Investment Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 May 2022 05:06:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1np6di-0008PH-OJ
for dave@doctor.nl2k.ab.ca;
Thu, 12 May 2022 05:05:50 -0600
Resent-From: The Doctor
Resent-Date: Thu, 12 May 2022 05:05:50 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-il1-f194.google.com ([209.85.166.194]:42562)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1np4Zi-0009FM-2g
for root@nk.ca;
Thu, 12 May 2022 02:54:31 -0600
Received: by mail-il1-f194.google.com with SMTP id r17so3063179iln.9
for; Thu, 12 May 2022 01:53:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=xRczROMtnIDUR8ETNTo2J2eTM6R5QXHzxnGDtKrZ3hU=;
b=YBPxPVVpCfwulI8N/8NVVX/mvlAztNExxqinW90YsA8Fb8hCHVReZ9iSHznTFEgJIh
6LIiFNiPW9kCnwrCB1/01VQxGzdnexw6mJPEgvnQiADT+FeM2HyRRlt66BR5r1f0myCi
4O7KJ837C68PpAVbKHGN9qHdEN/H0bzcU72SxOhEEwcIe5FkQpli5iKT+9PGC85C/FeG
x76OT3vlE+eF3AlvP0wPaCV5UlEmFHMdWZ7Yzi0S6IuJ9QtnTpJhb1B6xTkawU+fGaBY
pRaPoIwY6VUsSF0Oo2AJUlQXui5K4bzEpKhKz2MCVd50QcrPdWp+MCzEUu3Cscbhs78U
4nVA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=xRczROMtnIDUR8ETNTo2J2eTM6R5QXHzxnGDtKrZ3hU=;
b=NIg8Vv4hJxJ4nczL1I0TGMRefpq6ExK37dKAY0X8WZ93H8lcpO1G48tM419qkXbVLP
D2+Wxly7RcVVGi6HBTDGV4wXkRheSV9ufE3QE0Ywqt/1hKsQ4MwM6ob9m3PjOfgg4RKg
52QmPLKxvstvcpCun3KSIjt+TYYq9kwYOZ5QZOvGrkl1G9UCAG42EB8cF3Zag5uzfQ5m
u7QbnmfA37kkyQa2cJckNTIax4y52/q0//CQ1ONzcIWIbn89BXN2MyAoCBsQiMQwwCX1
MzD8iVQUhEVq0vkVKpod0IkP6sFMhoD2qeoePCrfU4DhV2Kro21cfUnCrnW5zLDWkFII
cpCw==
X-Gm-Message-State: AOAM531/yyiHMq1h3gbPOEuoDloBVO7QY0NdfhXw7O95Du5ae2ZZnOUS
rXpR9TlZUALWcpvVpIethXlkQvvsfEI3wXonZ+c=
X-Google-Smtp-Source: ABdhPJxoYcROja2nLUz6v59Xpm95ZfCwx6/HYlGdLnxGQ3dLYPbsMsjIVPl7Ri9Q9B/RxDNootI5Idxa64xlI5wyEyY=
X-Received: by 2002:a92:bf06:0:b0:2c9:b21d:6db7 with SMTP id
z6-20020a92bf06000000b002c9b21d6db7mr13646483ilh.222.1652345586976; Thu, 12
May 2022 01:53:06 -0700 (PDT)
MIME-Version: 1.0
Reply-To: stanfordleon@aol.com
From: Stanford Leon
Date: Thu, 12 May 2022 16:52:52 +0800
Message-ID:
Subject: Investment Manager
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000c20e1305deccaf6c"
Bcc: root@nk.ca
X-Spam_score: 8.7
X-Spam_score_int: 87
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Hello: My Friend I am Mr Stanford Leon from United Kingdom
I want to invest in real estate in your Country, can you be my Investment
manager, I need a honest company that can handle my Investment in your country
pleas [...]
Content analysis details: (8.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.194 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mandyconway2[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mandyconway2[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Investment Manager
--000000000000c20e1305deccaf6c
Content-Type: text/plain; charset="UTF-8"
--
Hello: My Friend
I am Mr Stanford Leon from United Kingdom I want to invest in real estate
in your Country, can you be my Investment manager, I need a honest company
that can handle my Investment in your country please respond to me if we
can work together. contact me on my private email: stanfordleon@aol.com
Yours Sincerely
Mr Stanford Leon
Acquire Estate Agents Limited
Surrey Quays Office
37 Greenland Quay
SE16 7RW
Email:stanfordleon@aol.com
--000000000000c20e1305deccaf6c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--
il_signature" data-smartmail=3D"gmail_signature">Hello: My Friend
I =
am Mr Stanford Leon from United Kingdom I want to invest in real estate in =
your Country, can you be my Investment manager, I need a honest company tha=
t can handle my Investment in your country please respond to me if we can w=
ork together. contact me on my private email:
n@aol.com" target=3D"_blank">stanfordleon@aol.com
Yours Sincerel=
y
Mr Stanford Leon
Acquire Estate Agents Limited
Surrey Quays Offi=
ce
37 Greenland Quay
SE16 7RW
on@aol.com" target=3D"_blank">Email:stanfordleon@aol.com
>
--000000000000c20e1305deccaf6c--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 May 2022 05:06:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1np6di-0008PH-OJ
for dave@doctor.nl2k.ab.ca;
Thu, 12 May 2022 05:05:50 -0600
Resent-From: The Doctor
Resent-Date: Thu, 12 May 2022 05:05:50 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-il1-f194.google.com ([209.85.166.194]:42562)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1np4Zi-0009FM-2g
for root@nk.ca;
Thu, 12 May 2022 02:54:31 -0600
Received: by mail-il1-f194.google.com with SMTP id r17so3063179iln.9
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=xRczROMtnIDUR8ETNTo2J2eTM6R5QXHzxnGDtKrZ3hU=;
b=YBPxPVVpCfwulI8N/8NVVX/mvlAztNExxqinW90YsA8Fb8hCHVReZ9iSHznTFEgJIh
6LIiFNiPW9kCnwrCB1/01VQxGzdnexw6mJPEgvnQiADT+FeM2HyRRlt66BR5r1f0myCi
4O7KJ837C68PpAVbKHGN9qHdEN/H0bzcU72SxOhEEwcIe5FkQpli5iKT+9PGC85C/FeG
x76OT3vlE+eF3AlvP0wPaCV5UlEmFHMdWZ7Yzi0S6IuJ9QtnTpJhb1B6xTkawU+fGaBY
pRaPoIwY6VUsSF0Oo2AJUlQXui5K4bzEpKhKz2MCVd50QcrPdWp+MCzEUu3Cscbhs78U
4nVA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=xRczROMtnIDUR8ETNTo2J2eTM6R5QXHzxnGDtKrZ3hU=;
b=NIg8Vv4hJxJ4nczL1I0TGMRefpq6ExK37dKAY0X8WZ93H8lcpO1G48tM419qkXbVLP
D2+Wxly7RcVVGi6HBTDGV4wXkRheSV9ufE3QE0Ywqt/1hKsQ4MwM6ob9m3PjOfgg4RKg
52QmPLKxvstvcpCun3KSIjt+TYYq9kwYOZ5QZOvGrkl1G9UCAG42EB8cF3Zag5uzfQ5m
u7QbnmfA37kkyQa2cJckNTIax4y52/q0//CQ1ONzcIWIbn89BXN2MyAoCBsQiMQwwCX1
MzD8iVQUhEVq0vkVKpod0IkP6sFMhoD2qeoePCrfU4DhV2Kro21cfUnCrnW5zLDWkFII
cpCw==
X-Gm-Message-State: AOAM531/yyiHMq1h3gbPOEuoDloBVO7QY0NdfhXw7O95Du5ae2ZZnOUS
rXpR9TlZUALWcpvVpIethXlkQvvsfEI3wXonZ+c=
X-Google-Smtp-Source: ABdhPJxoYcROja2nLUz6v59Xpm95ZfCwx6/HYlGdLnxGQ3dLYPbsMsjIVPl7Ri9Q9B/RxDNootI5Idxa64xlI5wyEyY=
X-Received: by 2002:a92:bf06:0:b0:2c9:b21d:6db7 with SMTP id
z6-20020a92bf06000000b002c9b21d6db7mr13646483ilh.222.1652345586976; Thu, 12
May 2022 01:53:06 -0700 (PDT)
MIME-Version: 1.0
Reply-To: stanfordleon@aol.com
From: Stanford Leon
Date: Thu, 12 May 2022 16:52:52 +0800
Message-ID:
Subject: Investment Manager
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000c20e1305deccaf6c"
Bcc: root@nk.ca
X-Spam_score: 8.7
X-Spam_score_int: 87
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Hello: My Friend I am Mr Stanford Leon from United Kingdom
I want to invest in real estate in your Country, can you be my Investment
manager, I need a honest company that can handle my Investment in your country
pleas [...]
Content analysis details: (8.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.194 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mandyconway2[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mandyconway2[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Investment Manager
--000000000000c20e1305deccaf6c
Content-Type: text/plain; charset="UTF-8"
--
Hello: My Friend
I am Mr Stanford Leon from United Kingdom I want to invest in real estate
in your Country, can you be my Investment manager, I need a honest company
that can handle my Investment in your country please respond to me if we
can work together. contact me on my private email: stanfordleon@aol.com
Yours Sincerely
Mr Stanford Leon
Acquire Estate Agents Limited
Surrey Quays Office
37 Greenland Quay
SE16 7RW
Email:stanfordleon@aol.com
--000000000000c20e1305deccaf6c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--
il_signature" data-smartmail=3D"gmail_signature">Hello: My Friend
I =
am Mr Stanford Leon from United Kingdom I want to invest in real estate in =
your Country, can you be my Investment manager, I need a honest company tha=
t can handle my Investment in your country please respond to me if we can w=
ork together. contact me on my private email:
n@aol.com" target=3D"_blank">stanfordleon@aol.com
Yours Sincerel=
y
Mr Stanford Leon
Acquire Estate Agents Limited
Surrey Quays Offi=
ce
37 Greenland Quay
SE16 7RW
on@aol.com" target=3D"_blank">Email:stanfordleon@aol.com
>
--000000000000c20e1305deccaf6c--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments