Business opportunity spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 29 Jul 2024 15:33:00 -0600
Received: from mail-io1-f49.google.com ([209.85.166.49]:39724)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1sYXz2-00000000J1x-3Jsi
for dave@doctor.nl2k.ab.ca;
Mon, 29 Jul 2024 15:32:47 -0600
Received: by mail-io1-f49.google.com with SMTP id ca18e2360f4ac-812796ac793so20820539f.3
for; Mon, 29 Jul 2024 14:30:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1722288644; x=1722893444; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=3n7ED8vNHHLT7hlkIIWSv5syxD4DDc76tqAAOhKo0d4=;
b=IgRZklD4myqpQ8zhs3W0qjpJWwj0nbOHoQFxjW8EeSrXuLOjVKjaHYCjReG6Hy/ljK
oCecc/OJmWaiBhilXGs1Wgmk+lNtV/Gs5tg9aT3vrzyq0FuW2HkK6FAkMPvgSyWYDksT
ImT1Kk2as4XPUrJgTp8FN64rh8bwcLHD0NbE8LG9Pe2/xH3t4UJoapN6iWkMM90zjLNP
0q1tUcKehXFcus1KbYiHo09I+Jm+gyml4HDDTyPOcRWAMqFzUm1HAf+UY7wlLKh2SYfi
M+Zyci9qjk2KdbWin7GTOMmvGuAFCJJ8rg3jTUeNRETx7LeZYRhZA5TB50sdySgfiCGV
Km5Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1722288644; x=1722893444;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=3n7ED8vNHHLT7hlkIIWSv5syxD4DDc76tqAAOhKo0d4=;
b=C5uQZjRuEQi6KzT5ZosufQEKNHOw/ALNOzLe6qxPEGlUVdTXNKZcLQ/4NilO/4Prxc
jvbDEJkZrcfz9YmQZu0WIdf1s8V7PF9KplCzLv+VZWqfUQB/+cjK+XliNB+8TPJcAgjn
tdN2RwIz/Mjg3WYlOLAMjXE2UolpYEnqzIqOcP3SaorzP95H9gMVjaR8jW2pdisv+H+D
8aB9Ke7kG8cuWt9gospONGd+ueAaBgetOflFBlLLGxneTvYKmpy31za6gueYN5/ID5PW
wGD5+Kij+2b1nnyzq5ltzEttVKlJGucLqGTpxKSUEkkn0i0JDZR8KCcGq8vc80csOpbQ
KxTw==
X-Gm-Message-State: AOJu0YwFVuXZu5yZLF0njINPUI4XeYReJv6RzPT97FTFiGAOAaKQ0OuH
rD0p+K4FnnvJlrClPSDbY5fvx//4JYoLz34+xB6frEWQB2PojaVncdXBu9hbYhYo9LJ1aN2mlP3
VfTEJUP27Lbf89L9/gAkSn75UsimEebWSlI8=
X-Google-Smtp-Source: AGHT+IHqq5V/VBcdVrqMaCoChES8YxbKzo5G38Ynl/eAKdREIMCIHDzCgJ41tWy8IZIeFCdvP/tYOz9p9BiehPYcTcQ=
X-Received: by 2002:a05:6e02:1c42:b0:383:17f9:6223 with SMTP id
e9e14a558f8ab-39a22cc25b5mr90926695ab.2.1722288644320; Mon, 29 Jul 2024
14:30:44 -0700 (PDT)
MIME-Version: 1.0
From: Dr Charles Edward
Date: Mon, 29 Jul 2024 21:30:38 +0000
Message-ID:
Subject: Dr Charles Edward
To: dave
Content-Type: multipart/alternative; boundary="000000000000d874a4061e699276"
X-Spam_score: 5.5
X-Spam_score_int: 55
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Fantastic day I recently sent you a message containing a link.
Please don't miss this opportunity as it might have gone to your spam folder.
I believe this could be something of your interest. Kind thoughts,Dr Charles
Edward
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.166.49 listed in dnsbl.ahbl.org]
[209.85.166.49 listed in dnsbl.ahbl.org]
[209.85.166.49 listed in dnsbl.ahbl.org]
[209.85.166.49 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.166.49 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.166.49 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.166.49 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.166.49 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.166.49 listed in will-spam-for-food.eu.org]
[209.85.166.49 listed in will-spam-for-food.eu.org]
[209.85.166.49 listed in will-spam-for-food.eu.org]
[209.85.166.49 listed in will-spam-for-food.eu.org]
[209.85.166.49 listed in will-spam-for-food.eu.org]
[209.85.166.49 listed in will-spam-for-food.eu.org]
[209.85.166.49 listed in will-spam-for-food.eu.org]
[209.85.166.49 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.166.49 listed in list.dnswl.org]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.49 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[qytbrianhall856(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[qytbrianhall856(at)gmail.com]
0.6 J_CHICKENPOX_82 BODY: 8alpha-pock-2alpha
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HK_NAME_FM_DR No description available.
Subject: {SPAM?} Dr Charles Edward
--000000000000d874a4061e699276
Content-Type: text/plain; charset="UTF-8"
Fantastic day
I recently sent you a message containing a link. Please don't miss this
opportunity as it might have gone to your spam folder. I believe this could
be something of your interest.
Kind thoughts,Dr Charles Edward
--000000000000d874a4061e699276
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000d874a4061e699276--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 29 Jul 2024 15:33:00 -0600
Received: from mail-io1-f49.google.com ([209.85.166.49]:39724)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1sYXz2-00000000J1x-3Jsi
for dave@doctor.nl2k.ab.ca;
Mon, 29 Jul 2024 15:32:47 -0600
Received: by mail-io1-f49.google.com with SMTP id ca18e2360f4ac-812796ac793so20820539f.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1722288644; x=1722893444; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=3n7ED8vNHHLT7hlkIIWSv5syxD4DDc76tqAAOhKo0d4=;
b=IgRZklD4myqpQ8zhs3W0qjpJWwj0nbOHoQFxjW8EeSrXuLOjVKjaHYCjReG6Hy/ljK
oCecc/OJmWaiBhilXGs1Wgmk+lNtV/Gs5tg9aT3vrzyq0FuW2HkK6FAkMPvgSyWYDksT
ImT1Kk2as4XPUrJgTp8FN64rh8bwcLHD0NbE8LG9Pe2/xH3t4UJoapN6iWkMM90zjLNP
0q1tUcKehXFcus1KbYiHo09I+Jm+gyml4HDDTyPOcRWAMqFzUm1HAf+UY7wlLKh2SYfi
M+Zyci9qjk2KdbWin7GTOMmvGuAFCJJ8rg3jTUeNRETx7LeZYRhZA5TB50sdySgfiCGV
Km5Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1722288644; x=1722893444;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=3n7ED8vNHHLT7hlkIIWSv5syxD4DDc76tqAAOhKo0d4=;
b=C5uQZjRuEQi6KzT5ZosufQEKNHOw/ALNOzLe6qxPEGlUVdTXNKZcLQ/4NilO/4Prxc
jvbDEJkZrcfz9YmQZu0WIdf1s8V7PF9KplCzLv+VZWqfUQB/+cjK+XliNB+8TPJcAgjn
tdN2RwIz/Mjg3WYlOLAMjXE2UolpYEnqzIqOcP3SaorzP95H9gMVjaR8jW2pdisv+H+D
8aB9Ke7kG8cuWt9gospONGd+ueAaBgetOflFBlLLGxneTvYKmpy31za6gueYN5/ID5PW
wGD5+Kij+2b1nnyzq5ltzEttVKlJGucLqGTpxKSUEkkn0i0JDZR8KCcGq8vc80csOpbQ
KxTw==
X-Gm-Message-State: AOJu0YwFVuXZu5yZLF0njINPUI4XeYReJv6RzPT97FTFiGAOAaKQ0OuH
rD0p+K4FnnvJlrClPSDbY5fvx//4JYoLz34+xB6frEWQB2PojaVncdXBu9hbYhYo9LJ1aN2mlP3
VfTEJUP27Lbf89L9/gAkSn75UsimEebWSlI8=
X-Google-Smtp-Source: AGHT+IHqq5V/VBcdVrqMaCoChES8YxbKzo5G38Ynl/eAKdREIMCIHDzCgJ41tWy8IZIeFCdvP/tYOz9p9BiehPYcTcQ=
X-Received: by 2002:a05:6e02:1c42:b0:383:17f9:6223 with SMTP id
e9e14a558f8ab-39a22cc25b5mr90926695ab.2.1722288644320; Mon, 29 Jul 2024
14:30:44 -0700 (PDT)
MIME-Version: 1.0
From: Dr Charles Edward
Date: Mon, 29 Jul 2024 21:30:38 +0000
Message-ID:
Subject: Dr Charles Edward
To: dave
Content-Type: multipart/alternative; boundary="000000000000d874a4061e699276"
X-Spam_score: 5.5
X-Spam_score_int: 55
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Fantastic day I recently sent you a message containing a link.
Please don't miss this opportunity as it might have gone to your spam folder.
I believe this could be something of your interest. Kind thoughts,Dr Charles
Edward
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.166.49 listed in dnsbl.ahbl.org]
[209.85.166.49 listed in dnsbl.ahbl.org]
[209.85.166.49 listed in dnsbl.ahbl.org]
[209.85.166.49 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.166.49 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.166.49 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.166.49 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.166.49 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.166.49 listed in will-spam-for-food.eu.org]
[209.85.166.49 listed in will-spam-for-food.eu.org]
[209.85.166.49 listed in will-spam-for-food.eu.org]
[209.85.166.49 listed in will-spam-for-food.eu.org]
[209.85.166.49 listed in will-spam-for-food.eu.org]
[209.85.166.49 listed in will-spam-for-food.eu.org]
[209.85.166.49 listed in will-spam-for-food.eu.org]
[209.85.166.49 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.166.49 listed in list.dnswl.org]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.49 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[qytbrianhall856(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[qytbrianhall856(at)gmail.com]
0.6 J_CHICKENPOX_82 BODY: 8alpha-pock-2alpha
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HK_NAME_FM_DR No description available.
Subject: {SPAM?} Dr Charles Edward
--000000000000d874a4061e699276
Content-Type: text/plain; charset="UTF-8"
Fantastic day
I recently sent you a message containing a link. Please don't miss this
opportunity as it might have gone to your spam folder. I believe this could
be something of your interest.
Kind thoughts,Dr Charles Edward
--000000000000d874a4061e699276
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Fantastic day
I recently sent you a message containing=
a link. Please don't miss this opportunity as it might have gone to yo=
ur spam folder. I believe this could be something of your interest.
=
Kind thoughts,Dr Charles Edward
I recently sent you a message containing=
a link. Please don't miss this opportunity as it might have gone to yo=
ur spam folder. I believe this could be something of your interest.
=
Kind thoughts,Dr Charles Edward
--000000000000d874a4061e699276--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments