Business proposal spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 25 Sep 2022 02:59:00 -0600
Received: from mail-wr1-f49.google.com ([209.85.221.49]:37847)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1ocNTN-000IVf-De
for dave@doctor.nl2k.ab.ca;
Sun, 25 Sep 2022 02:58:52 -0600
Received: by mail-wr1-f49.google.com with SMTP id bq9so6048830wrb.4
for; Sun, 25 Sep 2022 01:58:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=oClIBQNFH9oQ3kpZrYmwtJxcYon8I01m2XVgaF3n/q8=;
b=LkcmAQEYh1Y+WwlZAdyyTypG9AVhxBqbuLRm0WNesUFWjU6KGe4mpFjvbSbsCzTsYm
8KPwrD56X3p+MsOFFrOjm5tBStBfaNYglYs/qpN/NdhdWCeEte3tbRIirgn3Mxezsnpu
k7vSixFj5xfSk9KVzJ0sqQnaLGaNeOWXoqO0DVXOb19gjfVZFafGwZK9COMbqT8sViVn
NrmMFp3swSWrG4iaXO2cNgC0h/v3gtyZ8lxu36EfsmgKzpRztHZOlMXKIjEMRhJnykLp
SrNns7vVLgAuFBzE/PKJPLwXU7DSuHijD1Iktufma6kyt+ZP00SiNxCUHB+a+PXDPm+D
RHlA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=oClIBQNFH9oQ3kpZrYmwtJxcYon8I01m2XVgaF3n/q8=;
b=trQV00lN0/exh07wQ+otVkcEHRGURT4d+BJqh8FlC7RU3cRNJSrQB8Rm/ejA/BWfR8
si4RIp2fj+TzmrxR3kBN0OerFNgbS/q63c4WI9lzhGRLNdQvFcBJwBWl10ZKNFy58O6o
0ttpSanrP12gmx/0HxIhG6D1iWZY8Ni3M4wPuNAn8YOPpi22SyM3vTAuO5ZilZ8riURj
S/LoZPYcgWGuI0c8WwUuX3JicaSaX0lpmw2EaPLjyzfRIjsVcyhhywf7u+PXyOWYk+GQ
EYP+wGSF+mu8xvrmkQpkFVGXNNgUaLbnf1npSQMhv/LSSXfhrMH4MyaXyG/QNteH1kgz
kD/Q==
X-Gm-Message-State: ACrzQf3FgHXWo6fNc7SEBffTwYCPRaZjTw9QUgNaJ4DsYjViW5cZhl3a
1a1DV/skArXqUONetyD7lpNBd/VdpT0p6Sx3mNRlwoC08O+5jMJ2
X-Google-Smtp-Source: AMsMyM7DNxddEiJSh0Jwg8HTom2rQ7uOiOXcmDZTXjwbfSP4PRyyJPqV11gXPHnJMo1jAEkY5OobBYQGp1uupePJBcM=
X-Received: by 2002:a17:907:2cd2:b0:770:8363:1f38 with SMTP id
hg18-20020a1709072cd200b0077083631f38mr13714103ejc.381.1664095796130; Sun, 25
Sep 2022 01:49:56 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6402:34d3:b0:44f:e974:f861 with HTTP; Sun, 25 Sep 2022
01:49:55 -0700 (PDT)
Reply-To: mayaomur6@gmail.com
From: "Mrs. Maya omur"
Date: Sun, 25 Sep 2022 08:49:55 +0000
Message-ID:
Subject: GOD IS WITH US
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 9.3
X-Spam_score_int: 93
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: How are you doing I have a proposal for Am waiting to hear
from you get back to me with this email mayaomur6@gmail.com God bless you
Content analysis details: (9.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mayaomur6[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[onyekanwachukwu1010[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.49 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[onyekanwachukwu1010[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.7 SCC_BODY_URI_ONLY No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} GOD IS WITH US
How are you doing I have a proposal for Am waiting to hear from you
get back to me with this email mayaomur6@gmail.com
God bless you
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 25 Sep 2022 02:59:00 -0600
Received: from mail-wr1-f49.google.com ([209.85.221.49]:37847)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1ocNTN-000IVf-De
for dave@doctor.nl2k.ab.ca;
Sun, 25 Sep 2022 02:58:52 -0600
Received: by mail-wr1-f49.google.com with SMTP id bq9so6048830wrb.4
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=oClIBQNFH9oQ3kpZrYmwtJxcYon8I01m2XVgaF3n/q8=;
b=LkcmAQEYh1Y+WwlZAdyyTypG9AVhxBqbuLRm0WNesUFWjU6KGe4mpFjvbSbsCzTsYm
8KPwrD56X3p+MsOFFrOjm5tBStBfaNYglYs/qpN/NdhdWCeEte3tbRIirgn3Mxezsnpu
k7vSixFj5xfSk9KVzJ0sqQnaLGaNeOWXoqO0DVXOb19gjfVZFafGwZK9COMbqT8sViVn
NrmMFp3swSWrG4iaXO2cNgC0h/v3gtyZ8lxu36EfsmgKzpRztHZOlMXKIjEMRhJnykLp
SrNns7vVLgAuFBzE/PKJPLwXU7DSuHijD1Iktufma6kyt+ZP00SiNxCUHB+a+PXDPm+D
RHlA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=oClIBQNFH9oQ3kpZrYmwtJxcYon8I01m2XVgaF3n/q8=;
b=trQV00lN0/exh07wQ+otVkcEHRGURT4d+BJqh8FlC7RU3cRNJSrQB8Rm/ejA/BWfR8
si4RIp2fj+TzmrxR3kBN0OerFNgbS/q63c4WI9lzhGRLNdQvFcBJwBWl10ZKNFy58O6o
0ttpSanrP12gmx/0HxIhG6D1iWZY8Ni3M4wPuNAn8YOPpi22SyM3vTAuO5ZilZ8riURj
S/LoZPYcgWGuI0c8WwUuX3JicaSaX0lpmw2EaPLjyzfRIjsVcyhhywf7u+PXyOWYk+GQ
EYP+wGSF+mu8xvrmkQpkFVGXNNgUaLbnf1npSQMhv/LSSXfhrMH4MyaXyG/QNteH1kgz
kD/Q==
X-Gm-Message-State: ACrzQf3FgHXWo6fNc7SEBffTwYCPRaZjTw9QUgNaJ4DsYjViW5cZhl3a
1a1DV/skArXqUONetyD7lpNBd/VdpT0p6Sx3mNRlwoC08O+5jMJ2
X-Google-Smtp-Source: AMsMyM7DNxddEiJSh0Jwg8HTom2rQ7uOiOXcmDZTXjwbfSP4PRyyJPqV11gXPHnJMo1jAEkY5OobBYQGp1uupePJBcM=
X-Received: by 2002:a17:907:2cd2:b0:770:8363:1f38 with SMTP id
hg18-20020a1709072cd200b0077083631f38mr13714103ejc.381.1664095796130; Sun, 25
Sep 2022 01:49:56 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6402:34d3:b0:44f:e974:f861 with HTTP; Sun, 25 Sep 2022
01:49:55 -0700 (PDT)
Reply-To: mayaomur6@gmail.com
From: "Mrs. Maya omur"
Date: Sun, 25 Sep 2022 08:49:55 +0000
Message-ID:
Subject: GOD IS WITH US
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 9.3
X-Spam_score_int: 93
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: How are you doing I have a proposal for Am waiting to hear
from you get back to me with this email mayaomur6@gmail.com God bless you
Content analysis details: (9.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mayaomur6[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[onyekanwachukwu1010[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.49 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[onyekanwachukwu1010[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.7 SCC_BODY_URI_ONLY No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} GOD IS WITH US
How are you doing I have a proposal for Am waiting to hear from you
get back to me with this email mayaomur6@gmail.com
God bless you
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments