Investmest Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 01 Jun 2023 15:21:15 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1q4peM-00030x-1c
for dave@doctor.nl2k.ab.ca;
Thu, 01 Jun 2023 15:16:02 -0600
Resent-From: The Doctor
Resent-Date: Thu, 1 Jun 2023 15:16:02 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ot1-f41.google.com ([209.85.210.41]:53399)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1q4oVk-000E18-2V
for root@doctor.nl2k.ab.ca;
Thu, 01 Jun 2023 14:03:08 -0600
Received: by mail-ot1-f41.google.com with SMTP id 46e09a7af769-6af6f49e41cso1238063a34.2
for; Thu, 01 Jun 2023 13:01:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1685649659; x=1688241659;
h=content-transfer-encoding:subject:to:from:mime-version:date
:message-id:from:to:cc:subject:date:message-id:reply-to;
bh=C1YSb3yJE7ofjGTCfBtaOouH6Z05zXsAMqw2zwGm1WA=;
b=plNOmvluynWPTpHSNSVi6PyW4pQi7pjStgzPMCkEdMh7XYZKaqca2wdMoDl7AzeneA
iHbPe+w7dXp2QUw11Kc3rNsVvahNtqg49Ucfdxfm+RWmpv9ngCzMmBGcsubVfwqVEjXh
gb5F+2pSUgoBA6bY1I5bF2ebkjrOL8tULpR1pag8glmKkU+Il9EL/WT3kXqR5NIGnGE5
wtHKPmctE5k7ky2F8RtAJXIUh6CpKURRT0Y54O/no6UTS+o6z0uYlCNhTfTvz+FlHyfR
U5Lai5QDZAEc3lYasn3Cxj/fYcypbNXXDTjnMr0DkIN6jvjBXUU99VuTx1zMAPMNm6Cw
l8ng==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1685649659; x=1688241659;
h=content-transfer-encoding:subject:to:from:mime-version:date
:message-id:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=C1YSb3yJE7ofjGTCfBtaOouH6Z05zXsAMqw2zwGm1WA=;
b=f5Ju5nTJJxHXZzRIEGwLRXAlagJDgZvpj2HUs+7yRpOb9UAjHFKMTNZxeD9CmuOp2m
8pQ0adTBZOoo3vvdFtXFmJSk7Z5V4t0hHpjzt2nKupty5iqNlAPoiIkxIM/ZfEprkC3G
gG+f3Ab6ZlOM7cDql80kmsRLThEWNpUNXSkyT5/v1wvcgIfzmaSHJgMde9f/FvLYm+15
ChxTtG2o7HyGnyqJdFbDJHwy2B/jq+KjpEsQpd0h4uAOqzcNYnD1xe/4nxJdoD+ssVro
Cz73WPpCx8Hot8cEYO+KzCX1hiuIjB18xEcGXOVv7+YWrEKCnNxtY6hcz3K7vQqftwhs
wUAQ==
X-Gm-Message-State: AC+VfDzQ5yDvAND6UDbSuZ1t2XuZ5K0/v/a3W5RuAauS3gY0NH9dO3um
2SMoIGNzVfIabQM/mPoz+CJywjD7pQy3NXdo
X-Google-Smtp-Source: ACHHUZ5+fU8rdunS9dQ7GG/nyBmaQ1fU8z5BDp3ntkENjiQQXZaNQCpC6aehlnWwF0UEITuv2q4Kzg==
X-Received: by 2002:a05:6830:1607:b0:6af:8210:8177 with SMTP id g7-20020a056830160700b006af82108177mr403799otr.31.1685649659241;
Thu, 01 Jun 2023 13:00:59 -0700 (PDT)
Received: from mi3-wss7 (mi3-wss7.my-hosting-panel.com. [204.93.216.87])
by smtp.gmail.com with ESMTPSA id 7-20020a250b07000000b00bb09977b0basm2608988ybl.6.2023.06.01.13.00.58
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Thu, 01 Jun 2023 13:00:58 -0700 (PDT)
Message-ID: <6478f8fa.250a0220.e710a.b35f@mx.google.com>
Date: Thu, 01 Jun 2023 13:00:58 -0700 (PDT)
X-Google-Original-Date: 1 Jun 2023 13:00:58 -0700
MIME-Version: 1.0
From: testtest4744@gmail.com
To: root@doctor.nl2k.ab.ca
Subject: www.Tehnovez.com
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 10.3
X-Spam_score_int: 103
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Name: ThomasGlons Email: root@doctor.nl2k.ab.ca Phone: 87559271766
Content analysis details: (10.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.41 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[testtest4744(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[testtest4744(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.41 listed in wl.mailspike.net]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?} www.Tehnovez.com
X-Antivirus: AVG (VPS 230601-6, 6/1/2023), Inbound message
X-Antivirus-Status: Clean
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 01 Jun 2023 15:21:15 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1q4peM-00030x-1c
for dave@doctor.nl2k.ab.ca;
Thu, 01 Jun 2023 15:16:02 -0600
Resent-From: The Doctor
Resent-Date: Thu, 1 Jun 2023 15:16:02 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ot1-f41.google.com ([209.85.210.41]:53399)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1q4oVk-000E18-2V
for root@doctor.nl2k.ab.ca;
Thu, 01 Jun 2023 14:03:08 -0600
Received: by mail-ot1-f41.google.com with SMTP id 46e09a7af769-6af6f49e41cso1238063a34.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1685649659; x=1688241659;
h=content-transfer-encoding:subject:to:from:mime-version:date
:message-id:from:to:cc:subject:date:message-id:reply-to;
bh=C1YSb3yJE7ofjGTCfBtaOouH6Z05zXsAMqw2zwGm1WA=;
b=plNOmvluynWPTpHSNSVi6PyW4pQi7pjStgzPMCkEdMh7XYZKaqca2wdMoDl7AzeneA
iHbPe+w7dXp2QUw11Kc3rNsVvahNtqg49Ucfdxfm+RWmpv9ngCzMmBGcsubVfwqVEjXh
gb5F+2pSUgoBA6bY1I5bF2ebkjrOL8tULpR1pag8glmKkU+Il9EL/WT3kXqR5NIGnGE5
wtHKPmctE5k7ky2F8RtAJXIUh6CpKURRT0Y54O/no6UTS+o6z0uYlCNhTfTvz+FlHyfR
U5Lai5QDZAEc3lYasn3Cxj/fYcypbNXXDTjnMr0DkIN6jvjBXUU99VuTx1zMAPMNm6Cw
l8ng==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1685649659; x=1688241659;
h=content-transfer-encoding:subject:to:from:mime-version:date
:message-id:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=C1YSb3yJE7ofjGTCfBtaOouH6Z05zXsAMqw2zwGm1WA=;
b=f5Ju5nTJJxHXZzRIEGwLRXAlagJDgZvpj2HUs+7yRpOb9UAjHFKMTNZxeD9CmuOp2m
8pQ0adTBZOoo3vvdFtXFmJSk7Z5V4t0hHpjzt2nKupty5iqNlAPoiIkxIM/ZfEprkC3G
gG+f3Ab6ZlOM7cDql80kmsRLThEWNpUNXSkyT5/v1wvcgIfzmaSHJgMde9f/FvLYm+15
ChxTtG2o7HyGnyqJdFbDJHwy2B/jq+KjpEsQpd0h4uAOqzcNYnD1xe/4nxJdoD+ssVro
Cz73WPpCx8Hot8cEYO+KzCX1hiuIjB18xEcGXOVv7+YWrEKCnNxtY6hcz3K7vQqftwhs
wUAQ==
X-Gm-Message-State: AC+VfDzQ5yDvAND6UDbSuZ1t2XuZ5K0/v/a3W5RuAauS3gY0NH9dO3um
2SMoIGNzVfIabQM/mPoz+CJywjD7pQy3NXdo
X-Google-Smtp-Source: ACHHUZ5+fU8rdunS9dQ7GG/nyBmaQ1fU8z5BDp3ntkENjiQQXZaNQCpC6aehlnWwF0UEITuv2q4Kzg==
X-Received: by 2002:a05:6830:1607:b0:6af:8210:8177 with SMTP id g7-20020a056830160700b006af82108177mr403799otr.31.1685649659241;
Thu, 01 Jun 2023 13:00:59 -0700 (PDT)
Received: from mi3-wss7 (mi3-wss7.my-hosting-panel.com. [204.93.216.87])
by smtp.gmail.com with ESMTPSA id 7-20020a250b07000000b00bb09977b0basm2608988ybl.6.2023.06.01.13.00.58
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Thu, 01 Jun 2023 13:00:58 -0700 (PDT)
Message-ID: <6478f8fa.250a0220.e710a.b35f@mx.google.com>
Date: Thu, 01 Jun 2023 13:00:58 -0700 (PDT)
X-Google-Original-Date: 1 Jun 2023 13:00:58 -0700
MIME-Version: 1.0
From: testtest4744@gmail.com
To: root@doctor.nl2k.ab.ca
Subject: www.Tehnovez.com
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 10.3
X-Spam_score_int: 103
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Name: ThomasGlons Email: root@doctor.nl2k.ab.ca Phone: 87559271766
Content analysis details: (10.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.41 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[testtest4744(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[testtest4744(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.41 listed in wl.mailspike.net]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?} www.Tehnovez.com
X-Antivirus: AVG (VPS 230601-6, 6/1/2023), Inbound message
X-Antivirus-Status: Clean
Name: ThomasGlons
Email: root@doctor.n=
l2k.ab.ca
Phone: 87559271766
=20Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments