Compensation spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@nl2k.ab.ca
Delivery-date: Thu, 05 May 2022 17:49:00 -0600
Received: from mail-wr1-f48.google.com ([209.85.221.48]:33308)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nmlD2-0007fN-AK
for dave@nl2k.ab.ca;
Thu, 05 May 2022 17:48:39 -0600
Received: by mail-wr1-f48.google.com with SMTP id x18so7989006wrc.0
for; Thu, 05 May 2022 16:48:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=j6k4+uRS4RtRRD9pAYteN/2lL426z4uuqpmrOuos+wU=;
b=dydXFzVJXmgo4Bxv17/MJQ90v7zPsi1Z65ySAqt/cKa5nXfIG5T95f5aBH3gk/kFMg
sjPRbs5qEhwbMaqZ2ogD4zj1vRxL46CjmK8iEJF/KXwERqrhAqqFOxLVsxh3eXjzjhi5
Sv4voWZqP617s4paRbL0AKhPltz0vj5sac3fRyWx3INdyqEjE1lftmnVa9gKBRwn0qGf
bAhq5jbyjl3xtE3QxbNxLqQUdTFqOIdXPP4dRG/ncL5P4STpDIcczkuCK83gOoE0Z9Vu
KXVIlglda78ENZB2os4h1t4hJA0WtV9dMOz00ZVSZYcLuhDvrdAA9CjvhBnRU4GAuSrO
0N8Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=j6k4+uRS4RtRRD9pAYteN/2lL426z4uuqpmrOuos+wU=;
b=6cfuAZitYrdw2Y+r0Jc27mskySN1DYvzH0XIYRFhmV//Y3UdHCbAinAmvajmRzDu5m
wMvTC4touUQmsmfnib5gTZ8NF8F/Un8yF8fot2G7cpbBRv+vCDswVGjCIIQWRwOjDKr/
kqao64Z3ydvzOuuweRnCYak/Q+tdf+YmWosUiCUL4IoWxXnp6aorZkys01tWxd5DxRDh
b4FMoEPEhhRFEw5I4Cv+ScQqZ4kJOgFw9hLbbRw4AlCHg+iTcrdtJF3SzsWcr/7yjrwK
S4dwkzQmUxgqft0rYvdwiop/LuHXI9xHv6PWQoL2ZR9Lmo7eTWKB+sLANt/d6ga+Wyof
YPWA==
X-Gm-Message-State: AOAM530X3fFpF0hmVr4eLwKmiAkgf6lIJV0gymB+jK4dZP2uuc/KeGz6
PGLgKF3RzJ+s23FMTgwY5mRaXyBEEyjhndrxGbU=
X-Google-Smtp-Source: ABdhPJyS70X9Jf3EOUlgI2KCJmBdOvY/32jEE+AdN8pKm2dJI3uF4LneuOvWxbJfdYMt/fgEUq3yLC2DKUZLgCQ9Stg=
X-Received: by 2002:a5d:4205:0:b0:20a:e23c:a7f4 with SMTP id
n5-20020a5d4205000000b0020ae23ca7f4mr404228wrq.576.1651794492699; Thu, 05 May
2022 16:48:12 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6020:6bc8:b0:1cf:c7ff:6607 with HTTP; Thu, 5 May 2022
16:48:12 -0700 (PDT)
Reply-To: mrs.bill.chantalone01@gmail.com
From: "Mrs.Chantal "
Date: Fri, 6 May 2022 01:48:12 +0200
Message-ID:
Subject: hello....
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@nl2k.ab.ca
X-Spam_score: 8.3
X-Spam_score_int: 83
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: You have been compensated with the sum of 5 million dollars
in this united nation the payment will be issue into atm visa card and send
to you from the santander bank we need your address and your Wha [...]
Content analysis details: (8.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.48 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrs.bill.chantalone01[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[ewacxwq007644[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[ewacxwq007644[at]gmail.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} hello....
You have been compensated with the sum of 5 million dollars in this
united nation the payment will be issue into atm visa card and send
to you from the santander bank we need your address and your
Whatsapp number + 1 6465853907 this my email.ID
( mrs.bill.chantal0101@gmail.com ) contact me
Thanks my
mrs bill chantal
Envelope-to: dave@nl2k.ab.ca
Delivery-date: Thu, 05 May 2022 17:49:00 -0600
Received: from mail-wr1-f48.google.com ([209.85.221.48]:33308)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nmlD2-0007fN-AK
for dave@nl2k.ab.ca;
Thu, 05 May 2022 17:48:39 -0600
Received: by mail-wr1-f48.google.com with SMTP id x18so7989006wrc.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=j6k4+uRS4RtRRD9pAYteN/2lL426z4uuqpmrOuos+wU=;
b=dydXFzVJXmgo4Bxv17/MJQ90v7zPsi1Z65ySAqt/cKa5nXfIG5T95f5aBH3gk/kFMg
sjPRbs5qEhwbMaqZ2ogD4zj1vRxL46CjmK8iEJF/KXwERqrhAqqFOxLVsxh3eXjzjhi5
Sv4voWZqP617s4paRbL0AKhPltz0vj5sac3fRyWx3INdyqEjE1lftmnVa9gKBRwn0qGf
bAhq5jbyjl3xtE3QxbNxLqQUdTFqOIdXPP4dRG/ncL5P4STpDIcczkuCK83gOoE0Z9Vu
KXVIlglda78ENZB2os4h1t4hJA0WtV9dMOz00ZVSZYcLuhDvrdAA9CjvhBnRU4GAuSrO
0N8Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=j6k4+uRS4RtRRD9pAYteN/2lL426z4uuqpmrOuos+wU=;
b=6cfuAZitYrdw2Y+r0Jc27mskySN1DYvzH0XIYRFhmV//Y3UdHCbAinAmvajmRzDu5m
wMvTC4touUQmsmfnib5gTZ8NF8F/Un8yF8fot2G7cpbBRv+vCDswVGjCIIQWRwOjDKr/
kqao64Z3ydvzOuuweRnCYak/Q+tdf+YmWosUiCUL4IoWxXnp6aorZkys01tWxd5DxRDh
b4FMoEPEhhRFEw5I4Cv+ScQqZ4kJOgFw9hLbbRw4AlCHg+iTcrdtJF3SzsWcr/7yjrwK
S4dwkzQmUxgqft0rYvdwiop/LuHXI9xHv6PWQoL2ZR9Lmo7eTWKB+sLANt/d6ga+Wyof
YPWA==
X-Gm-Message-State: AOAM530X3fFpF0hmVr4eLwKmiAkgf6lIJV0gymB+jK4dZP2uuc/KeGz6
PGLgKF3RzJ+s23FMTgwY5mRaXyBEEyjhndrxGbU=
X-Google-Smtp-Source: ABdhPJyS70X9Jf3EOUlgI2KCJmBdOvY/32jEE+AdN8pKm2dJI3uF4LneuOvWxbJfdYMt/fgEUq3yLC2DKUZLgCQ9Stg=
X-Received: by 2002:a5d:4205:0:b0:20a:e23c:a7f4 with SMTP id
n5-20020a5d4205000000b0020ae23ca7f4mr404228wrq.576.1651794492699; Thu, 05 May
2022 16:48:12 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6020:6bc8:b0:1cf:c7ff:6607 with HTTP; Thu, 5 May 2022
16:48:12 -0700 (PDT)
Reply-To: mrs.bill.chantalone01@gmail.com
From: "Mrs.Chantal "
Date: Fri, 6 May 2022 01:48:12 +0200
Message-ID:
Subject: hello....
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@nl2k.ab.ca
X-Spam_score: 8.3
X-Spam_score_int: 83
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: You have been compensated with the sum of 5 million dollars
in this united nation the payment will be issue into atm visa card and send
to you from the santander bank we need your address and your Wha [...]
Content analysis details: (8.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.48 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrs.bill.chantalone01[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[ewacxwq007644[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[ewacxwq007644[at]gmail.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} hello....
You have been compensated with the sum of 5 million dollars in this
united nation the payment will be issue into atm visa card and send
to you from the santander bank we need your address and your
Whatsapp number + 1 6465853907 this my email.ID
( mrs.bill.chantal0101@gmail.com ) contact me
Thanks my
mrs bill chantal
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments