Loan spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Aug 2023 07:30:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qRYOF-000Csq-1t

for dave@doctor.nl2k.ab.ca;

Thu, 03 Aug 2023 07:29:19 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Aug 2023 07:29:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f68.google.com ([209.85.222.68]:53753)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qRVet-000D7o-0z

for doctor@doctor.nl2k.ab.ca;

Thu, 03 Aug 2023 04:34:23 -0600

Received: by mail-ua1-f68.google.com with SMTP id a1e0cc1a2514c-79a31d66002so257822241.3

for ; Thu, 03 Aug 2023 03:32:20 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1691058734; x=1691663534;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=EjFx8lupBpTmdIONAuSd77EHFCGVZ/SzfPWLC+Spxlc=;

b=CMkHF5B75bhkTUnNgc0SobZKe/4jUc7//oFIQzMsqZ6dcd8rfVQf5NEqm5/eI5oRmX

3r2WxzoyOdAqYANFdUhjLZpZvbmKquzrQ8CWMuLETQYO9wFCDiTm7qNlPMVY7xKkRhi0

03pQtTnxOwS/XlNYK9ogxGpA4qVuBKVmSV8Bud+tud/T2uXDyw0xO2LSKClqa298ltrp

78CP9X3d8wMsIFWiaMgMqQy+pffm+gFvr6PAUoxvolfx9ws5OJGXZvgiFL/rbhi/lHLh

RkZkb03tJVQW729YQN/RV2krKbdrFoqRP6q7QAoV6qTCiP6FvHNS7zkh/zIwkP0uFu19

VeOw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1691058734; x=1691663534;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=EjFx8lupBpTmdIONAuSd77EHFCGVZ/SzfPWLC+Spxlc=;

b=ek/duNqYxLKf/JCX34fMAxnkaS/DPqh/sT4czIgugmb2quVxCP1XTicKDF6yeYn+y4

fkGsDfVjZBVOeLoKLF3Wxax/i29x3DULMeUu9kQIlzVsGYd1THMVao1JSCQy+eQyfJHj

VVMaqBlc3s2OUhgEM19AdAdXCJr60q66w60xeG1kYL62yyeAKrL1sYDVrCZ48ON8DUcw

hPA/1QUCDFO840FV0wki1LQwRvNSLgwuXuGr7gS2w2pPGTTmPC0ZTcDve2Bnup8oe7Fp

EReCJ0qcPMHSEqz9l6rAFH/c+SPntjqUeMxMR135P85k2ss7VdDHpDFGzKd115xfYZTz

rU7A==

X-Gm-Message-State: ABy/qLZc2YUlm8U6puAXeXMtZL5OtLBlPiwVMM2wDbjrwXdjAz7oXPHB

olTkzBKrpaCrZqmVRtv9Gr7GGlMXAKXRE4o/tHc=

X-Google-Smtp-Source: APBJJlGYtSyBr5OYpQwe5+uyMXC5ErDE4CxMsoqv/H5Qn/6in+1Jn40HIxxWO5M7gpUM1I9YQVb8mPo3lJhvIb3EiVE=

X-Received: by 2002:a1f:4548:0:b0:481:8049:591b with SMTP id

s69-20020a1f4548000000b004818049591bmr6396119vka.8.1691058733710; Thu, 03 Aug

2023 03:32:13 -0700 (PDT)

MIME-Version: 1.0

From: LOAN OFFER

Date: Thu, 3 Aug 2023 10:32:03 +0000

Message-ID:

Subject: =?UTF-8?B?SGV5IHRoZXJlIPCflJ0=?=

To: ctetley , c degagne ,

doctor

Content-Type: multipart/alternative; boundary="0000000000001e02900602024b3a"

X-Antivirus: AVG (VPS 230803-0, 8/2/2023), Inbound message

X-Antivirus-Status: Clean



--0000000000001e02900602024b3a

Content-Type: text/plain; charset="UTF-8"



LOAN OFFER wants to share this url with you -

http://Zin3XE.sozi.cc/34546de4235m342356?affsub2=3d47MkN&st=8/3/2023

3:32:02 AM

This will repair all your difficulties



--0000000000001e02900602024b3a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



LOAN OFFER wants to share this url with you -
.cc/34546de4235m342356?affsub2=3D3d47MkN&st=3D8/3/2023 3:32:02 AM">http=

://Zin3XE.sozi.cc/34546de4235m342356?affsub2=3D3d47MkN&st=3D8/3/2023 3:=

32:02 AM
This will repair all your difficulties



--0000000000001e02900602024b3a--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA