More gullible money spam from GMail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 28 May 2022 15:00:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nv3XC-000HAj-1P
for dave@doctor.nl2k.ab.ca;
Sat, 28 May 2022 14:59:42 -0600
Resent-From: The Doctor
Resent-Date: Sat, 28 May 2022 14:59:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f67.google.com ([209.85.218.67]:36554)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nuzQU-0000GL-AH
for root@nk.ca;
Sat, 28 May 2022 10:36:33 -0600
Received: by mail-ej1-f67.google.com with SMTP id gi33so13863809ejc.3
for; Sat, 28 May 2022 09:36:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=q0NOor8eIg/ea3rdbLnGhkBMqP4RNhpkxe1nfNB8SwY=;
b=ehGpa87Qqf9sBsup/6WMUDz+KBnBhfgRNTEJOyH31bIkGH2Rjny5he/8W+0ju2z05e
tEiq9uWOuM9n6eC+Kl8EofeaSKs5GI24ntHUbIHPlp8Wg4lU7t4e4lKSnXKuJLpl0Jev
blelXm+Cy+gb4JuLH9qo0atsorIoqvf/SW4WGB2sHxu1poHjaGYxiChuVS3JXU/wxYmr
FllNbWGLo8S+ITK2LzfuRKBZsuSo4MKCy3ZeqX93CPawVJjrydwGwz7PYvS23RhDEA7z
it6gp85YCzKwZ8BpzDb6zKOBWfMiWTBQSH14oKgJgi+uxmnnJBWzsZpKWAD6rd3Qdxav
0uFQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=q0NOor8eIg/ea3rdbLnGhkBMqP4RNhpkxe1nfNB8SwY=;
b=MdvabbQxx6Na19u0GRXTMZTcT50RTiDdV2454FrrdRaJ916Q/6Q0c0he/TdmGMvF2Q
hismcDLkiY2cGlSFRqI2un+uTTTCqm7GjY5764VrCcfXqNBWpz9MmuopRtUUYF8oZsuc
4mDFO2Tc/JNYqakgMY87CDPInu9ioONbYBrn0yOYO+dG2YPnmJejf375frqyryiYdoIg
ahAJMJIh3TIOJYCWwDasaU4xQmyIo/6G0CrZP+tp2DO7GO3WgK5hjaKMAicSYle/Rzxy
7BUqrBPmSski3RT+kJP80srq0rJb4oCHh8/B0FiKTa8EliFHAZZpYG7Z2bX9JsI8tGuO
Xatg==
X-Gm-Message-State: AOAM533Z7mFdWzX8+QOgKM7wBzUSd+KKK9Yimdh8bjrpGQ6Od0O1DdTj
jlHf7oqu7HszxphN0m1thCecdMiWIQmqzM7mW6s=
X-Google-Smtp-Source: ABdhPJyB/7Whi58H2Y618vVKt1sllNhZnORNd+VYQi1fMliCM+ti8B/ayxQrz1x8l3tisg1IVYbqLxAUmArsC/B82n8=
X-Received: by 2002:a17:906:58cb:b0:6ff:5282:dd83 with SMTP id
e11-20020a17090658cb00b006ff5282dd83mr1946652ejs.510.1653755766537; Sat, 28
May 2022 09:36:06 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:640c:e46:b0:153:17e3:9d0c with HTTP; Sat, 28 May 2022
09:36:05 -0700 (PDT)
Reply-To: robert_wallace12@yahoo.com
From: "Robert Wallace."
Date: Sat, 28 May 2022 18:36:05 +0200
Message-ID:
Subject: Re: Re: Urgent Respond Needed.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 7.8
X-Spam_score_int: 78
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Hello. This is a personal email directed to you for your
consideration alone. I request that it remain and be treated as such only.
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.67 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[dwaynjson[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[robert_wallace12[at]yahoo.com]
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Re: Re: Urgent Respond Needed.
--
Hello.
This is a personal email directed to you for your consideration alone.
I request that it remain and be treated as such only.
My name is Robert Wallace. I'm a Belgian/British Citizen an Attorney. I
have an interesting business proposal for you that will be of immense
benefit to both of us, although this may be hard for you to believe, we
stand to gain 9.7 Million Dollars between us in a matter of weeks. This is
fully legal and 100% genuine. I need you to signify your interest by
replying to my email. Most importantly, I need you to keep whatever
information between us confidential even if you decide not to go along with
me. I will make more details available to you on receipt of your positive
response.
Regards,
Robert Wallace.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 28 May 2022 15:00:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nv3XC-000HAj-1P
for dave@doctor.nl2k.ab.ca;
Sat, 28 May 2022 14:59:42 -0600
Resent-From: The Doctor
Resent-Date: Sat, 28 May 2022 14:59:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f67.google.com ([209.85.218.67]:36554)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nuzQU-0000GL-AH
for root@nk.ca;
Sat, 28 May 2022 10:36:33 -0600
Received: by mail-ej1-f67.google.com with SMTP id gi33so13863809ejc.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=q0NOor8eIg/ea3rdbLnGhkBMqP4RNhpkxe1nfNB8SwY=;
b=ehGpa87Qqf9sBsup/6WMUDz+KBnBhfgRNTEJOyH31bIkGH2Rjny5he/8W+0ju2z05e
tEiq9uWOuM9n6eC+Kl8EofeaSKs5GI24ntHUbIHPlp8Wg4lU7t4e4lKSnXKuJLpl0Jev
blelXm+Cy+gb4JuLH9qo0atsorIoqvf/SW4WGB2sHxu1poHjaGYxiChuVS3JXU/wxYmr
FllNbWGLo8S+ITK2LzfuRKBZsuSo4MKCy3ZeqX93CPawVJjrydwGwz7PYvS23RhDEA7z
it6gp85YCzKwZ8BpzDb6zKOBWfMiWTBQSH14oKgJgi+uxmnnJBWzsZpKWAD6rd3Qdxav
0uFQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=q0NOor8eIg/ea3rdbLnGhkBMqP4RNhpkxe1nfNB8SwY=;
b=MdvabbQxx6Na19u0GRXTMZTcT50RTiDdV2454FrrdRaJ916Q/6Q0c0he/TdmGMvF2Q
hismcDLkiY2cGlSFRqI2un+uTTTCqm7GjY5764VrCcfXqNBWpz9MmuopRtUUYF8oZsuc
4mDFO2Tc/JNYqakgMY87CDPInu9ioONbYBrn0yOYO+dG2YPnmJejf375frqyryiYdoIg
ahAJMJIh3TIOJYCWwDasaU4xQmyIo/6G0CrZP+tp2DO7GO3WgK5hjaKMAicSYle/Rzxy
7BUqrBPmSski3RT+kJP80srq0rJb4oCHh8/B0FiKTa8EliFHAZZpYG7Z2bX9JsI8tGuO
Xatg==
X-Gm-Message-State: AOAM533Z7mFdWzX8+QOgKM7wBzUSd+KKK9Yimdh8bjrpGQ6Od0O1DdTj
jlHf7oqu7HszxphN0m1thCecdMiWIQmqzM7mW6s=
X-Google-Smtp-Source: ABdhPJyB/7Whi58H2Y618vVKt1sllNhZnORNd+VYQi1fMliCM+ti8B/ayxQrz1x8l3tisg1IVYbqLxAUmArsC/B82n8=
X-Received: by 2002:a17:906:58cb:b0:6ff:5282:dd83 with SMTP id
e11-20020a17090658cb00b006ff5282dd83mr1946652ejs.510.1653755766537; Sat, 28
May 2022 09:36:06 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:640c:e46:b0:153:17e3:9d0c with HTTP; Sat, 28 May 2022
09:36:05 -0700 (PDT)
Reply-To: robert_wallace12@yahoo.com
From: "Robert Wallace."
Date: Sat, 28 May 2022 18:36:05 +0200
Message-ID:
Subject: Re: Re: Urgent Respond Needed.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 7.8
X-Spam_score_int: 78
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Hello. This is a personal email directed to you for your
consideration alone. I request that it remain and be treated as such only.
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.67 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[dwaynjson[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[robert_wallace12[at]yahoo.com]
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Re: Re: Urgent Respond Needed.
--
Hello.
This is a personal email directed to you for your consideration alone.
I request that it remain and be treated as such only.
My name is Robert Wallace. I'm a Belgian/British Citizen an Attorney. I
have an interesting business proposal for you that will be of immense
benefit to both of us, although this may be hard for you to believe, we
stand to gain 9.7 Million Dollars between us in a matter of weeks. This is
fully legal and 100% genuine. I need you to signify your interest by
replying to my email. Most importantly, I need you to keep whatever
information between us confidential even if you decide not to go along with
me. I will make more details available to you on receipt of your positive
response.
Regards,
Robert Wallace.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments