Compensation spam from google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 07 May 2024 07:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1s4Kyr-000000006oN-34bL
for dave@doctor.nl2k.ab.ca;
Tue, 07 May 2024 07:35:41 -0600
Resent-From: The Doctor
Resent-Date: Tue, 7 May 2024 07:35:41 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f177.google.com ([209.85.210.177]:44100)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1s4GAh-00000000JRC-00MK
for doctor@doctor.nl2k.ab.ca;
Tue, 07 May 2024 02:27:38 -0600
Received: by mail-pf1-f177.google.com with SMTP id d2e1a72fcca58-6f4521ad6c0so2076126b3a.0
for; Tue, 07 May 2024 01:25:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1715070335; x=1715675135; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=JPClQyv9PrWpwTzE6qnlgOaLtqSy+O/WPv7C/0eUT3g=;
b=WQNAYh2h1iPlaxbgOgjHcUOMYyx0EY5ZYkAv0MIm+WzqsOPnyNDkLpG9BJ9C7/zQuz
W2VgsI07fhNL4CnGQ2rfdn7Zd4F+Qke6rQNQwLKOS1t2zUf9PYTWMnYRGcAD7ZuUXb8S
rrYcbBlUqnqtLD+P+VCOeSyeipJ/7J4yWR1o1Fz2OEYtyNZZ0hj61/hJVO5daFUHrOVd
RuUFvtciChjCffAMqHzdD0DLlf55LMBUEvzNmo4qD0z+MTQzAi1hwlzc9HEHeejEresp
ZMa3sm4Y70mtGc3N7Caj/yL9uNImLaWxNcC4QvAmR2ox+KKHY7gVuhqNjBs4/ZOnxLE+
Y9PA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1715070335; x=1715675135;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=JPClQyv9PrWpwTzE6qnlgOaLtqSy+O/WPv7C/0eUT3g=;
b=fmtAyN3Ll81SuQUeYSYcn71nPjOp7PajstQlmziC8iUF3k/nhxxBeux+BzKel4Akx3
6mpekwGupuyA6nKW8sXPVvLF8EXqdXnwZDTEnVzmSedxIIuGs2o3d/VaOeoRr1stl/EE
M0mI/g/V8Sr2DPAU0Hm1n+hlk8td3ALYlGzj55dfeH5CEYvRZ/7lg6EE9m6fWgIW4c9r
tYgmw/W4X6VUNCwJhcVDfsF5bVFucyMjHsBhWs5KtzH2BL0BFwceCpgikrELuvsu3Gvw
fEm3LDgzWeWq7fg9SXQzfM3p9LE9u/DwNr8UMgDk+FLykOOKUTAyoh7lWJ40812+Omax
5OVQ==
X-Forwarded-Encrypted: i=1; AJvYcCXkSzAZ01T+W3IL40lEtF40Y2RfXIPAjrnAOJrdGP1bd38myDeoAVrB5mgrIhuxVZFiifozGzcN4mRXjEvE+fsmR/CE9+kyWDg=
X-Gm-Message-State: AOJu0YxYRu2m3EXjLaqHlqd6fKdJXWM7Xxi40cxjUpRz+gPE6DRThKWq
9oAR7T8ez3A26Cj4bQx7WWnmAsFxHMxuVwmRLiMZSPXrXvy6TQQUTVON/MpCJdk0wiNOy0ScXrd
w401U5SO7o8l2Y70HTvpeU4xhfXc=
X-Google-Smtp-Source: AGHT+IFQ2raUoNEqf1JVlExv07mO6V6pjme5MEP8ICU0enpGAuwqZP7kGsIo1vzttQbJ+Y9Mlkz7MPbpMhpSMK70PcM=
X-Received: by 2002:a05:6a00:987:b0:6e6:9f47:c18c with SMTP id
u7-20020a056a00098700b006e69f47c18cmr14511707pfg.33.1715070334641; Tue, 07
May 2024 01:25:34 -0700 (PDT)
MIME-Version: 1.0
Reply-To: donaldfrank133@gmail.com
From: "Mr.Edwards"
Date: Tue, 7 May 2024 08:25:21 +0000
Message-ID:
Subject:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000000faedf0617d8eee5"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 12.0
X-Spam_score_int: 120
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings to you and your family, have you received the compensation
money I sent to you through my Secretary frank Donald Greetings to you and
your family, have you received the compensation money I sent to you through
my Secretary frank Donald
Content analysis details: (12.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.210.177 listed in dnsbl.ahbl.org]
[209.85.210.177 listed in dnsbl.ahbl.org]
[209.85.210.177 listed in dnsbl.ahbl.org]
[209.85.210.177 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.210.177 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.210.177 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.210.177 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.210.177 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.177 listed in list.dnswl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.210.177 listed in will-spam-for-food.eu.org]
[209.85.210.177 listed in will-spam-for-food.eu.org]
[209.85.210.177 listed in will-spam-for-food.eu.org]
[209.85.210.177 listed in will-spam-for-food.eu.org]
[209.85.210.177 listed in will-spam-for-food.eu.org]
[209.85.210.177 listed in will-spam-for-food.eu.org]
[209.85.210.177 listed in will-spam-for-food.eu.org]
[209.85.210.177 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.177 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[pw913419(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[pw913419(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[donaldfrank133(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?}
Lines: 15
--0000000000000faedf0617d8eee5
Content-Type: text/plain; charset="UTF-8"
Greetings to you and your family, have you received the compensation money
I sent to you through my Secretary frank Donald
--0000000000000faedf0617d8eee5
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 07 May 2024 07:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1s4Kyr-000000006oN-34bL
for dave@doctor.nl2k.ab.ca;
Tue, 07 May 2024 07:35:41 -0600
Resent-From: The Doctor
Resent-Date: Tue, 7 May 2024 07:35:41 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f177.google.com ([209.85.210.177]:44100)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1s4GAh-00000000JRC-00MK
for doctor@doctor.nl2k.ab.ca;
Tue, 07 May 2024 02:27:38 -0600
Received: by mail-pf1-f177.google.com with SMTP id d2e1a72fcca58-6f4521ad6c0so2076126b3a.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1715070335; x=1715675135; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=JPClQyv9PrWpwTzE6qnlgOaLtqSy+O/WPv7C/0eUT3g=;
b=WQNAYh2h1iPlaxbgOgjHcUOMYyx0EY5ZYkAv0MIm+WzqsOPnyNDkLpG9BJ9C7/zQuz
W2VgsI07fhNL4CnGQ2rfdn7Zd4F+Qke6rQNQwLKOS1t2zUf9PYTWMnYRGcAD7ZuUXb8S
rrYcbBlUqnqtLD+P+VCOeSyeipJ/7J4yWR1o1Fz2OEYtyNZZ0hj61/hJVO5daFUHrOVd
RuUFvtciChjCffAMqHzdD0DLlf55LMBUEvzNmo4qD0z+MTQzAi1hwlzc9HEHeejEresp
ZMa3sm4Y70mtGc3N7Caj/yL9uNImLaWxNcC4QvAmR2ox+KKHY7gVuhqNjBs4/ZOnxLE+
Y9PA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1715070335; x=1715675135;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=JPClQyv9PrWpwTzE6qnlgOaLtqSy+O/WPv7C/0eUT3g=;
b=fmtAyN3Ll81SuQUeYSYcn71nPjOp7PajstQlmziC8iUF3k/nhxxBeux+BzKel4Akx3
6mpekwGupuyA6nKW8sXPVvLF8EXqdXnwZDTEnVzmSedxIIuGs2o3d/VaOeoRr1stl/EE
M0mI/g/V8Sr2DPAU0Hm1n+hlk8td3ALYlGzj55dfeH5CEYvRZ/7lg6EE9m6fWgIW4c9r
tYgmw/W4X6VUNCwJhcVDfsF5bVFucyMjHsBhWs5KtzH2BL0BFwceCpgikrELuvsu3Gvw
fEm3LDgzWeWq7fg9SXQzfM3p9LE9u/DwNr8UMgDk+FLykOOKUTAyoh7lWJ40812+Omax
5OVQ==
X-Forwarded-Encrypted: i=1; AJvYcCXkSzAZ01T+W3IL40lEtF40Y2RfXIPAjrnAOJrdGP1bd38myDeoAVrB5mgrIhuxVZFiifozGzcN4mRXjEvE+fsmR/CE9+kyWDg=
X-Gm-Message-State: AOJu0YxYRu2m3EXjLaqHlqd6fKdJXWM7Xxi40cxjUpRz+gPE6DRThKWq
9oAR7T8ez3A26Cj4bQx7WWnmAsFxHMxuVwmRLiMZSPXrXvy6TQQUTVON/MpCJdk0wiNOy0ScXrd
w401U5SO7o8l2Y70HTvpeU4xhfXc=
X-Google-Smtp-Source: AGHT+IFQ2raUoNEqf1JVlExv07mO6V6pjme5MEP8ICU0enpGAuwqZP7kGsIo1vzttQbJ+Y9Mlkz7MPbpMhpSMK70PcM=
X-Received: by 2002:a05:6a00:987:b0:6e6:9f47:c18c with SMTP id
u7-20020a056a00098700b006e69f47c18cmr14511707pfg.33.1715070334641; Tue, 07
May 2024 01:25:34 -0700 (PDT)
MIME-Version: 1.0
Reply-To: donaldfrank133@gmail.com
From: "Mr.Edwards"
Date: Tue, 7 May 2024 08:25:21 +0000
Message-ID:
Subject:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000000faedf0617d8eee5"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 12.0
X-Spam_score_int: 120
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings to you and your family, have you received the compensation
money I sent to you through my Secretary frank Donald Greetings to you and
your family, have you received the compensation money I sent to you through
my Secretary frank Donald
Content analysis details: (12.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.210.177 listed in dnsbl.ahbl.org]
[209.85.210.177 listed in dnsbl.ahbl.org]
[209.85.210.177 listed in dnsbl.ahbl.org]
[209.85.210.177 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.210.177 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.210.177 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.210.177 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.210.177 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.177 listed in list.dnswl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.210.177 listed in will-spam-for-food.eu.org]
[209.85.210.177 listed in will-spam-for-food.eu.org]
[209.85.210.177 listed in will-spam-for-food.eu.org]
[209.85.210.177 listed in will-spam-for-food.eu.org]
[209.85.210.177 listed in will-spam-for-food.eu.org]
[209.85.210.177 listed in will-spam-for-food.eu.org]
[209.85.210.177 listed in will-spam-for-food.eu.org]
[209.85.210.177 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.177 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[pw913419(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[pw913419(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[donaldfrank133(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?}
Lines: 15
--0000000000000faedf0617d8eee5
Content-Type: text/plain; charset="UTF-8"
Greetings to you and your family, have you received the compensation money
I sent to you through my Secretary frank Donald
--0000000000000faedf0617d8eee5
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Greetings to you and your family, have you received the co=
mpensation money I sent to you through my Secretary frank Donald=C2=A0
<=
/div>
--0000000000000faedf0617d8eee5--
mpensation money I sent to you through my Secretary frank Donald=C2=A0
<=
/div>
--0000000000000faedf0617d8eee5--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments