X-rated Google Groups spam Kofi Eimunn <richardeimunn@gmail.com> from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jan 2024 08:58:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rUU0v-00000000Lf8-088P

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jan 2024 08:57:37 -0700

Resent-From: The Doctor

Resent-Date: Mon, 29 Jan 2024 08:57:37 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f60.google.com ([209.85.160.60]:49339)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rUTHm-00000000Evk-3Q1z

for root@mail.nl2k.ab.ca;

Mon, 29 Jan 2024 08:11:06 -0700

Received: by mail-oa1-f60.google.com with SMTP id 586e51a60fabf-21861dc97eesf1222325fac.2

for ; Mon, 29 Jan 2024 07:09:04 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1706540938; cv=pass;

d=google.com; s=arc-20160816;

b=dkosHZBwBSORnPYEyTWX5MXVi8+Tr7t0k6snJvGUTDnQxJST+Ukewv0kLyXz0H5u3g

VQL0kIZ3o/UcxMeKd+YIlaa9lkmlOdzpA0FPWmVpiYxhypEomBZkdEOfiMgWkff6P8Bd

jKW5yoz84+qsoz9AV1PNYhXNcqDLvm8b/XgD5UFmG0j6CxejUxDWlL+UAexPeKbx1ABc

8so8dBiDfok7vSy65Q2/cxFtS+DcKh6m44K4x+DE78SE89beAO4h6LVojbf++2jH3YRV

dkhkrVPQC26hClbUEFuI0bZ3NPojUoEg3QOuWGbmRkW0acsb+KvxKFKNtYnVMaLwuYrq

CMEA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=mkPn2BAvop7FaHXI6dsrAendmNgdIuENO2P3I/RrSMo=;

fh=F6LXu5JUuF5LO0wWrbknmVPEH4Mex6Ocv1WiJdmBxVE=;

b=TE8sLWcwdl72YHeecUAeaBFQcdRNQGymDXpE9TBqjfED+gVBOipsxAysLtW/uPSqJz

jl9mj2kx3FtgeeRyf/FK7As2ThYjXSd8jUp/J0nX3yyLdvkmvV1VOKi0a/PlMclF4SJd

5Cd2NiN6glXT/2fX0xH4WAVH1aXBrb3qysLVdtOQ/86iqRdB8o0G6ncNofHGRtzFNK2s

t0eKM4il5aVT29aqgoLV51AiRopWEELQzWekXLvq6HZ2YU+22MMQ4SvJoKqEJg9/einI

QnKj6Q8RcDGlcBPKrGFOWlLlxkiD06Gg2BGh/IoubBmQGL1BeLyjy99MEu13YDc6G0ia

+kAQ==

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=VlNAUj1y;

spf=pass (google.com: domain of richardeimunn@gmail.com designates 2607:f8b0:4864:20::934 as permitted sender) smtp.mailfrom=richardeimunn@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1706540938; x=1707145738; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=mkPn2BAvop7FaHXI6dsrAendmNgdIuENO2P3I/RrSMo=;

b=B0M8xwXeR0r5QWNjbLyZP72yNps6Hrz6DwEP533g+u8JMyRTtR0DUAjS1aYpKIyr/R

kMMrvn40N6rIbYLm5ardLjxCWXkhZWw8teemR0fF4Ffb1M8jb2md5kYZWrksEvWYFcBO

ZxkTp8cjFT4QDsY7SAn04q3fqxKKzf/bRslAsj5Lka1pBbGoY1ByKkUQ9aQHE3TbyOdW

k0niuRZ3F8dcFEBVQFvsr9OnrlagIn8ALXPYWj3tZrqrYue9/YYdatzT9XLrtI23gms4

DlvwbxxMWWmThUfxIFMvAOkELOrHSqk8NiUvjFxFd8hE12J0dKgiOIPrhIMHU0Zwp/q2

Tf+g==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1706540938; x=1707145738; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=mkPn2BAvop7FaHXI6dsrAendmNgdIuENO2P3I/RrSMo=;

b=j8fAg5eg3NqLvAW/XudjI/bFrTyJ1PFGI7XNcQvacVrXv2KkNvzMXUTigFM0vlloyT

80rJhvyyJPIw2YIHHVELxWPkPAU6AYxsM2xleKcmXYyvLhAM6WzSxwwLq3Yj0+uL5vks

Hd1zRuKMvsU1bEDqhvTZtUQJhEpGuNCIrmI98y8YpP3I73Yw/XajRcoWzcTv4AlKYPKD

MZI4SnsVhLF8k9jCXOaTckD6CZncMcV+I+cHq9I3UvuB7mjXl8tpwsPn/zh8dz23VBuc

VmnBK1jmvOEj7hogqk88FDyn9W6ms8ljeFF3z7LusgiIwLj2UIRDkPlssHzsxCbFW/FE

V+/w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1706540938; x=1707145738;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=mkPn2BAvop7FaHXI6dsrAendmNgdIuENO2P3I/RrSMo=;

b=Fe/mAKNAQpiXUh/4Ezz9YbsAR0XmdsvCpdLEn0Vy0IC9nLmMyTclv7wIOpip+jebDF

y85/ym0+3mYHBHBSCJZYGa8iZzcKCU3IHd0AyJYGp/EPsb1DMZ2P+hiaLGJkuj92xWio

TQAEvQKatnvOMf/183r/kbA0lPIYj4fZ7KA6LW//vUBiIcoeLUhzXPnpDZSanp+USYmT

tbpoD1gGe5bdj3LRBMbtCieLiDc8ikAa/H4qTX/EaOotbthu1qKU1jn6OEMRubRI2X29

C3BMFxrIYq/GeknRc/DJnI6d+J/rENkPBLBQ/pB1Z3TEa62QPRBMPeYMwhorsWVkONxC

WPnA==

Sender: fresh_01_58528212485814@googlegroups.com

X-Gm-Message-State: AOJu0YwiLnI6KabS2jC02FFJhGaaDDZcZRIgf9b3uCAM+Ac3ckp9QBbL

I6qzKhNjvH1Trx8ZJEnwQO/0uWxccIPwEGLNkDReZp5tQws3q89L

X-Google-Smtp-Source: AGHT+IGKjAGxBisKBjvS7dr/p4eyYK92FyXcEbwjl3svamgj/1dmSSW2Z/WNL71f1NH/zDJaGn3EvA==

X-Received: by 2002:a05:6871:5a95:b0:218:7f05:2b35 with SMTP id oo21-20020a0568715a9500b002187f052b35mr1689326oac.40.1706540938357;

Mon, 29 Jan 2024 07:08:58 -0800 (PST)

X-BeenThere: fresh_01_58528212485814@googlegroups.com

Received: by 2002:a05:6870:4994:b0:218:6e00:6a0f with SMTP id

ho20-20020a056870499400b002186e006a0fls1370492oab.2.-pod-prod-03-us; Mon, 29

Jan 2024 07:08:56 -0800 (PST)

X-Received: by 2002:a05:6870:b613:b0:218:890a:17bd with SMTP id cm19-20020a056870b61300b00218890a17bdmr1549542oab.49.1706540936520;

Mon, 29 Jan 2024 07:08:56 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1706540936; cv=none;

d=google.com; s=arc-20160816;

b=fjsPonJgA7Wygmht1O6RS4x5ITtwOgD3ZqlQz6N+KyTh+E7xPmF0RBcZO086DYABg9

me3jM3kRdiJ+3Iwmf8sRCulEj+7FDsm8RYIANBA3Und7VAEGevoct+KjHrnQi16tOO1A

KW4Hz5O8W1OSBqxtGeNKQ1D7+coSzsnGgGYNA0/h8jab7VP+l98af2P3Dfcf9b+3DJHU

AOkXCGg3rRclnwJGzpPGpVUjE0DrVT9tq+Un6cAZX9QSKbZK+Md4YHDZfZjGmPFB0ngp

Hqiz+xW7lTVQCjuazWNQt0isNpKQ6wmrpW//o5Xh/hzpaU6ViIge4AWlz9y+vM1SaBJg

o29A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=hTOaBKhaN1o9pzANQU6m08zhjVdDY1e4KF8TkKZPEgs=;

fh=F6LXu5JUuF5LO0wWrbknmVPEH4Mex6Ocv1WiJdmBxVE=;

b=XZFYHq402yph6Tx4jAnxJ8JJt/CK8o9YKD7N+yvu6y0SF9Xn1vuAvs/vH0PpBseRni

C19e7tr70T/zE9geOzpSCJkFqog0VMK7ciOY4ZdLYlc9YY58swRhaOTyogqO1Hh/Ttzb

oyuu/T4RheKYnG6y3RxRTRCWgJaabbHjTRVijtCDqrAuMAw+P3hxykcWUT/JT4pac2Y3

gZq0nbHFe7tBcDq5KfNwlI6YM9ceq3MBE3QLrWhP4CXnyH6Jlf2Jo8RBZd6MHmgNtUnj

bPfU13/u5ssHMSJmmHtoN9DhIynnaTYITctfOv47bJr1Uxuj50VO3guJ6imKGls5Pl1H

NU/A==

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=VlNAUj1y;

spf=pass (google.com: domain of richardeimunn@gmail.com designates 2607:f8b0:4864:20::934 as permitted sender) smtp.mailfrom=richardeimunn@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-ua1-x934.google.com (mail-ua1-x934.google.com. [2607:f8b0:4864:20::934])

by gmr-mx.google.com with ESMTPS id lw23-20020a0568708e1700b00218449896dasi807542oab.0.2024.01.29.07.08.56

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Mon, 29 Jan 2024 07:08:56 -0800 (PST)

Received-SPF: pass (google.com: domain of richardeimunn@gmail.com designates 2607:f8b0:4864:20::934 as permitted sender) client-ip=2607:f8b0:4864:20::934;

Received: by mail-ua1-x934.google.com with SMTP id a1e0cc1a2514c-7d2e1832d4dso979653241.2;

Mon, 29 Jan 2024 07:08:56 -0800 (PST)

X-Received: by 2002:a05:6122:d1c:b0:4b6:c299:4a8f with SMTP id

az28-20020a0561220d1c00b004b6c2994a8fmr1778245vkb.5.1706540935634; Mon, 29

Jan 2024 07:08:55 -0800 (PST)

MIME-Version: 1.0

From: Kofi Eimunn

Date: Mon, 29 Jan 2024 21:08:44 +0600

Message-ID:

Subject: Busty girl looking for FWB

To: fresh_01_5852821245961@googlegroups.com,

fresh_01_5852821245963@googlegroups.com,

fresh_01_5852821245967@googlegroups.com,

fresh_01_585282124596@googlegroups.com, fresh_01_5852821245@googlegroups.com,

fresh_01_58528212485814@googlegroups.com,

fresh_01_5852821249@googlegroups.com, fresh_01_5852821250@googlegroups.com,

fresh_01_585282125480@googlegroups.com, fresh_01_58528212549@googlegroups.com

Content-Type: multipart/alternative; boundary="0000000000004368170610170625"

X-Original-Sender: richardeimunn@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=VlNAUj1y; spf=pass

(google.com: domain of richardeimunn@gmail.com designates 2607:f8b0:4864:20::934

as permitted sender) smtp.mailfrom=richardeimunn@gmail.com; dmarc=pass

(p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list fresh_01_58528212485814@googlegroups.com; contact fresh_01_58528212485814+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: fresh_01_58528212485814@googlegroups.com

X-Google-Group-Id: 128202668634

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey, Do u like to meet me? If u r real person? Plz just text

here> sites.google.com/view/rmsn23 There is no requirement to have any credit

cards so I think we both are safe ////////////////



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.60 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.60 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 ARC_VALID Message has a valid ARC signature

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.2 MIME_BOUND_DIGITS_15 Spam tool pattern in MIME boundary

2.5 SORTED_RECIPS Recipient list is sorted by address

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[richardeimunn(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

Subject: {SPAM?} Busty girl looking for FWB

X-Antivirus: AVG (VPS 240129-6, 1/29/2024), Inbound message

X-Antivirus-Status: Clean



--0000000000004368170610170625

Content-Type: text/plain; charset="UTF-8"



Hey,

Do u like to meet me? If u r real person?

Plz just text here> sites.google.com/view/rmsn23



There is no requirement to have any credit cards so I think we both are safe











































////////////////



--

You received this message because you are subscribed to the Google Groups "fresh_01_58528212485814" group.

To unsubscribe from this group and stop receiving emails from it, send an email to fresh_01_58528212485814+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/fresh_01_58528212485814/CABe8ofSrhxXTABdKpOA1_%2BjbpHANY61vKvtUsQ7BkrFOcMtrLA%40mail.gmail.com.



--0000000000004368170610170625

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey,
Do u like to meet me? If u r real person?
Plz j=

ust text here> =C2=A0 =C2=A0
23">sites.google.com/view/rmsn23

There is no requirement to have=

any credit cards so I think we both are safe







r>













////////////////<=

br>








--


You received this message because you are subscribed to the Google Groups &=

quot;fresh_01_58528212485814" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to
com">fresh_01_58528212485814+unsubscribe@googlegroups.com.


To view this discussion on the web, visit
com/d/msgid/fresh_01_58528212485814/CABe8ofSrhxXTABdKpOA1_%2BjbpHANY61vKvtU=

sQ7BkrFOcMtrLA%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">htt=

ps://groups.google.com/d/msgid/fresh_01_58528212485814/CABe8ofSrhxXTABdKpOA=

1_%2BjbpHANY61vKvtUsQ7BkrFOcMtrLA%40mail.gmail.com.




--0000000000004368170610170625--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA