COVID-19 compensation spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 May 2023 05:12:14 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1pzbX0-000KWN-Pq
for dave@doctor.nl2k.ab.ca;
Thu, 18 May 2023 05:10:50 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 May 2023 05:10:50 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f172.google.com ([209.85.219.172]:54723)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1pzXfQ-000Awm-FB
for doctor@doctor.nl2k.ab.ca;
Thu, 18 May 2023 01:03:20 -0600
Received: by mail-yb1-f172.google.com with SMTP id 3f1490d57ef6-ba71cd7ce7fso2471716276.1
for; Thu, 18 May 2023 00:01:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1684393272; x=1686985272;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=vAing+I/WmJBiZyy188CX0BvD6Vd7cHvbUtAkxFC1zs=;
b=VV6HbfV1UwoLq0ut+oovu8svCOgiwaNFidByzlLFHGxAkPsuj5cU0Q93dh/OnwJKQG
jPYympVqWaq1BzPBaQSIhHRyUim4tRWxbIlhodZK7lPj1f33RjT7cB5wQWDL0tg/lYsT
SpT0qLUTkLf3kjrAjSrUAL/M5hEJa6EMVPCbjmui8Fo6G2edIYxFDW0m3wnqFRbhtLa7
hCWwQRly+8UXGi66HQ2Z0cf1yHPZpWLvg1Mx/PszSE+BZCXn236tVfBtUVi5TldREMVL
0gGF+Aw9sXzGi9OhuUgQXKLdgaccbqbDgphbx2BphpucE9E1UXDekCeCBLz2oPEgR+Pq
ZfOQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1684393272; x=1686985272;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=vAing+I/WmJBiZyy188CX0BvD6Vd7cHvbUtAkxFC1zs=;
b=R4ULV3BhLwFHHr7eidM5ndRijQNFRE9Dnsx2AMqMbVGp9oO0J4lovlCRLVtzkWRY57
EWRDHWEuqNpUk3mf9PcHsXLv+3yTAtEuZlN2xcBT5/Ra2SaSKBwBU8WXT8U2JJz7j3P/
cv1KY4kLWVsEyZ6hT79Aa9L/KGgfgL429F+ymujVYfy7C3VCMA3oOvm7XT4f7cnWR6TT
NdhHV1bLq/OF1VY+YtNt8cT3sA2e9BXiTpdW+gfsTWBZKrF69pksVpSGfD8S7OemZwx8
mMa54No3s/tpaNmbNycDz/KW8k/Lj2nEhiF4aOH72CuybUcSX7BSANU5RX3zymN0hXbF
zkww==
X-Gm-Message-State: AC+VfDzL2wRAzuG077pj6DXAS2xHAkprjJH7TI6lnztUF4b665gf4laH
ADC8J8Lg+fGPESTALMLEmzxQx5S03d2Mps4tmBYCmTz0z8E=
X-Google-Smtp-Source: ACHHUZ52RApFbIaoIJ0aG6rM/1yl8L7S3n6SNdoC56KqCnBFicLiadhTxMy+IHKhUHbCfyPCZiMt4wvh5w4EWW3ZF7M=
X-Received: by 2002:a67:fbc7:0:b0:42f:ed31:b838 with SMTP id
o7-20020a67fbc7000000b0042fed31b838mr107287vsr.30.1684392539058; Wed, 17 May
2023 23:48:59 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a59:c345:0:b0:3c4:a93c:9c31 with HTTP; Wed, 17 May 2023
23:48:58 -0700 (PDT)
Reply-To: ch4781.r@proton.me
From: Bill Chantal
Date: Thu, 18 May 2023 06:48:58 +0000
Message-ID:
Subject: COVID-19 COMPENSATION FUND BY THE UNITED NATIONS ORGANIZATION.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 5.3
X-Spam_score_int: 53
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: COVID-19 COMPENSATION FUND BY THE UNITED NATIONS ORGANIZATION.
Your COVID-19 compensation fund of 6 million dollars is ready for payment
contact me for more details. Thanks
Content analysis details: (5.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.172 listed in list.dnswl.org]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mrs.husseinanaya(at)gmail.com]
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.172 listed in wl.mailspike.net]
Subject: {SPAM?} COVID-19 COMPENSATION FUND BY THE UNITED NATIONS ORGANIZATION.
X-Antivirus: AVG (VPS 230517-10, 5/17/2023), Inbound message
X-Antivirus-Status: Clean
COVID-19 COMPENSATION FUND BY THE UNITED NATIONS ORGANIZATION.
Your COVID-19 compensation fund of 6 million dollars is ready for
payment contact me for more details.
Thanks
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 May 2023 05:12:14 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1pzbX0-000KWN-Pq
for dave@doctor.nl2k.ab.ca;
Thu, 18 May 2023 05:10:50 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 May 2023 05:10:50 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f172.google.com ([209.85.219.172]:54723)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1pzXfQ-000Awm-FB
for doctor@doctor.nl2k.ab.ca;
Thu, 18 May 2023 01:03:20 -0600
Received: by mail-yb1-f172.google.com with SMTP id 3f1490d57ef6-ba71cd7ce7fso2471716276.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1684393272; x=1686985272;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=vAing+I/WmJBiZyy188CX0BvD6Vd7cHvbUtAkxFC1zs=;
b=VV6HbfV1UwoLq0ut+oovu8svCOgiwaNFidByzlLFHGxAkPsuj5cU0Q93dh/OnwJKQG
jPYympVqWaq1BzPBaQSIhHRyUim4tRWxbIlhodZK7lPj1f33RjT7cB5wQWDL0tg/lYsT
SpT0qLUTkLf3kjrAjSrUAL/M5hEJa6EMVPCbjmui8Fo6G2edIYxFDW0m3wnqFRbhtLa7
hCWwQRly+8UXGi66HQ2Z0cf1yHPZpWLvg1Mx/PszSE+BZCXn236tVfBtUVi5TldREMVL
0gGF+Aw9sXzGi9OhuUgQXKLdgaccbqbDgphbx2BphpucE9E1UXDekCeCBLz2oPEgR+Pq
ZfOQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1684393272; x=1686985272;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=vAing+I/WmJBiZyy188CX0BvD6Vd7cHvbUtAkxFC1zs=;
b=R4ULV3BhLwFHHr7eidM5ndRijQNFRE9Dnsx2AMqMbVGp9oO0J4lovlCRLVtzkWRY57
EWRDHWEuqNpUk3mf9PcHsXLv+3yTAtEuZlN2xcBT5/Ra2SaSKBwBU8WXT8U2JJz7j3P/
cv1KY4kLWVsEyZ6hT79Aa9L/KGgfgL429F+ymujVYfy7C3VCMA3oOvm7XT4f7cnWR6TT
NdhHV1bLq/OF1VY+YtNt8cT3sA2e9BXiTpdW+gfsTWBZKrF69pksVpSGfD8S7OemZwx8
mMa54No3s/tpaNmbNycDz/KW8k/Lj2nEhiF4aOH72CuybUcSX7BSANU5RX3zymN0hXbF
zkww==
X-Gm-Message-State: AC+VfDzL2wRAzuG077pj6DXAS2xHAkprjJH7TI6lnztUF4b665gf4laH
ADC8J8Lg+fGPESTALMLEmzxQx5S03d2Mps4tmBYCmTz0z8E=
X-Google-Smtp-Source: ACHHUZ52RApFbIaoIJ0aG6rM/1yl8L7S3n6SNdoC56KqCnBFicLiadhTxMy+IHKhUHbCfyPCZiMt4wvh5w4EWW3ZF7M=
X-Received: by 2002:a67:fbc7:0:b0:42f:ed31:b838 with SMTP id
o7-20020a67fbc7000000b0042fed31b838mr107287vsr.30.1684392539058; Wed, 17 May
2023 23:48:59 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a59:c345:0:b0:3c4:a93c:9c31 with HTTP; Wed, 17 May 2023
23:48:58 -0700 (PDT)
Reply-To: ch4781.r@proton.me
From: Bill Chantal
Date: Thu, 18 May 2023 06:48:58 +0000
Message-ID:
Subject: COVID-19 COMPENSATION FUND BY THE UNITED NATIONS ORGANIZATION.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 5.3
X-Spam_score_int: 53
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: COVID-19 COMPENSATION FUND BY THE UNITED NATIONS ORGANIZATION.
Your COVID-19 compensation fund of 6 million dollars is ready for payment
contact me for more details. Thanks
Content analysis details: (5.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.172 listed in list.dnswl.org]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mrs.husseinanaya(at)gmail.com]
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.172 listed in wl.mailspike.net]
Subject: {SPAM?} COVID-19 COMPENSATION FUND BY THE UNITED NATIONS ORGANIZATION.
X-Antivirus: AVG (VPS 230517-10, 5/17/2023), Inbound message
X-Antivirus-Status: Clean
COVID-19 COMPENSATION FUND BY THE UNITED NATIONS ORGANIZATION.
Your COVID-19 compensation fund of 6 million dollars is ready for
payment contact me for more details.
Thanks
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments