money spam from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 18 Sep 2022 04:56:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oZrxl-000Kxy-3x
for dave@doctor.nl2k.ab.ca;
Sun, 18 Sep 2022 04:55:49 -0600
Resent-From: The Doctor
Resent-Date: Sun, 18 Sep 2022 04:55:49 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f68.google.com ([209.85.208.68]:40749)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oZk0x-0008Vz-BI
for doctor@doctor.nl2k.ab.ca;
Sat, 17 Sep 2022 20:26:38 -0600
Received: by mail-ed1-f68.google.com with SMTP id w28so12651255edi.7
for; Sat, 17 Sep 2022 19:26:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date;
bh=9wAeCmJiUcYXjoWlWPsg254jnzg8Q+YpoFc2P1oIi9Q=;
b=q7n4A3peOJROPp2GDhwhAR0DjGAa1EI0nv1NpMHMDSybK1noDsa7z1vm81QnYfgjKH
4Yee7YJ1dTUMxaajnD25Z0B9JbYmo2EKaKgPr7FVSSieb7IJsK/iMt3n4eMpv19IkklE
waTuWWtX4MBkNTa/LEtyaRbdXzVB73hWtZdnm9KqRuIHiW54DqqTeY0Hmhbt1JTvHcnx
IP8CqktstYatWNI5EbxM13sD+587MOeFgPTBpwXIoIyo8+uvs99+ZPKKT3qcwK8pNz6n
JvOMfzSmNCqLHIksU+O4TWwtsR/XE2l6C5/tFXehoT3Y5dKmWp+VXg+ZpsfCG/aFHJXo
ccmA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date;
bh=9wAeCmJiUcYXjoWlWPsg254jnzg8Q+YpoFc2P1oIi9Q=;
b=4BMKR9PF/O06yOLu4SFQ6RrpCYTv0q31yyLlCEkhyqQsvSKJXW1ggCq57+Hs6diIhE
XFtKzzAT6fmvwwv09iP2hrdTNOl1MJoeT5BaHC9P0AR5/w77W8UfU/bIeFyZr8mPYX7G
pQ6AU679CJwba25Khy31b1mbvo9aaVd+CFWy926/IyHmn9DxazzUGYUNPN/DmnLvYSJ6
zkw8sLdu6Ww3LLvFdZfW8YOWyOGF51GG3cxwYTIM3MZvvxOCggQZJ53kmeeXFjY3IdRy
WbZXw0VuFhyPa82owdv3o9WyUMvY9l/gFvBjCP+kPdBlzWaVMFH8GBzZbHRFHk1z9BpA
lOmw==
X-Gm-Message-State: ACrzQf0Tg19roH+PbcO4YSvyMJOTf73cWsTk9aphf2Fy5YKAR7YPdbK9
mqAPhxaOBISy+2/HtwA8Q3r7s2uBNeKgw2TQmMiMzA0eGiusOR9MJOM=
X-Google-Smtp-Source: AMsMyM40FBBH8eQMxnWQ+iXG+KPDm+g+kaCD24exwbyIOh6D7xGXO+/c7W/2D/Zb2keu1ch6rJE4uB1m8Q3jMdnFbrc=
X-Received: by 2002:a05:6402:4402:b0:453:6a9:ef8a with SMTP id
y2-20020a056402440200b0045306a9ef8amr9570380eda.85.1663467593785; Sat, 17 Sep
2022 19:19:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:906:606:b0:780:488d:aeb9 with HTTP; Sat, 17 Sep 2022
19:19:53 -0700 (PDT)
Reply-To: agent.jamesstevensongraham21@gmail.com
From: Adebayo Adebare
Date: Sat, 17 Sep 2022 19:19:53 -0700
Message-ID:
Subject:
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Greetings Congratulations. Your email address has been
selected to win the sum of 990,000.00€, For Christmas. If Yes contact us
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[agent.jamesstevensongraham21[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[adebare149[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.68 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[adebare149[at]gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?}
--=20
Greetings
Congratulations. Your email address has been selected to win the sum
of 990,000.00=E2=82=AC, For Christmas. If Yes contact us
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 18 Sep 2022 04:56:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oZrxl-000Kxy-3x
for dave@doctor.nl2k.ab.ca;
Sun, 18 Sep 2022 04:55:49 -0600
Resent-From: The Doctor
Resent-Date: Sun, 18 Sep 2022 04:55:49 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f68.google.com ([209.85.208.68]:40749)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oZk0x-0008Vz-BI
for doctor@doctor.nl2k.ab.ca;
Sat, 17 Sep 2022 20:26:38 -0600
Received: by mail-ed1-f68.google.com with SMTP id w28so12651255edi.7
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date;
bh=9wAeCmJiUcYXjoWlWPsg254jnzg8Q+YpoFc2P1oIi9Q=;
b=q7n4A3peOJROPp2GDhwhAR0DjGAa1EI0nv1NpMHMDSybK1noDsa7z1vm81QnYfgjKH
4Yee7YJ1dTUMxaajnD25Z0B9JbYmo2EKaKgPr7FVSSieb7IJsK/iMt3n4eMpv19IkklE
waTuWWtX4MBkNTa/LEtyaRbdXzVB73hWtZdnm9KqRuIHiW54DqqTeY0Hmhbt1JTvHcnx
IP8CqktstYatWNI5EbxM13sD+587MOeFgPTBpwXIoIyo8+uvs99+ZPKKT3qcwK8pNz6n
JvOMfzSmNCqLHIksU+O4TWwtsR/XE2l6C5/tFXehoT3Y5dKmWp+VXg+ZpsfCG/aFHJXo
ccmA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date;
bh=9wAeCmJiUcYXjoWlWPsg254jnzg8Q+YpoFc2P1oIi9Q=;
b=4BMKR9PF/O06yOLu4SFQ6RrpCYTv0q31yyLlCEkhyqQsvSKJXW1ggCq57+Hs6diIhE
XFtKzzAT6fmvwwv09iP2hrdTNOl1MJoeT5BaHC9P0AR5/w77W8UfU/bIeFyZr8mPYX7G
pQ6AU679CJwba25Khy31b1mbvo9aaVd+CFWy926/IyHmn9DxazzUGYUNPN/DmnLvYSJ6
zkw8sLdu6Ww3LLvFdZfW8YOWyOGF51GG3cxwYTIM3MZvvxOCggQZJ53kmeeXFjY3IdRy
WbZXw0VuFhyPa82owdv3o9WyUMvY9l/gFvBjCP+kPdBlzWaVMFH8GBzZbHRFHk1z9BpA
lOmw==
X-Gm-Message-State: ACrzQf0Tg19roH+PbcO4YSvyMJOTf73cWsTk9aphf2Fy5YKAR7YPdbK9
mqAPhxaOBISy+2/HtwA8Q3r7s2uBNeKgw2TQmMiMzA0eGiusOR9MJOM=
X-Google-Smtp-Source: AMsMyM40FBBH8eQMxnWQ+iXG+KPDm+g+kaCD24exwbyIOh6D7xGXO+/c7W/2D/Zb2keu1ch6rJE4uB1m8Q3jMdnFbrc=
X-Received: by 2002:a05:6402:4402:b0:453:6a9:ef8a with SMTP id
y2-20020a056402440200b0045306a9ef8amr9570380eda.85.1663467593785; Sat, 17 Sep
2022 19:19:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:906:606:b0:780:488d:aeb9 with HTTP; Sat, 17 Sep 2022
19:19:53 -0700 (PDT)
Reply-To: agent.jamesstevensongraham21@gmail.com
From: Adebayo Adebare
Date: Sat, 17 Sep 2022 19:19:53 -0700
Message-ID:
Subject:
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Greetings Congratulations. Your email address has been
selected to win the sum of 990,000.00€, For Christmas. If Yes contact us
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[agent.jamesstevensongraham21[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[adebare149[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.68 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[adebare149[at]gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?}
--=20
Greetings
Congratulations. Your email address has been selected to win the sum
of 990,000.00=E2=82=AC, For Christmas. If Yes contact us
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments