Nigerian Google Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 15 Mar 2024 07:38:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rl7kl-000000000x2-41eO
for dave@doctor.nl2k.ab.ca;
Fri, 15 Mar 2024 07:37:43 -0600
Resent-From: The Doctor
Resent-Date: Fri, 15 Mar 2024 07:37:43 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f47.google.com ([209.85.160.47]:40980)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rl2tu-00000000H9u-3PMj
for doctor@nl2k.ab.ca;
Fri, 15 Mar 2024 02:26:53 -0600
Received: by mail-oa1-f47.google.com with SMTP id 586e51a60fabf-2219edd959dso631499fac.0
for; Fri, 15 Mar 2024 01:24:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1710491090; x=1711095890; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=CyF46kQ9ktNX7W/1C+dOCjJjXnvqiSC3jKnVfAccbN0=;
b=gwh1mPhr7456a2vSXQ1smI7Ib74mp0jfCtNDnHUvdhapgvrr1jrqxKrYmj5bqAFnbD
wSvGWzueVvWJ3OoPjGfCFFB6SDIPY8CiFjqupH2wJg+5NkozOyBja9L1vUx9w2dE9NDh
5kwJgIIEY1yOwW6ehIWG7S9zN8ktPbD33Hw0NuDzem1/CaYSZjF/z32SQE5yq499FIUe
b3NU68WvPw+v+6ZjkpYayJZSBZaN+lGi+juJtxFQqMfDXVojrtI3D7lzZ5DZbHrb6/RF
HcMpOMlzxQfCC5CC4NkUw5UOTI0PFvxPeh11AYspdtHm8qixpgPB98CIowFP9o+t94Gf
ux6w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1710491090; x=1711095890;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=CyF46kQ9ktNX7W/1C+dOCjJjXnvqiSC3jKnVfAccbN0=;
b=m3bExHaCaN5uySJnjsnNCNstrJw3kLyUv51KnNXpkbID+9Eqp0+ILJ8o2gnwZM93uI
qbA16NQ1RnURk+OYrnsYLZlldt3YSkW1QOo0L301yQSQcS/dPmbM2GBVZBNT8WR2sIXa
lkXurTVLnZD7pmnRR4BERII0UoCrntGt7jsHfXXUPwAIAE8/OHjPZiDyoSD9DNRpeUiQ
cpndup3q11MIDSrjlfHxm+P+aKNvs1DLuKwuG+XmV0Rb4IiQs8nWA2dtERDg8NTmLCzM
zev1hvnLidskL5kyquYv0QVZskrqG58sYrLU9mBbWVqmCoOSx+MYZjK1JAcQBb1sBYBE
yzHA==
X-Forwarded-Encrypted: i=1; AJvYcCVubTpDd4XvScXC0WmTG0lB54VKgkV41FFxr8VvP4+IG3IClLXRNzNIdw4halWVzjl8FVTenwQNB5iMv1WRc2qtXQ==
X-Gm-Message-State: AOJu0YyDsBJknELeILJ1IR5ZW+eVsxeYSJPsEx05WIjC2gY0WofRqDLF
uE2SHnrRfcSv0eLMrHGU5dbpOrjdEG//7Gb7TLMr5+NSkaqMT38O3sgj0KREBjGvofl8hm/Beu9
fgXRzSlrsPb6vakBFD1MVj30BdZc=
X-Google-Smtp-Source: AGHT+IFTHBi5gxpjuj3qjQSSraerDrLij2gPwxTmY/TFajlXPjRvjlKPisgkHASQtWC3HFESheYv3mbUMFV6a6zwiZQ=
X-Received: by 2002:a05:6870:6190:b0:222:69b8:44b3 with SMTP id
a16-20020a056870619000b0022269b844b3mr3484029oah.3.1710491089810; Fri, 15 Mar
2024 01:24:49 -0700 (PDT)
MIME-Version: 1.0
Reply-To: mrslyndapeterson312@gmail.com
From: "Mrs.Lynda Peterson"
Date: Fri, 15 Mar 2024 09:24:15 +0100
Message-ID:
Subject: RESPOND PLEASE
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000ccbe040613aebd98"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 6.6
X-Spam_score_int: 66
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Can you be kind enough to be of great help to Invest in any
profitable business in your country? However you will get some remuneration
for your efforts as we progress. Can you be kind enough to be of great help
to Invest in any profitable business in your country? However you will get
some remuneration for your efforts as we progress.
Content analysis details: (6.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.160.47 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[mrslyndapeterson312(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[jameswilliamshayes(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} RESPOND PLEASE
--000000000000ccbe040613aebd98
Content-Type: text/plain; charset="UTF-8"
Can you be kind enough to be of great help to Invest in any profitable
business in your country? However you will get some remuneration for your
efforts as we progress.
--000000000000ccbe040613aebd98
Content-Type: text/html; charset="UTF-8"
Can you be kind enough to be of great help to Invest in any profitable
--000000000000ccbe040613aebd98--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 15 Mar 2024 07:38:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rl7kl-000000000x2-41eO
for dave@doctor.nl2k.ab.ca;
Fri, 15 Mar 2024 07:37:43 -0600
Resent-From: The Doctor
Resent-Date: Fri, 15 Mar 2024 07:37:43 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f47.google.com ([209.85.160.47]:40980)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rl2tu-00000000H9u-3PMj
for doctor@nl2k.ab.ca;
Fri, 15 Mar 2024 02:26:53 -0600
Received: by mail-oa1-f47.google.com with SMTP id 586e51a60fabf-2219edd959dso631499fac.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1710491090; x=1711095890; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=CyF46kQ9ktNX7W/1C+dOCjJjXnvqiSC3jKnVfAccbN0=;
b=gwh1mPhr7456a2vSXQ1smI7Ib74mp0jfCtNDnHUvdhapgvrr1jrqxKrYmj5bqAFnbD
wSvGWzueVvWJ3OoPjGfCFFB6SDIPY8CiFjqupH2wJg+5NkozOyBja9L1vUx9w2dE9NDh
5kwJgIIEY1yOwW6ehIWG7S9zN8ktPbD33Hw0NuDzem1/CaYSZjF/z32SQE5yq499FIUe
b3NU68WvPw+v+6ZjkpYayJZSBZaN+lGi+juJtxFQqMfDXVojrtI3D7lzZ5DZbHrb6/RF
HcMpOMlzxQfCC5CC4NkUw5UOTI0PFvxPeh11AYspdtHm8qixpgPB98CIowFP9o+t94Gf
ux6w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1710491090; x=1711095890;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=CyF46kQ9ktNX7W/1C+dOCjJjXnvqiSC3jKnVfAccbN0=;
b=m3bExHaCaN5uySJnjsnNCNstrJw3kLyUv51KnNXpkbID+9Eqp0+ILJ8o2gnwZM93uI
qbA16NQ1RnURk+OYrnsYLZlldt3YSkW1QOo0L301yQSQcS/dPmbM2GBVZBNT8WR2sIXa
lkXurTVLnZD7pmnRR4BERII0UoCrntGt7jsHfXXUPwAIAE8/OHjPZiDyoSD9DNRpeUiQ
cpndup3q11MIDSrjlfHxm+P+aKNvs1DLuKwuG+XmV0Rb4IiQs8nWA2dtERDg8NTmLCzM
zev1hvnLidskL5kyquYv0QVZskrqG58sYrLU9mBbWVqmCoOSx+MYZjK1JAcQBb1sBYBE
yzHA==
X-Forwarded-Encrypted: i=1; AJvYcCVubTpDd4XvScXC0WmTG0lB54VKgkV41FFxr8VvP4+IG3IClLXRNzNIdw4halWVzjl8FVTenwQNB5iMv1WRc2qtXQ==
X-Gm-Message-State: AOJu0YyDsBJknELeILJ1IR5ZW+eVsxeYSJPsEx05WIjC2gY0WofRqDLF
uE2SHnrRfcSv0eLMrHGU5dbpOrjdEG//7Gb7TLMr5+NSkaqMT38O3sgj0KREBjGvofl8hm/Beu9
fgXRzSlrsPb6vakBFD1MVj30BdZc=
X-Google-Smtp-Source: AGHT+IFTHBi5gxpjuj3qjQSSraerDrLij2gPwxTmY/TFajlXPjRvjlKPisgkHASQtWC3HFESheYv3mbUMFV6a6zwiZQ=
X-Received: by 2002:a05:6870:6190:b0:222:69b8:44b3 with SMTP id
a16-20020a056870619000b0022269b844b3mr3484029oah.3.1710491089810; Fri, 15 Mar
2024 01:24:49 -0700 (PDT)
MIME-Version: 1.0
Reply-To: mrslyndapeterson312@gmail.com
From: "Mrs.Lynda Peterson"
Date: Fri, 15 Mar 2024 09:24:15 +0100
Message-ID:
Subject: RESPOND PLEASE
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000ccbe040613aebd98"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 6.6
X-Spam_score_int: 66
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Can you be kind enough to be of great help to Invest in any
profitable business in your country? However you will get some remuneration
for your efforts as we progress. Can you be kind enough to be of great help
to Invest in any profitable business in your country? However you will get
some remuneration for your efforts as we progress.
Content analysis details: (6.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.160.47 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[mrslyndapeterson312(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[jameswilliamshayes(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} RESPOND PLEASE
--000000000000ccbe040613aebd98
Content-Type: text/plain; charset="UTF-8"
Can you be kind enough to be of great help to Invest in any profitable
business in your country? However you will get some remuneration for your
efforts as we progress.
--000000000000ccbe040613aebd98
Content-Type: text/html; charset="UTF-8"
Can you be kind enough to be of great help to Invest in any profitable
business in your country? However you will get some remuneration for
your efforts as we progress.
--000000000000ccbe040613aebd98--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments