Investment Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 30 Apr 2022 17:30:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nkwXE-0005As-Pa
for dave@doctor.nl2k.ab.ca;
Sat, 30 Apr 2022 17:29:56 -0600
Resent-From: The Doctor
Resent-Date: Sat, 30 Apr 2022 17:29:56 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f196.google.com ([209.85.222.196]:35437)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nkwPA-0004hi-Aq
for doctor@doctor.nl2k.ab.ca;
Sat, 30 Apr 2022 17:21:41 -0600
Received: by mail-qk1-f196.google.com with SMTP id z126so9121119qkb.2
for; Sat, 30 Apr 2022 16:21:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:from:date:message-id:subject:to;
bh=t35F5EpTI20dGLP5kajnmPx/mJXq6HlQ2J0nNkZR2cs=;
b=SIvkO0lXxxYGayK2nX1Chxg+tFKi6f32buTk4HeldVWhFrSzZFKenqfC52wWdYtiTw
eywCaW+Krp2+ObetzzBWxQ9YHH9YFSTMP6gYl7XEZNAzvhC9vJ5r15x+d3J+djcM/xjP
IqTIYXTSNP3BvLABCRoWevSHubac44yuU65QdbjIwTiS5vJJbyem68unHatJEL/ORwB1
p3LVur6CnBpr5p/G3BaqlYpHOK8iZSmQOU5waCAbs/TzYJ+G0AExCVt5toEheU2l2hx3
8j6FrfbpFQfus0+hmXcOXSQdqBzyudcRcRjF1ke8DpccPLGheiIEhHBbP42hBT8GL/Ci
81Iw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=t35F5EpTI20dGLP5kajnmPx/mJXq6HlQ2J0nNkZR2cs=;
b=dhfI46VRz3Ha/netMHJKHSOehwtNZa5WsVH8egswITdIpjvkfT2jF5pPveuMczktvJ
RhCUMVxLwoswM+Y9n2jmNU10y06c2m0hZeEDCCWP7NDdshDAPeAVzput/C5Y1oZURjhp
ktionK20+YKG4iHWZqLhUGI72oFfZBmDE/uukrZTQmXAJkI/NbM5r5G6UZrYJZeBA1rB
S/CZ3+AU4EDC5MrZKv6AINdxYNHV2W1BpaZgFOd8arpUdg9IXdWLBoeVp/wOgAOqaqEU
vj/+Ge1/OsdMdD+rXu94BIYISHH9oCk28L8UPP/t54TeUdtp9Sb79+k7sKC/9R7fXwl+
tSBQ==
X-Gm-Message-State: AOAM532Ly1Wta2x2WWZDJKv5kz4piUTcjBzrNX5qjXK2x0p0+I9T9eOe
6PbUxfzgRBoiyNn7A/tg1Gmeim//94iDeCdYC68=
X-Google-Smtp-Source: ABdhPJyubmb9RP7mqZ9aWUbFsxlPr2tVqNbvzv21VZkKkxuoxoyKJA88Z88i0rtNC/CB6nRYLSQ1x7QEJhaRiTTCaTM=
X-Received: by 2002:a05:620a:f03:b0:67e:1e38:4a0 with SMTP id
v3-20020a05620a0f0300b0067e1e3804a0mr4138163qkl.86.1651360873201; Sat, 30 Apr
2022 16:21:13 -0700 (PDT)
MIME-Version: 1.0
From: Frederick Owen
Date: Sun, 1 May 2022 00:20:10 +0100
Message-ID:
Subject: INVESTMENT PROJECT
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000003e452305dde76a28"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 12.5
X-Spam_score_int: 125
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings, I am Dr Frederick Owen by name, I represent a formal
Minister of Petroleum (name withheld) for security reasons) I am writing
to you as I truly need your guidance in investing in your country.
Content analysis details: (12.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.196 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrszhangmie[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.6 SUBJ_ALL_CAPS Subject is all capitals
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLY From and body contain different freemails
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
2.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} INVESTMENT PROJECT
--0000000000003e452305dde76a28
Content-Type: text/plain; charset="UTF-8"
Greetings,
I am Dr Frederick Owen by name, I represent a formal Minister of Petroleum
(name withheld) for security reasons) I am writing to you as I truly need
your guidance in investing in your country.
I came across your email during my investment research, so I decided to
contact you in confidence on this vital issue. I would like to establish a
partnership with you for project assistance in your country as soon as we
conclude arrangements.
There are few basic things I would like to know about that i want you to
assist me in:
(1) Your assistance to carry out a feasibility study on lucrative
areas/choice of investment that will benefit us.
(2) Can your company's account be able to receive and accommodate such a
large amount of funds on a very comfortable note?
(3) Security of the investment and continuity.
The total amount involved in this business is $200,000.000.00 (Two Hundred
Million US Dollars) please note: Should this be of interest to you, do not
hesitate to email me back as further information will be given to you once
we establish understanding in initiating the business. You can contact me
on my private email : drfrederickowen7@gmail.com
I look forward hearing from you,
Yours sincerely
Dr Frederick Owen
--0000000000003e452305dde76a28
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000003e452305dde76a28--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 30 Apr 2022 17:30:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nkwXE-0005As-Pa
for dave@doctor.nl2k.ab.ca;
Sat, 30 Apr 2022 17:29:56 -0600
Resent-From: The Doctor
Resent-Date: Sat, 30 Apr 2022 17:29:56 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f196.google.com ([209.85.222.196]:35437)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nkwPA-0004hi-Aq
for doctor@doctor.nl2k.ab.ca;
Sat, 30 Apr 2022 17:21:41 -0600
Received: by mail-qk1-f196.google.com with SMTP id z126so9121119qkb.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:from:date:message-id:subject:to;
bh=t35F5EpTI20dGLP5kajnmPx/mJXq6HlQ2J0nNkZR2cs=;
b=SIvkO0lXxxYGayK2nX1Chxg+tFKi6f32buTk4HeldVWhFrSzZFKenqfC52wWdYtiTw
eywCaW+Krp2+ObetzzBWxQ9YHH9YFSTMP6gYl7XEZNAzvhC9vJ5r15x+d3J+djcM/xjP
IqTIYXTSNP3BvLABCRoWevSHubac44yuU65QdbjIwTiS5vJJbyem68unHatJEL/ORwB1
p3LVur6CnBpr5p/G3BaqlYpHOK8iZSmQOU5waCAbs/TzYJ+G0AExCVt5toEheU2l2hx3
8j6FrfbpFQfus0+hmXcOXSQdqBzyudcRcRjF1ke8DpccPLGheiIEhHBbP42hBT8GL/Ci
81Iw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=t35F5EpTI20dGLP5kajnmPx/mJXq6HlQ2J0nNkZR2cs=;
b=dhfI46VRz3Ha/netMHJKHSOehwtNZa5WsVH8egswITdIpjvkfT2jF5pPveuMczktvJ
RhCUMVxLwoswM+Y9n2jmNU10y06c2m0hZeEDCCWP7NDdshDAPeAVzput/C5Y1oZURjhp
ktionK20+YKG4iHWZqLhUGI72oFfZBmDE/uukrZTQmXAJkI/NbM5r5G6UZrYJZeBA1rB
S/CZ3+AU4EDC5MrZKv6AINdxYNHV2W1BpaZgFOd8arpUdg9IXdWLBoeVp/wOgAOqaqEU
vj/+Ge1/OsdMdD+rXu94BIYISHH9oCk28L8UPP/t54TeUdtp9Sb79+k7sKC/9R7fXwl+
tSBQ==
X-Gm-Message-State: AOAM532Ly1Wta2x2WWZDJKv5kz4piUTcjBzrNX5qjXK2x0p0+I9T9eOe
6PbUxfzgRBoiyNn7A/tg1Gmeim//94iDeCdYC68=
X-Google-Smtp-Source: ABdhPJyubmb9RP7mqZ9aWUbFsxlPr2tVqNbvzv21VZkKkxuoxoyKJA88Z88i0rtNC/CB6nRYLSQ1x7QEJhaRiTTCaTM=
X-Received: by 2002:a05:620a:f03:b0:67e:1e38:4a0 with SMTP id
v3-20020a05620a0f0300b0067e1e3804a0mr4138163qkl.86.1651360873201; Sat, 30 Apr
2022 16:21:13 -0700 (PDT)
MIME-Version: 1.0
From: Frederick Owen
Date: Sun, 1 May 2022 00:20:10 +0100
Message-ID:
Subject: INVESTMENT PROJECT
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000003e452305dde76a28"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 12.5
X-Spam_score_int: 125
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings, I am Dr Frederick Owen by name, I represent a formal
Minister of Petroleum (name withheld) for security reasons) I am writing
to you as I truly need your guidance in investing in your country.
Content analysis details: (12.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.196 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrszhangmie[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.6 SUBJ_ALL_CAPS Subject is all capitals
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLY From and body contain different freemails
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
2.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} INVESTMENT PROJECT
--0000000000003e452305dde76a28
Content-Type: text/plain; charset="UTF-8"
Greetings,
I am Dr Frederick Owen by name, I represent a formal Minister of Petroleum
(name withheld) for security reasons) I am writing to you as I truly need
your guidance in investing in your country.
I came across your email during my investment research, so I decided to
contact you in confidence on this vital issue. I would like to establish a
partnership with you for project assistance in your country as soon as we
conclude arrangements.
There are few basic things I would like to know about that i want you to
assist me in:
(1) Your assistance to carry out a feasibility study on lucrative
areas/choice of investment that will benefit us.
(2) Can your company's account be able to receive and accommodate such a
large amount of funds on a very comfortable note?
(3) Security of the investment and continuity.
The total amount involved in this business is $200,000.000.00 (Two Hundred
Million US Dollars) please note: Should this be of interest to you, do not
hesitate to email me back as further information will be given to you once
we establish understanding in initiating the business. You can contact me
on my private email : drfrederickowen7@gmail.com
I look forward hearing from you,
Yours sincerely
Dr Frederick Owen
--0000000000003e452305dde76a28
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Greetings,
I am Dr =C2=A0Frederick Owen by name, I =
represent a formal Minister of Petroleum (name withheld) for security reaso=
ns) I am writing to you as I truly need your guidance in investing in your =
country.
I came across your email during my investment research, so =
I decided to contact you =C2=A0in confidence on this vital issue. I would l=
ike to establish a partnership with you for project assistance in your coun=
try as soon as we conclude arrangements.
There are few basic things =
I would like to know about that i want you to assist me in:
(1) Your=
assistance to carry out a feasibility study on lucrative areas/choice of i=
nvestment that will benefit us.
(2) Can your company's account b=
e able to receive and accommodate such a large amount of funds on a very co=
mfortable note?
(3) Security of the investment and continuity.
r>The total amount involved in this business is $200,000.000.00 (Two Hundre=
d Million US Dollars) please note: Should this be of interest to you, do no=
t hesitate to email me back as further information will be given to you onc=
e we establish understanding in initiating the business. You can contact me=
on my private email :=C2=A0
frederickowen7@gmail.com" target=3D"_blank">drfrederickowen7@gmail.com<=
/b>
I look forward hearing from you,
Yours sincerely<=
br>Dr Frederick Owen
I am Dr =C2=A0Frederick Owen by name, I =
represent a formal Minister of Petroleum (name withheld) for security reaso=
ns) I am writing to you as I truly need your guidance in investing in your =
country.
I came across your email during my investment research, so =
I decided to contact you =C2=A0in confidence on this vital issue. I would l=
ike to establish a partnership with you for project assistance in your coun=
try as soon as we conclude arrangements.
There are few basic things =
I would like to know about that i want you to assist me in:
(1) Your=
assistance to carry out a feasibility study on lucrative areas/choice of i=
nvestment that will benefit us.
(2) Can your company's account b=
e able to receive and accommodate such a large amount of funds on a very co=
mfortable note?
(3) Security of the investment and continuity.
r>The total amount involved in this business is $200,000.000.00 (Two Hundre=
d Million US Dollars) please note: Should this be of interest to you, do no=
t hesitate to email me back as further information will be given to you onc=
e we establish understanding in initiating the business. You can contact me=
on my private email :=C2=A0
frederickowen7@gmail.com" target=3D"_blank">drfrederickowen7@gmail.com<=
/b>
I look forward hearing from you,
Yours sincerely<=
br>Dr Frederick Owen
--0000000000003e452305dde76a28--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments