Desparation spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 24 Nov 2023 14:15:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from)
id 1r6dV7-000000002WN-2HhO
for dave@doctor.nl2k.ab.ca;
Fri, 24 Nov 2023 14:14:13 -0700
Resent-From: The Doctor
Resent-Date: Fri, 24 Nov 2023 14:14:13 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f178.google.com ([209.85.160.178]:45459)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97 (FreeBSD))
(envelope-from)
id 1r6bPD-00000000NSV-2MkL
for doctor@doctor.nl2k.ab.ca;
Fri, 24 Nov 2023 12:00:02 -0700
Received: by mail-qt1-f178.google.com with SMTP id d75a77b69052e-41cc44736f2so11512011cf.3
for; Fri, 24 Nov 2023 10:58:01 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1700852275; x=1701457075; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=XuUzjCoSCtB6yJ8X3hOeOI2RzidfUmQZse/Jkvjh1x4=;
b=UJQPq7M/bODGlKbK8o823ylsRdozLu//yrL1teNsmbDD87lE70t3hSuB1Z+ArJjtVO
fFVBKd6uAATOAAIfwSIeZ0dfRLehuZiLNOD/FdpxmXPJ5jKtz0nrcfTWNZSnfcssl1QC
dPj2EFAObTRSSlY5/D39uAt4y76PY/PQMhy1LkJegc7EcFlLffE+j/iWF5exIdmrDF5g
BGvBwGhz9J2mIozFyzfhcft2QCD3jPkD2Mcr0KoRT8ykJAtRtWeenjONiq5SBqcggUt6
s5iJqOzHWMHJRr29ctSfuiAg19TyAPNZOfo+EdxbYbVzbVl1b0mgtbewDdY4L6eI5l7T
K1xA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1700852275; x=1701457075;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=XuUzjCoSCtB6yJ8X3hOeOI2RzidfUmQZse/Jkvjh1x4=;
b=Q96DHcWjRlGDE/H1n6Cag5pK29VeICL/n+pViEZhL+F2c5NfzIvZRr6gcROZy66F3g
WUz3toQ+m9zJjxa1dmSbyIx0fJdByOljrOBbj6dgefbgJKGkfzSQNKrEGMOjAJdwrqN0
pt+5BvbDjJ0DlWXfTweK+ofU/INtsnAV+gEfnbDNG8nqF/ekmODONOn2hFn0GIeX85Oj
ybYuRtRriDXdqLoZUVUZb8olsEzczItlPp0KkOqjHVglgHhVKtxv6V5IP8IG5XNutFGG
6LqGYvsSjHKfBRory0CpCVBx2FfX+/GZjTJyf2SWfWoE//YZ7M3hAVi8v53s8rKmclmT
dPgQ==
X-Gm-Message-State: AOJu0YwsM5ciaTiqrOjQ5odVETefalJmB1VmsMIHLpc7N+DVBjA/ej67
j/JLdMXng0YaK4d2zgTr/3l7ww4huhIY+h5/pbA=
X-Google-Smtp-Source: AGHT+IE4K7msMoVssA7Njts46SIxM2fabVmcJCCDa4z2PnjF5KcYFAUTuzP1fNbN1ToK4KSlNTgSCLzkP3ManP1bR3s=
X-Received: by 2002:ac8:5c02:0:b0:41e:3259:529a with SMTP id
i2-20020ac85c02000000b0041e3259529amr4975833qti.9.1700852275029; Fri, 24 Nov
2023 10:57:55 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:ac8:4e83:0:b0:41e:1e40:cab3 with HTTP; Fri, 24 Nov 2023
10:57:54 -0800 (PST)
Reply-To: robertkoffi2@gmail.com
From: Mr Robert Koffi
Date: Fri, 24 Nov 2023 18:57:54 +0000
Message-ID:
Subject: HI
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello Dear Friend. Good Day. Did you receive my previous email?
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.178 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.178 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[robertkoffi2(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[chiji4uandme(at)gmail.com]
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} HI
X-Antivirus: AVG (VPS 231123-12, 11/23/2023), Inbound message
X-Antivirus-Status: Clean
Hello Dear Friend.
Good Day.
Did you receive my previous email?
Best Regards.
Mr.Robert Koffi.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 24 Nov 2023 14:15:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from
id 1r6dV7-000000002WN-2HhO
for dave@doctor.nl2k.ab.ca;
Fri, 24 Nov 2023 14:14:13 -0700
Resent-From: The Doctor
Resent-Date: Fri, 24 Nov 2023 14:14:13 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f178.google.com ([209.85.160.178]:45459)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97 (FreeBSD))
(envelope-from
id 1r6bPD-00000000NSV-2MkL
for doctor@doctor.nl2k.ab.ca;
Fri, 24 Nov 2023 12:00:02 -0700
Received: by mail-qt1-f178.google.com with SMTP id d75a77b69052e-41cc44736f2so11512011cf.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1700852275; x=1701457075; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=XuUzjCoSCtB6yJ8X3hOeOI2RzidfUmQZse/Jkvjh1x4=;
b=UJQPq7M/bODGlKbK8o823ylsRdozLu//yrL1teNsmbDD87lE70t3hSuB1Z+ArJjtVO
fFVBKd6uAATOAAIfwSIeZ0dfRLehuZiLNOD/FdpxmXPJ5jKtz0nrcfTWNZSnfcssl1QC
dPj2EFAObTRSSlY5/D39uAt4y76PY/PQMhy1LkJegc7EcFlLffE+j/iWF5exIdmrDF5g
BGvBwGhz9J2mIozFyzfhcft2QCD3jPkD2Mcr0KoRT8ykJAtRtWeenjONiq5SBqcggUt6
s5iJqOzHWMHJRr29ctSfuiAg19TyAPNZOfo+EdxbYbVzbVl1b0mgtbewDdY4L6eI5l7T
K1xA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1700852275; x=1701457075;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=XuUzjCoSCtB6yJ8X3hOeOI2RzidfUmQZse/Jkvjh1x4=;
b=Q96DHcWjRlGDE/H1n6Cag5pK29VeICL/n+pViEZhL+F2c5NfzIvZRr6gcROZy66F3g
WUz3toQ+m9zJjxa1dmSbyIx0fJdByOljrOBbj6dgefbgJKGkfzSQNKrEGMOjAJdwrqN0
pt+5BvbDjJ0DlWXfTweK+ofU/INtsnAV+gEfnbDNG8nqF/ekmODONOn2hFn0GIeX85Oj
ybYuRtRriDXdqLoZUVUZb8olsEzczItlPp0KkOqjHVglgHhVKtxv6V5IP8IG5XNutFGG
6LqGYvsSjHKfBRory0CpCVBx2FfX+/GZjTJyf2SWfWoE//YZ7M3hAVi8v53s8rKmclmT
dPgQ==
X-Gm-Message-State: AOJu0YwsM5ciaTiqrOjQ5odVETefalJmB1VmsMIHLpc7N+DVBjA/ej67
j/JLdMXng0YaK4d2zgTr/3l7ww4huhIY+h5/pbA=
X-Google-Smtp-Source: AGHT+IE4K7msMoVssA7Njts46SIxM2fabVmcJCCDa4z2PnjF5KcYFAUTuzP1fNbN1ToK4KSlNTgSCLzkP3ManP1bR3s=
X-Received: by 2002:ac8:5c02:0:b0:41e:3259:529a with SMTP id
i2-20020ac85c02000000b0041e3259529amr4975833qti.9.1700852275029; Fri, 24 Nov
2023 10:57:55 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:ac8:4e83:0:b0:41e:1e40:cab3 with HTTP; Fri, 24 Nov 2023
10:57:54 -0800 (PST)
Reply-To: robertkoffi2@gmail.com
From: Mr Robert Koffi
Date: Fri, 24 Nov 2023 18:57:54 +0000
Message-ID:
Subject: HI
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello Dear Friend. Good Day. Did you receive my previous email?
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.178 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.178 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[robertkoffi2(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[chiji4uandme(at)gmail.com]
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} HI
X-Antivirus: AVG (VPS 231123-12, 11/23/2023), Inbound message
X-Antivirus-Status: Clean
Hello Dear Friend.
Good Day.
Did you receive my previous email?
Best Regards.
Mr.Robert Koffi.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments