Business partner spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 23 Jul 2022 09:52:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oFHQ1-0007YY-5t
for dave@doctor.nl2k.ab.ca;
Sat, 23 Jul 2022 09:51:53 -0600
Resent-From: The Doctor
Resent-Date: Sat, 23 Jul 2022 09:51:53 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f66.google.com ([209.85.218.66]:45749)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oFHCA-0006NH-Vz
for doctor@netknow.ca;
Sat, 23 Jul 2022 09:37:38 -0600
Received: by mail-ej1-f66.google.com with SMTP id fy29so13197339ejc.12
for; Sat, 23 Jul 2022 08:37:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=962rzl+hBh3xQcTFtjwtS144H/2npPM5VoLMiehPq7o=;
b=dSoqCwMZ8+llIkOMkXtigR0W6+TpUu3mYMo0xXkCetwO10u9IXJt4q9QBqsxjWyWTf
nqfb7INYwWicZ53cAibdxfrfEqZICzz5bp7+FpRVjitPUAYNusrWga7sHaE9gX0zajn0
rwV51Tb41VlzoFCYR6YDls43JNRv8iAqZmH1jW5HrvUv02ozh4B35yVGLtxqlWUQusVq
bX4ggmGVANwF9bG45Q7PgRIGCleDIBE6wjl7xR2OvDSb5ISOHxoZ9NAxDGteWfyN6Tv2
xb3rjHfucU6LOfaFDzpHQ4CcTkLkLTX2YQ0/kshcwasiX3vd3gHvvZHSenXksh7no6Rs
RTEA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=962rzl+hBh3xQcTFtjwtS144H/2npPM5VoLMiehPq7o=;
b=WKV+RPQR7b2UqyLjRljfYLnveiaMLPFa2hLpvczFOuPiieZhI85PdKLQsfhPOa7nSu
gbt+WW1kqW/BxBNRE8o8N2dQQ6jYn2cbC8Vo2xXSqdb9Njl+eCQ1b2nx3HJYlXhX5DCP
aygDO/orkk8R7BEQrTHA5uMXHk5iypfivT47m5lbwnq/UOA595M52JfX9G9wXzFpxYeS
wRGCetkGvusxjiQnldzORnRfAgx5w7f0F4bAU7yRKohcPmxarH1tz8E88uCBOenc/wLT
HzKYPbfUV32Kf32zN45JKU0Ei8QgyL6f7/b7MX2lYgm/kWl869DcM3LesNP3S2PAcjjW
902A==
X-Gm-Message-State: AJIora9wmX1L+gC91qMKARA3NZ1he2hGO45vKLu7Ku7G/nT15gpIk3BS
FA5t8pcO2DMq8XMrBBoOqKCeCJTzMkLieYRNyQc=
X-Google-Smtp-Source: AGRyM1tQqqA0Gr504y0l2xZrOOc/D7Nni7ueXWjErp6Jbi9G3lSeY1DYOniqFbkt89dDCuw6j/zz3er1fvA4aRPKqTU=
X-Received: by 2002:a17:906:118:b0:715:771b:251b with SMTP id
24-20020a170906011800b00715771b251bmr3708520eje.651.1658590630769; Sat, 23
Jul 2022 08:37:10 -0700 (PDT)
MIME-Version: 1.0
Reply-To: tonnyyrross@gmail.com
From: Manford Smith
Date: Sat, 23 Jul 2022 08:36:57 -0700
Message-ID:
Subject: BUSINESS IDEA
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000005ffc5905e47ab9b8"
Bcc: doctor@netknow.ca
X-Spam_score: 6.0
X-Spam_score_int: 60
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear. Nice to connect with you, I am contacting you to
assist me on a business project. Acknowledge my email then I will send you
a summary of this business opportunity that we can discuss in due course
if [...]
Content analysis details: (6.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.66 listed in wl.mailspike.net]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[manfords97[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[manfords97[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} BUSINESS IDEA
--0000000000005ffc5905e47ab9b8
Content-Type: text/plain; charset="UTF-8"
--
Dear.
Nice to connect with you, I am contacting you to assist me on a business
project. Acknowledge my email then I will send you a summary of this
business opportunity that we can discuss in due course if you are
interested.
I apologize for any inconvenience this may have caused.
Sincerely,
Tony Ross
Executive Vice President & Chief Credit Officer, Woodforest National Bank,
Woodlands, Texas.
--0000000000005ffc5905e47ab9b8
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--
ata-smartmail=3D"gmail_signature">Dear.
Nice to connect with you, I =
am contacting you to assist me on a business project.=C2=A0 Acknowledge my =
email then I will send you a summary of this business opportunity that we c=
an discuss in due course if you are interested.
I apologize for any =
inconvenience this may have caused.
Sincerely,
Tony Ross
Execu=
tive Vice President & Chief Credit Officer, Woodforest National Bank, W=
oodlands, Texas.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 23 Jul 2022 09:52:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oFHQ1-0007YY-5t
for dave@doctor.nl2k.ab.ca;
Sat, 23 Jul 2022 09:51:53 -0600
Resent-From: The Doctor
Resent-Date: Sat, 23 Jul 2022 09:51:53 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f66.google.com ([209.85.218.66]:45749)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oFHCA-0006NH-Vz
for doctor@netknow.ca;
Sat, 23 Jul 2022 09:37:38 -0600
Received: by mail-ej1-f66.google.com with SMTP id fy29so13197339ejc.12
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=962rzl+hBh3xQcTFtjwtS144H/2npPM5VoLMiehPq7o=;
b=dSoqCwMZ8+llIkOMkXtigR0W6+TpUu3mYMo0xXkCetwO10u9IXJt4q9QBqsxjWyWTf
nqfb7INYwWicZ53cAibdxfrfEqZICzz5bp7+FpRVjitPUAYNusrWga7sHaE9gX0zajn0
rwV51Tb41VlzoFCYR6YDls43JNRv8iAqZmH1jW5HrvUv02ozh4B35yVGLtxqlWUQusVq
bX4ggmGVANwF9bG45Q7PgRIGCleDIBE6wjl7xR2OvDSb5ISOHxoZ9NAxDGteWfyN6Tv2
xb3rjHfucU6LOfaFDzpHQ4CcTkLkLTX2YQ0/kshcwasiX3vd3gHvvZHSenXksh7no6Rs
RTEA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=962rzl+hBh3xQcTFtjwtS144H/2npPM5VoLMiehPq7o=;
b=WKV+RPQR7b2UqyLjRljfYLnveiaMLPFa2hLpvczFOuPiieZhI85PdKLQsfhPOa7nSu
gbt+WW1kqW/BxBNRE8o8N2dQQ6jYn2cbC8Vo2xXSqdb9Njl+eCQ1b2nx3HJYlXhX5DCP
aygDO/orkk8R7BEQrTHA5uMXHk5iypfivT47m5lbwnq/UOA595M52JfX9G9wXzFpxYeS
wRGCetkGvusxjiQnldzORnRfAgx5w7f0F4bAU7yRKohcPmxarH1tz8E88uCBOenc/wLT
HzKYPbfUV32Kf32zN45JKU0Ei8QgyL6f7/b7MX2lYgm/kWl869DcM3LesNP3S2PAcjjW
902A==
X-Gm-Message-State: AJIora9wmX1L+gC91qMKARA3NZ1he2hGO45vKLu7Ku7G/nT15gpIk3BS
FA5t8pcO2DMq8XMrBBoOqKCeCJTzMkLieYRNyQc=
X-Google-Smtp-Source: AGRyM1tQqqA0Gr504y0l2xZrOOc/D7Nni7ueXWjErp6Jbi9G3lSeY1DYOniqFbkt89dDCuw6j/zz3er1fvA4aRPKqTU=
X-Received: by 2002:a17:906:118:b0:715:771b:251b with SMTP id
24-20020a170906011800b00715771b251bmr3708520eje.651.1658590630769; Sat, 23
Jul 2022 08:37:10 -0700 (PDT)
MIME-Version: 1.0
Reply-To: tonnyyrross@gmail.com
From: Manford Smith
Date: Sat, 23 Jul 2022 08:36:57 -0700
Message-ID:
Subject: BUSINESS IDEA
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000005ffc5905e47ab9b8"
Bcc: doctor@netknow.ca
X-Spam_score: 6.0
X-Spam_score_int: 60
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear. Nice to connect with you, I am contacting you to
assist me on a business project. Acknowledge my email then I will send you
a summary of this business opportunity that we can discuss in due course
if [...]
Content analysis details: (6.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.66 listed in wl.mailspike.net]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[manfords97[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[manfords97[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} BUSINESS IDEA
--0000000000005ffc5905e47ab9b8
Content-Type: text/plain; charset="UTF-8"
--
Dear.
Nice to connect with you, I am contacting you to assist me on a business
project. Acknowledge my email then I will send you a summary of this
business opportunity that we can discuss in due course if you are
interested.
I apologize for any inconvenience this may have caused.
Sincerely,
Tony Ross
Executive Vice President & Chief Credit Officer, Woodforest National Bank,
Woodlands, Texas.
--0000000000005ffc5905e47ab9b8
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ata-smartmail=3D"gmail_signature">Dear.
Nice to connect with you, I =
am contacting you to assist me on a business project.=C2=A0 Acknowledge my =
email then I will send you a summary of this business opportunity that we c=
an discuss in due course if you are interested.
I apologize for any =
inconvenience this may have caused.
Sincerely,
Tony Ross
Execu=
tive Vice President & Chief Credit Officer, Woodforest National Bank, W=
oodlands, Texas.
--0000000000005ffc5905e47ab9b8--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments