Advertisement
siulian

google with spam

Dec 14th, 2020 (edited)
163
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.94 KB | None | 0 0
  1. Return-path: <3Qc7WXxIJDT4rw.wfxmjjifgizqm99lrfnq.htrhtxrns.lfnyfslxgjy.wt@trix.bounces.google.com>
  2. Envelope-to: cosmin.gaitan@gsbet.ro
  3. Delivery-date: Mon, 14 Dec 2020 04:36:04 +0200
  4. Authentication-Results: mx.gsbet.ro;
  5. iprev=pass (mail-qv1-f69.google.com) smtp.remote-ip=209.85.219.69;
  6. spf=pass smtp.mailfrom=trix.bounces.google.com;
  7. dkim=pass header.d=gmail.com header.s=20161025 header.a=rsa-sha256;
  8. dmarc=pass header.from=gmail.com
  9. Received: from mail-qv1-f69.google.com ([209.85.219.69]:38832)
  10. by mx.gsbet.ro with esmtps (TLS1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
  11. (Exim 4.93.0.4)
  12. (envelope-from <3Qc7WXxIJDT4rw.wfxmjjifgizqm99lrfnq.htrhtxrns.lfnyfslxgjy.wt@trix.bounces.google.com>)
  13. id 1kodiU-0002q8-KR
  14. for cosmin.gaitan@gsbet.ro; Mon, 14 Dec 2020 04:36:04 +0200
  15. Received: by mail-qv1-f69.google.com with SMTP id u8so7004089qvm.5
  16. for <cosmin.gaitan@gsbet.ro>; Sun, 13 Dec 2020 18:36:00 -0800 (PST)
  17. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
  18. d=gmail.com; s=20161025;
  19. h=mime-version:reply-to:message-id:date:subject:from:to;
  20. bh=2yI4FprbQ8YQp6qzHwUy+odf3e8BkHCw6hQgM35H6IE=;
  21. b=BHsRS2znPywTja+wvFCspjaxL0VpocUJ06TyJ/kar5gPjsvYvwuzFk+ZA3C2DwvYDi
  22. +I9gd+PDT923XhoCf3pUCQRSH5XxBHzu8pThyZ/I+37NPd0na2/XclrGxtyv6D7u8g8x
  23. OmybXkJf4n0FA2yZIqBuRgAoWaVgiRQGUW2PHmLzJyOi9gC2SMphcswTiLf03NVXau5C
  24. ZZaS3qVF7JFsFs9v1SPfw0X3Ttfntqc/EwPa082HQQzXQeib3ghaALl9qC5UPTwORr1W
  25. xo6y47lCuf2IOaDo8mGL672T84kFNy3iTTzxBDFVxgFTADVUz8E+CDS8T5EXlUNif61J
  26. +xtg==
  27. X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
  28. d=1e100.net; s=20161025;
  29. h=x-gm-message-state:mime-version:reply-to:message-id:date:subject
  30. :from:to;
  31. bh=2yI4FprbQ8YQp6qzHwUy+odf3e8BkHCw6hQgM35H6IE=;
  32. b=iO5l1tQdNJLgZBgMGXcSIZIbDtr/RWiKvElO/ftnbItbhkaWDPsV3J1QRrBCt14DC+
  33. sJ1CwIwlFtRfsHw+Ieopf4/Yf3WyGkQ7JfHMHpElyuyfeeva4CSzNnFUn6J+Epx/EPoi
  34. kRwQUM9MuJ1T1cFKAVzyRCulQZzqn3ZEqf/2Y5/rKPQarq+HLVnqHGc8PbtJuve4WuaC
  35. mOh+JSegpAJ+TqLqd1HwZjrki/dku9GBL17qdn7lMwgGz8JQ4CdRYIJ/1zW+JJZ0zVcY
  36. 7mn3peEvpym21BgX5EGS2jhBkIRKt/LHBkz33c7Y5n2bXWfL1oxSUgLFyxBJI09kQ7Ei
  37. sbEA==
  38. X-Gm-Message-State: AOAM5321uTGpbsSRbHOLjzFTHuM/OxhP6Bz+G4F7A306rMxIPI7vTxxM
  39. ta3tUrbmU3/Uwji3k0U7ll/PhX7i08sCiMYB7YZv
  40. MIME-Version: 1.0
  41. X-Received: by 2002:ac8:5509:: with SMTP id j9mt28868735qtq.284.1607913025167;
  42. Sun, 13 Dec 2020 18:30:25 -0800 (PST)
  43. Reply-To: mr.rasheedabdulh44@gmail.com
  44. X-No-Auto-Attachment: 1
  45. Message-ID: <000000000000b1ee7405b6636cee@google.com>
  46. Date: Mon, 14 Dec 2020 02:35:59 +0000
  47. Subject: UNITED NATION SCAM VICTIM COMPENSATION PAYMENT.
  48. From: mr.rasheedabdulh44@gmail.com
  49. To: cosmin.gaitan@gsbet.ro
  50. Content-Type: multipart/alternative; boundary="0000000000009e5e2b05b66380cb"
  51. Received-SPF: pass (mx.gsbet.ro: domain of trix.bounces.google.com designates 209.85.219.69 as permitted sender) client-ip=209.85.219.69; envelope-from=3Qc7WXxIJDT4rw.wfxmjjifgizqm99lrfnq.htrhtxrns.lfnyfslxgjy.wt@trix.bounces.google.com; helo=mail-qv1-f69.google.com;
  52. X-DKIM: Status on mx.gsbet.ro (91.235.165.91) using Exim 4.93.0.4: dkim=pass; signing_identity="gmail.com"
  53. X-Scanned-By: ClamAV primary on mx.gsbet.ro (91.235.165.91); Mon, 14 Dec 2020 04:36:02 +0200
  54. X-Spam-Score: 15.0 (+++++++++++++++)
  55. X-Spam-Report: Spam detection software, running on the system "gsbet",
  56. has identified this incoming email as possible spam. The original
  57. message has been attached to this so you can view it or label
  58. similar future email. If you have any questions, see
  59. the administrator of that system for details.
  60.  
  61. Content preview: I've invited you to fill in the following form: Untitled form
  62. To fill it in, visit: https://docs.google.com/forms/d/e/1FAIpQLSc6CvqoCoIbDec3XP7qFopE8QY08_3_YSpwtgaSrZ2mSsh-nQ/viewform?vc=0&amp;c=0&amp;w=1&amp;flr=0&amp;usp=mail_form_link
  63.  
  64.  
  65. Content analysis details: (15.0 points, 10.0 required)
  66.  
  67. pts rule name description
  68. ---- ---------------------- --------------------------------------------------
  69. 0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
  70. [score: 1.0000]
  71. 3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
  72. [score: 1.0000]
  73. -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
  74. no trust
  75. [209.85.219.69 listed in list.dnswl.org]
  76. 1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
  77. headers
  78. -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
  79. [209.85.219.69 listed in wl.mailspike.net]
  80. 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
  81. 0.5 SUBJ_ALL_CAPS Subject is all capitals
  82. 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
  83. mail domains are different
  84. 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
  85. provider
  86. [mr.rasheedabdulh44[at]gmail.com]
  87. 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
  88. digit
  89. [mr.rasheedabdulh44[at]gmail.com]
  90. -0.0 SPF_PASS SPF: sender matches SPF record
  91. 0.4 MILLION_USD BODY: Talks about millions of dollars
  92. 0.0 HTML_MESSAGE BODY: HTML included in message
  93. 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
  94. valid
  95. -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
  96. -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
  97. author's domain
  98. 0.3 SENDERSCORE_63 RBL: SenderScore Reputation 63%
  99. (score.senderscore.com)
  100. [209.85.219.69 listed in score.senderscore.com]
  101. 0.5 BL_4_POLSPAM_PL RBL: Listed on bl-h4.rbl.polspam.pl
  102. [209.85.219.69 listed in bl-h4.rbl.polspam.pl]
  103. 3.0 IUL_GOOGLEFORM Untitled Google Form
  104. 0.0 UPPERCASE_75_100 message body is 75-100% uppercase
  105. 0.0 HK_SCAM No description available.
  106. 0.0 LOTS_OF_MONEY Huge... sums of money
  107. 0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
  108. EnvelopeFrom freemail headers are
  109. different
  110. 1.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free
  111. email?
  112. 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
  113. different freemails
  114. 2.5 GOOGLE_DOC_SUSP Suspicious use of Google Docs
  115. 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
  116. 0.3 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
  117. X-Loop-SystemFilter: ok
  118.  
  119. --0000000000009e5e2b05b66380cb
  120. Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
  121.  
  122. I've invited you to fill in the following form:
  123. Untitled form
  124.  
  125. To fill it in, visit:
  126. https://docs.google.com/forms/d/e/1FAIpQLSc6CvqoCoIbDec3XP7qFopE8QY08_3_YSpwtgaSrZ2mSsh-nQ/viewform?vc=0&amp;c=0&amp;w=1&amp;flr=0&amp;usp=mail_form_link
  127.  
  128. UNITED NATION SCAM VICTIM COMPENSATION PAYMENT.
  129.  
  130. THIS IS TO BRING TO YOUR NOTICE THAT UNITED NATION IN CONJUNCTION WITH
  131. FEDERAL GOVERNMENT OF NIGERIA HAS DECIDED TO COMPENSATE ALL SCAM VICTIMS
  132. WITH THE SUM OF 1 MILLION USD, (ONE MILLION UNITED STATE
  133. DOLLARS ONLY) FOR FURTHER INFORMATION CONTACT OUR PRIVATE OFFICER: MR.
  134. UBAKA EDWARD:
  135.  
  136. Name: Mr. Ubaka Edward
  137. E-mail: mr.ubakaedward@gmail.com
  138. Tel: +234 8084 091729
  139.  
  140. YOU WILL RECEIVE YOUR COMPENSATION PAYMENT THROUGH ATM VISA CARD
  141. PAYMENT. YOU WILL BE DETAILED WITH MODALITIES AS SOON AS YOU CONTACT THE
  142. PRIVATE OFFICER OF THE UNITED BANK FOR AFRICA.
  143.  
  144. SINCERELY YOURS,
  145.  
  146. MR. EDWARD KALLON
  147. UNITED NATION RESIDENT CO-COORDINATOR
  148. OFFICER (UNRCO)
  149.  
  150.  
  151.  
  152. Google Forms: Create and analyse surveys.
  153.  
  154. --0000000000009e5e2b05b66380cb
  155. Content-Type: text/html; charset="UTF-8"
  156. Content-Transfer-Encoding: quoted-printable
  157.  
  158. <html><body style=3D"font-family: Roboto,Helvetica,Arial,sans-serif; margin=
  159. : 0; padding: 0; height: 100%; width: 100%;"><table border=3D"0" cellpaddin=
  160. g=3D"0" cellspacing=3D"0" style=3D"background-color:rgb(103,58,183);" width=
  161. =3D"100%" role=3D"presentation"><tbody><tr height=3D"64px"><td style=3D"pad=
  162. ding: 0 24px;"><img alt=3D"Google Forms" height=3D"26px" style=3D"display: =
  163. inline-block; margin: 0; vertical-align: middle;" width=3D"143px" src=3D"ht=
  164. tps://www.gstatic.com/docs/forms/google_forms_logo_lockup_white_2x.png"></t=
  165. d></tr></tbody></table><div style=3D"padding: 24px; background-color:rgb(23=
  166. 7,231,246)"><div align=3D"center" style=3D"background-color: #fff; border-b=
  167. ottom: 1px solid #e0e0e0;margin: 0 auto; max-width: 624px; min-width: 154px=
  168. ;padding: 0 24px;"><table align=3D"center" cellpadding=3D"0" cellspacing=3D=
  169. "0" style=3D"background-color: #fff;" width=3D"100%" role=3D"presentation">=
  170. <tbody><tr height=3D"24px"><td></td></tr><tr><td><span style=3D"display: ta=
  171. ble-cell; vertical-align: top; font-size: 13px; line-height: 18px; color: #=
  172. 424242;" dir=3D"auto">UNITED NATION SCAM VICTIM COMPENSATION PAYMENT.<br><b=
  173. r>THIS IS TO BRING TO YOUR NOTICE THAT UNITED NATION IN CONJUNCTION WITH FE=
  174. DERAL GOVERNMENT OF NIGERIA HAS DECIDED TO COMPENSATE ALL SCAM VICTIMS WITH=
  175. THE SUM OF 1 MILLION USD, (ONE MILLION UNITED STATE<br>DOLLARS ONLY) FOR F=
  176. URTHER INFORMATION CONTACT OUR PRIVATE OFFICER: MR. UBAKA EDWARD:<br><br>Na=
  177. me: Mr. Ubaka Edward<br>E-mail: mr.ubakaedward@gmail.com<br>Tel: +234 8084 =
  178. 091729<br><br>YOU WILL RECEIVE YOUR COMPENSATION PAYMENT THROUGH ATM VISA C=
  179. ARD<br>PAYMENT. YOU WILL BE DETAILED WITH MODALITIES AS SOON AS YOU CONTACT=
  180. THE PRIVATE OFFICER OF THE UNITED BANK FOR AFRICA.<br><br>SINCERELY YOURS,=
  181. <br> <br>MR. EDWARD KALLON<br>UNITED NATION RESIDENT CO-COORDINATOR<=
  182. br>OFFICER (UNRCO)<br><br></span></td></tr><tr height=3D"20px"><td></tr><tr=
  183. style=3D"font-size: 20px; line-height: 24px;"><td dir=3D"auto"><a href=3D"=
  184. https://docs.google.com/forms/d/e/1FAIpQLSc6CvqoCoIbDec3XP7qFopE8QY08_3_YSp=
  185. wtgaSrZ2mSsh-nQ/viewform?vc=3D0&amp;c=3D0&amp;w=3D1&amp;flr=3D0&amp;usp=3Dm=
  186. ail_form_link" style=3D"color: rgb(103,58,183); text-decoration: none; vert=
  187. ical-align: middle; font-weight: 500">Untitled form</a><div itemprop=3D"act=
  188. ion" itemscope itemtype=3D"http://schema.org/ViewAction"><meta itemprop=3D"=
  189. url" content=3D"https://docs.google.com/forms/d/e/1FAIpQLSc6CvqoCoIbDec3XP7=
  190. qFopE8QY08_3_YSpwtgaSrZ2mSsh-nQ/viewform?vc=3D0&amp;c=3D0&amp;w=3D1&amp;flr=
  191. =3D0&amp;usp=3Dmail_goto_form"><meta itemprop=3D"name" content=3D"Fill out =
  192. form"></div></td></tr><tr height=3D"24px"></tr><tr><td><table border=3D"0" =
  193. cellpadding=3D"0" cellspacing=3D"0" width=3D"100%"><tbody><tr><td><a href=
  194. =3D"https://docs.google.com/forms/d/e/1FAIpQLSc6CvqoCoIbDec3XP7qFopE8QY08_3=
  195. _YSpwtgaSrZ2mSsh-nQ/viewform?vc=3D0&amp;c=3D0&amp;w=3D1&amp;flr=3D0&amp;usp=
  196. =3Dmail_form_link" style=3D"border-radius: 3px; box-sizing: border-box; dis=
  197. play: inline-block; font-size: 13px; font-weight: 700; height: 40px; line-h=
  198. eight: 40px; padding: 0 24px; text-align: center; text-decoration: none; te=
  199. xt-transform: uppercase; vertical-align: middle; color: #fff; background-co=
  200. lor: rgb(103,58,183);" target=3D"_blank" rel=3D"noopener">Fill out form</a>=
  201. </td></tr></tbody></table></td></tr><tr height=3D"24px"></tr></tbody></tabl=
  202. e></div><table align=3D"center" cellpadding=3D"0" cellspacing=3D"0" style=
  203. =3D"max-width: 672px; min-width: 154px;" width=3D"100%" role=3D"presentatio=
  204. n"><tbody><tr height=3D"24px"><td></td></tr><tr><td><a href=3D"https://docs=
  205. .google.com/forms?usp=3Dmail_form_link" style=3D"color: #424242; font-size:=
  206. 13px;">Create your own Google Form</a></td></tr></tbody></table></div></bo=
  207. dy></html>
  208. --0000000000009e5e2b05b66380cb--
  209.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement