Charity Spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 26 Sep 2022 09:40:04 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1ocodq-0006Fu-Ud
for dave@doctor.nl2k.ab.ca;
Mon, 26 Sep 2022 07:59:26 -0600
Resent-From: The Doctor
Resent-Date: Mon, 26 Sep 2022 07:59:26 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f66.google.com ([209.85.208.66]:40474)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1ochCF-000C2a-IY
for doctor@doctor.nl2k.ab.ca;
Mon, 26 Sep 2022 00:02:31 -0600
Received: by mail-ed1-f66.google.com with SMTP id v2so6630337edc.7
for; Sun, 25 Sep 2022 23:02:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=bkydVjmGsx8M8GMXkco4+Zr3iykP8/zRQatP+DJB8/M=;
b=EJ7DLP0jdKk8Y9vdLS3qtnewJBQwDC7Qtc+oBj40zm8JBlugk1ced9mVIWAO06mZFw
cITYWRLMxpFY6XRKQuSIIa1VM+l3qVi+jeiXLFSr9uV7HvI6MgLsWU3yLA8OHmkAH7c5
hZ02XGfWnJAI3PlhoYzpw9AY2PDKV/6xZ+yFDMyv7GR3XegM7hT8bJzlpXTRTzn+Qq3K
UyQ1RbDDLKIOTgIP3Yw4dOXqGmGeQ45WAACi04a31V6xsFu1dcF4xvy6CMaZMZ33QWJn
HyrI0D/DOSAWgUt6HEvVvBQntktaB5qEMioyNHKzypk5am9qnoWqLpx7FYIIBsJBCfmK
8WsQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=bkydVjmGsx8M8GMXkco4+Zr3iykP8/zRQatP+DJB8/M=;
b=oBT7VxgLe7yUDhd2Ao9g/CNQs+ziZcVX0B0oX7FR7xejuWCJEgcpRaNWTBttriIhT2
P24RkQ7QoNqBMQBcq7SDgXpdSxZqM9kUWPyFW+2+FLy3g2xVFPLGY5mbNWbP9xUYLeX1
M2FnFwWGbZyxppUD/EIenQsx3m93ZU0yumcEHSW0hRgoSw1V2OKixka35g2CX75ZMcoM
KGGt/OgJEFDqDsLpIZBd0tA2EfBcIqDgo/CMrLb5D3haoIOgRF/nDgNt4YZRIUZ/euGT
GFOwvcJFiMo1nZcUp+DbNPZ1LZQ15VV4xoK7z518gguUXfpJNHQ2qsthFkTGZOpy5vaI
LeDg==
X-Gm-Message-State: ACrzQf1AyvhK3b4wrqWWSN9+pF3WWKAw68Cr9GrXdQEe9Jf9NpxhWXso
eJbnkdV4QYP4CvAcCxz1Z0RKkqaTDvuZCIShVF0=
X-Google-Smtp-Source: AMsMyM7LkMuMgVczrgg9ocwLnLQy7gyN+8t1WXcLDCLAT1lk+U07elrYIhKoFxD86ZhNeHH+NhSjW8o+pb2I/jJlrKA=
X-Received: by 2002:a05:6402:e87:b0:456:c93c:5361 with SMTP id
h7-20020a0564020e8700b00456c93c5361mr14184176eda.88.1664172123913; Sun, 25
Sep 2022 23:02:03 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a50:7806:0:b0:1db:9049:ca9e with HTTP; Sun, 25 Sep 2022
23:02:03 -0700 (PDT)
Reply-To: helga.yamada65@gmail.com
From: "Mrs. Helga Yamada"
Date: Mon, 26 Sep 2022 07:02:03 +0100
Message-ID:
Subject: $3.2M Charity project.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 9.5
X-Spam_score_int: 95
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- I'm looking for someone to trust for charity project. Mrs
Helga
Content analysis details: (9.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 SUBJ_DOLLARS Subject starts with dollar amount
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[helga.yamada65[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.66 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[goodlook2me1[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[goodlook2me1[at]gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} $3.2M Charity project.
--
I'm looking for someone to trust for charity project.
Mrs Helga
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 26 Sep 2022 09:40:04 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1ocodq-0006Fu-Ud
for dave@doctor.nl2k.ab.ca;
Mon, 26 Sep 2022 07:59:26 -0600
Resent-From: The Doctor
Resent-Date: Mon, 26 Sep 2022 07:59:26 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f66.google.com ([209.85.208.66]:40474)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1ochCF-000C2a-IY
for doctor@doctor.nl2k.ab.ca;
Mon, 26 Sep 2022 00:02:31 -0600
Received: by mail-ed1-f66.google.com with SMTP id v2so6630337edc.7
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=bkydVjmGsx8M8GMXkco4+Zr3iykP8/zRQatP+DJB8/M=;
b=EJ7DLP0jdKk8Y9vdLS3qtnewJBQwDC7Qtc+oBj40zm8JBlugk1ced9mVIWAO06mZFw
cITYWRLMxpFY6XRKQuSIIa1VM+l3qVi+jeiXLFSr9uV7HvI6MgLsWU3yLA8OHmkAH7c5
hZ02XGfWnJAI3PlhoYzpw9AY2PDKV/6xZ+yFDMyv7GR3XegM7hT8bJzlpXTRTzn+Qq3K
UyQ1RbDDLKIOTgIP3Yw4dOXqGmGeQ45WAACi04a31V6xsFu1dcF4xvy6CMaZMZ33QWJn
HyrI0D/DOSAWgUt6HEvVvBQntktaB5qEMioyNHKzypk5am9qnoWqLpx7FYIIBsJBCfmK
8WsQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=bkydVjmGsx8M8GMXkco4+Zr3iykP8/zRQatP+DJB8/M=;
b=oBT7VxgLe7yUDhd2Ao9g/CNQs+ziZcVX0B0oX7FR7xejuWCJEgcpRaNWTBttriIhT2
P24RkQ7QoNqBMQBcq7SDgXpdSxZqM9kUWPyFW+2+FLy3g2xVFPLGY5mbNWbP9xUYLeX1
M2FnFwWGbZyxppUD/EIenQsx3m93ZU0yumcEHSW0hRgoSw1V2OKixka35g2CX75ZMcoM
KGGt/OgJEFDqDsLpIZBd0tA2EfBcIqDgo/CMrLb5D3haoIOgRF/nDgNt4YZRIUZ/euGT
GFOwvcJFiMo1nZcUp+DbNPZ1LZQ15VV4xoK7z518gguUXfpJNHQ2qsthFkTGZOpy5vaI
LeDg==
X-Gm-Message-State: ACrzQf1AyvhK3b4wrqWWSN9+pF3WWKAw68Cr9GrXdQEe9Jf9NpxhWXso
eJbnkdV4QYP4CvAcCxz1Z0RKkqaTDvuZCIShVF0=
X-Google-Smtp-Source: AMsMyM7LkMuMgVczrgg9ocwLnLQy7gyN+8t1WXcLDCLAT1lk+U07elrYIhKoFxD86ZhNeHH+NhSjW8o+pb2I/jJlrKA=
X-Received: by 2002:a05:6402:e87:b0:456:c93c:5361 with SMTP id
h7-20020a0564020e8700b00456c93c5361mr14184176eda.88.1664172123913; Sun, 25
Sep 2022 23:02:03 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a50:7806:0:b0:1db:9049:ca9e with HTTP; Sun, 25 Sep 2022
23:02:03 -0700 (PDT)
Reply-To: helga.yamada65@gmail.com
From: "Mrs. Helga Yamada"
Date: Mon, 26 Sep 2022 07:02:03 +0100
Message-ID:
Subject: $3.2M Charity project.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 9.5
X-Spam_score_int: 95
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- I'm looking for someone to trust for charity project. Mrs
Helga
Content analysis details: (9.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 SUBJ_DOLLARS Subject starts with dollar amount
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[helga.yamada65[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.66 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[goodlook2me1[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[goodlook2me1[at]gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} $3.2M Charity project.
--
I'm looking for someone to trust for charity project.
Mrs Helga
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments