Business deal spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 06 Sep 2022 16:57:52 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oVhU9-000Koj-1I
for dave@doctor.nl2k.ab.ca;
Tue, 06 Sep 2022 16:56:01 -0600
Resent-From: The Doctor
Resent-Date: Tue, 6 Sep 2022 16:56:01 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vk1-f179.google.com ([209.85.221.179]:45713)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oVhRT-000KVn-IN
for doctor@doctor.nl2k.ab.ca;
Tue, 06 Sep 2022 16:53:18 -0600
Received: by mail-vk1-f179.google.com with SMTP id r69so1824730vkf.12
for; Tue, 06 Sep 2022 15:52:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=3CPJ/JHF+8iOPamTI5QilJW2GCoS5OGcBHBuiF5nCY4=;
b=pc5l7D4haUt+sPY6BNNES0Dpd01Hdv+IoOVPEIysuFP7xNf6PqbFjm22FdbogOp70i
plyRg7fBerdFiRuJMYmBOjchmGUlRo/J2F+z3x3rll7kWkvHnFlrvh/UPTgGSboiiWef
riR1dA/D4CsXIoWY73+cZ6lmeHmmpKZwF1NSHKOZXW7lL1Fr6mHZHE0sOlD5mfancOjL
UG12q5Ia7rMNYpR/uemOdCpfwFTvzLiNdIlOZlAFvRJUgqfKr9mn5RNxDtjW4L0l+STC
6pCLoCwUdu//mHFp789u3mTesO8bDseWQUB8DzH9+H8O9RGqplNPlDSDmV8hv2gaqyXU
/YnQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=3CPJ/JHF+8iOPamTI5QilJW2GCoS5OGcBHBuiF5nCY4=;
b=KOQDJv2pV34QkJJMMcgRvfvjw4ENXxdI3u6ytzFEVekmAnMo5e+9ZdmC5dtZVtL07Z
EJ5o4bk9Pl+qYkG/9MTDTIG/3sktjohISAKv13tqWArn1iIGluOARajVB+I1cw0bHYBL
uBn0eaW119HcqXp3tqk5Y4P32/1on9Ts4mWWypeRJCpm//5daNTokZG4kEks/kkRJvGv
NqDbPwR3PCggixA78seXcVmpTUPrs8RqEZt8ghsBoqThjVOy1E8GwPlsZICA1Ntrv5Rs
yNvEnYtq75cnvfZBDD9MzbBWv5vrWfddtfzB7Vk3h+2+spwCfkEfinse9FQXKu/Eceot
WDSg==
X-Gm-Message-State: ACgBeo3hA0/cWy7LEWqxZxanR9elgp3TyR0u/fSf66xT0gSqxo5hh8Yy
AtIdepx45wh6TnX/5a17EZFBA4PYd/NvuKlP1B0=
X-Google-Smtp-Source: AA6agR7IgwvYETK4QqTEkgOGNQU2oh0pEMfR6TpkUuMRDc1dO+LGTK9gIYcFBpfNsDBPe7RWj7VHWuB6FicKqxgM31I=
X-Received: by 2002:a1f:c883:0:b0:394:37d9:a1c with SMTP id
y125-20020a1fc883000000b0039437d90a1cmr276904vkf.31.1662504772220; Tue, 06
Sep 2022 15:52:52 -0700 (PDT)
MIME-Version: 1.0
Reply-To: mayaomur393@gmail.com
From: "Mrs. Maya omur"
Date: Tue, 6 Sep 2022 22:52:34 +0000
Message-ID:
Subject: GOD IS WITH US
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000062bc6705e80a0ebb"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.6
X-Spam_score_int: 76
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: How are you doing I have a proposal for you get back to me
with this email mayaomur393@gmail.com Am waiting to hear from you God bless
you How are you doing I have a proposal for you get back to me with this
email mayaomur393@gmail.com Am waiting to hear from you God bless you
Content analysis details: (7.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mayaomur393[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.179 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[yankoubaqane123[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[yankoubaqane123[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} GOD IS WITH US
--00000000000062bc6705e80a0ebb
Content-Type: text/plain; charset="UTF-8"
How are you doing I have a proposal for you get back to me
with this email mayaomur393@gmail.com Am waiting to hear from you
God bless you
--00000000000062bc6705e80a0ebb
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
nt-size:12pt;font-family:"Times New Roman"">How are you doing I h=
ave a proposal for you get back to me
with this email=C2=A0 =C2=A0
=3D"color:blue">mayaomur393@gmail.com
=C2=A0Am waiting to hear from you
God bless you
--00000000000062bc6705e80a0ebb--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 06 Sep 2022 16:57:52 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oVhU9-000Koj-1I
for dave@doctor.nl2k.ab.ca;
Tue, 06 Sep 2022 16:56:01 -0600
Resent-From: The Doctor
Resent-Date: Tue, 6 Sep 2022 16:56:01 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vk1-f179.google.com ([209.85.221.179]:45713)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oVhRT-000KVn-IN
for doctor@doctor.nl2k.ab.ca;
Tue, 06 Sep 2022 16:53:18 -0600
Received: by mail-vk1-f179.google.com with SMTP id r69so1824730vkf.12
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=3CPJ/JHF+8iOPamTI5QilJW2GCoS5OGcBHBuiF5nCY4=;
b=pc5l7D4haUt+sPY6BNNES0Dpd01Hdv+IoOVPEIysuFP7xNf6PqbFjm22FdbogOp70i
plyRg7fBerdFiRuJMYmBOjchmGUlRo/J2F+z3x3rll7kWkvHnFlrvh/UPTgGSboiiWef
riR1dA/D4CsXIoWY73+cZ6lmeHmmpKZwF1NSHKOZXW7lL1Fr6mHZHE0sOlD5mfancOjL
UG12q5Ia7rMNYpR/uemOdCpfwFTvzLiNdIlOZlAFvRJUgqfKr9mn5RNxDtjW4L0l+STC
6pCLoCwUdu//mHFp789u3mTesO8bDseWQUB8DzH9+H8O9RGqplNPlDSDmV8hv2gaqyXU
/YnQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=3CPJ/JHF+8iOPamTI5QilJW2GCoS5OGcBHBuiF5nCY4=;
b=KOQDJv2pV34QkJJMMcgRvfvjw4ENXxdI3u6ytzFEVekmAnMo5e+9ZdmC5dtZVtL07Z
EJ5o4bk9Pl+qYkG/9MTDTIG/3sktjohISAKv13tqWArn1iIGluOARajVB+I1cw0bHYBL
uBn0eaW119HcqXp3tqk5Y4P32/1on9Ts4mWWypeRJCpm//5daNTokZG4kEks/kkRJvGv
NqDbPwR3PCggixA78seXcVmpTUPrs8RqEZt8ghsBoqThjVOy1E8GwPlsZICA1Ntrv5Rs
yNvEnYtq75cnvfZBDD9MzbBWv5vrWfddtfzB7Vk3h+2+spwCfkEfinse9FQXKu/Eceot
WDSg==
X-Gm-Message-State: ACgBeo3hA0/cWy7LEWqxZxanR9elgp3TyR0u/fSf66xT0gSqxo5hh8Yy
AtIdepx45wh6TnX/5a17EZFBA4PYd/NvuKlP1B0=
X-Google-Smtp-Source: AA6agR7IgwvYETK4QqTEkgOGNQU2oh0pEMfR6TpkUuMRDc1dO+LGTK9gIYcFBpfNsDBPe7RWj7VHWuB6FicKqxgM31I=
X-Received: by 2002:a1f:c883:0:b0:394:37d9:a1c with SMTP id
y125-20020a1fc883000000b0039437d90a1cmr276904vkf.31.1662504772220; Tue, 06
Sep 2022 15:52:52 -0700 (PDT)
MIME-Version: 1.0
Reply-To: mayaomur393@gmail.com
From: "Mrs. Maya omur"
Date: Tue, 6 Sep 2022 22:52:34 +0000
Message-ID:
Subject: GOD IS WITH US
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000062bc6705e80a0ebb"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.6
X-Spam_score_int: 76
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: How are you doing I have a proposal for you get back to me
with this email mayaomur393@gmail.com Am waiting to hear from you God bless
you How are you doing I have a proposal for you get back to me with this
email mayaomur393@gmail.com Am waiting to hear from you God bless you
Content analysis details: (7.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mayaomur393[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.179 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[yankoubaqane123[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[yankoubaqane123[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} GOD IS WITH US
--00000000000062bc6705e80a0ebb
Content-Type: text/plain; charset="UTF-8"
How are you doing I have a proposal for you get back to me
with this email mayaomur393@gmail.com Am waiting to hear from you
God bless you
--00000000000062bc6705e80a0ebb
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
nt-size:12pt;font-family:"Times New Roman"">How are you doing I h=
ave a proposal for you get back to me
with this email=C2=A0 =C2=A0
=3D"color:blue">mayaomur393@gmail.com
=C2=A0Am waiting to hear from you
God bless you
--00000000000062bc6705e80a0ebb--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments