000000DL1-1k1f

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 04:16:21 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 04:16:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f67.google.com ([209.85.219.67]:42111)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4v8y-00000000CoO-1not

for root@nk.ca;

Wed, 08 May 2024 22:12:38 -0600

Received: by mail-qv1-f67.google.com with SMTP id 6a1803df08f44-69b50b8239fso4315146d6.0

for ; Wed, 08 May 2024 21:10:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715227832; x=1715832632; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=La43CiRGvUGukTNWDfeC3RuhAaMyxwU12wqZbSIDENnQJFmLQrjEgddCmyNrD3SDDw

fbp45gvOKk6K829+4LLrb+3Cz/YYkkZADNShfBe+sxyrOtPU2IA4ZlfXBjCRo+52QcRO

yMQ3JFAkToVP8fw7a2W2zz9nxdhAEfmwpDt9o4v+DUqvk9a8Xq6+UQlAnns35bcgGBgy

qtVe8gkMUk0ZeDcIVLfOm6zVqa1qN6wFPkY7R4fIcLnhxNG3BeEQaLVE+t4JZZxNY0E5

tbhwW/B2WAbGIQsfPs0NjofIo/gL5VpCiUKXUIklmUvSOYgTU3nNtudGLrRfEGEPyr18

Rkqw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715227832; x=1715832632;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=IYvQ/s3vYU7x0KiTxfTyJ4UZ8VPyP+fATfuxnVpFcHw/fAFi+xzZPZ1YD0bWAhsZhf

lSwgEnMv/xbFxB5YyXsNAzqEKEvODwYjx1KYQQoZmCPxxvdQjJNcj5eE2F2dBp56PfG+

f+pvWzH2mlEcK6dK8zYi3V4j01UsdvvbIVAxBd3/pYzjSymE1CIihC1U+pmrCvagdqNU

j9Cl0fnCORwvC6WwX5MfWtYyl4YykTnPm2g+VMHJPFEATGu8o99rikJNOmpWtP5N9Bje

9o8gXBF6J6TYqG+eR2cRVlbrez4pADqJ/2qzfVFiiqjaXJEkipTFgeA+Li7QSjWH9D6T

R7aw==

X-Forwarded-Encrypted: i=1; AJvYcCUgTg7P4mYL/mzlM5BrnkXeDxwAx3FNba497t7L8Y9HgIqULM3qpBkqq/0W/dUEBcihQaL2buLfjzbh

X-Gm-Message-State: AOJu0YyRvusaWmssd1nxRrhhrKqfcg2TynmCCbdRT5FAIDr8pKfM+WAc

1bMRAZEpzVNbTrwNYRFW4EfY+uhj6QJZo8KN+WOpmiFlB1XA03JbeavzYFZWPXCO7JOWNISCCLA

j3tgWxEagSKfERroGd5Z8JlhMsEM=

X-Google-Smtp-Source: AGHT+IFvHm7/8KxcqoVwkxu70SxPdD+EJvcGAA/f9sxopPToFeFezrb+VDN663Z+rdr/STwQ7bO+RHQiScJKamTHORw=

X-Received: by 2002:a05:6214:242d:b0:6a0:ea1e:833d with SMTP id

6a1803df08f44-6a15cc69205mr28507446d6.27.1715227831789; Wed, 08 May 2024

21:10:31 -0700 (PDT)

MIME-Version: 1.0

Reply-To: lindabenson666666@gmail.com

From: Linda Benson

Date: Thu, 9 May 2024 05:10:14 +0100

Message-ID:

Subject: Hello

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009f71340617fd99a5"

Bcc: root@nk.ca

X-Spam_score: 24.6

X-Spam_score_int: 246

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear friend, I need your help I have an inheritance worth

$2.9 million US dollars that requires the help of a capable foreign partner,

please help me out of my present predicament to continue my educa [...]



Content analysis details: (24.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.67 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.67 listed in wl.mailspike.net]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[lindabenson3304(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[lindabenson3304(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[lindabenson666666(at)gmail.com]

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

2.9 YOU_INHERIT Discussing your inheritance

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Hello



--0000000000009f71340617fd99a5

Content-Type: text/plain; charset="UTF-8"



Dear friend,

I need your help I have an inheritance worth $2.9 million US dollars that

requires the help of a capable foreign partner, please help me out of my

present predicament to continue my education which was interrupted by the

sudden death of my parents

I wait for your reply for more details

Thanks



--0000000000009f71340617fd99a5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear friend,
I need your help I have an inheritance wor=

th $2.9 million US dollars that requires the help of a capable foreign part=

ner, please help me out of my present predicament to continue my education =

which was interrupted by the sudden death of my parents
I wait for your =

reply for more details
Thanks




--0000000000009f71340617fd99a5--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 06:58:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s50oy-00000000DKR-3iqT

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 04:16:16 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 04:16:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f67.google.com ([209.85.219.67]:43173)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4v8y-00000000CoT-1ngV

for root@nl2k.ab.ca;

Wed, 08 May 2024 22:12:37 -0600

Received: by mail-qv1-f67.google.com with SMTP id 6a1803df08f44-6a0ff97a9c7so11986776d6.0

for ; Wed, 08 May 2024 21:10:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715227832; x=1715832632; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=AKrl8gtP6AOktbrTLMQNdT36ArO6gTeLYWxOFAXnhU+r/AHNdrxSlZsUe01/8edARA

qsdQe4JFaWLczoEzN9VhsCNjhAblDWexBguDUIRkju0+Y/2XQJXTetMG3HtcQ+AE0Ikj

qxKsVqnx9sHivH98J3vHQLkwcDJcbx3qR4LVTG4XDlHu8WtFMOhiCGpO/513mySEgeps

yL+SXDEYuc423PAI55pGtTg/rHQAOFw+AW5Oxl+B/Chd8f8VRin3+PwHu/zHMtpHkRe6

pGLllE0ueS2HlJhVFRPXfVCqs1cHsmU6CAM76CCvT1LKu40p5Xo5W98A4u77veaT3hnc

h5mw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715227832; x=1715832632;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=G5mnWijX6Ad2c3Rpp8xgEKJqPnCqk9oY7XF+Y9aLAuDlYmnUuCRAaf4mab3JQKbD7C

XGu1yU1yn09ywa0C0lvEKhVWfg6N/g5AtMYBP8DdS2mnTUn39BZ6klHxg3BmScxEJdOW

XwZ3m4EGe0njBTmGgTNHUlyJaIVojOGsR1pW7OzplRNCDB1ZZnglvVA9FU1p530txCM4

P/fosiD0kRKuAKv9xg8GlWzieUfaHAl1a48OXH8IAAm+g8ofgz3AnH5PjQC8eepWufdz

7x0xojqjrmMDNoJpdlN4m6IGbTwr6190YeLOqb8/LVj4SyfB4EufJS+rmdCImRIxdbG3

86pw==

X-Forwarded-Encrypted: i=1; AJvYcCU85yczHm52DA2hLCZbJmVT4792YgKA+Tbrz6/dl/DamcKH9OcZ2R7QFstxhWfMaaSum2qYxaZ2F7ZMKJhywuM=

X-Gm-Message-State: AOJu0YzjlC3hism7n7w7p6SSm0JqUVWmdS1kYVpV8XOqZnfPeaLUTEWr

ofFBPC2xM0J4A8OfTn5RCeBq3870P75+JU565jk6IzpNGnFHmn/8mQJWwq+bxogsSiKUjZUyhGg

iWZLdWX2ZCu8TBnbRNWdQRKrdSHM=

X-Google-Smtp-Source: AGHT+IFvHm7/8KxcqoVwkxu70SxPdD+EJvcGAA/f9sxopPToFeFezrb+VDN663Z+rdr/STwQ7bO+RHQiScJKamTHORw=

X-Received: by 2002:a05:6214:242d:b0:6a0:ea1e:833d with SMTP id

6a1803df08f44-6a15cc69205mr28507446d6.27.1715227831789; Wed, 08 May 2024

21:10:31 -0700 (PDT)

MIME-Version: 1.0

Reply-To: lindabenson666666@gmail.com

From: Linda Benson

Date: Thu, 9 May 2024 05:10:14 +0100

Message-ID:

Subject: Hello

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009f71340617fd99a5"

Bcc: root@nl2k.ab.ca

X-Spam_score: 24.6

X-Spam_score_int: 246

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear friend, I need your help I have an inheritance worth

$2.9 million US dollars that requires the help of a capable foreign partner,

please help me out of my present predicament to continue my educa [...]



Content analysis details: (24.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.67 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.67 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[lindabenson3304(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[lindabenson3304(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[lindabenson666666(at)gmail.com]

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

2.9 YOU_INHERIT Discussing your inheritance

0.0 LOTS_OF_MONEY Huge... sums of money

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Hello



--0000000000009f71340617fd99a5

Content-Type: text/plain; charset="UTF-8"



Dear friend,

I need your help I have an inheritance worth $2.9 million US dollars that

requires the help of a capable foreign partner, please help me out of my

present predicament to continue my education which was interrupted by the

sudden death of my parents

I wait for your reply for more details

Thanks



--0000000000009f71340617fd99a5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear friend,
I need your help I have an inheritance wor=

th $2.9 million US dollars that requires the help of a capable foreign part=

ner, please help me out of my present predicament to continue my education =

which was interrupted by the sudden death of my parents
I wait for your =

reply for more details
Thanks




--0000000000009f71340617fd99a5--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 04:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s50p7-00000000DLV-01Z9

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 04:16:25 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 04:16:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f194.google.com ([209.85.221.194]:43355)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4vGj-00000000DsB-39yj

for www@nl2k.ab.ca;

Wed, 08 May 2024 22:20:37 -0600

Received: by mail-vk1-f194.google.com with SMTP id 71dfb90a1353d-4df7ba13412so254636e0c.1

for ; Wed, 08 May 2024 21:18:39 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715228313; x=1715833113; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=GtZmo0I217JQC5pS3m4aHHD+SJ2yAYBsoBcynCg59FSoVIwn0JVyKEvhK9ZOMUGHtV

KS8TrApMt7uiBh/McIIwLSicRKBQnsbMZLN849VQkcWStvrKWz7+hJKc7f96R098ELf/

CppyOoQ2d9zMkU3njjDJ0bj4+oCfRoJzOh+kjAlXTfCvTe7EjEkGix8cz0hU/ZG8quND

iInbQDGSPz89HQ9fU5dC+j2wyjVlpsIElIUQkIvMmorRMV4bHLByZf+NyicJix3udmGX

1heTdeUMNZae7tWI8jQ1Czn3eV7ivhHwkA+8V0Cxt10w435YtUyteevW3U9eTvIMW9Yl

WGUQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715228313; x=1715833113;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=VSpa8lUA23Zre2BiEilCslE9uYbS17oo/iswnhZQMlO51c+HkIR6VKdWRafFTmkALV

eA3pqvsTEQhpx8o6xBf+dgndcsUJV5OZhZa1RUFO1zztSRZvwawxdymHOWPJ5ww8H0I9

SwhJiJv07q8j4s/ILwC0+IWYacQseBbcs9ohfWTUtemBAhAZawPLXM6j3IkD0fH0Yf5a

1xBp9o1LfkKBvYKkpym/tATD1i3ld3IItiZ9SLUORbanEYJCK+6hHoD9GpiivHQaPS9y

3LGiZ/E5M7axFGGNz+FbZSOk0vOkXkYweyWH31TOJD+DL7W38/0W3kxv4PNiDKRbM+J5

biHw==

X-Forwarded-Encrypted: i=1; AJvYcCULL+gJ6tNzBjNFwObtgvZi5KGgOOYv814hJUzFiAp01ML9JWgpNDWcvyQFqEH8bcAOb+6FwhuX0c5IcWDiSA==

X-Gm-Message-State: AOJu0YzuDsCR8R0yWRFjJ1YYRpBnxfjju8MSbpnRYAU28h0dGU+HuoRn

EMC6kjz0hIgGxQdnbSPjPK21yKGK8JStGn1+tgVzsYPYV4KhHH53mvXWqkkvq06JLSWjpYLS9KE

UI56+RAXEU1pQaC9bxxM2QAEgGXnPIMseckKIMD0H6SAVuQ==

X-Google-Smtp-Source: AGHT+IFvHm7/8KxcqoVwkxu70SxPdD+EJvcGAA/f9sxopPToFeFezrb+VDN663Z+rdr/STwQ7bO+RHQiScJKamTHORw=

X-Received: by 2002:a05:6214:242d:b0:6a0:ea1e:833d with SMTP id

6a1803df08f44-6a15cc69205mr28507446d6.27.1715227831789; Wed, 08 May 2024

21:10:31 -0700 (PDT)

MIME-Version: 1.0

Reply-To: lindabenson666666@gmail.com

From: Linda Benson

Date: Thu, 9 May 2024 05:10:14 +0100

Message-ID:

Subject: Hello

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009f71340617fd99a5"

Bcc: www@nl2k.ab.ca

X-Spam_score: 24.6

X-Spam_score_int: 246

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear friend, I need your help I have an inheritance worth

$2.9 million US dollars that requires the help of a capable foreign partner,

please help me out of my present predicament to continue my educa [...]



Content analysis details: (24.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

[209.85.221.194 listed in dnsbl.ahbl.org]

[209.85.221.194 listed in dnsbl.ahbl.org]

[209.85.221.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.194 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

[209.85.221.194 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.194 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.194 listed in list.dnswl.org]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[lindabenson3304(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[lindabenson3304(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[lindabenson666666(at)gmail.com]

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

2.9 YOU_INHERIT Discussing your inheritance

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Hello



--0000000000009f71340617fd99a5

Content-Type: text/plain; charset="UTF-8"



Dear friend,

I need your help I have an inheritance worth $2.9 million US dollars that

requires the help of a capable foreign partner, please help me out of my

present predicament to continue my education which was interrupted by the

sudden death of my parents

I wait for your reply for more details

Thanks



--0000000000009f71340617fd99a5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear friend,
I need your help I have an inheritance wor=

th $2.9 million US dollars that requires the help of a capable foreign part=

ner, please help me out of my present predicament to continue my education =

which was interrupted by the sudden death of my parents
I wait for your =

reply for more details
Thanks




--0000000000009f71340617fd99a5--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 04:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s50r1-00000000Ded-1J39

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 04:18:23 -0600

Resent-From: The Doctor

Resent-Date: Thu, 9 May 2024 04:18:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr1-f41.google.com ([209.85.221.41]:51506)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4xBG-000000004xO-2ZEk

for root@doctor.nl2k.ab.ca;

Thu, 09 May 2024 00:23:06 -0600

Received: by mail-wr1-f41.google.com with SMTP id ffacd0b85a97d-34da4d6f543so355066f8f.3

for ; Wed, 08 May 2024 23:21:08 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715235661; x=1715840461; darn=doctor.nl2k.ab.ca;

h=message-id:date:reply-to:content-transfer-encoding:to:subject:from

:from:to:cc:subject:date:message-id:reply-to;

bh=AwXinqgvgtP1/k/fXq7WD2Qr+5QPkMZVhGeI3tObyh0=;

b=jdfeO2b5XxKBeaacz4hFDFhukXdw7xIBYDmFZwBxHBu7VTc/8TeK4LSxB9J52k+DC2

9I+N3FO4WpSbgFF8t6+uCSqpKQNcfdLn58+fvn53Yg/zUYyW40PtSQk4KFhPyQI60SLT

9W5GCHk+1K/LrR3Ssk+wVZCfYPltn482z9m6qiXep7UFt/nFeT3GN9BbH6GfeKkJAjvh

S8ULd197hbh4lFHheIuZ/bXi0sjBexLZVj7+Xs5+8u7EKDE4+LVEe0VxKk92IXs+WnQu

3PeSBZydXjApg8QaxH6qdvy8lDQdG3B+5phUYp+I8x5C8DVhcbJPoBbC38ijR5xcvTuM

frdA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715235661; x=1715840461;

h=message-id:date:reply-to:content-transfer-encoding:to:subject:from

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=AwXinqgvgtP1/k/fXq7WD2Qr+5QPkMZVhGeI3tObyh0=;

b=rEeV6qvdw6h8kGaZ5giAv9CqRYln/qGGQcNiAWK2Kzo+aAYLMRckF/2FRLVFNGWbzu

0dLsCnJ2uW7gFBsML/Cyy/7m+RU+9nzfe5iWNU1EQ4PoVkxn2o3feHlPwFyqO7+8xVPn

neWyG8OSBki3/x9l9bTaKZrCV15NtE88w83fg2TRjzeY4ydqtFVA5Serb6BObbI22FGu

UVnELQrkS6zCOZ+K7SnhkmD5m/Vhk0EKPUGmdzEoUyR3zD6pogOzAey4jDkUB+wuy6ZJ

0UrZFOIDX8nAX5Hyvdo7jkelwESM1kfufI/tTWxc4NgCWwT9GlIDXiMhWj453ZGuKRUG

flyg==

X-Gm-Message-State: AOJu0Yyl9L5nTJsDCVqtk97j3AR3q2wrXadjWZKC+OngSeuRNX9oJ+hP

Dk0ulFmtjsFMlnq6KKWD/u8G7kRpSGOodPNNsuK5DFDdDnqjOUoYm/Cdtma8Mco=

X-Google-Smtp-Source: AGHT+IEh8xT9k9mZAuyWY2kO9b7CiX0HUu+Nm7p2qU/J383681mPKK0f/TZ48pA5mcwKVfnnU00AGw==

X-Received: by 2002:a05:6000:255:b0:346:dace:5310 with SMTP id ffacd0b85a97d-34fcade245amr2829467f8f.22.1715235661591;

Wed, 08 May 2024 23:21:01 -0700 (PDT)

Received: from DESKTOP-4RT1RIS ([105.112.106.42])

by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-3502b79bd7asm769873f8f.17.2024.05.08.23.21.00

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 08 May 2024 23:21:01 -0700 (PDT)

From: "Mr. Kofi Adomakoh."

X-Google-Original-From: "Mr. Kofi Adomakoh."

Subject: Re: 09.05.2024.

To:

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

Reply-To:

Date: Thu, 9 May 2024 07:20:47 -0700

Message-Id: <09472024052007BA3E517A1A$A40785763E@gmail.com>

X-Spam_score: 14.9

X-Spam_score_int: 149

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Re: 09.05.2024. Hello My name is Mr. Kofi Adomakoh.



Content analysis details: (14.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.41 listed in dnsbl.ahbl.org]

[209.85.221.41 listed in dnsbl.ahbl.org]

[209.85.221.41 listed in dnsbl.ahbl.org]

[209.85.221.41 listed in dnsbl.ahbl.org]

[105.112.106.42 listed in dnsbl.ahbl.org]

[105.112.106.42 listed in dnsbl.ahbl.org]

[105.112.106.42 listed in dnsbl.ahbl.org]

[105.112.106.42 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.41 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.41 listed in will-spam-for-food.eu.org]

[209.85.221.41 listed in will-spam-for-food.eu.org]

[209.85.221.41 listed in will-spam-for-food.eu.org]

[209.85.221.41 listed in will-spam-for-food.eu.org]

[209.85.221.41 listed in will-spam-for-food.eu.org]

[209.85.221.41 listed in will-spam-for-food.eu.org]

[209.85.221.41 listed in will-spam-for-food.eu.org]

[209.85.221.41 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.41 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.41 listed in list.dnswl.org]

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[drscothlee(at)gmail.com]

2.5 HK_SCAM_N2 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 HK_SCAM No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} Re: 09.05.2024.






8859-1">


le=3D1">=20

Re:=<br /><br /> =20<br /><br /> 09.05.2024.



Hello=

My name=20

is Mr. Kofi Adomakoh.

 I came across your e-mail contact pr=

ior=20

to a private search while in need of an honest and sincere person to=20=



assist and partner with me, I'm a banker here in ABSA Bank Ghana Ltd i=

n=20

Ghana West Africa, I want to use this opportunity to discuss  fun=

d=20

transaction deal  with you, the money in question belong to one o=

f=20

our customers who died on April 2020 on a complicated issue related to=

=20

(COVID 19) Coronavirus, the customer deposited the money with our bank=

=20

without any next of kin and I am the account officer of the late=20

customer. I need a reliable partner to move and invest the fund as a j=

oint=20

venture or we share it among
ourselves.

Reply for further and=

=20

detailed information.

I wait for your most urgent and swift=20

positive response.
Thank you and Warm Regards.
Mr. Kofi Adomakoh=

=2E



=20





I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 May 2024 00:56:00 -0600

Received: from mail-wr1-f53.google.com ([209.85.221.53]:54369)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4xZG-000000008Dt-0MOt

for dave@doctor.nl2k.ab.ca;

Thu, 09 May 2024 00:47:53 -0600

Received: by mail-wr1-f53.google.com with SMTP id ffacd0b85a97d-34d7a32bdd3so272333f8f.0

for ; Wed, 08 May 2024 23:45:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715237149; x=1715841949; darn=doctor.nl2k.ab.ca;

h=message-id:date:reply-to:content-transfer-encoding:to:subject:from

:from:to:cc:subject:date:message-id:reply-to;

bh=AwXinqgvgtP1/k/fXq7WD2Qr+5QPkMZVhGeI3tObyh0=;

b=SbVDuh/f/6pWftNQsgudx6KkbcfUxNM9WWbBk6l+YhCysZIRdEZV7gg2IyEf/sWQ4M

Zpafi7C45mNUBt2Xh0WC4AsdlSi26wbX926x/XbUsaMrFfFaDU7nrm5NGZKDP+cxj09H

CIn6YIMAFYs/T18M9fiBXa/5zXaK1R38CPv9/D/xnav8vBvtldUo/l/YeJJrclhfD4Zb

FIE10kjilRsYPKXoTiJ48ODq7E7O3ghRh/7yRGO66SdwLdGStsEkZ4eAdH3IxSoqntJp

y/vxcYgOOfborVslFFZOpjQtgb/J4i0mZiM8KHUkBeDgmYZgHqUgQxjpj8+DYKiReeFs

Eneg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715237149; x=1715841949;

h=message-id:date:reply-to:content-transfer-encoding:to:subject:from

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=AwXinqgvgtP1/k/fXq7WD2Qr+5QPkMZVhGeI3tObyh0=;

b=i2z81XZRjyBFQJuPRDGgF3V4iIj3+tWXC148jOvZZH4TFYIBQCUSRzXBVo72rDC+41

+muAgUSoX6G3q6zTFxo258G1GcqVC83tfJnIYIEpnZ3JtHBzJwGknNKgc2+Wj8cqx1fq

/EA3b3haToky9qhFagXFOMKrtEgK5gx/h2A+ups2g5Ei+el95LNoWVVSUMcuNTR/aBJG

YZJ1fuG38g/yMTMdXVddHSWNIG2K9Fi79aNn2luPjBg0Q9+BKR97+ohv2ybmnbkz1dqH

6yTB4lNydBjuPmojvybxY2NxOUSPJqR0X/wn6Axzva4N+l/ZjCDsrvc8JuX3OfKv57xI

0KrQ==

X-Gm-Message-State: AOJu0Yytesj6WKI6ylGk81CJWPGijaV8jj94wUWIymDg1Ujgxk9SdEha

Jx3U235rJFs76Bh1DP1FMuff16lVR6TT0KaV35vU3rS7nGKWFMYxrdXlXuVdnd4=

X-Google-Smtp-Source: AGHT+IELQhR+DXsRyXcNKYNDpwE9nSyQcY/lrM0bj3Ap4q6cdR4t4cwHtyo9ISClqE3xTh6NrMPjmg==

X-Received: by 2002:adf:fecf:0:b0:34c:6629:9962 with SMTP id ffacd0b85a97d-34fca42eb2cmr3253802f8f.30.1715235659852;

Wed, 08 May 2024 23:20:59 -0700 (PDT)

Received: from DESKTOP-4RT1RIS ([105.112.106.42])

by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-3502b79bd7asm769873f8f.17.2024.05.08.23.20.58

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 08 May 2024 23:20:59 -0700 (PDT)

From: "Mr. Kofi Adomakoh."

X-Google-Original-From: "Mr. Kofi Adomakoh."

Subject: Re: 09.05.2024.

To:

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

Reply-To:

Date: Thu, 9 May 2024 07:20:46 -0700

Message-Id: <09452024052007607C2BEE3B-72656D399C@gmail.com>

X-Spam_score: 14.9

X-Spam_score_int: 149

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Re: 09.05.2024. Hello My name is Mr. Kofi Adomakoh.



Content analysis details: (14.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[105.112.106.42 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

[105.112.106.42 listed in will-spam-for-food.eu.org]

[209.85.221.53 listed in will-spam-for-food.eu.org]

[209.85.221.53 listed in will-spam-for-food.eu.org]

[209.85.221.53 listed in will-spam-for-food.eu.org]

[209.85.221.53 listed in will-spam-for-food.eu.org]

[209.85.221.53 listed in will-spam-for-food.eu.org]

[209.85.221.53 listed in will-spam-for-food.eu.org]

[209.85.221.53 listed in will-spam-for-food.eu.org]

[209.85.221.53 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[105.112.106.42 listed in dnsbl.ahbl.org]

[105.112.106.42 listed in dnsbl.ahbl.org]

[105.112.106.42 listed in dnsbl.ahbl.org]

[105.112.106.42 listed in dnsbl.ahbl.org]

[209.85.221.53 listed in dnsbl.ahbl.org]

[209.85.221.53 listed in dnsbl.ahbl.org]

[209.85.221.53 listed in dnsbl.ahbl.org]

[209.85.221.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[105.112.106.42 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[105.112.106.42 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[105.112.106.42 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[105.112.106.42 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.53 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.53 listed in wl.mailspike.net]

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[drscothlee(at)gmail.com]

2.5 HK_SCAM_N2 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HK_SCAM No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} Re: 09.05.2024.






8859-1">


le=3D1">=20

Re:=<br /><br /> =20<br /><br /> 09.05.2024.



Hello=

My name=20

is Mr. Kofi Adomakoh.

 I came across your e-mail contact pr=

ior=20

to a private search while in need of an honest and sincere person to=20=



assist and partner with me, I'm a banker here in ABSA Bank Ghana Ltd i=

n=20

Ghana West Africa, I want to use this opportunity to discuss  fun=

d=20

transaction deal  with you, the money in question belong to one o=

f=20

our customers who died on April 2020 on a complicated issue related to=

=20

(COVID 19) Coronavirus, the customer deposited the money with our bank=

=20

without any next of kin and I am the account officer of the late=20

customer. I need a reliable partner to move and invest the fund as a j=

oint=20

venture or we share it among
ourselves.

Reply for further and=

=20

detailed information.

I wait for your most urgent and swift=20

positive response.
Thank you and Warm Regards.
Mr. Kofi Adomakoh=

=2E



=20





I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 08 May 2024 23:56:00 -0600

Received: from mail-qv1-f67.google.com ([209.85.219.67]:43171)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4v8y-00000000CoP-1nry

for dave@doctor.nl2k.ab.ca;

Wed, 08 May 2024 22:12:37 -0600

Received: by mail-qv1-f67.google.com with SMTP id 6a1803df08f44-6a0ff97a9c7so11986826d6.0

for ; Wed, 08 May 2024 21:10:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715227832; x=1715832632; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=gmTHc37xZq8IRShT6GIG8nb3NmE5H2aRJ5egNwl43TrB0QI1/zvxSTSn1w00vwBbWi

FJaRZ+BMtnddFkoKhtJY1Ggj+E1SPqzxXgEE5DlZgMIhQ4PKJFLHjoUUQ8VokMajFFoZ

K+MgEbERK1DZkImwKtJWJOnuH5TboMp+sdS7QHx7vD7zHYI1KT98/fsgdQpumth/xyqu

n73vk3dRUJcG0vmwLSTEXh84pxYM+gstyKgnPXRk3zAgXT67DWk63YFc2pHbTWf1Cfrd

P4vIDzcTK0iKjUhNYA5DyuqC85ecSwYlYvueBgB8s3wD+12HPjb883g0RFR/94YcsBd+

V3uQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715227832; x=1715832632;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=dADsO8o8dGW4L62NDBdaep7mT9RnqDrc8B6/4hPIhs0=;

b=j3AnJYwbYjmpa/Fyer1Ip3UQrxR/DGg970gDx1TU9E69nJo3CDagNTd87N0ygkr+aR

uGZUgM4G2VUK0J1tctZj5FVPmMYIfmPLyIs9mrccwdX2DvztSwgEPbgYXzl1Bh6ToT71

6hfsDogM7oYKyQdDewnOeCgNJ+n8m+98Ppe650vc+A+2D+hrjB+DTeV301Z1/2xAIRxp

GaMLpPyotjD8puvahGgf1qIe6AYAregqbxe1oqUN6hv2SVBuBN8q3Put6I/s1KBtfsVA

438+73nGCAL3FuGLQcTkHAT4CB8ThP3fISMas/5oflMc6RS21OKFoI73PfbhLRi7R6tR

fw/A==

X-Forwarded-Encrypted: i=1; AJvYcCVfgtak2sfhIk1EQWD+QzHcdA8PjfOaVajARStfpnOt0PDT+T+iw2RAsSz3AcP/ap281lO7qc+xut2vNoQS+d186udCiyxf

X-Gm-Message-State: AOJu0Ywu3L9ZhnOKe/l/Su4A8hZIvsQWDjqGpJp6/NgiD6p2C3dssu1W

WC1D6VXD6UkPZiESEcS8FcMSPD4xbBbGrfse709LLNewOckl38lHrx+jP8Uh3mDaE9wx/XyZNEJ

a+wsmNFghzGIkGrbgOjCsZ41Jf3E=

X-Google-Smtp-Source: AGHT+IFvHm7/8KxcqoVwkxu70SxPdD+EJvcGAA/f9sxopPToFeFezrb+VDN663Z+rdr/STwQ7bO+RHQiScJKamTHORw=

X-Received: by 2002:a05:6214:242d:b0:6a0:ea1e:833d with SMTP id

6a1803df08f44-6a15cc69205mr28507446d6.27.1715227831789; Wed, 08 May 2024

21:10:31 -0700 (PDT)

MIME-Version: 1.0

Reply-To: lindabenson666666@gmail.com

From: Linda Benson

Date: Thu, 9 May 2024 05:10:14 +0100

Message-ID:

Subject: Hello

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009f71340617fd99a5"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 24.6

X-Spam_score_int: 246

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear friend, I need your help I have an inheritance worth

$2.9 million US dollars that requires the help of a capable foreign partner,

please help me out of my present predicament to continue my educa [...]



Content analysis details: (24.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

[209.85.219.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.67 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

[209.85.219.67 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.67 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.67 listed in list.dnswl.org]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[lindabenson3304(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[lindabenson3304(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[lindabenson666666(at)gmail.com]

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.9 YOU_INHERIT Discussing your inheritance

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Hello



--0000000000009f71340617fd99a5

Content-Type: text/plain; charset="UTF-8"



Dear friend,

I need your help I have an inheritance worth $2.9 million US dollars that

requires the help of a capable foreign partner, please help me out of my

present predicament to continue my education which was interrupted by the

sudden death of my parents

I wait for your reply for more details

Thanks



--0000000000009f71340617fd99a5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear friend,
I need your help I have an inheritance wor=

th $2.9 million US dollars that requires the help of a capable foreign part=

ner, please help me out of my present predicament to continue my education =

which was interrupted by the sudden death of my parents
I wait for your =

reply for more details
Thanks




--0000000000009f71340617fd99a5--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Instagram followers spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dae@doctor.nl2k.ab.ca

Delivery-date: Wed, 08 May 2024 18:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4rSj-0000000047T-2Ejj

for dae@doctor.nl2k.ab.ca;

Wed, 08 May 2024 18:16:41 -0600

Resent-From: The Doctor

Resent-Date: Wed, 8 May 2024 18:16:41 -0600

Resent-Message-ID:

Resent-To: dae@doctor.nl2k.ab.ca

Received: from mail-oo1-f69.google.com ([209.85.161.69]:55667)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4pwI-00000000HZ7-2fXP

for sales@nk.ca;

Wed, 08 May 2024 16:39:11 -0600

Received: by mail-oo1-f69.google.com with SMTP id 006d021491bc7-5aa35f6f9b0so203082eaf.3

for ; Wed, 08 May 2024 15:37:12 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715207827; x=1715812627; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=426rOXhj59wcoHsnJine/lJUNaPRSVXBh05bNKiufnM=;

b=aoQlbomaroi0D79dQ1hJ4x/mH7bj+lgfDnyHBc7RHMZ+qq3eJWicFmLALZe2/3si8o

lhdwtNEMiegeG3pWLf/uEl1TnOv7ny02Wa9wdQaJjQ6LSnU4CgJSsGZW7smBYGrmC2UI

05kR3UaJYq/VZhFC0aHqPtllQADGaIQeSyo0xkjFDcGYZUm8sL3aeLRM4itXqLUTwc70

vdkgTGh8IoAC5aXSWmAGFnqcVycGZJzLO8I04R37hyMT8z6QFkBnoC1QKe+8YbT6j0BQ

AwaHuY9wektg7lJErM41FqBYj2FAFMG900Bofw9ju30pz6tG6Zgn0wcBuiepN0rpBZ4t

zRMQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715207827; x=1715812627;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=426rOXhj59wcoHsnJine/lJUNaPRSVXBh05bNKiufnM=;

b=rUAVJucV2KWXGWLz3Tf2Qt85NIJZq4zUyEyy43n18hVGaGkHaftj17mvJVm+eRbsPp

UwrZoiZL4UyWEp/dvE3VsVpAG6hXaPB/UhoGA/qIE2vBzoPKJ5ol2f+1IEdtqxWZWbjN

T/zagA9j5Qc8H0XMnQ3N0zV/1pPsYsNA6MlpWz/pfNBzkvR6VJ1qkGNHA/hsBMQevZqq

yml6ADJ0l+33CkJfyCD/ibFMTj5RvbFkklLoUKp1qbNlH/hfRDGJ5tJejU1HYwEdeijI

My7Rdq5shIQ3BHyGwl5bmAHXxs8iMFEsiXzMg6aj6Yd1V6VXPp7dm8IxsEZLg7AElCHm

4Zrw==

X-Gm-Message-State: AOJu0YzpnF+MLnPcv7VSysAqBNd9g2Xw1qaBW92xCUGerlhzsuXrXhWH

Pe/1geGSPw9/trNZxFpb5Hih4zhvGIZeZzRhXxLQo5q/eAEYf+4f9pOvbninr8zl4MLAl863vY0

=

X-Google-Smtp-Source: AGHT+IGzALxaPk0hPwUl9pzRQhosxPNLaIWW2lMxwSx/ZDl5TY42pNA0X9tPjfnsQeqfbCBHYH7gl061og==

MIME-Version: 1.0

X-Received: by 2002:a81:4e83:0:b0:61a:c933:47a with SMTP id

00721157ae682-62085a74750mr40110077b3.24.1715204197426; Wed, 08 May 2024

14:36:37 -0700 (PDT)

Message-ID:

Date: Wed, 08 May 2024 21:36:37 +0000

Subject: netknowyeg,Gifts 15K IG Followers here

From: sersanborokem@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi , Netknow Internet Service Get 100K Followers Instagram

NOW ! Please visit the web page below . [ https://linktr.ee/instamediamax?netknowyeg

]



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.69 listed in will-spam-for-food.eu.org]

[209.85.161.69 listed in will-spam-for-food.eu.org]

[209.85.161.69 listed in will-spam-for-food.eu.org]

[209.85.161.69 listed in will-spam-for-food.eu.org]

[209.85.161.69 listed in will-spam-for-food.eu.org]

[209.85.161.69 listed in will-spam-for-food.eu.org]

[209.85.161.69 listed in will-spam-for-food.eu.org]

[209.85.161.69 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.69 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.69 listed in dnsbl.ahbl.org]

[209.85.161.69 listed in dnsbl.ahbl.org]

[209.85.161.69 listed in dnsbl.ahbl.org]

[209.85.161.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.69 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.69 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sersanborokem(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 FREEMAIL_REPLY From and body contain different freemails

Subject: {SPAM?} netknowyeg,Gifts 15K IG Followers here



SGkgLA0KTmV0a25vdyBJbnRlcm5ldCBTZXJ2aWNlDQoNCg0KR2V0IDEwMEsgRm9sbG93ZXJzIElu

c3RhZ3JhbSBOT1cgIQ0KUGxlYXNlIHZpc2l0IHRoZSB3ZWIgcGFnZSBiZWxvdyAuDQoNClsgaHR0

cHM6Ly9saW5rdHIuZWUvaW5zdGFtZWRpYW1heD9uZXRrbm93eWVnIF0NCg0KRG8geW91IGhhdmUg

YWJvdXQgWyBMZXNzIHRoYW4gNTBLIF0gRm9sbG93ZXJzID8NClNwZWNpYWxzICBsaW1pdGVkICBP

ZmYgNDAlIFRvZGF5Li4uISEhDQpJbmNyZWFzZSBOb3cgLi4hISENCg0KLSBpbnN0YW50IHByb2Nl

c3MNCi0gU2FmZXN0IE1ldGhvZHMNCi0gUHJpdmFjeSBQcm90ZWN0aW9uDQotIFNwZWVkIDEwMEsg

Rm9sbG93ZXJzL2RheQ0KLSBIaWdoIFF1YWxpdHkgRm9sbG93ZXJzICYgUmVhbA0KLSBEcm9wLUJh

Y2sgR3VhcmFudGVlDQotIFRydXN0ZWQgU2VsbGVyIHRlc3RpbW9ueQ0KLSBTdGFydGluZyBnZXQg

NUsgRm9sbG93ZXJzIEluc3RhZ3JhbQ0KLSBHdWFyYW50ZWVkIHRvIGJlIHRoZSBjaGVhcGVzdA0K

DQpUaGFuayB5b3UsDQpSZWdhcmRzLA0Kc29jaWFsaW5zdGFtYXhAZ21haWwuY29tDQoNCkNvcHly

aWdodCDCqSAyMDE0IC0gMjAyNSBJbnN0YW1lZGlhTUFYLiBBbGwgUmlnaHRzIFJlc2VydmVkLg0K

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Instagram followers spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 08 May 2024 15:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4p4L-00000000ANG-0iOK

for dave@doctor.nl2k.ab.ca;

Wed, 08 May 2024 15:43:21 -0600

Resent-From: The Doctor

Resent-Date: Wed, 8 May 2024 15:43:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f198.google.com ([209.85.128.198]:47329)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4nFR-00000000Jv7-1UzS

for sales@nk.ca;

Wed, 08 May 2024 13:46:45 -0600

Received: by mail-yw1-f198.google.com with SMTP id 00721157ae682-61c9e36888bso1701567b3.2

for ; Wed, 08 May 2024 12:44:33 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715197468; x=1715802268; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=SY+1I/qjfezyBwFATEahr4j/V/f3t/LiUx/L9JjdTcw=;

b=Psj9/1Cv84iEONck0djG6kg1EGEXtvJjDFahDvQHpWW+ZJHmgVSgHUDIN/h5zDjtl/

VtGYAZzFnh8T7NzA0okwEFvtr5x9VLJUOgMFHMjE3mhPDZZ9UDpobOUzE21PNa2KFW8E

uKEdKpDburMSZemmVhUm69b/dCLhhjT75HFBk1DbitubIFxLUNLfRtPvXpCHpDS3oTME

iSO8sT+ZzEnJhSsY1d/nDBefJYyiHRS+D5sEG79XAfpD8oTQb1N7DtmFnMiFof+BQ2cd

+HNuNkbojX+R3zyuG+Lt9eXnNWvYkLZS9jwnJVh6kvAoYlavUaJMBsIImX+zanTqEpot

j0BQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715197468; x=1715802268;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=SY+1I/qjfezyBwFATEahr4j/V/f3t/LiUx/L9JjdTcw=;

b=oXpgPFcm51AKJohY48pnFUuARIdpqACnbd7uenetfnzfYHrfQ1Lb/ZMIa+c6PQhUgP

RZcfoJ7v+m14qYJR/+7tMov4hKcXlo3IDQL3wGbTDeUq+1szDIhMPcb02z51U4n6dBQV

fPaiXrXSARINp7ocGz0ZEg4La+FRaP4GCL1AlDgXfYERIb27UygJbN9dnJBdPV5os6Nj

h2X5PzSWKzgNVDf/D+xfp0iHIuw/WQ4rmRvqotKv+0l6SQGLEEIUdd9Zyln/gupxU8JR

SUZdUlbwcsd/9Sf2UD2Bqkah1q4GmPop7otH+9dxPQSLUn+gG4ITZoUt/hTEmttC0+r5

aDuw==

X-Gm-Message-State: AOJu0YwOZiJ/WE3VTSHQO1R6TvKvYVXPF4rZRAqg4Qr/cFDOBdiPw4Mr

OpLMbM0k2QseUkvwbbBCEvrhlYc3/LE1CMGwY0if3Yvvyv9Op3RYLycvHfQur7oH/OXy181kcpo

=

X-Google-Smtp-Source: AGHT+IEIzOBFeL9wWFIdXXad61YMR2Ve4gEDuyZ2dNKwX3yF4+92cggvuSFKC+5S/WwLZoTkteqzCBmw/w==

MIME-Version: 1.0

X-Received: by 2002:a05:6870:724b:b0:23c:1599:49bd with SMTP id

586e51a60fabf-24097c33e36mr1286753fac.16.1715129181017; Tue, 07 May 2024

17:46:21 -0700 (PDT)

Message-ID:

Date: Wed, 08 May 2024 00:46:21 +0000

Subject: netknowyeg,Gifts 10K IG Followers here

From: sersankrikul@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 9.4

X-Spam_score_int: 94

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi , Netknow Internet Service Get 100K Followers Instagram

NOW ! Please visit the web page below . [ https://linktr.ee/instamediamax?netknowyeg

]



Content analysis details: (9.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.198 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.198 listed in wl.mailspike.net]

0.8 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sersankrikul(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 FREEMAIL_REPLY From and body contain different freemails

1.0 RCVD_IN_SORBS No description available.

Subject: {SPAM?} netknowyeg,Gifts 10K IG Followers here



SGkgLA0KTmV0a25vdyBJbnRlcm5ldCBTZXJ2aWNlDQoNCg0KR2V0IDEwMEsgRm9sbG93ZXJzIElu

c3RhZ3JhbSBOT1cgIQ0KUGxlYXNlIHZpc2l0IHRoZSB3ZWIgcGFnZSBiZWxvdyAuDQoNClsgaHR0

cHM6Ly9saW5rdHIuZWUvaW5zdGFtZWRpYW1heD9uZXRrbm93eWVnIF0NCg0KRG8geW91IGhhdmUg

YWJvdXQgWyA5NTIgXSBGb2xsb3dlcnMgPw0KU3BlY2lhbHMgIGxpbWl0ZWQgIE9mZiA0MCUgVG9k

YXkuLi4hISENCkluY3JlYXNlIE5vdyAuLiEhIQ0KDQotIGluc3RhbnQgcHJvY2Vzcw0KLSBTYWZl

c3QgTWV0aG9kcw0KLSBQcml2YWN5IFByb3RlY3Rpb24NCi0gU3BlZWQgMTAwSyBGb2xsb3dlcnMv

ZGF5DQotIEhpZ2ggUXVhbGl0eSBGb2xsb3dlcnMgJiBSZWFsDQotIERyb3AtQmFjayBHdWFyYW50

ZWUNCi0gVHJ1c3RlZCBTZWxsZXIgdGVzdGltb255DQotIFN0YXJ0aW5nIGdldCA1SyBGb2xsb3dl

cnMgSW5zdGFncmFtDQotIEd1YXJhbnRlZWQgdG8gYmUgdGhlIGNoZWFwZXN0DQoNClRoYW5rIHlv

dSwNClJlZ2FyZHMsDQpzb2NpYWxpbnN0YW1heEBnbWFpbC5jb20NCg0KQ29weXJpZ2h0IMKpIDIw

MTQgLSAyMDI1IEluc3RhbWVkaWFNQVguIEFsbCBSaWdodHMgUmVzZXJ2ZWQuDQo=

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a