Financial loan spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 17 Jul 2023 13:03:00 -0600
Received: from mail-lj1-f179.google.com ([209.85.208.179]:47598)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qLTUP-0000dl-29
for dave@doctor.nl2k.ab.ca;
Mon, 17 Jul 2023 13:02:37 -0600
Received: by mail-lj1-f179.google.com with SMTP id 38308e7fff4ca-2b6ff1a637bso70981021fa.3
for; Mon, 17 Jul 2023 12:00:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1689620443; x=1692212443;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=FgisAJyjbf2n+MoETxWWZnF1Hxnpv4S47Tynfraeiik=;
b=sRlXFC/jz2wTEGbQG/5bDLdQebpXkHikRDNKoSEpXl04GNHWVApIv/YlA6mGJ0dkO3
1ozLymzmFQ5BGnp8tMv5wS4NmtqtuCNM5Nx2GYS0k7AAOtQQ/mpH05iy6OFK2INjWjLW
y4/fLh+3J+ppdW2HefyMvbyvjHAGlKQcMyItJpCEe++07ROJCVgmU6FAUdfSEMZV0P7t
wHUu1AFbfstdqZWgqFm6IY8EnHAwcyZMIgeRjqBReEfxgTGkf4XX/FyVFE+3zVAORBce
7X6dvYL4s7sAoySdKwAaAk4kZddMfVz9NqJ5LU7EzmC+A+VKLJKrtqL+cAPNqyEko+NN
uBfg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1689620443; x=1692212443;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=FgisAJyjbf2n+MoETxWWZnF1Hxnpv4S47Tynfraeiik=;
b=XZLFAY/tvWNqf4H9zLZZ9dmRiFii1YmyRq6rNumWEXae/lyctH23K30/cEYAikYKyG
Ho9PAFZnh9K6iss0VAI8CqAD8QyL50XOrXsteAv2kvPHR4mrcSlUWAsLLf6KDO4IgLcp
tWW3pJcRvq4x31s4Ts+zNYqMsi+5EXNAWSzLgoflGZr7UZkp4CS8Ciy54A3L7KmqeyFy
LZHG0fY1FcQGFsVIzp8xALFNVoSCpa2W6NGxBO6rnQpCzonQwYGiBMK2YPOIJgvLU/k1
0d3+bHT4q9ELAZtrnL4CCLztzPAG2Kfrw74poDRPI+cIC5/knZ60L9g5O1+RCL+iTxsV
GPwA==
X-Gm-Message-State: ABy/qLZd/K8xOhLwEGQr9J74zaJu1NNgLMefMRHhXJP6bf+5+ML7T6F9
2z6l+KvyvErXZRDrjTp6zJSH2gqxL6Yx0K9OKNM=
X-Google-Smtp-Source: APBJJlEhGJU+Yp7RqfUHgBya38jWw+sr2oQDCMU8TTC23wfoNqEfguimQWzNlRBmtvpMPoOzKFK51DqEnjBXmT4lyIU=
X-Received: by 2002:a2e:9bd9:0:b0:2b6:ebc6:1e86 with SMTP id
w25-20020a2e9bd9000000b002b6ebc61e86mr8943641ljj.47.1689620442886; Mon, 17
Jul 2023 12:00:42 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6022:82:b0:43:cda:cbf1 with HTTP; Mon, 17 Jul 2023
12:00:42 -0700 (PDT)
Reply-To: Prospectfinancialservice@outlook.com
From: FINANCIAL SERVICE
Date: Mon, 17 Jul 2023 20:00:42 +0100
Message-ID:
Subject: URGENT LOAN OFFER 3% APPLY NOW
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 5.4
X-Spam_score_int: 54
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- This is to notify everyone that PROSPECT LOAN SERVICE are
now offering any kind of loan to the needy at 3% rate per month without credit
check, We offer business loan, car loan, personal loan,inves [...]
Content analysis details: (5.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[pst9836553242(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[pst9836553242(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.179 listed in list.dnswl.org]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 FILL_THIS_FORM Fill in a form with personal information
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.179 listed in wl.mailspike.net]
Subject: {SPAM?} URGENT LOAN OFFER 3% APPLY NOW
X-Antivirus: AVG (VPS 230717-2, 7/17/2023), Inbound message
X-Antivirus-Status: Clean
--
This is to notify everyone that PROSPECT LOAN SERVICE are now offering
any kind of loan to the needy at 3% rate per month without credit
check, We offer business loan, car loan, personal loan,investment
loan,Business loan or loan to pay off your bills, contact us with your
Full
Name:
Phone Number:
Amount Needed:
Duration:
Address:
Country:
Occupation:
Gender:
For easy conversation call or whatsapp +1(585-312-9528
E-mail:(Prospectfinancialservice@outlook.com)
Mrs.Rhonda Wolf
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 17 Jul 2023 13:03:00 -0600
Received: from mail-lj1-f179.google.com ([209.85.208.179]:47598)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qLTUP-0000dl-29
for dave@doctor.nl2k.ab.ca;
Mon, 17 Jul 2023 13:02:37 -0600
Received: by mail-lj1-f179.google.com with SMTP id 38308e7fff4ca-2b6ff1a637bso70981021fa.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1689620443; x=1692212443;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=FgisAJyjbf2n+MoETxWWZnF1Hxnpv4S47Tynfraeiik=;
b=sRlXFC/jz2wTEGbQG/5bDLdQebpXkHikRDNKoSEpXl04GNHWVApIv/YlA6mGJ0dkO3
1ozLymzmFQ5BGnp8tMv5wS4NmtqtuCNM5Nx2GYS0k7AAOtQQ/mpH05iy6OFK2INjWjLW
y4/fLh+3J+ppdW2HefyMvbyvjHAGlKQcMyItJpCEe++07ROJCVgmU6FAUdfSEMZV0P7t
wHUu1AFbfstdqZWgqFm6IY8EnHAwcyZMIgeRjqBReEfxgTGkf4XX/FyVFE+3zVAORBce
7X6dvYL4s7sAoySdKwAaAk4kZddMfVz9NqJ5LU7EzmC+A+VKLJKrtqL+cAPNqyEko+NN
uBfg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1689620443; x=1692212443;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=FgisAJyjbf2n+MoETxWWZnF1Hxnpv4S47Tynfraeiik=;
b=XZLFAY/tvWNqf4H9zLZZ9dmRiFii1YmyRq6rNumWEXae/lyctH23K30/cEYAikYKyG
Ho9PAFZnh9K6iss0VAI8CqAD8QyL50XOrXsteAv2kvPHR4mrcSlUWAsLLf6KDO4IgLcp
tWW3pJcRvq4x31s4Ts+zNYqMsi+5EXNAWSzLgoflGZr7UZkp4CS8Ciy54A3L7KmqeyFy
LZHG0fY1FcQGFsVIzp8xALFNVoSCpa2W6NGxBO6rnQpCzonQwYGiBMK2YPOIJgvLU/k1
0d3+bHT4q9ELAZtrnL4CCLztzPAG2Kfrw74poDRPI+cIC5/knZ60L9g5O1+RCL+iTxsV
GPwA==
X-Gm-Message-State: ABy/qLZd/K8xOhLwEGQr9J74zaJu1NNgLMefMRHhXJP6bf+5+ML7T6F9
2z6l+KvyvErXZRDrjTp6zJSH2gqxL6Yx0K9OKNM=
X-Google-Smtp-Source: APBJJlEhGJU+Yp7RqfUHgBya38jWw+sr2oQDCMU8TTC23wfoNqEfguimQWzNlRBmtvpMPoOzKFK51DqEnjBXmT4lyIU=
X-Received: by 2002:a2e:9bd9:0:b0:2b6:ebc6:1e86 with SMTP id
w25-20020a2e9bd9000000b002b6ebc61e86mr8943641ljj.47.1689620442886; Mon, 17
Jul 2023 12:00:42 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6022:82:b0:43:cda:cbf1 with HTTP; Mon, 17 Jul 2023
12:00:42 -0700 (PDT)
Reply-To: Prospectfinancialservice@outlook.com
From: FINANCIAL SERVICE
Date: Mon, 17 Jul 2023 20:00:42 +0100
Message-ID:
Subject: URGENT LOAN OFFER 3% APPLY NOW
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 5.4
X-Spam_score_int: 54
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- This is to notify everyone that PROSPECT LOAN SERVICE are
now offering any kind of loan to the needy at 3% rate per month without credit
check, We offer business loan, car loan, personal loan,inves [...]
Content analysis details: (5.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[pst9836553242(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[pst9836553242(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.179 listed in list.dnswl.org]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 FILL_THIS_FORM Fill in a form with personal information
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.179 listed in wl.mailspike.net]
Subject: {SPAM?} URGENT LOAN OFFER 3% APPLY NOW
X-Antivirus: AVG (VPS 230717-2, 7/17/2023), Inbound message
X-Antivirus-Status: Clean
--
This is to notify everyone that PROSPECT LOAN SERVICE are now offering
any kind of loan to the needy at 3% rate per month without credit
check, We offer business loan, car loan, personal loan,investment
loan,Business loan or loan to pay off your bills, contact us with your
Full
Name:
Phone Number:
Amount Needed:
Duration:
Address:
Country:
Occupation:
Gender:
For easy conversation call or whatsapp +1(585-312-9528
E-mail:(Prospectfinancialservice@outlook.com)
Mrs.Rhonda Wolf
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments