Business proposal spam from Message Labs

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Apr 2024 22:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxg4z-00000000F8W-1TKe

for dave@doctor.nl2k.ab.ca;

Thu, 18 Apr 2024 22:42:29 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Apr 2024 22:42:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail1.bemta31.messagelabs.com ([67.219.246.1]:11572)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxdxn-000000000n7-08eM

for support@nl2k.ca;

Thu, 18 Apr 2024 20:26:59 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bajajauto.co.in;

s=balms01; t=1713493491; i=@bajajauto.co.in;

bh=E8wbeBEmgAcx+IbFgLCcI1Nfk5YKzN2+lFPrySI/0zk=;

h=From:Subject:Date:Message-ID:Reply-To:Content-Type:MIME-Version:

To;

b=ZS1DEcp0RLX3/3ibMXn3R8D1HVqy/kRwHfIe4jbcMmaW0nSIoYruuT5frJbpiPeW5

wlMUHvPOAlIVnttEemjpeEbSD8I7ELtRtdmMolwgu5pUbsopTaVC0XRXmBSAlF/7M5

/KfByEJzqG4gdRIJAm3kiHWjLweD/TdUMQ/rzJBof0dOUPqhZiONHJivNbjt4VkxET

lKOZtw9uofLN8UwvmepuIyb8USpSiyWyVlAyrWTPkuZ/pxBNtAwcSx+AmctUq78wwm

QU8Ifr0ScpqS0M5hIDb9UNYaUTUGse8TQqxaBd0QSxWpUnkT0glx7ECTaJDY82EYSs

eJvSd24X7cu/Q==

X-Brightmail-Tracker: H4sIAAAAAAAAA1VTe1BUdRjldx/LTVm7PIQroxnr2DTgrpoVXzY

pTdrcxprJmprSQV1kl12DBfcuD80KZWgJBaR0byzgQtOsgCLDw4AW5dmAiAnkjjx8LLACgoEQ

yCOg7rKj0T/fnPnOOd85/3wU7pFE+VKKOJ1Cq5GHS0TLiOuNZ0lpp9VPuak3MxCSz1S7gj43F

UHq3GMSBmsKECRmUVBzu4GE2cJJEkwdWQhaFj6D9l5B+m1LBFTmBsAf99zgcoIMzBffgt6iGR

Lafy3GoKdnhIAiPg+Duw/PkFAwxCN4pO8nIOXPBgStTdk4LOSpoDb1CQaZmXk4pFq+hMysAhy

yy7zgn46rCKqTL2JgP5tIQtflShKM9TTEl1fg0PBdEg73h3JIiD9ehkPRJTMGs5N/Y3DWmELC

/f40EvjjKRhMDY+SMJf4OSQazASUdBYJiikhoGdk3hW+n3wfHtSMioDP3QHdAxcwGK7dC2X2K

gzSO0pxaEuzI5h/cgJBgf0cCZknPaFfn4zB/bIUHKrKe0VBTYjV679m2/lY9uYvjTjLJ/S4si

dGR0SspTaFYBNOnMPZ/AkeY/npJ4i1mf8i2YzHpwjWVteDWOuFQYK1ThQTbFr5LMnO902jD39

De0i1JiQy7gCpSupsIqKuro6rThwm4lH3qmREUSI6iKmdJ5LRc5QnvYZpqLjh6sBetIRprp8R

9ssEbMCZhQeNmIMg6PWMgZ/GHVhMb2PSFzpJh8iDbkJMRXc66SAQ7c1MNV9cNOC0D9NlNy1ih

qaZn6tu4k68knnYt0A68VrG3jQncupDmfq8etIZ4M5cy7ATzkarmR9Pm0SO0h70S8xQqfI0oo

1LEoxL3MYlbud+A5NjGRc5cQBjzh3Gn+KWmj5s6T4HuRag1zmFNkahlW4OlIVo1WEqXYRcHS6

TH5XKZdGcVCHndNLNMnksJ1NwnIw7EnEwPFSmUehKkPACoVpytgJ1Vx3fWIdWUZhkpXinr5/S

Y0VIZOgRlZxT7ddGhyu4OrSaoiSMOKNd4Ny1ijBFnFIdLjzSU5qh3CRe4pgGgRZzUfIITh3mp

JrRdqq8svoKTuXX3xKmZXFO5XfV4B6EJlKj8PURV98SbLTDporWPDv69EHb0RpfTzFycXHxcI

tSaCPUuv/zQ8iHQhJP8VeOK25qje5Z9pBQCxNqUe+tddTSyf+jfOOxmg6rJOTADtOZbO2p53V

S92B19Zx5NEj5StfuFr71YPfRN14Lve7iqj/oN2bZ6NPm3Xj4CjYt2+RVq1p3hDjmbvbZuxA9

fF5b+s0+dam3lq40uhVzhWkvB1jcCydm8TffPpRWSO8Je/Hjrm0RtrQVxXEtFeu2+L1jaIn95

LahteQFw4DUZeALy9bzXWPjj6Jkj34g1G3LP13ftjXjBsoYq7jXlzt415a3a8VOuMPH6E/mTO

y2Nd3Q7Qn23+LvJ5uxTkoCdsW+mn9Iad9wjV9mC6x6/NHvx35SxWhqp1fFu2lU+jXL972LMXe

CB1oPjT047L99rzLOxI+YAq0fmPavvXTl0riE4FTyzf64lpP/C9PlJMsbBQAA

X-Env-Sender: pckumbhar@bajajauto.co.in

X-Msg-Ref: server-5.tower-686.messagelabs.com!1713493462!620424!1

X-Originating-IP: [203.199.149.5]

X-SYMC-ESS-Client-Auth: outbound-route-from=pass

X-StarScan-Received:

X-StarScan-Version: 9.112.1; banners=-,-,-

X-VirusChecked: Checked

Received: (qmail 26656 invoked from network); 19 Apr 2024 02:24:25 -0000

Received: from unknown (HELO webmail.bajajauto.co.in) (203.199.149.5)

by server-5.tower-686.messagelabs.com with AES256-GCM-SHA384 encrypted SMTP; 19 Apr 2024 02:24:25 -0000

From: PRATHAMESH CHANDRAKANT KUMBHAR

Subject: Re: LinkedIn contact

Thread-Topic: Re: LinkedIn contact

Thread-Index: AdqRg32x/U4d2SV5TaiM7xaSJcVKvAAM/qzQAAAAF9AAAAAP0AAAABPwAAAAE1AAAAAUwAAAABWAAAAAEuAAAAAUQAAAABRAAAAAFgAAAAAUAAAAABTAAAAAFZAAAAAUgAAAABVQAAAAFOAAAAAV4AAAABTQAAAAFqAAAAATwAAAABiQAAAAFcAAAAAX4AAAABbgAAAAF6AAAAAYoAAAABnQAAAAGTAAAAAYkAAAABmwAAAAGOAAAAAcQAAAABlwAAAAGJAAAAAakAAAABmAAAAAGuAAAAAYQAAAABmgAAAAGnAAAAAa0AAAABpgAAAAG1AAAAAbgAAAABuwAAAAHKAAAAAb0AAAABrAAAAAHMAAAAAcUAAAAB/gAAAAJQAAAAAhMA==

Date: Fri, 19 Apr 2024 02:24:05 +0000

Message-ID:

Reply-To: Raoof Mahdi



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [10.20.2.250]

Content-Type: multipart/alternative;

boundary="_000_faf0da37d6a34e3f8b23856c1ffa2042bajajautocoin_"

MIME-Version: 1.0

To: Undisclosed recipients:;

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Mutqan Steel is currently expanding its operations in Canada

and is in search of dedicated individuals to serve as liaisons between the

company and its esteemed clientele. This role offers the flexibility of remote

work, allowing you to maintain your current commitments while earning a competitive

monthly salary of $8,000 after tax.



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[203.199.149.5 listed in dnsbl.ahbl.org]

[203.199.149.5 listed in dnsbl.ahbl.org]

[203.199.149.5 listed in dnsbl.ahbl.org]

[203.199.149.5 listed in dnsbl.ahbl.org]

[67.219.246.1 listed in dnsbl.ahbl.org]

[67.219.246.1 listed in dnsbl.ahbl.org]

[67.219.246.1 listed in dnsbl.ahbl.org]

[67.219.246.1 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[203.199.149.5 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[203.199.149.5 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[203.199.149.5 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[203.199.149.5 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[67.219.246.1 listed in will-spam-for-food.eu.org]

[67.219.246.1 listed in will-spam-for-food.eu.org]

[67.219.246.1 listed in will-spam-for-food.eu.org]

[67.219.246.1 listed in will-spam-for-food.eu.org]

[67.219.246.1 listed in will-spam-for-food.eu.org]

[67.219.246.1 listed in will-spam-for-food.eu.org]

[67.219.246.1 listed in will-spam-for-food.eu.org]

[67.219.246.1 listed in will-spam-for-food.eu.org]

[203.199.149.5 listed in will-spam-for-food.eu.org]

[203.199.149.5 listed in will-spam-for-food.eu.org]

[203.199.149.5 listed in will-spam-for-food.eu.org]

[203.199.149.5 listed in will-spam-for-food.eu.org]

[203.199.149.5 listed in will-spam-for-food.eu.org]

[203.199.149.5 listed in will-spam-for-food.eu.org]

[203.199.149.5 listed in will-spam-for-food.eu.org]

[203.199.149.5 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[67.219.246.1 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[67.219.246.1 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Re: LinkedIn contact



--_000_faf0da37d6a34e3f8b23856c1ffa2042bajajautocoin_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Mutqan Steel is currently expanding its operations in Canada and is in sear=

ch of dedicated individuals to serve as liaisons between the company and it=

s esteemed clientele.



This role offers the flexibility of remote work, allowing you to maintain y=

our current commitments while earning a competitive monthly salary of $8,00=

0 after tax.



If you're interested in seizing this opportunity, please forward your resum=

e to Asad Moten at asad.moten@almutqansteels.com



Best Regards,



Prathamesh Kumbhar



--_000_faf0da37d6a34e3f8b23856c1ffa2042bajajautocoin_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>











Mutqan Steel is currently expanding its operations i=

n Canada and is in search of dedicated individuals to serve as liaisons bet=

ween the company and its esteemed clientele.



 



This role offers the flexibility of remote work, all=

owing you to maintain your current commitments while earning a competitive =

monthly salary of $8,000 after tax.



 



If you're interested in seizing this opportunity, pl=

ease forward your resume to Asad Moten at asad.moten@almutqansteels.com
>



 



Best Regards,



 



Prathamesh Kumbhar











--_000_faf0da37d6a34e3f8b23856c1ffa2042bajajautocoin_--

I2.03KL0LD37.0KI2.21KwhoissourceRank12.9MPIN0Summary reportDiagnosisDensity00n/a