Business partner spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 24 Apr 2022 16:17:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nikXL-000PLH-RO
for dave@doctor.nl2k.ab.ca;
Sun, 24 Apr 2022 16:16:59 -0600
Resent-From: The Doctor
Resent-Date: Sun, 24 Apr 2022 16:16:59 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f178.google.com ([209.85.215.178]:37853)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nieuw-000JQZ-1Z
for root@nk.ca;
Sun, 24 Apr 2022 10:17:04 -0600
Received: by mail-pg1-f178.google.com with SMTP id 15so3075649pgf.4
for; Sun, 24 Apr 2022 09:16:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=Sz/uTvOc0gNmc74MGKA7yKeLqyFqD/joiI1SxwVZLms=;
b=U8HCIrKeXgcOVOE47Ipc/hUV2Cg/I8qn5IkL3l/5FdhMQTXOgaIfQPO+pDwCpvT+vk
ltLGo+777rnU5ZQfhjdJYM80RL7yp7NYL9u1wyRUd5Q6rNmTx52Eo6A0W7yQd3q/v/kN
SW4YnaH/EOnYeDovYY1+tiOXyaKChfYepi0a0k/V5yLnlqlram4SSJ51NghR7cRdW6Qc
EuY25eoCZAqHOAbctj8X2Are5uec9SmPPQuHZ3kcH6Ke7CozBIAPIAZYrAQJR0ru5l0F
URaT4Kx6HrMg0aHKIN7fMcyau+ybLE+ioDlOmIsWQ6gHkNznYujcqcZEIImGJVndjKq4
jFUA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=Sz/uTvOc0gNmc74MGKA7yKeLqyFqD/joiI1SxwVZLms=;
b=POPqTuw4uP+ItmFMDabbXHfm2837es5O2sZudGkcit6NFqf0TRglJldGyIxrYDvW0G
pGwuxryX0Vx+vJaw539z04qH90ymc/FmJcpIleQD6+eNibVE5XYOIU5HV16rYi/UnR4h
cQ+G0AirpOflci8a7RbnyYLae+Tef+RVOqYTulI6Su9l3Gc4kQtbUdKekatAIv+ropkp
tdHZSdu1KJtzkjCB0GfVowTmOaHppUhnj2wIeDzP9epybyMEB09oUZx6z0lAf8T7OlVb
slax5oNixqHyar53a0CoZ3lg1dDYfckRpgwyKPFR7EdyFa8XsxS0YgosyKEXUbbhVSuT
6itA==
X-Gm-Message-State: AOAM532XQiPz31DtflGtvxJ/wttn0IirMaKPXOrGoRquzCuYq8qIAKba
A0N8L+bW/sDCflU0U03bkJxYMM4JnryPM9uroys=
X-Google-Smtp-Source: ABdhPJw0CFWelt5Hkq6UfJVF4Idw6t8EvcWZnwgLpiBN7R5Z+C/J1cqieBHkqr5nepfBChq9wDvb82LrAK8TNtkDvmQ=
X-Received: by 2002:a05:6a00:1c5c:b0:505:7469:134a with SMTP id
s28-20020a056a001c5c00b005057469134amr14896085pfw.16.1650816974746; Sun, 24
Apr 2022 09:16:14 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6a10:8e86:0:0:0:0 with HTTP; Sun, 24 Apr 2022 09:16:14
-0700 (PDT)
Reply-To: rihabmanyang1993@gmail.com
From: Rihab Manyang
Date: Sun, 24 Apr 2022 16:16:14 +0000
Message-ID:
Subject: From Rihab Manyang.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- My name is Rihab Manyang,i am here to search for a business
partner and friend who will help me to invest my fund in his country.
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.215.178 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[rihabmanyang1993[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[syllamodou120[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[syllamodou120[at]gmail.com]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
Subject: {SPAM?} From Rihab Manyang.
--
My name is Rihab Manyang,i am here to search for a business partner and
friend who will help me to invest my fund in his country.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 24 Apr 2022 16:17:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nikXL-000PLH-RO
for dave@doctor.nl2k.ab.ca;
Sun, 24 Apr 2022 16:16:59 -0600
Resent-From: The Doctor
Resent-Date: Sun, 24 Apr 2022 16:16:59 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f178.google.com ([209.85.215.178]:37853)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nieuw-000JQZ-1Z
for root@nk.ca;
Sun, 24 Apr 2022 10:17:04 -0600
Received: by mail-pg1-f178.google.com with SMTP id 15so3075649pgf.4
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=Sz/uTvOc0gNmc74MGKA7yKeLqyFqD/joiI1SxwVZLms=;
b=U8HCIrKeXgcOVOE47Ipc/hUV2Cg/I8qn5IkL3l/5FdhMQTXOgaIfQPO+pDwCpvT+vk
ltLGo+777rnU5ZQfhjdJYM80RL7yp7NYL9u1wyRUd5Q6rNmTx52Eo6A0W7yQd3q/v/kN
SW4YnaH/EOnYeDovYY1+tiOXyaKChfYepi0a0k/V5yLnlqlram4SSJ51NghR7cRdW6Qc
EuY25eoCZAqHOAbctj8X2Are5uec9SmPPQuHZ3kcH6Ke7CozBIAPIAZYrAQJR0ru5l0F
URaT4Kx6HrMg0aHKIN7fMcyau+ybLE+ioDlOmIsWQ6gHkNznYujcqcZEIImGJVndjKq4
jFUA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=Sz/uTvOc0gNmc74MGKA7yKeLqyFqD/joiI1SxwVZLms=;
b=POPqTuw4uP+ItmFMDabbXHfm2837es5O2sZudGkcit6NFqf0TRglJldGyIxrYDvW0G
pGwuxryX0Vx+vJaw539z04qH90ymc/FmJcpIleQD6+eNibVE5XYOIU5HV16rYi/UnR4h
cQ+G0AirpOflci8a7RbnyYLae+Tef+RVOqYTulI6Su9l3Gc4kQtbUdKekatAIv+ropkp
tdHZSdu1KJtzkjCB0GfVowTmOaHppUhnj2wIeDzP9epybyMEB09oUZx6z0lAf8T7OlVb
slax5oNixqHyar53a0CoZ3lg1dDYfckRpgwyKPFR7EdyFa8XsxS0YgosyKEXUbbhVSuT
6itA==
X-Gm-Message-State: AOAM532XQiPz31DtflGtvxJ/wttn0IirMaKPXOrGoRquzCuYq8qIAKba
A0N8L+bW/sDCflU0U03bkJxYMM4JnryPM9uroys=
X-Google-Smtp-Source: ABdhPJw0CFWelt5Hkq6UfJVF4Idw6t8EvcWZnwgLpiBN7R5Z+C/J1cqieBHkqr5nepfBChq9wDvb82LrAK8TNtkDvmQ=
X-Received: by 2002:a05:6a00:1c5c:b0:505:7469:134a with SMTP id
s28-20020a056a001c5c00b005057469134amr14896085pfw.16.1650816974746; Sun, 24
Apr 2022 09:16:14 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6a10:8e86:0:0:0:0 with HTTP; Sun, 24 Apr 2022 09:16:14
-0700 (PDT)
Reply-To: rihabmanyang1993@gmail.com
From: Rihab Manyang
Date: Sun, 24 Apr 2022 16:16:14 +0000
Message-ID:
Subject: From Rihab Manyang.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- My name is Rihab Manyang,i am here to search for a business
partner and friend who will help me to invest my fund in his country.
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.215.178 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[rihabmanyang1993[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[syllamodou120[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[syllamodou120[at]gmail.com]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
Subject: {SPAM?} From Rihab Manyang.
--
My name is Rihab Manyang,i am here to search for a business partner and
friend who will help me to invest my fund in his country.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments