parnter spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Jun 2022 15:09:46 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o5vyx-000OYX-4z

for dave@doctor.nl2k.ab.ca;

Mon, 27 Jun 2022 15:09:19 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Jun 2022 15:09:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f171.google.com ([209.85.221.171]:46817)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o5rGQ-000FUE-TB

for doctor@doctor.nl2k.ab.ca;

Mon, 27 Jun 2022 10:07:06 -0600

Received: by mail-vk1-f171.google.com with SMTP id 15so4664630vko.13

for ; Mon, 27 Jun 2022 09:06:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:from:date:message-id:subject:to;

bh=GpehJi66kEC+m815gq5utRdUipyCawXhRJLHaeMiw24=;

b=S6q2nsOy3XnLB4xagpOR2ou83u5QdDRFpXsGsRRiJKUkVlicjEbQYf3D7MsXv3sNo2

mjrMoY7hqtW5quqEJFc2fcpxMQnxXr3P+CwIQ5oLuDREzpBDjgNlhO3mIhECdnwlM0sm

GKIt4lAtS6hovqKkBv0PNe7QBXPCT0Ii4AeityoUPWT+Dgp2zkOQSV43N1bhcy+wkcJA

tLIGxGrtiu7GPr5KE9IEy1MFEw9/TrVgm0pWAJxuplXlZnXiKlSiHL8R9tnQo9oR7Io4

4SI4ocGRjMmde948U2p/LFYAWl7Zhv/f2T0AJWcn3UvHp0RhsPRW0+0Bv3ktMYbot9Z+

9aOw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:from:date:message-id:subject:to;

bh=GpehJi66kEC+m815gq5utRdUipyCawXhRJLHaeMiw24=;

b=4d2vADe9/UyaYvPR4MYWsXxl5CpiVDmWEh22Wb0YZY2Oaln/GEcm3j7rThei6mKhN5

lQX30W797JWYUSEnFKd6WCq1TuHaVYV6R4NxmDZ5zY+y7cgioHumSdguwZZLq0E9YNIA

cUMDpeiAxzawgOMwAbJfoITUHmkmYyHWLVT1zpUpFOw+Nl+yeTmQ+WQGzeQXKXvIOtVn

fWwUhIBwREspkOsubnnyDG6gQsawUrXXKVSwYZp7u9mZsj3aSSW7XVlx7BlGUPl9OZ+E

ww/c+w3sLWpcMbv8X+NZRL5bJrLJMuA8u+YbEN+8Wb962tpU9Kwcrriprvv2pS6HtQPL

SdUQ==

X-Gm-Message-State: AJIora9CMOZUa+G47/8jWGq9Ab5fiSLScereKbAMhwgiIO/DF7CiMqkp

/ep2lvVpq28FuE8Ey4+/JamyvjlqussDQpmm2iE=

X-Google-Smtp-Source: AGRyM1sw5ykmzdjL3GnnQA+r/espe/ta/Fr/MFabWnQbD3J1kJx4AniN5jP5NuY4xYhFEdKSucPZddMBl0ax8bxTucQ=

X-Received: by 2002:a1f:300c:0:b0:36f:eb7d:746f with SMTP id

w12-20020a1f300c000000b0036feb7d746fmr3327429vkw.27.1656345999828; Mon, 27

Jun 2022 09:06:39 -0700 (PDT)

MIME-Version: 1.0

From: Dr Umar Bello

Date: Mon, 27 Jun 2022 16:05:43 -0700

Message-ID:

Subject: Greetingz partner:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000f1ea6e05e2701a7f"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 10.5

X-Spam_score_int: 105

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetingz partner: I am contacting you on a business deal

of $19.5 Million US Dollars, ready for transfer into your account if we make

this claim, we will share it 60%/40%.100% risk free and it will be legally

backed up with government approved If you are interested reply for more details.





Content analysis details: (10.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.171 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[maki3chisom3[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[umarbellod46[at]gmail.com]

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

0.0 HTML_MESSAGE BODY: HTML included in message

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_HK_NAME_FM_DR No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

3.1 RISK_FREE No risk!

2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Greetingz partner:



--000000000000f1ea6e05e2701a7f

Content-Type: text/plain; charset="UTF-8"



Greetingz partner:



I am contacting you on a business deal of $19.5 Million US Dollars,

ready for transfer into your account



if we make this claim, we will share it 60%/40%.100% risk free and it

will be legally backed up with government approved If you are

interested reply for more details.



Kindly reply for more details Waiting for your reply Make Sure You

Write To My Via E-mail Address...(umarbellod46@gmail.com)



Best regards

Dr.Umar Bello,



--000000000000f1ea6e05e2701a7f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetingz partner:
=C2=A0 =C2=A0
=C2=A0 I am contac=

ting you on a business deal of $19.5 Million US Dollars,
ready for trans=

fer into your account

if we make this claim, we will share it 60%/40=

%.100% risk free and it
will be legally backed up with government approv=

ed If you are
interested reply for more details.

Kindly reply =C2=

=A0for more details Waiting for your reply =C2=A0Make Sure You
Write To =

My Via E-mail Address...(umarbell=

od46@gmail.com
)

Best regards
Dr.Umar Bello,




--000000000000f1ea6e05e2701a7f--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA