Loan Phish from China
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@nl2k.ab.ca
Delivery-date: Sun, 17 Mar 2024 14:10:17 -0600
Received: from [49.4.53.129] (port=1559 helo=mail.huanbobiotech.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rlwpd-000000000mr-3sK4
for dave@nl2k.ab.ca;
Sun, 17 Mar 2024 14:10:14 -0600
Received: from localhost (unknown [127.0.0.1])
by mail.huanbobiotech.com (Postfix) with ESMTP id EE02534FBE7
for; Fri, 1 Mar 2024 20:52:46 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=
huanbobiotech.com; h=reply-to:date:date:from:from:to:subject
:subject:content-description:content-transfer-encoding
:mime-version:content-type:content-type; s=dkim; t=1709326366;
x=1711918367; bh=wCwJnZi7ltBg3hx7C3IWpSMt04sFtAmTlP2biMHsUzs=; b=
HMEYiMPsWLdx8leRsk5V/F2dotBzxQeo/dY4eqx/hTRwpBuyokm3WrS3w8avT1hH
SHDRhM7PQlvaEPetnQ00aaAejJ2DagIkgCk7olDGdC9WxDGCrLLLEF1yoCSViMaM
gCH/LnB3Pdh2EcE5TUZi0PX6kjCGp8AKQ7lQq1Xhmu4=
X-Virus-Scanned: amavisd-new at huanbobiotech.com
Received: from mail.huanbobiotech.com ([127.0.0.1])
by localhost (mail.huanbobiotech.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id sEINPgtdyR_L for;
Sat, 2 Mar 2024 04:52:46 +0800 (CST)
Received: from [51.77.0.80] (ip80.ip-51-77-0.eu [51.77.0.80])
by mail.huanbobiotech.com (Postfix) with ESMTPA id 5043685134
for; Wed, 21 Feb 2024 02:25:56 +0800 (CST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: 3% Laon Offer
To: dave@nl2k.ab.ca
From: AG Financial
Date: Tue, 20 Feb 2024 10:27:51 -0800
Reply-To: agfinancialproductsinc@gmail.com
Message-Id: <20240301205246.EE02534FBE7@mail.huanbobiotech.com>
X-Spam_score: 9.1
X-Spam_score_int: 91
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings to you, We at AG Financial offer secured & unsecured
loans at a very low interest rate of 3%. We offer Personal loans, Debt Consolidation
Loan, Venture Capital, Business Loan,Education Loan, Home Loan or "Loa [...]
Content analysis details: (9.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[49.4.53.129 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[49.4.53.129 listed in bl.score.senderscore.com]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=test%40huanbobiotech.com;ip=49.4.53.129;r=doctor.nl2k.ab.ca]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
1.7 BAD_CREDIT BODY: Eliminate Bad Credit
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
-0.0 T_SCC_BODY_TEXT_LINE No description available.
Subject: {SPAM?} 3% Laon Offer
Greetings to you,
We at AG Financial offer secured & unsecured loans at a very low interest r=
ate of 3%. We offer Personal loans, Debt Consolidation Loan, Venture Capita=
l, Business Loan,Education Loan, Home Loan or "Loan for any reason! Do you =
have bad credit? You can still apply.
Contact us today for your applications!!!
Yours Truly,
Customer Service
Envelope-to: dave@nl2k.ab.ca
Delivery-date: Sun, 17 Mar 2024 14:10:17 -0600
Received: from [49.4.53.129] (port=1559 helo=mail.huanbobiotech.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rlwpd-000000000mr-3sK4
for dave@nl2k.ab.ca;
Sun, 17 Mar 2024 14:10:14 -0600
Received: from localhost (unknown [127.0.0.1])
by mail.huanbobiotech.com (Postfix) with ESMTP id EE02534FBE7
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=
huanbobiotech.com; h=reply-to:date:date:from:from:to:subject
:subject:content-description:content-transfer-encoding
:mime-version:content-type:content-type; s=dkim; t=1709326366;
x=1711918367; bh=wCwJnZi7ltBg3hx7C3IWpSMt04sFtAmTlP2biMHsUzs=; b=
HMEYiMPsWLdx8leRsk5V/F2dotBzxQeo/dY4eqx/hTRwpBuyokm3WrS3w8avT1hH
SHDRhM7PQlvaEPetnQ00aaAejJ2DagIkgCk7olDGdC9WxDGCrLLLEF1yoCSViMaM
gCH/LnB3Pdh2EcE5TUZi0PX6kjCGp8AKQ7lQq1Xhmu4=
X-Virus-Scanned: amavisd-new at huanbobiotech.com
Received: from mail.huanbobiotech.com ([127.0.0.1])
by localhost (mail.huanbobiotech.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id sEINPgtdyR_L for
Sat, 2 Mar 2024 04:52:46 +0800 (CST)
Received: from [51.77.0.80] (ip80.ip-51-77-0.eu [51.77.0.80])
by mail.huanbobiotech.com (Postfix) with ESMTPA id 5043685134
for
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: 3% Laon Offer
To: dave@nl2k.ab.ca
From: AG Financial
Date: Tue, 20 Feb 2024 10:27:51 -0800
Reply-To: agfinancialproductsinc@gmail.com
Message-Id: <20240301205246.EE02534FBE7@mail.huanbobiotech.com>
X-Spam_score: 9.1
X-Spam_score_int: 91
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings to you, We at AG Financial offer secured & unsecured
loans at a very low interest rate of 3%. We offer Personal loans, Debt Consolidation
Loan, Venture Capital, Business Loan,Education Loan, Home Loan or "Loa [...]
Content analysis details: (9.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[49.4.53.129 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[49.4.53.129 listed in bl.score.senderscore.com]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=test%40huanbobiotech.com;ip=49.4.53.129;r=doctor.nl2k.ab.ca]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
1.7 BAD_CREDIT BODY: Eliminate Bad Credit
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
-0.0 T_SCC_BODY_TEXT_LINE No description available.
Subject: {SPAM?} 3% Laon Offer
Greetings to you,
We at AG Financial offer secured & unsecured loans at a very low interest r=
ate of 3%. We offer Personal loans, Debt Consolidation Loan, Venture Capita=
l, Business Loan,Education Loan, Home Loan or "Loan for any reason! Do you =
have bad credit? You can still apply.
Contact us today for your applications!!!
Yours Truly,
Customer Service
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments