Bitcoin spam from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 18 Jun 2023 05:51:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qAqs6-000JLe-1f
for dave@doctor.nl2k.ab.ca;
Sun, 18 Jun 2023 05:47:06 -0600
Resent-From: The Doctor
Resent-Date: Sun, 18 Jun 2023 05:47:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f169.google.com ([209.85.214.169]:44511)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qAlqR-000F4s-1S
for doctor@doctor.nl2k.ab.ca;
Sun, 18 Jun 2023 00:25:08 -0600
Received: by mail-pl1-f169.google.com with SMTP id d9443c01a7336-1b50394a7f2so12803625ad.1
for; Sat, 17 Jun 2023 23:23:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1687069378; x=1689661378;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=Op/zU7xOlUyvOKJWgSvmoSTYSGoGat9pRKXTGei+8cs=;
b=dQbioTv07sV609IGpu72zCxbkRvviiWVaPofu0tmpZ46qoHtvf4RDxqlD6vLAeKFb0
7tAPmNHzEYaLALuoaxeOsbYBAXNDEF8+2TwMImeZSdf2mzyf/GJjBJ5oW8bUx+m4rV3i
Wo+9aeXvzfLd8oVClBKjSpUGMOKrNXL31xet/FXvKUXP0MgPwGuM+xmhjRxu1Vkle1Tp
g6ZBAjp2dJTN0Jh7uMlzrRUHpjgMLKvQbsJeVX+MMN7/XkoWRqWAYKnYVQGtq0pJ8YLH
VXjz91ihI0EeiPS8XyYMa0vCh8oal6PWp1ivgqO2Q9Sxt53g7jztrWhQdCp59nZGjnK8
lSvw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1687069378; x=1689661378;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=Op/zU7xOlUyvOKJWgSvmoSTYSGoGat9pRKXTGei+8cs=;
b=W5qhZl+iLV2tECkY0+vp0HKP/sjqeWjnzouVPaC2VWzCfiuEekdLj1S8D3xH6lWBy1
huALrbXrtWm2G9j6tzQMQe/+fK+KIEdSgCYZC80WttLHl4jDfU6Bk2bRdjZ2hieMswB3
pRvGy8D/u0oKiMekG+cmdkWP8wk6i/W9WHcolkfBQM4LAZc7pKzZUkzlYNjH/8FQSamR
EaOtn2PeOalD1FaMEFIQIEbfhPKwWxK9z1rBQYzPc6jevC0N9K1//+eiNvKjs9cMkZ7W
Aau9N/+8RAojp6qXeRYJMrGn9bHALEVbS81mGYvhMCoEHjJ7/2vHEDj46YDvRMSdMeMx
yiYA==
X-Gm-Message-State: AC+VfDzHSQrtpmipynT313AJAxhxo+9eWhAHthC9R3k3d/YVZq0AVSmS
smp3F5W4cPJ1jFti13Tthj+pIQ0jFiQymQODfoo=
X-Google-Smtp-Source: ACHHUZ6fKtaE8f1RWOt0s4kuESuAR8mYWP1cNrUs2ur9wfImD9pM6iuzX/Z40grkRDNNi76wl0/Ec4YSuoKErx2Ahig=
X-Received: by 2002:a17:903:234e:b0:1b5:54cb:36a7 with SMTP id
c14-20020a170903234e00b001b554cb36a7mr2285852plh.61.1687069378010; Sat, 17
Jun 2023 23:22:58 -0700 (PDT)
MIME-Version: 1.0
Sender: sosaiddlord@gmail.com
Received: by 2002:a05:7300:8ca1:b0:c2:e7aa:ba99 with HTTP; Sat, 17 Jun 2023
23:22:57 -0700 (PDT)
From: "Mr. Bernardith Conalthe"
Date: Sun, 18 Jun 2023 06:22:57 +0000
X-Google-Sender-Auth: 6MXGUJ152XCy0GEiPAXxdtzJE94
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, You are receiving this email from Bit-coins Trade Centre
Canada. we would have delivered this little gift directly to your house ,but
because of SAT-LITE network from our technology localisation System.
Content analysis details: (5.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.169 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[sosaiddlord(at)gmail.com]
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLY From and body contain different freemails
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.169 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} hello dear
Hello,
You are receiving this email from Bit-coins Trade Centre Canada.
we would have delivered this little gift directly to your house ,but
because of SAT-LITE network from our technology localisation
System.
your email appears among anonymous
emails that was used to test our technology.
To thank you, we have deposited the sum of 750,000.00 Us$ through the
name appeared on your email, 2 Laptops and 1 IPhone 15 Ultra,and 5
BTC T-shirts .
Due to our limited time to leave for another programmed, we kept these
package in the care of Station, only for you to identify
your self as the beneficiary by sending them this deposit certificate
Attached to this foreign affair
Email : btc.coin@financier.com
Contact Person Mr. Bernardith Conalthe.
Western Union Station are expecting your message.
Thanks
Madam Tares.
BTC .
I897L0LD33.5KIn/aln/awhoissourceRank7.77MPIN0Summary reportDiagnosisDensity00n/a
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 18 Jun 2023 05:51:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qAqs6-000JLe-1f
for dave@doctor.nl2k.ab.ca;
Sun, 18 Jun 2023 05:47:06 -0600
Resent-From: The Doctor
Resent-Date: Sun, 18 Jun 2023 05:47:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f169.google.com ([209.85.214.169]:44511)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qAlqR-000F4s-1S
for doctor@doctor.nl2k.ab.ca;
Sun, 18 Jun 2023 00:25:08 -0600
Received: by mail-pl1-f169.google.com with SMTP id d9443c01a7336-1b50394a7f2so12803625ad.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1687069378; x=1689661378;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=Op/zU7xOlUyvOKJWgSvmoSTYSGoGat9pRKXTGei+8cs=;
b=dQbioTv07sV609IGpu72zCxbkRvviiWVaPofu0tmpZ46qoHtvf4RDxqlD6vLAeKFb0
7tAPmNHzEYaLALuoaxeOsbYBAXNDEF8+2TwMImeZSdf2mzyf/GJjBJ5oW8bUx+m4rV3i
Wo+9aeXvzfLd8oVClBKjSpUGMOKrNXL31xet/FXvKUXP0MgPwGuM+xmhjRxu1Vkle1Tp
g6ZBAjp2dJTN0Jh7uMlzrRUHpjgMLKvQbsJeVX+MMN7/XkoWRqWAYKnYVQGtq0pJ8YLH
VXjz91ihI0EeiPS8XyYMa0vCh8oal6PWp1ivgqO2Q9Sxt53g7jztrWhQdCp59nZGjnK8
lSvw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1687069378; x=1689661378;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=Op/zU7xOlUyvOKJWgSvmoSTYSGoGat9pRKXTGei+8cs=;
b=W5qhZl+iLV2tECkY0+vp0HKP/sjqeWjnzouVPaC2VWzCfiuEekdLj1S8D3xH6lWBy1
huALrbXrtWm2G9j6tzQMQe/+fK+KIEdSgCYZC80WttLHl4jDfU6Bk2bRdjZ2hieMswB3
pRvGy8D/u0oKiMekG+cmdkWP8wk6i/W9WHcolkfBQM4LAZc7pKzZUkzlYNjH/8FQSamR
EaOtn2PeOalD1FaMEFIQIEbfhPKwWxK9z1rBQYzPc6jevC0N9K1//+eiNvKjs9cMkZ7W
Aau9N/+8RAojp6qXeRYJMrGn9bHALEVbS81mGYvhMCoEHjJ7/2vHEDj46YDvRMSdMeMx
yiYA==
X-Gm-Message-State: AC+VfDzHSQrtpmipynT313AJAxhxo+9eWhAHthC9R3k3d/YVZq0AVSmS
smp3F5W4cPJ1jFti13Tthj+pIQ0jFiQymQODfoo=
X-Google-Smtp-Source: ACHHUZ6fKtaE8f1RWOt0s4kuESuAR8mYWP1cNrUs2ur9wfImD9pM6iuzX/Z40grkRDNNi76wl0/Ec4YSuoKErx2Ahig=
X-Received: by 2002:a17:903:234e:b0:1b5:54cb:36a7 with SMTP id
c14-20020a170903234e00b001b554cb36a7mr2285852plh.61.1687069378010; Sat, 17
Jun 2023 23:22:58 -0700 (PDT)
MIME-Version: 1.0
Sender: sosaiddlord@gmail.com
Received: by 2002:a05:7300:8ca1:b0:c2:e7aa:ba99 with HTTP; Sat, 17 Jun 2023
23:22:57 -0700 (PDT)
From: "Mr. Bernardith Conalthe"
Date: Sun, 18 Jun 2023 06:22:57 +0000
X-Google-Sender-Auth: 6MXGUJ152XCy0GEiPAXxdtzJE94
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, You are receiving this email from Bit-coins Trade Centre
Canada. we would have delivered this little gift directly to your house ,but
because of SAT-LITE network from our technology localisation System.
Content analysis details: (5.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.169 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[sosaiddlord(at)gmail.com]
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLY From and body contain different freemails
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.169 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} hello dear
Hello,
You are receiving this email from Bit-coins Trade Centre Canada.
we would have delivered this little gift directly to your house ,but
because of SAT-LITE network from our technology localisation
System.
your email appears among anonymous
emails that was used to test our technology.
To thank you, we have deposited the sum of 750,000.00 Us$ through the
name appeared on your email, 2 Laptops and 1 IPhone 15 Ultra,and 5
BTC T-shirts .
Due to our limited time to leave for another programmed, we kept these
package in the care of Station, only for you to identify
your self as the beneficiary by sending them this deposit certificate
Attached to this foreign affair
Email : btc.coin@financier.com
Contact Person Mr. Bernardith Conalthe.
Western Union Station are expecting your message.
Thanks
Madam Tares.
BTC .
I897L0LD33.5KIn/aln/awhoissourceRank7.77MPIN0Summary reportDiagnosisDensity00n/a
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments