Loan spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 17 Jul 2023 15:27:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qLViJ-0007OB-2Z
for dave@doctor.nl2k.ab.ca;
Mon, 17 Jul 2023 15:25:03 -0600
Resent-From: The Doctor
Resent-Date: Mon, 17 Jul 2023 15:25:03 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f176.google.com ([209.85.208.176]:59755)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qLTum-000FG9-2Q
for postmaster@nl2k.ab.ca;
Mon, 17 Jul 2023 13:29:52 -0600
Received: by mail-lj1-f176.google.com with SMTP id 38308e7fff4ca-2b701e41cd3so74970091fa.3
for; Mon, 17 Jul 2023 12:28:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1689622079; x=1692214079;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=FgisAJyjbf2n+MoETxWWZnF1Hxnpv4S47Tynfraeiik=;
b=SCLCpm5dngEjn1zy44cHZrTaA4phD0LVZbi+1FsiuHTLpyIveVR5B1OPc79xMcXe6G
NEhCX2Qc/MzBlhNla7zUYD7dOrDJ1fguuuHlW9YUzvbexPPdwD7icGESK0w/WKbrMEHJ
EWJFAnnUL9kWm7+l72zKbwCPbh/DVAJ+y5flAPNlFFUHNa1FCjrIolz7MMI6Zd+cYlfo
pftdGZv1cs4GaTyLesi2EmEYEWpOIyfJJb6twcZ+fqhISGUGGP94KyOL/iWm2XKZcY9K
9o01lgsLgBLRUr/KUJg2Tq2Nu9SML51KTTYwPr8eM5ouFiD5r7IvcprskaxhMIMOpwSA
/Asw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1689622079; x=1692214079;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=FgisAJyjbf2n+MoETxWWZnF1Hxnpv4S47Tynfraeiik=;
b=iV+M96e392Z229qOZxqhnY7GjuQ7HtGffmTRgdNTiFa0U1Ys2Uvw4XRc9mPkb6zxnj
+VBprnvWWXq7+P0UxrsftQMQQoZVl7+JDKY9PKXsFDGrYApLYKL0pQ59I16YbYbph5u5
+JGBNA8CL5m8VHgSB/TA0ff0LaXrPrKf2Auzds/wH85kyCmf5qvGatDZcEhyhsvbfHah
6ureJvvyW6PBw/zR4k4ySZ5lFZyUMUwyQDr3NvSf7GDgzNiGZmP0e5jBoJRexdJcL2ge
h5haldd7LegMWtsrktULyYt63IbyOXNGbFT78lVl1v8T4m7dSsMpktrwYrO+SpKZLKU+
pGbQ==
X-Gm-Message-State: ABy/qLbuO0f5VMgli2R3o1KGmnx/1OyIQ9RPDqvJWBnwjwD8+xE8qWvf
qLS2WX3+Axdd809RjBtfdqR44aJ0m0mKqoONMGs=
X-Google-Smtp-Source: APBJJlG0ULotOXWZoUkFMxEXyjZ97bi8jChkTSeK5I+5Q7lQD7CdqUEOurUybt6ZM2bF+gRQoUEuBR9GRy36xcSkNeA=
X-Received: by 2002:a2e:868e:0:b0:2b8:377a:22f1 with SMTP id
l14-20020a2e868e000000b002b8377a22f1mr8118379lji.32.1689622078935; Mon, 17
Jul 2023 12:27:58 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a2e:90d1:0:b0:2b6:c3f9:b875 with HTTP; Mon, 17 Jul 2023
12:27:58 -0700 (PDT)
Reply-To: benbernank01@gmail.com
From: FINANCIAL SERVICE
Date: Mon, 17 Jul 2023 20:27:58 +0100
Message-ID:
Subject: URGENT LOAN OFFER 3% APPLY NOW
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: postmaster@nl2k.ab.ca
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- This is to notify everyone that PROSPECT LOAN SERVICE are
now offering any kind of loan to the needy at 3% rate per month without credit
check, We offer business loan, car loan, personal loan,inves [...]
Content analysis details: (5.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.176 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[benbernank01(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[firstbank010(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[firstbank010(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 FILL_THIS_FORM Fill in a form with personal information
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.176 listed in wl.mailspike.net]
Subject: {SPAM?} URGENT LOAN OFFER 3% APPLY NOW
X-Antivirus: AVG (VPS 230717-4, 7/17/2023), Inbound message
X-Antivirus-Status: Clean
--
This is to notify everyone that PROSPECT LOAN SERVICE are now offering
any kind of loan to the needy at 3% rate per month without credit
check, We offer business loan, car loan, personal loan,investment
loan,Business loan or loan to pay off your bills, contact us with your
Full
Name:
Phone Number:
Amount Needed:
Duration:
Address:
Country:
Occupation:
Gender:
For easy conversation call or whatsapp +1(585-312-9528
E-mail:(Prospectfinancialservice@outlook.com)
Mrs.Rhonda Wolf
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 17 Jul 2023 15:27:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qLViJ-0007OB-2Z
for dave@doctor.nl2k.ab.ca;
Mon, 17 Jul 2023 15:25:03 -0600
Resent-From: The Doctor
Resent-Date: Mon, 17 Jul 2023 15:25:03 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f176.google.com ([209.85.208.176]:59755)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qLTum-000FG9-2Q
for postmaster@nl2k.ab.ca;
Mon, 17 Jul 2023 13:29:52 -0600
Received: by mail-lj1-f176.google.com with SMTP id 38308e7fff4ca-2b701e41cd3so74970091fa.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1689622079; x=1692214079;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=FgisAJyjbf2n+MoETxWWZnF1Hxnpv4S47Tynfraeiik=;
b=SCLCpm5dngEjn1zy44cHZrTaA4phD0LVZbi+1FsiuHTLpyIveVR5B1OPc79xMcXe6G
NEhCX2Qc/MzBlhNla7zUYD7dOrDJ1fguuuHlW9YUzvbexPPdwD7icGESK0w/WKbrMEHJ
EWJFAnnUL9kWm7+l72zKbwCPbh/DVAJ+y5flAPNlFFUHNa1FCjrIolz7MMI6Zd+cYlfo
pftdGZv1cs4GaTyLesi2EmEYEWpOIyfJJb6twcZ+fqhISGUGGP94KyOL/iWm2XKZcY9K
9o01lgsLgBLRUr/KUJg2Tq2Nu9SML51KTTYwPr8eM5ouFiD5r7IvcprskaxhMIMOpwSA
/Asw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1689622079; x=1692214079;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=FgisAJyjbf2n+MoETxWWZnF1Hxnpv4S47Tynfraeiik=;
b=iV+M96e392Z229qOZxqhnY7GjuQ7HtGffmTRgdNTiFa0U1Ys2Uvw4XRc9mPkb6zxnj
+VBprnvWWXq7+P0UxrsftQMQQoZVl7+JDKY9PKXsFDGrYApLYKL0pQ59I16YbYbph5u5
+JGBNA8CL5m8VHgSB/TA0ff0LaXrPrKf2Auzds/wH85kyCmf5qvGatDZcEhyhsvbfHah
6ureJvvyW6PBw/zR4k4ySZ5lFZyUMUwyQDr3NvSf7GDgzNiGZmP0e5jBoJRexdJcL2ge
h5haldd7LegMWtsrktULyYt63IbyOXNGbFT78lVl1v8T4m7dSsMpktrwYrO+SpKZLKU+
pGbQ==
X-Gm-Message-State: ABy/qLbuO0f5VMgli2R3o1KGmnx/1OyIQ9RPDqvJWBnwjwD8+xE8qWvf
qLS2WX3+Axdd809RjBtfdqR44aJ0m0mKqoONMGs=
X-Google-Smtp-Source: APBJJlG0ULotOXWZoUkFMxEXyjZ97bi8jChkTSeK5I+5Q7lQD7CdqUEOurUybt6ZM2bF+gRQoUEuBR9GRy36xcSkNeA=
X-Received: by 2002:a2e:868e:0:b0:2b8:377a:22f1 with SMTP id
l14-20020a2e868e000000b002b8377a22f1mr8118379lji.32.1689622078935; Mon, 17
Jul 2023 12:27:58 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a2e:90d1:0:b0:2b6:c3f9:b875 with HTTP; Mon, 17 Jul 2023
12:27:58 -0700 (PDT)
Reply-To: benbernank01@gmail.com
From: FINANCIAL SERVICE
Date: Mon, 17 Jul 2023 20:27:58 +0100
Message-ID:
Subject: URGENT LOAN OFFER 3% APPLY NOW
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: postmaster@nl2k.ab.ca
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- This is to notify everyone that PROSPECT LOAN SERVICE are
now offering any kind of loan to the needy at 3% rate per month without credit
check, We offer business loan, car loan, personal loan,inves [...]
Content analysis details: (5.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.176 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[benbernank01(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[firstbank010(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[firstbank010(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 FILL_THIS_FORM Fill in a form with personal information
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.176 listed in wl.mailspike.net]
Subject: {SPAM?} URGENT LOAN OFFER 3% APPLY NOW
X-Antivirus: AVG (VPS 230717-4, 7/17/2023), Inbound message
X-Antivirus-Status: Clean
--
This is to notify everyone that PROSPECT LOAN SERVICE are now offering
any kind of loan to the needy at 3% rate per month without credit
check, We offer business loan, car loan, personal loan,investment
loan,Business loan or loan to pay off your bills, contact us with your
Full
Name:
Phone Number:
Amount Needed:
Duration:
Address:
Country:
Occupation:
Gender:
For easy conversation call or whatsapp +1(585-312-9528
E-mail:(Prospectfinancialservice@outlook.com)
Mrs.Rhonda Wolf
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments