Inhertiance gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 30 Apr 2022 13:43:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nkszA-000Nbt-Pr
for dave@doctor.nl2k.ab.ca;
Sat, 30 Apr 2022 13:42:32 -0600
Resent-From: The Doctor
Resent-Date: Sat, 30 Apr 2022 13:42:32 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ot1-f67.google.com ([209.85.210.67]:34641)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nkoi8-000CB5-VE
for root@nk.ca;
Sat, 30 Apr 2022 09:10:20 -0600
Received: by mail-ot1-f67.google.com with SMTP id i25-20020a9d6259000000b00605df9afea7so6682800otk.1
for; Sat, 30 Apr 2022 08:08:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=528Ya4+aLDhBWsQ1vK4v5PyYRXQCtz2eOzC+7YiIW+I=;
b=OHCpqIU7WxjWh4ku+Ps3k7NfPiWKFPhKFBYayNRZa/VoBxwzjD7GJ9U9x5SjVDz30M
6JMpMS6kWKIOngGA+txPtZjMNwu24mXT0f5NdPfG9I3As1jHcBIAM+KYIH3YvOns34G4
EIfTFnWrWjcO7fe6SEFI47DywKJuVC8Vq7bHn9DddLEQipL6tH6LCbFQubW5SkzM1ooR
jjKmnJ6N2Y1ZOtbYQdS+yP6aa2MWPeagfN/xcOQ6etPw/Aqr5TY6tPtCfGKDZh6b2EGs
lG4ccPwAA+i6TF/v7zGSUvm2LMebvc5h69/KlE6UEd5eWfugS+sHZ7ihK4HWqYfmHbem
2Jdg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=528Ya4+aLDhBWsQ1vK4v5PyYRXQCtz2eOzC+7YiIW+I=;
b=N8cnXWmzAREHoaicLnTRVv/NSdnAHNnPk9QDinZQWDPV3a9K7Oup3kUMPNeGP4yxk4
KfXaImg29cdG7pGRyeJ52ZXUjENbUxkvXE+BwnZcHurbHFwmtghFPlnjsvym2jfDdECm
KotqJFeBsC2TFn28coLAOVAK+0WIXrdDIOosDY9OlrsK/e5JUQOzWpVT2RvkT1YU5a2E
LWFo5MkJBvpAFTfybCUYzXbe2m4FaF5Cn4yYPwBoRUkNNgqxh7lh6dHg0tsCMGGnDtP0
PG1clWw06hf3RYNb9xDgJcQtIYzeeZnEEGQuxyBTCqjIOzR4M2B82JJa58rplO0Ur1lA
pqLQ==
X-Gm-Message-State: AOAM530mvDAU2tT2GdfJ1wpJ4VKFjN2i50A7vTOf5nTAhczQFjYrQX1V
5pmucAwRY9o99ytC2gha/zar/W/DMKLbCONQ9u8=
X-Google-Smtp-Source: ABdhPJyc6FlA6VVmkTlIOJ02U6uqP9arHgJmHOtdEktiW5e0KYBxERlFOXpFpYbkWWbKXVitX/X0QvujOlnqNqNNWYI=
X-Received: by 2002:a9d:2609:0:b0:605:d60c:2d4a with SMTP id
a9-20020a9d2609000000b00605d60c2d4amr1599698otb.88.1651331295094; Sat, 30 Apr
2022 08:08:15 -0700 (PDT)
MIME-Version: 1.0
Reply-To: sunhor69@gmail.com
From: Sun hor
Date: Sat, 30 Apr 2022 22:08:04 +0700
Message-ID:
Subject: HELLO DEAR !!
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000402c4705dde087d4"
Bcc: root@nk.ca
X-Spam_score: 20.6
X-Spam_score_int: 206
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend , My name is Sun Hor, a Board Member of Foreign
Trade Bank of Cambodia (FTB). A late investor of our bank died and left $32,640.000.00
Million dollars in our bank some years ago and there was no next of kin to
claim this fund.
Content analysis details: (20.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.67 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[chimamaco1[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[sunhor69[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[chimamaco1[at]gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.5 HK_SCAM_N2 BODY: No description available.
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
2.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} HELLO DEAR !!
--000000000000402c4705dde087d4
Content-Type: text/plain; charset="UTF-8"
Dear Friend ,
My name is Sun Hor, a Board Member of Foreign Trade Bank of Cambodia (FTB).
A late investor of our bank died and left $32,640.000.00 Million dollars in
our bank some years ago and there was no next of kin to claim this fund.
Please get back to me as soon as possible for more details if you are
interested in my proposal.
Best Regards
Mr Sun Hor
--000000000000402c4705dde087d4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000402c4705dde087d4--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 30 Apr 2022 13:43:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nkszA-000Nbt-Pr
for dave@doctor.nl2k.ab.ca;
Sat, 30 Apr 2022 13:42:32 -0600
Resent-From: The Doctor
Resent-Date: Sat, 30 Apr 2022 13:42:32 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ot1-f67.google.com ([209.85.210.67]:34641)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nkoi8-000CB5-VE
for root@nk.ca;
Sat, 30 Apr 2022 09:10:20 -0600
Received: by mail-ot1-f67.google.com with SMTP id i25-20020a9d6259000000b00605df9afea7so6682800otk.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=528Ya4+aLDhBWsQ1vK4v5PyYRXQCtz2eOzC+7YiIW+I=;
b=OHCpqIU7WxjWh4ku+Ps3k7NfPiWKFPhKFBYayNRZa/VoBxwzjD7GJ9U9x5SjVDz30M
6JMpMS6kWKIOngGA+txPtZjMNwu24mXT0f5NdPfG9I3As1jHcBIAM+KYIH3YvOns34G4
EIfTFnWrWjcO7fe6SEFI47DywKJuVC8Vq7bHn9DddLEQipL6tH6LCbFQubW5SkzM1ooR
jjKmnJ6N2Y1ZOtbYQdS+yP6aa2MWPeagfN/xcOQ6etPw/Aqr5TY6tPtCfGKDZh6b2EGs
lG4ccPwAA+i6TF/v7zGSUvm2LMebvc5h69/KlE6UEd5eWfugS+sHZ7ihK4HWqYfmHbem
2Jdg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=528Ya4+aLDhBWsQ1vK4v5PyYRXQCtz2eOzC+7YiIW+I=;
b=N8cnXWmzAREHoaicLnTRVv/NSdnAHNnPk9QDinZQWDPV3a9K7Oup3kUMPNeGP4yxk4
KfXaImg29cdG7pGRyeJ52ZXUjENbUxkvXE+BwnZcHurbHFwmtghFPlnjsvym2jfDdECm
KotqJFeBsC2TFn28coLAOVAK+0WIXrdDIOosDY9OlrsK/e5JUQOzWpVT2RvkT1YU5a2E
LWFo5MkJBvpAFTfybCUYzXbe2m4FaF5Cn4yYPwBoRUkNNgqxh7lh6dHg0tsCMGGnDtP0
PG1clWw06hf3RYNb9xDgJcQtIYzeeZnEEGQuxyBTCqjIOzR4M2B82JJa58rplO0Ur1lA
pqLQ==
X-Gm-Message-State: AOAM530mvDAU2tT2GdfJ1wpJ4VKFjN2i50A7vTOf5nTAhczQFjYrQX1V
5pmucAwRY9o99ytC2gha/zar/W/DMKLbCONQ9u8=
X-Google-Smtp-Source: ABdhPJyc6FlA6VVmkTlIOJ02U6uqP9arHgJmHOtdEktiW5e0KYBxERlFOXpFpYbkWWbKXVitX/X0QvujOlnqNqNNWYI=
X-Received: by 2002:a9d:2609:0:b0:605:d60c:2d4a with SMTP id
a9-20020a9d2609000000b00605d60c2d4amr1599698otb.88.1651331295094; Sat, 30 Apr
2022 08:08:15 -0700 (PDT)
MIME-Version: 1.0
Reply-To: sunhor69@gmail.com
From: Sun hor
Date: Sat, 30 Apr 2022 22:08:04 +0700
Message-ID:
Subject: HELLO DEAR !!
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000402c4705dde087d4"
Bcc: root@nk.ca
X-Spam_score: 20.6
X-Spam_score_int: 206
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend , My name is Sun Hor, a Board Member of Foreign
Trade Bank of Cambodia (FTB). A late investor of our bank died and left $32,640.000.00
Million dollars in our bank some years ago and there was no next of kin to
claim this fund.
Content analysis details: (20.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.67 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[chimamaco1[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[sunhor69[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[chimamaco1[at]gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.5 HK_SCAM_N2 BODY: No description available.
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
2.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} HELLO DEAR !!
--000000000000402c4705dde087d4
Content-Type: text/plain; charset="UTF-8"
Dear Friend ,
My name is Sun Hor, a Board Member of Foreign Trade Bank of Cambodia (FTB).
A late investor of our bank died and left $32,640.000.00 Million dollars in
our bank some years ago and there was no next of kin to claim this fund.
Please get back to me as soon as possible for more details if you are
interested in my proposal.
Best Regards
Mr Sun Hor
--000000000000402c4705dde087d4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Dear Friend ,
My name is Sun Hor, a Board Membe=
r of Foreign Trade Bank of Cambodia (FTB).
A late investor of our ba=
nk died and left $32,640.000.00 Million dollars in our bank some years ago =
and there was no next of kin to claim this fund.
Please get back to =
me as soon as possible for more details if you are interested in my proposa=
l.
Best Regards
Mr Sun Hor
My name is Sun Hor, a Board Membe=
r of Foreign Trade Bank of Cambodia (FTB).
A late investor of our ba=
nk died and left $32,640.000.00 Million dollars in our bank some years ago =
and there was no next of kin to claim this fund.
Please get back to =
me as soon as possible for more details if you are interested in my proposa=
l.
Best Regards
Mr Sun Hor
--000000000000402c4705dde087d4--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments