Chinese Steel Products spam from Google Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 19 Aug 2024 16:13:25 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1sgAD2-000000001XT-2m21
for dave@doctor.nl2k.ab.ca;
Mon, 19 Aug 2024 15:46:40 -0600
Resent-From: The Doctor
Resent-Date: Mon, 19 Aug 2024 15:46:40 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f66.google.com ([209.85.160.66]:55364)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1sg6LE-0000000044d-0y2a
for root@nk.ca;
Mon, 19 Aug 2024 11:38:55 -0600
Received: by mail-oa1-f66.google.com with SMTP id 586e51a60fabf-2700d796019so2371480fac.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1724089011; x=1724693811; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=p3F4Aagdsv+9grs8bp0q7AYvRsYbzyPmcEckIxevePI=;
b=cmpG+8Sxcp4zfdXsIl+q+lfmECbQ+VmwnOrNds0MX+eAxY8OZZGEPQ+H2gw3+NS+AD
opgd3At9Nhh0iHhEi8uFrS4AHOhqVGO47mn0nJVu/i+w+fa95X8X5MsC7nf/g9EvPgAV
kcB/cp+gf9wRgqukfmydrVp4QiLzD8QHk99O1grJ5E3VyS0BgWiCT+gmlwFWxu4y9gAm
JP1A6frD6i+I+7Y4dxrHWVjTBU6G9o+MbWSFwOZ8sDRRJmwCIw0lGk1+fupkVqXpsGvi
UjeyIR7aKffWN5pWx3hf07FnB9TMixrcpOIgGel7gINJl57to9l2WH1nii+nT2QINXtb
BXNA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1724089011; x=1724693811;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=p3F4Aagdsv+9grs8bp0q7AYvRsYbzyPmcEckIxevePI=;
b=V9KdMGPUt2sBISRpa3g0skDax626TRnZaVOyqLW8FcgDj+10RDGYTyN/leCAKkq+ig
Mas0DodE1BMegfdFG31FzgXB92EMydC9RUurFfSfEf6NuRkqO31hDbGWiaPYUXb1kPb5
Z+UnAjm9P23vNrG0Gsf9UqhzjlGDAKQahN4RZLEPuld+2DSCnKPGdZC9HdKrCQPMt42m
m0HhGlx2e58JzEXWL70M/UTYoFUq8ZKYV4ujmbWhodztbQSU0ZCHQnjicGgVluoJa4zd
q82MN2Q3KV5gbd8qFaNo0B4v/uFE2FfRiJBykKg54VgXlNKGgYAWq68t5oHwawHlL7+a
gwpA==
X-Gm-Message-State: AOJu0Yy1d6Re06M9HbZEMVjkadZIg5nkMxvTS7zQ9XwfSOY4G0TH2oHY
NQuBqbxZYk0rxY6IMoepXB0rBA3YVE8eGoQG2mc6Sqk3exHutxRXmDgnjDuw3jwr7dzl4Uh1kpK
Z1r5mppb3VF1EbeWUnrZEmE7dPALpFue6fqfSFQ==
X-Google-Smtp-Source: AGHT+IFJVTqTQBc05SqhaUagg+a5hpmmV2VqBDoCQ5p3jUcwAaiiDlX7i0RIHinJHEvucJAEO8jGbm0ldXi++qN3D+U=
X-Received: by 2002:a05:6870:6c18:b0:261:39d:afa1 with SMTP id
586e51a60fabf-2701c3db78cmr10837168fac.22.1724089011388; Mon, 19 Aug 2024
10:36:51 -0700 (PDT)
MIME-Version: 1.0
From: Mark Fletcher
Date: Mon, 19 Aug 2024 18:36:39 +0100
Message-ID:
Subject: Hello Dave Yadallee
To: root@nk.ca
Content-Type: multipart/alternative; boundary="00000000000015c8e106200cc190"
X-Spam_score: 7.4
X-Spam_score_int: 74
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello Dave Yadallee I hope you're keeping well. I am Mark
Fletcher, recruitment consultant at NAKAYAMA STEEL WORKS LTD. At present,
NKM STEEL is actively searching for a candidate or company to fulfill the
role of a part-time representative in the [...]
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.160.66 listed in will-spam-for-food.eu.org]
[209.85.160.66 listed in will-spam-for-food.eu.org]
[209.85.160.66 listed in will-spam-for-food.eu.org]
[209.85.160.66 listed in will-spam-for-food.eu.org]
[209.85.160.66 listed in will-spam-for-food.eu.org]
[209.85.160.66 listed in will-spam-for-food.eu.org]
[209.85.160.66 listed in will-spam-for-food.eu.org]
[209.85.160.66 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.160.66 listed in dnsbl.ahbl.org]
[209.85.160.66 listed in dnsbl.ahbl.org]
[209.85.160.66 listed in dnsbl.ahbl.org]
[209.85.160.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.160.66 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.160.66 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.160.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.160.66 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.66 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.66 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.160.66 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[209.85.160.66 listed in bl.score.senderscore.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mar.fletcherfx(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} Hello Dave Yadallee
--00000000000015c8e106200cc190
Content-Type: text/plain; charset="UTF-8"
Hello Dave Yadallee
I hope you're keeping well.
I am Mark Fletcher, recruitment consultant at NAKAYAMA STEEL WORKS LTD. At
present, NKM STEEL is actively searching for a candidate or company to
fulfill the role of a part-time representative in the CANADA/USA. This
position offers enticing benefits and flexible work hours.
I'm reaching out to inquire if you might be interested in taking on the
responsibility of handling our company's affairs in the CANADA/USA. This
opportunity allows for remote work, enabling you to seamlessly integrate it
with your existing job or daily commitments. Should this proposition pique
your interest, I encourage you to get in touch with
RICHARD GREEN ( richard@nakayamasteelworks.com ) to obtain further
information and a detailed job description.
Best Regards,
Mark Fletcher
Director of Finance, Burke Construction Group, Inc.
Recruitment Consultant
NAKAYAMA STEEL WORKS LTD.
Payments Representative Required in CANADA/USA
Representative Required.
--00000000000015c8e106200cc190
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello Dave Yadallee
I hope you're keeping well.
I am
Mark Fletcher,=20
recruitment consultant at NAKAYAMA STEEL WORKS LTD. At present, NKM=20
STEEL is actively searching for a candidate or company to fulfill the=20
role of a part-time representative in the CANADA/USA. This position=20
offers enticing benefits and flexible work hours.
I'm reaching=
=20
out to inquire if you might be interested in taking on the=20
responsibility of handling our company's affairs in the CANADA/USA. Thi=
s
opportunity allows for remote work, enabling you to seamlessly=20
integrate it with your existing job or daily commitments. Should this=20
proposition pique your interest, I encourage you to get in touch with
RI=
CHARD GREEN (
blank">richard@nakayamasteelworks.com ) to obtain further information a=
nd a detailed job description.
Best Regards,
Mark Fletcher
Director of Finance, Burke Construction Group, Inc.
Recruitment Consulta=
nt
NAKAYAMA STEEL WORKS LTD.
Payments Representative Required in CANA=
DA/USA
Representative Required.
--00000000000015c8e106200cc190--