Compensation spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 03 May 2022 16:45:00 -0600
Received: from mail-pl1-f195.google.com ([209.85.214.195]:39654)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nm1FO-000Pu5-47
for dave@doctor.nl2k.ab.ca;
Tue, 03 May 2022 16:44:01 -0600
Received: by mail-pl1-f195.google.com with SMTP id x18so5023844plg.6
for; Tue, 03 May 2022 15:43:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=I2L2LouFWPIhCB7T9h6fJ7Uv6+4k8zkn/OvRKyP7074=;
b=haNK80juygSQofRxl/+qjqmD+D/463dV18OdxNafcBQOIuZDu05vqhO7F33ZzU8WFq
dHRiQ5fcP1R8W5CaC6StOHxkHz1U1ooC7xm1InYhdnyDWX+LrkCM9kh4+1ItPDjEtoZt
cO5BweZ8TQZarnbWioZohbgb5inGCYDiRa7xGAU35ZmxJwv9soyvA2nejEoyvpW8+E+9
BQmN9G1QgxaCyN0Ams9DCHGrNomntUAbqeNZE59aRW8cgpHYpZN1ltwusxaFAhez56OT
E/QpwyhmS+03FiBqfvUPIsJF0ODobIBy0FLKkJwaO6oznGafmlP4Wx/bOH47BR80wsEd
9zDw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=I2L2LouFWPIhCB7T9h6fJ7Uv6+4k8zkn/OvRKyP7074=;
b=76QNI4YO8GdU7WLwECRnp1eIwJlyuE2hA+GkAlhWy/4n7cykG2pymI9uUFSt1h4kmr
2bhUpuQQWK7DUJLM1+3sudZPXWOSExuAsF2dJy2C+FFUXJrRA33QgYhnYC6FNYCffnE1
XErXcW+CzFIe9iMxKwOrj3buJoutdnc1g0037+EdUhX+P4F9T5koHj1aLgXfeVLXSyLb
/x7URXqeL0vTS9V+UAms6U2S+rGRBqBj4mBMFoF1ZQqgn3s0/fDvOnpAbbEtRIyqhUYN
UmW3zxpuxDYRWeGM3iZhzr1yiIiSKbCy6yrk4PfPeaQCKjnl60H0woACWtWRcDm9VE8H
rjPw==
X-Gm-Message-State: AOAM530hnZG6CrwufVFZi1ZDWiNjfndNLUFjPYjqJF2Z8TlXF0+LsKL7
uaa2GtodXo2LfyqEiWxNYSS0szKkX5Ku4py9rG8=
X-Google-Smtp-Source: ABdhPJw4rsQ3jsShb4nhiQwGv2ePWNuHAFgALt8Nu7sHhKoqM+aYZjUuNrH6q5u2A+biIA9Fjp71VTWtO0uexFdReFU=
X-Received: by 2002:a17:90a:7c04:b0:1d7:d7e6:2916 with SMTP id
v4-20020a17090a7c0400b001d7d7e62916mr7195734pjf.25.1651617815543; Tue, 03 May
2022 15:43:35 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6a10:6d1b:0:0:0:0 with HTTP; Tue, 3 May 2022 15:43:35
-0700 (PDT)
Reply-To: charlsekable@yandex.com
From: " Mr. Charles H. Kable"
Date: Tue, 3 May 2022 23:43:35 +0100
Message-ID:
Subject: FBI/IMF FUND COMPENSATION PAYMENT NOTIFICATION.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 9.5
X-Spam_score_int: 95
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: ATTENTION: DEAR. FBI/IMF FUND COMPENSATION PAYMENT NOTIFICATION.
Please, I want to know if you got my previous email to you? If you do please
let me know for more information or i have to resend it again.
Content analysis details: (9.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FROMSPACE Idiosyncratic "From" header format
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.195 listed in wl.mailspike.net]
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
DNSWL was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[209.85.214.195 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[smithvirgil03[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[smithvirgil03[at]gmail.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} FBI/IMF FUND COMPENSATION PAYMENT NOTIFICATION.
ATTENTION: DEAR.
FBI/IMF FUND COMPENSATION PAYMENT NOTIFICATION.
Please, I want to know if you got my previous email to you? If you do
please let me know for more information or i have to resend it again.
best regards
Mr. Charles H. Kable
The Director, FBI Terrorist Screening Center (TSC).
Personal Contact Email: charlsekable@yandex.com
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 03 May 2022 16:45:00 -0600
Received: from mail-pl1-f195.google.com ([209.85.214.195]:39654)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nm1FO-000Pu5-47
for dave@doctor.nl2k.ab.ca;
Tue, 03 May 2022 16:44:01 -0600
Received: by mail-pl1-f195.google.com with SMTP id x18so5023844plg.6
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=I2L2LouFWPIhCB7T9h6fJ7Uv6+4k8zkn/OvRKyP7074=;
b=haNK80juygSQofRxl/+qjqmD+D/463dV18OdxNafcBQOIuZDu05vqhO7F33ZzU8WFq
dHRiQ5fcP1R8W5CaC6StOHxkHz1U1ooC7xm1InYhdnyDWX+LrkCM9kh4+1ItPDjEtoZt
cO5BweZ8TQZarnbWioZohbgb5inGCYDiRa7xGAU35ZmxJwv9soyvA2nejEoyvpW8+E+9
BQmN9G1QgxaCyN0Ams9DCHGrNomntUAbqeNZE59aRW8cgpHYpZN1ltwusxaFAhez56OT
E/QpwyhmS+03FiBqfvUPIsJF0ODobIBy0FLKkJwaO6oznGafmlP4Wx/bOH47BR80wsEd
9zDw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=I2L2LouFWPIhCB7T9h6fJ7Uv6+4k8zkn/OvRKyP7074=;
b=76QNI4YO8GdU7WLwECRnp1eIwJlyuE2hA+GkAlhWy/4n7cykG2pymI9uUFSt1h4kmr
2bhUpuQQWK7DUJLM1+3sudZPXWOSExuAsF2dJy2C+FFUXJrRA33QgYhnYC6FNYCffnE1
XErXcW+CzFIe9iMxKwOrj3buJoutdnc1g0037+EdUhX+P4F9T5koHj1aLgXfeVLXSyLb
/x7URXqeL0vTS9V+UAms6U2S+rGRBqBj4mBMFoF1ZQqgn3s0/fDvOnpAbbEtRIyqhUYN
UmW3zxpuxDYRWeGM3iZhzr1yiIiSKbCy6yrk4PfPeaQCKjnl60H0woACWtWRcDm9VE8H
rjPw==
X-Gm-Message-State: AOAM530hnZG6CrwufVFZi1ZDWiNjfndNLUFjPYjqJF2Z8TlXF0+LsKL7
uaa2GtodXo2LfyqEiWxNYSS0szKkX5Ku4py9rG8=
X-Google-Smtp-Source: ABdhPJw4rsQ3jsShb4nhiQwGv2ePWNuHAFgALt8Nu7sHhKoqM+aYZjUuNrH6q5u2A+biIA9Fjp71VTWtO0uexFdReFU=
X-Received: by 2002:a17:90a:7c04:b0:1d7:d7e6:2916 with SMTP id
v4-20020a17090a7c0400b001d7d7e62916mr7195734pjf.25.1651617815543; Tue, 03 May
2022 15:43:35 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6a10:6d1b:0:0:0:0 with HTTP; Tue, 3 May 2022 15:43:35
-0700 (PDT)
Reply-To: charlsekable@yandex.com
From: " Mr. Charles H. Kable"
Date: Tue, 3 May 2022 23:43:35 +0100
Message-ID:
Subject: FBI/IMF FUND COMPENSATION PAYMENT NOTIFICATION.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 9.5
X-Spam_score_int: 95
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: ATTENTION: DEAR. FBI/IMF FUND COMPENSATION PAYMENT NOTIFICATION.
Please, I want to know if you got my previous email to you? If you do please
let me know for more information or i have to resend it again.
Content analysis details: (9.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FROMSPACE Idiosyncratic "From" header format
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.195 listed in wl.mailspike.net]
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
DNSWL was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[209.85.214.195 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[smithvirgil03[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[smithvirgil03[at]gmail.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} FBI/IMF FUND COMPENSATION PAYMENT NOTIFICATION.
ATTENTION: DEAR.
FBI/IMF FUND COMPENSATION PAYMENT NOTIFICATION.
Please, I want to know if you got my previous email to you? If you do
please let me know for more information or i have to resend it again.
best regards
Mr. Charles H. Kable
The Director, FBI Terrorist Screening Center (TSC).
Personal Contact Email: charlsekable@yandex.com
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments