Compensation spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 09 Sep 2022 14:49:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oWkkP-000FKk-6Y
for dave@doctor.nl2k.ab.ca;
Fri, 09 Sep 2022 14:37:09 -0600
Resent-From: The Doctor
Resent-Date: Fri, 9 Sep 2022 14:37:09 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f174.google.com ([209.85.219.174]:43870)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oWfc8-000PkM-2J
for doctor@doctor.nl2k.ab.ca;
Fri, 09 Sep 2022 09:08:19 -0600
Received: by mail-yb1-f174.google.com with SMTP id k80so3080226ybk.10
for; Fri, 09 Sep 2022 08:07:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=5SPU3c2dLjFF1oGFhODxh7v3mV8StwQo0tZwh4iQ5Jk=;
b=q7giYYjCeaKxZuCNb0P3eql5MMpaQHr5t1rUZAWsuteRWoscMptFiSFqKdfn3FGwR0
EKlaZ2mh2gf6mOuDNYNAz5uUOrhGgeXxr2kS6Z045QV1POo6UB/G/W6HmpcqxmEetDz1
NFEEGefqepGgNfhIGZOTv79J1DbHuzbzhsnFxp8yyhw5ECrswUyPBCM5i9ILB0YSAnN6
+nueJiZDz2mOcWgeETlZjvqQl/G5jqUFen7moUIS6uIBLXx56uLDId3GxyWA5TlsktEn
VNgNpRYOB8avVsS6TBtjJzCn2v4KXT4xTMSZvUB9SVgPN8ToqBhQabLdhPXMW8lPL6SD
RvKg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=5SPU3c2dLjFF1oGFhODxh7v3mV8StwQo0tZwh4iQ5Jk=;
b=Xvp63mvh3I3tMRYHj2+s2PYH6j6lG9u+fYQjhiBqAQFOtOp32nqo9AylxIPb0972FC
adyoNBHYUMD2CmLOXofHt7Vrtlhrkzoxxj+X6S6ZYGG8yblJuwQllP/ckG+3emPzI3qj
5rIl1HmLvptoQRuFVQa795H/oVMQGj5+JlbUm1+VnJoyV4KAmNeOcBX11scxINB0mS9H
cDL/L1SFqN4LzpVRc8OoKd5OdnwSRT2mPNbLWZewpZ9vb7GEucEIgsdzJKQ55eWbdLKF
v+slzWY8V1RZWI4YZEKkVMLUXzXNXh1rfwBhvXQD03cpT217ofsY+Y6t2O1iAjWtx8wO
LfiQ==
X-Gm-Message-State: ACgBeo19vEU081xYMpvq6wNYXPY6phz3VMbMgnjaojHZznRphFnB1MK/
JLpOLZ2NKFPyrABQxe6maGhpcb9/crbSclbN84M=
X-Google-Smtp-Source: AA6agR48EJhSzWMAgFTsE4YVU9lpOS0QLfwW0CAVfyLUWGZdBZaWKJwfwR8zC067spe/9YrYBqCZneH/GKieHcQo/+Y=
X-Received: by 2002:a25:c64d:0:b0:6a8:eb94:6211 with SMTP id
k74-20020a25c64d000000b006a8eb946211mr12575576ybf.534.1662736073049; Fri, 09
Sep 2022 08:07:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7010:8e96:b0:2ef:4e1a:f9b9 with HTTP; Fri, 9 Sep 2022
08:07:52 -0700 (PDT)
Reply-To: mrssanchez990@gmail.com
From: "L.S Chantal"
Date: Fri, 9 Sep 2022 17:07:52 +0200
Message-ID:
Subject: hi
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good day my dear,how are you? You have been compensated with
the sum of 5.1 million dollars in this united nation the payment will be
issue into atm visa card and send to you from the santander bank we need your
address and your W [...]
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrssanchez990[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.174 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[fj4645484[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[fj4645484[at]gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} hi
Good day my dear,how are you?
You have been compensated with the sum of 5.1 million dollars in this
united nation the payment will be issue into atm visa card and send
to you from the santander bank we need your address and your
Whatsapp number
Thanks
L.S Chantal
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 09 Sep 2022 14:49:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oWkkP-000FKk-6Y
for dave@doctor.nl2k.ab.ca;
Fri, 09 Sep 2022 14:37:09 -0600
Resent-From: The Doctor
Resent-Date: Fri, 9 Sep 2022 14:37:09 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f174.google.com ([209.85.219.174]:43870)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oWfc8-000PkM-2J
for doctor@doctor.nl2k.ab.ca;
Fri, 09 Sep 2022 09:08:19 -0600
Received: by mail-yb1-f174.google.com with SMTP id k80so3080226ybk.10
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=5SPU3c2dLjFF1oGFhODxh7v3mV8StwQo0tZwh4iQ5Jk=;
b=q7giYYjCeaKxZuCNb0P3eql5MMpaQHr5t1rUZAWsuteRWoscMptFiSFqKdfn3FGwR0
EKlaZ2mh2gf6mOuDNYNAz5uUOrhGgeXxr2kS6Z045QV1POo6UB/G/W6HmpcqxmEetDz1
NFEEGefqepGgNfhIGZOTv79J1DbHuzbzhsnFxp8yyhw5ECrswUyPBCM5i9ILB0YSAnN6
+nueJiZDz2mOcWgeETlZjvqQl/G5jqUFen7moUIS6uIBLXx56uLDId3GxyWA5TlsktEn
VNgNpRYOB8avVsS6TBtjJzCn2v4KXT4xTMSZvUB9SVgPN8ToqBhQabLdhPXMW8lPL6SD
RvKg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=5SPU3c2dLjFF1oGFhODxh7v3mV8StwQo0tZwh4iQ5Jk=;
b=Xvp63mvh3I3tMRYHj2+s2PYH6j6lG9u+fYQjhiBqAQFOtOp32nqo9AylxIPb0972FC
adyoNBHYUMD2CmLOXofHt7Vrtlhrkzoxxj+X6S6ZYGG8yblJuwQllP/ckG+3emPzI3qj
5rIl1HmLvptoQRuFVQa795H/oVMQGj5+JlbUm1+VnJoyV4KAmNeOcBX11scxINB0mS9H
cDL/L1SFqN4LzpVRc8OoKd5OdnwSRT2mPNbLWZewpZ9vb7GEucEIgsdzJKQ55eWbdLKF
v+slzWY8V1RZWI4YZEKkVMLUXzXNXh1rfwBhvXQD03cpT217ofsY+Y6t2O1iAjWtx8wO
LfiQ==
X-Gm-Message-State: ACgBeo19vEU081xYMpvq6wNYXPY6phz3VMbMgnjaojHZznRphFnB1MK/
JLpOLZ2NKFPyrABQxe6maGhpcb9/crbSclbN84M=
X-Google-Smtp-Source: AA6agR48EJhSzWMAgFTsE4YVU9lpOS0QLfwW0CAVfyLUWGZdBZaWKJwfwR8zC067spe/9YrYBqCZneH/GKieHcQo/+Y=
X-Received: by 2002:a25:c64d:0:b0:6a8:eb94:6211 with SMTP id
k74-20020a25c64d000000b006a8eb946211mr12575576ybf.534.1662736073049; Fri, 09
Sep 2022 08:07:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7010:8e96:b0:2ef:4e1a:f9b9 with HTTP; Fri, 9 Sep 2022
08:07:52 -0700 (PDT)
Reply-To: mrssanchez990@gmail.com
From: "L.S Chantal"
Date: Fri, 9 Sep 2022 17:07:52 +0200
Message-ID:
Subject: hi
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good day my dear,how are you? You have been compensated with
the sum of 5.1 million dollars in this united nation the payment will be
issue into atm visa card and send to you from the santander bank we need your
address and your W [...]
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrssanchez990[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.174 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[fj4645484[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[fj4645484[at]gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} hi
Good day my dear,how are you?
You have been compensated with the sum of 5.1 million dollars in this
united nation the payment will be issue into atm visa card and send
to you from the santander bank we need your address and your
Whatsapp number
Thanks
L.S Chantal
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments