French language rent threat spam from Google
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 01 Jun 2024 13:46:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sDUfo-000000008Zv-1SmQ
for dave@doctor.nl2k.ab.ca;
Sat, 01 Jun 2024 13:45:52 -0600
Resent-From: The Doctor
Resent-Date: Sat, 1 Jun 2024 13:45:52 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f44.google.com ([209.85.208.44]:59889)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sDQsB-00000000ADx-3IgO
for doctor@doctor.nl2k.ab.ca;
Sat, 01 Jun 2024 09:42:27 -0600
Received: by mail-ed1-f44.google.com with SMTP id 4fb4d7f45d1cf-579fa270e53so3463497a12.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=uao.edu.co; s=google; t=1717256423; x=1717861223; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:in-reply-to:references
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=NC4kp1wedYXcTyYuHh5ajb8+NahhqGL1KOLVO9p54Dk=;
b=QYYMjP+u0OB8yEtx2hUVKWSIAvQrmYtU4iPBAsKBKJm+ErAUy61u/xoKL7t8Z1y1e4
Gdk0QtDV2ZKM0uWd6gJx1BnBhZfV9+yPzwOtsSsSsuCgcTFvIOfBWt7THPAvEr0opEpW
wgynbNWfPNlDqPHYjFXksu7Deu9YTd7KAZr7z0lU46k3+9UK1d69an3awjWBVxsmJmwW
wSzZ5hg9FwPPIMEg39l2HDGjrggqc0xEvTUJqDL+zP0NAiLi8Gsi70NKnRdxM5TyU80i
6pQnhGwIbghsBtnRmxzcsv8dpspicBZg52E6TPyMLSPr7gQekEh6WIHPHd/PwXIdiZBI
OBhg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1717256423; x=1717861223;
h=to:subject:message-id:date:from:reply-to:in-reply-to:references
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=NC4kp1wedYXcTyYuHh5ajb8+NahhqGL1KOLVO9p54Dk=;
b=A+1DWiB/FEYIz0We8033BhEXpeX3HCftXedyvLTJ+1MR2kSixi/WuRB0jNK+2FvFio
xSVvVmK6WwBs1EU+/3Jvh7jvN+bAAfMtBy94SvK6y6rjf4iErvE2rPntR9TOK2PHY8ua
DUmlgZvZl3iQOFTTFsGh2sOnxrYeM61XLy2Umav0FwRahhB0uH9QJYv/Ska4cH90diM9
EEa0ndGUO+H4adq4E2o7PPT8c/Gcu/OlzGluUDVHTtwz0VVnD4IO3lQIAVlAYhtvCugX
HF/8bANcL+GGCBIW5Aeqyik41xEra4vvKBBnYxuhMf5WStAsCeQoCqeyMMoHIcJCP7wY
tn6w==
X-Forwarded-Encrypted: i=1; AJvYcCWAZLc69x7KhFCp29i6XlhhNqGxlbQYx5X/bX9syN6ujEbdEUsIrJSMObWG84obJCdHz3ZYfuev4i/RaEhpCYRr2U/BoB3Pp48=
X-Gm-Message-State: AOJu0Ywa5vFSM4QX03tdD6XzKQyMyceZFa8pej1YyAx7tIF4B0I9Eqqj
zCIsEvY/9oRMvvluXOCOqtqBYKIiBJxp7Mz+dLLvU0t2ObDN9naQr9NKB2KcZGKPgeqmgY08BFx
zm80fhIbjYKJLDBJs9pK/vOhiLWgNcIs8AaDiPA==
X-Google-Smtp-Source: AGHT+IHKrWsQJleNXK/72vP2nJkjoBHpqoQKBmaxDSFRUY0CXsg8g9p20bnnmjBBTI8Ege+hDCWDte1zJiQhXYp6YVM=
X-Received: by 2002:a50:d59c:0:b0:57a:2475:6a16 with SMTP id
4fb4d7f45d1cf-57a364132admr3913148a12.11.1717256422565; Sat, 01 Jun 2024
08:40:22 -0700 (PDT)
MIME-Version: 1.0
References:
In-Reply-To:
Reply-To: servicelocativegestion21@gmail.com
From: AGENCE IMMOBILIER
Date: Sat, 1 Jun 2024 15:40:10 +0000
Message-ID:
Subject: info paiement loyer
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000000e407b0619d5eb76"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 9.2
X-Spam_score_int: 92
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Bonjour chers locataires Nous vous informons que le paiement
de votre loyer ne se fera plus sur l’adresse habituelle mais sur cette
nouvelle adresse en raison de la modification de nos coordonnées bancaires
Interac.
Content analysis details: (9.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.44 listed in dnsbl.ahbl.org]
[209.85.208.44 listed in dnsbl.ahbl.org]
[209.85.208.44 listed in dnsbl.ahbl.org]
[209.85.208.44 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.44 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.44 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.44 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.44 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.44 listed in will-spam-for-food.eu.org]
[209.85.208.44 listed in will-spam-for-food.eu.org]
[209.85.208.44 listed in will-spam-for-food.eu.org]
[209.85.208.44 listed in will-spam-for-food.eu.org]
[209.85.208.44 listed in will-spam-for-food.eu.org]
[209.85.208.44 listed in will-spam-for-food.eu.org]
[209.85.208.44 listed in will-spam-for-food.eu.org]
[209.85.208.44 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.44 listed in list.dnswl.org]
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.44 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[servicelocativegestion21(at)gmail.com]
0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word
0.0 HTML_MESSAGE BODY: HTML included in message
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Subject: {SPAM?} info paiement loyer
--0000000000000e407b0619d5eb76
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bonjour chers locataires
Nous vous informons que le paiement de votre loyer ne se fera plus sur
l=E2=80=99adresse habituelle mais sur cette nouvelle adresse en raison de l=
a
modification de nos coordonn=C3=A9es bancaires Interac.
D=C3=A9sormais , le paiement de votre loyer par ch=C3=A8que, par autoris=C3=
=A9, par carte
de cr=C3=A9dit ou par cash ne sont plus valables. Votre paiement de loyer d=
oit
se faire par virement Interac.
Nos coordonn=C3=A9es bancaires (INTERAC) ont =C3=A9t=C3=A9
mises =C3=A0 jour.
Veuillez effectuer d=C3=A9sormais le paiement sur cette nouvelle adresse
courriel merci.
Courriel de transfert INTERAC:
servicelocativegestion21@gmail.com
QUESTION : paiement
R=C3=89PONSE :receptionner
--0000000000000e407b0619d5eb76
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
"m_-5291397769173614884gmail-:15v">
15r" aria-label=3D"Corps du message" role=3D"textbox" aria-multiline=3D"tru=
e" style=3D"direction:ltr;min-height:345px" aria-controls=3D":185" aria-exp=
anded=3D"false">
px;word-spacing:1px;font-family:-apple-system,"helvetica neue""><=
span style=3D"font-family:-apple-system,helveticaneue;font-size:1rem;word-s=
pacing:0px;color:rgb(0,0,0)">Bonjour chers locataires=C2=A0
=3D"color:rgb(0,0,0);font-family:-apple-system,helveticaneue;word-spacing:0=
px">
ord-spacing:0px">
t-size:1rem;word-spacing:0px;color:rgb(0,0,0)">Nous vous informons que le p=
aiement de votre loyer=C2=A0 ne se fera plus sur l=E2=80=99adresse habituel=
le mais sur cette nouvelle adresse en raison de la modification de nos coor=
donn=C3=A9es bancaires Interac.
ce=3D"-apple-system, helveticaneue">
an>
caneue">D=C3=A9sormais , le paiement de votr=
e loyer par ch=C3=A8que, par autoris=C3=A9, par carte de cr=C3=A9dit ou par=
cash ne sont plus valables. Votre paiement de loyer doit se faire par vire=
ment Interac.
,49);font-size:16px;word-spacing:1px;font-family:-apple-system,"helvet=
ica neue"">
-size:1rem;word-spacing:0px;color:rgb(0,0,0)">
auto" style=3D"color:rgb(49,49,49);font-size:16px;word-spacing:1px;font-fam=
ily:-apple-system,"helvetica neue"">
pple-system,helveticaneue;font-size:1rem;word-spacing:0px;color:rgb(0,0,0)"=
>Nos coordonn=C3=A9es bancaires (INTERAC) ont =C3=A9t=C3=A9
=3D"color:rgb(0,0,0);font-family:-apple-system,helveticaneue;word-spacing:0=
px">
ord-spacing:0px;color:rgb(0,0,0)">mises =C3=A0 jour.
or:rgb(0,0,0);font-family:-apple-system,helveticaneue;word-spacing:0px">
v dir=3D"auto" style=3D"font-family:-apple-system,helveticaneue;font-size:1=
rem;word-spacing:0px;color:rgb(0,0,0)">
"font-family:-apple-system,helveticaneue;font-size:1rem;word-spacing:0px;co=
lor:rgb(0,0,0)">Veuillez effectuer d=C3=A9sormais le paiement sur cette nou=
velle adresse courriel merci.
helveticaneue;word-spacing:0px;color:rgb(0,0,0)">
=3D"auto" style=3D"color:rgb(49,49,49);font-size:16px;word-spacing:1px;font=
-family:-apple-system,"helvetica neue"">
y:-apple-system,helveticaneue;font-size:1rem;word-spacing:0px;color:rgb(0,0=
,0)">Courriel de transfert INTERAC: =C2=A0
yle=3D"color:rgb(49,49,49);font-size:16px;word-spacing:1px;font-family:-app=
le-system,"helvetica neue"">
tem,helveticaneue;word-spacing:0px;color:rgb(0,0,0)">
<=
/font>
:16px;word-spacing:1px;font-family:-apple-system,"helvetica neue"=
">
olor:rgb(0,0,0)">
1@gmail.com" style=3D"color:rgb(66,133,244);font-size:1.125rem" target=3D"_=
blank">servicelocativegestion21@gmail.com
" style=3D"font-family:-apple-system,helveticaneue;word-spacing:0px;color:r=
gb(0,0,0)">
elveticaneue;font-size:1rem;word-spacing:0px;color:rgb(0,0,0)">QUESTION : p=
aiement
R=C3=89PONSE :receptionner
--0000000000000e407b0619d5eb76--