Loan spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 17 Jul 2023 13:22:38 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qLTlE-0005Pd-1t
for dave@doctor.nl2k.ab.ca;
Mon, 17 Jul 2023 13:19:56 -0600
Resent-From: The Doctor
Resent-Date: Mon, 17 Jul 2023 13:19:56 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f49.google.com ([209.85.218.49]:59644)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qLTVN-00010D-0S
for doctor@doctor.nl2k.ab.ca;
Mon, 17 Jul 2023 13:03:35 -0600
Received: by mail-ej1-f49.google.com with SMTP id a640c23a62f3a-98dfb3f9af6so675691366b.2
for; Mon, 17 Jul 2023 12:01:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1689620510; x=1692212510;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=FgisAJyjbf2n+MoETxWWZnF1Hxnpv4S47Tynfraeiik=;
b=P9AE8OpdCykt6eZ3/TyHnOMLVhMNVOEC1ObPKut01e1TgU5pn0Q/i8vbu5Q9O499w8
h8+4y+lIKa9jFKyh39g4NowZGabEMbFgoNpPGKEWFech5wi+LK9iRy8OJNSUe3O0pFLA
syCtsniBjXeTMkVZSB8h5002xH5xC4w4E7fkd0uxGGMJABPm+b1BKjUjfyub/BeQ8tZ+
jIDEefgz00efIkgBfJgErnSuMwrfXc0NjqV0u5A0+9iEZsgKS43MUZsqFf/lEsST8By1
jUEKNvK+IoXmiE1+MO5TTQtEEyRTtoatLAmTXMMclmAsYzagLC4VOVxAVevpsLaWuN0H
ktSQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1689620510; x=1692212510;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=FgisAJyjbf2n+MoETxWWZnF1Hxnpv4S47Tynfraeiik=;
b=S569nKX+ShDN85GhEPSW/sNZcyUJ89lo9rbNlS2F56RndcNa62DUJXj5Z6A6IM7wj5
dez3lig3jPXr4a1vd8lGmbZV+XYOmIIg4l4yKTxBPPphGlb6TtbPUIf9CmMG+uA6VJNO
aGDGZwYMdifP8t6J1RFJ4liKYQk1CikYKVuIZt7S5sQEbARm/dQONaLH4osUpcnpERAn
GDjthAFkJeYNdtzNTqD5r+Fm7fzosMIWfj4xSgYnre1hOz+71eMljEa5OFJQPUMcBOmR
GfRtl++fAf2lH/2qpSWp8hFLRU9NwamGMXRRm7yMwmNgSNSMVOzJucN5ewi8A2ptEJ3R
5+4Q==
X-Gm-Message-State: ABy/qLapnzqKW6PAUMdMU1AzUWViVvKbg171LDmBi7XAFj78F8RGCMSF
Gwbrs2PecOXa6/vSeIxrGF5Cyn/qnP2+E5F1JV4=
X-Google-Smtp-Source: APBJJlHxfaPywH5KQ8OgBu5bm14IPMunbsvG1it8vUlblo6mavysTIRLENjebaYwAp3PPuqCnX4KwjdcYfpYnfKf24I=
X-Received: by 2002:a17:906:6a13:b0:98d:1f6a:fd47 with SMTP id
qw19-20020a1709066a1300b0098d1f6afd47mr13577672ejc.76.1689620508944; Mon, 17
Jul 2023 12:01:48 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:907:e8d:b0:986:544c:1097 with HTTP; Mon, 17 Jul 2023
12:01:48 -0700 (PDT)
Reply-To: Prospectfinancialservice@outlook.com
From: FINANCIAL SERVICE
Date: Mon, 17 Jul 2023 20:01:48 +0100
Message-ID:
Subject: URGENT LOAN OFFER 3% APPLY NOW
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- This is to notify everyone that PROSPECT LOAN SERVICE are
now offering any kind of loan to the needy at 3% rate per month without credit
check, We offer business loan, car loan, personal loan,inves [...]
Content analysis details: (5.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[pravinsheth006(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[pravinsheth006(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.49 listed in list.dnswl.org]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.49 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} URGENT LOAN OFFER 3% APPLY NOW
X-Antivirus: AVG (VPS 230717-2, 7/17/2023), Inbound message
X-Antivirus-Status: Clean
--
This is to notify everyone that PROSPECT LOAN SERVICE are now offering
any kind of loan to the needy at 3% rate per month without credit
check, We offer business loan, car loan, personal loan,investment
loan,Business loan or loan to pay off your bills, contact us with your
Full
Name:
Phone Number:
Amount Needed:
Duration:
Address:
Country:
Occupation:
Gender:
For easy conversation call or whatsapp +1(585-312-9528
E-mail:(Prospectfinancialservice@outlook.com)
Mrs.Rhonda Wolf
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 17 Jul 2023 13:22:38 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qLTlE-0005Pd-1t
for dave@doctor.nl2k.ab.ca;
Mon, 17 Jul 2023 13:19:56 -0600
Resent-From: The Doctor
Resent-Date: Mon, 17 Jul 2023 13:19:56 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f49.google.com ([209.85.218.49]:59644)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qLTVN-00010D-0S
for doctor@doctor.nl2k.ab.ca;
Mon, 17 Jul 2023 13:03:35 -0600
Received: by mail-ej1-f49.google.com with SMTP id a640c23a62f3a-98dfb3f9af6so675691366b.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1689620510; x=1692212510;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=FgisAJyjbf2n+MoETxWWZnF1Hxnpv4S47Tynfraeiik=;
b=P9AE8OpdCykt6eZ3/TyHnOMLVhMNVOEC1ObPKut01e1TgU5pn0Q/i8vbu5Q9O499w8
h8+4y+lIKa9jFKyh39g4NowZGabEMbFgoNpPGKEWFech5wi+LK9iRy8OJNSUe3O0pFLA
syCtsniBjXeTMkVZSB8h5002xH5xC4w4E7fkd0uxGGMJABPm+b1BKjUjfyub/BeQ8tZ+
jIDEefgz00efIkgBfJgErnSuMwrfXc0NjqV0u5A0+9iEZsgKS43MUZsqFf/lEsST8By1
jUEKNvK+IoXmiE1+MO5TTQtEEyRTtoatLAmTXMMclmAsYzagLC4VOVxAVevpsLaWuN0H
ktSQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1689620510; x=1692212510;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=FgisAJyjbf2n+MoETxWWZnF1Hxnpv4S47Tynfraeiik=;
b=S569nKX+ShDN85GhEPSW/sNZcyUJ89lo9rbNlS2F56RndcNa62DUJXj5Z6A6IM7wj5
dez3lig3jPXr4a1vd8lGmbZV+XYOmIIg4l4yKTxBPPphGlb6TtbPUIf9CmMG+uA6VJNO
aGDGZwYMdifP8t6J1RFJ4liKYQk1CikYKVuIZt7S5sQEbARm/dQONaLH4osUpcnpERAn
GDjthAFkJeYNdtzNTqD5r+Fm7fzosMIWfj4xSgYnre1hOz+71eMljEa5OFJQPUMcBOmR
GfRtl++fAf2lH/2qpSWp8hFLRU9NwamGMXRRm7yMwmNgSNSMVOzJucN5ewi8A2ptEJ3R
5+4Q==
X-Gm-Message-State: ABy/qLapnzqKW6PAUMdMU1AzUWViVvKbg171LDmBi7XAFj78F8RGCMSF
Gwbrs2PecOXa6/vSeIxrGF5Cyn/qnP2+E5F1JV4=
X-Google-Smtp-Source: APBJJlHxfaPywH5KQ8OgBu5bm14IPMunbsvG1it8vUlblo6mavysTIRLENjebaYwAp3PPuqCnX4KwjdcYfpYnfKf24I=
X-Received: by 2002:a17:906:6a13:b0:98d:1f6a:fd47 with SMTP id
qw19-20020a1709066a1300b0098d1f6afd47mr13577672ejc.76.1689620508944; Mon, 17
Jul 2023 12:01:48 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:907:e8d:b0:986:544c:1097 with HTTP; Mon, 17 Jul 2023
12:01:48 -0700 (PDT)
Reply-To: Prospectfinancialservice@outlook.com
From: FINANCIAL SERVICE
Date: Mon, 17 Jul 2023 20:01:48 +0100
Message-ID:
Subject: URGENT LOAN OFFER 3% APPLY NOW
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- This is to notify everyone that PROSPECT LOAN SERVICE are
now offering any kind of loan to the needy at 3% rate per month without credit
check, We offer business loan, car loan, personal loan,inves [...]
Content analysis details: (5.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[pravinsheth006(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[pravinsheth006(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.49 listed in list.dnswl.org]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.49 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} URGENT LOAN OFFER 3% APPLY NOW
X-Antivirus: AVG (VPS 230717-2, 7/17/2023), Inbound message
X-Antivirus-Status: Clean
--
This is to notify everyone that PROSPECT LOAN SERVICE are now offering
any kind of loan to the needy at 3% rate per month without credit
check, We offer business loan, car loan, personal loan,investment
loan,Business loan or loan to pay off your bills, contact us with your
Full
Name:
Phone Number:
Amount Needed:
Duration:
Address:
Country:
Occupation:
Gender:
For easy conversation call or whatsapp +1(585-312-9528
E-mail:(Prospectfinancialservice@outlook.com)
Mrs.Rhonda Wolf
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments