Business partner spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 20 May 2022 08:02:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1ns3Bt-000Aam-Mi
for dave@doctor.nl2k.ab.ca;
Fri, 20 May 2022 08:01:17 -0600
Resent-From: The Doctor
Resent-Date: Fri, 20 May 2022 08:01:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f54.google.com ([209.85.167.54]:46671)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1ns3AP-000AWJ-8R
for doctor@netknow.ca;
Fri, 20 May 2022 07:59:48 -0600
Received: by mail-lf1-f54.google.com with SMTP id w14so14425111lfl.13
for; Fri, 20 May 2022 06:59:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=KX/B8Wj46yuy2DT4Ij5+SyQ6GrF1Fi1Mg7Pd/EUiHsk=;
b=iqZ41L7Pu8mPbSbtu26hdmuErbiezbKsGWyU8YHz9zqQuLHeyFTnIV+PrpEVfklp7v
7m8v9MuQIaBkY2tyQUsSTN212M4NHFIAGSa6Lz/einc5TanN8u+OX9J5NMbbLXIFJOoA
lu8xWMJ03t1Ls1sIP7aKsEkUa/Jy24luUQWldLvBfjnAjqvZqYQ28lRnOw+qF01jYaV/
EY8nSiGLF4rlpJdDqGMOGup349rC3Rvd6DQzDdSsjTZ4ZOmvArj/M1Y0R7l3vNnONa8r
8mefspvUQHmYiFqvAZ2+sRcFel67lAGdgl4y6Vah06+Mdu9w4aFZhDpDy/TfMtAmofQh
aUyw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=KX/B8Wj46yuy2DT4Ij5+SyQ6GrF1Fi1Mg7Pd/EUiHsk=;
b=TLgPp8mL39yQz56YhMV9FHxuS7bx9hcjUOXqxbCHsYESjEUHefBfKP3UWKCBK/qI7s
+Jn3voOlv1xLcVapMlgtqDOKG6OtNxX5885ID308+xXQfvvTVAnl10Uu2uHV2OmTmxri
39Nt9xEGRrdwWDbEx1J0VbtnhusfpDEGjPPatT/4YHYF761neOElKH7p5HQIMHkrWFu4
/svqkxUEe2cUmqV12TvvVraAlJrOrRiOoOe1152CIK9RcY9jzOiC/fcRbcg/I2anHKhG
8pg7aKxnPuCnO6OaE64//oqAGqHaitX8FNaPpanA6duHsHBNX6pO65HbjAbEQJesA4mI
oXzw==
X-Gm-Message-State: AOAM532ttZNIARsqacM3PqepWAYIFs0FV7cn4VfkomhrdnQORheUF79i
XYddxdiIxhjtKmn6PYO2asyODmeu1CcAR+/OW/w=
X-Google-Smtp-Source: ABdhPJz2C5L4r0IuEGChpl9ptFDtEuFToyOSECfYX1RSXTYyjy2r++vlU6NjN45NV3m/xZivDj/B5UrJu47LHABqK/E=
X-Received: by 2002:a05:6512:50d:b0:478:5590:de00 with SMTP id
o13-20020a056512050d00b004785590de00mr1711939lfb.644.1653055160933; Fri, 20
May 2022 06:59:20 -0700 (PDT)
MIME-Version: 1.0
Reply-To: hrichard128@outlook.com
From: RICHARD HUBBARD
Date: Fri, 20 May 2022 14:57:53 -0700
Message-ID:
Subject: PLEASE CONFIRM
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000a9622305df71e5a0"
Bcc: doctor@netknow.ca
X-Spam_score: 7.4
X-Spam_score_int: 74
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings! With utmost respect, I wish to present a business
proposal for our mutual benefit. kindly contact me on hrichard128@outlook.com
if you are interested. Upon your positive response, I will furnish you with
details.
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[fszymon901[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.54 listed in wl.mailspike.net]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[fszymon901[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[hrichard128[at]outlook.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} PLEASE CONFIRM
--000000000000a9622305df71e5a0
Content-Type: text/plain; charset="UTF-8"
Greetings!
With utmost respect, I wish to present a business proposal for our mutual
benefit. kindly contact me on hrichard128@outlook.com if you are interested.
Upon your positive response, I will furnish you with details.
Best regards,
Dr. Richard Hubbard.
--000000000000a9622305df71e5a0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000a9622305df71e5a0--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 20 May 2022 08:02:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1ns3Bt-000Aam-Mi
for dave@doctor.nl2k.ab.ca;
Fri, 20 May 2022 08:01:17 -0600
Resent-From: The Doctor
Resent-Date: Fri, 20 May 2022 08:01:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f54.google.com ([209.85.167.54]:46671)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1ns3AP-000AWJ-8R
for doctor@netknow.ca;
Fri, 20 May 2022 07:59:48 -0600
Received: by mail-lf1-f54.google.com with SMTP id w14so14425111lfl.13
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=KX/B8Wj46yuy2DT4Ij5+SyQ6GrF1Fi1Mg7Pd/EUiHsk=;
b=iqZ41L7Pu8mPbSbtu26hdmuErbiezbKsGWyU8YHz9zqQuLHeyFTnIV+PrpEVfklp7v
7m8v9MuQIaBkY2tyQUsSTN212M4NHFIAGSa6Lz/einc5TanN8u+OX9J5NMbbLXIFJOoA
lu8xWMJ03t1Ls1sIP7aKsEkUa/Jy24luUQWldLvBfjnAjqvZqYQ28lRnOw+qF01jYaV/
EY8nSiGLF4rlpJdDqGMOGup349rC3Rvd6DQzDdSsjTZ4ZOmvArj/M1Y0R7l3vNnONa8r
8mefspvUQHmYiFqvAZ2+sRcFel67lAGdgl4y6Vah06+Mdu9w4aFZhDpDy/TfMtAmofQh
aUyw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=KX/B8Wj46yuy2DT4Ij5+SyQ6GrF1Fi1Mg7Pd/EUiHsk=;
b=TLgPp8mL39yQz56YhMV9FHxuS7bx9hcjUOXqxbCHsYESjEUHefBfKP3UWKCBK/qI7s
+Jn3voOlv1xLcVapMlgtqDOKG6OtNxX5885ID308+xXQfvvTVAnl10Uu2uHV2OmTmxri
39Nt9xEGRrdwWDbEx1J0VbtnhusfpDEGjPPatT/4YHYF761neOElKH7p5HQIMHkrWFu4
/svqkxUEe2cUmqV12TvvVraAlJrOrRiOoOe1152CIK9RcY9jzOiC/fcRbcg/I2anHKhG
8pg7aKxnPuCnO6OaE64//oqAGqHaitX8FNaPpanA6duHsHBNX6pO65HbjAbEQJesA4mI
oXzw==
X-Gm-Message-State: AOAM532ttZNIARsqacM3PqepWAYIFs0FV7cn4VfkomhrdnQORheUF79i
XYddxdiIxhjtKmn6PYO2asyODmeu1CcAR+/OW/w=
X-Google-Smtp-Source: ABdhPJz2C5L4r0IuEGChpl9ptFDtEuFToyOSECfYX1RSXTYyjy2r++vlU6NjN45NV3m/xZivDj/B5UrJu47LHABqK/E=
X-Received: by 2002:a05:6512:50d:b0:478:5590:de00 with SMTP id
o13-20020a056512050d00b004785590de00mr1711939lfb.644.1653055160933; Fri, 20
May 2022 06:59:20 -0700 (PDT)
MIME-Version: 1.0
Reply-To: hrichard128@outlook.com
From: RICHARD HUBBARD
Date: Fri, 20 May 2022 14:57:53 -0700
Message-ID:
Subject: PLEASE CONFIRM
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000a9622305df71e5a0"
Bcc: doctor@netknow.ca
X-Spam_score: 7.4
X-Spam_score_int: 74
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings! With utmost respect, I wish to present a business
proposal for our mutual benefit. kindly contact me on hrichard128@outlook.com
if you are interested. Upon your positive response, I will furnish you with
details.
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[fszymon901[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.54 listed in wl.mailspike.net]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[fszymon901[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[hrichard128[at]outlook.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} PLEASE CONFIRM
--000000000000a9622305df71e5a0
Content-Type: text/plain; charset="UTF-8"
Greetings!
With utmost respect, I wish to present a business proposal for our mutual
benefit. kindly contact me on hrichard128@outlook.com if you are interested.
Upon your positive response, I will furnish you with details.
Best regards,
Dr. Richard Hubbard.
--000000000000a9622305df71e5a0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Greetings!
With utmost respect, I wish to present a=
business proposal for our mutual benefit. kindly contact me on
mailto:hrichard128@outlook.com">hrichard128@outlook.com if you are inte=
rested.
Upon your positive response, I will furnish you with details=
.
Best regards,
Dr. Richard Hubbard.
With utmost respect, I wish to present a=
business proposal for our mutual benefit. kindly contact me on
mailto:hrichard128@outlook.com">hrichard128@outlook.com if you are inte=
rested.
Upon your positive response, I will furnish you with details=
.
Best regards,
Dr. Richard Hubbard.
--000000000000a9622305df71e5a0--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments