Business investment spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 15 Aug 2022 06:59:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oNZfT-0003OK-C6
for dave@doctor.nl2k.ab.ca;
Mon, 15 Aug 2022 06:58:07 -0600
Resent-From: The Doctor
Resent-Date: Mon, 15 Aug 2022 06:58:07 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f194.google.com ([209.85.128.194]:39579)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oNX3Q-0009Jg-54
for doctor@doctor.nl2k.ab.ca;
Mon, 15 Aug 2022 04:10:44 -0600
Received: by mail-yw1-f194.google.com with SMTP id 00721157ae682-32fd97c199fso37374367b3.6
for; Mon, 15 Aug 2022 03:10:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=kAPkUOV31PC5u+vYCs9sSvdtP7OrYW58mM2pUfrP1x4=;
b=gvY6wIAwy42OQGElY3wrbJO8/SFO7FbaHpmtK7rWDSQC0+kdAWgUDygAN3pFCZEOI4
E8QDwzyq+xSNr02SqcjyaJW2OphkqiLbHgmIarRqJ39ccdOYiM8IZd+QoGaIZidht1rO
6qZsdgVZJ8P2mndVgL8cxHc03wGEgdUQ53MDsIKKRgVcvAlvADwKywtv+E3yjDb2XpVT
p9RgMOpwrkgat/7pHsUA0A2SBxnzt1fjey3MI29379rwRKIRhZqtSrSRGUeEjz05ozmD
OXGrdvdgCosi7Jb9+iTPFM1r533n9QMkhZbqqxrCWmgF1+D/BEYMEngq9i7t6bMandgz
ZROw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=kAPkUOV31PC5u+vYCs9sSvdtP7OrYW58mM2pUfrP1x4=;
b=kEE8vCUoJT+OArsTsO8dyijyg/AwueKqr+WjNgb6pQIfyYAyzHgVSa7lOdIEORIrwz
+7/vV0SqG0GGM+63lnrseG5uyZTqqwYYH67zjOQH1gIBh9wzg7+l7rQkNH4qnQFD/5jm
PKBSXowCmXhApwhzua90Db8v53TBDyeU7EWFUhnKW6F5kI3CEtoK9u5EidA00d3SnbNc
ALOSJK4yy4NA1CsCAw3osC8XaqbNR1rYA1JwAlqgF3DADHuJD489xp1wizlnvphuXucQ
1BwKZ8lLnjvOBd1TxJM9Zvdo2SKgW2kO7ORVS07+KdqnqKOh2wdKPgEOH9balAfoxmRo
xNcQ==
X-Gm-Message-State: ACgBeo3dIZv6QGGJqntAQk1jI1h8vj6AdG9B4SJa6kexHOGo2Hsvebho
iLadW+AAEZ/r9rdbC9KF8XyXzAn1ce5N7AXn+s0=
X-Google-Smtp-Source: AA6agR7z9aQhYKMWcTJOwrNTkIhSqgM1oIpuldMAMcBpjXuXt3CdL6T+DTUQJo2jJAIuCgOsdKEoSI9CcdMV5KNHSjo=
X-Received: by 2002:a05:690c:830:b0:31f:5f93:a63f with SMTP id
by16-20020a05690c083000b0031f5f93a63fmr12308180ywb.197.1660558213397; Mon, 15
Aug 2022 03:10:13 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7010:a902:b0:2ec:d532:af96 with HTTP; Mon, 15 Aug 2022
03:10:12 -0700 (PDT)
Reply-To: regoldenrule2021@gmail.com
From: "Mr. Bryan Samson Muller"
Date: Sun, 14 Aug 2022 22:10:12 -1200
Message-ID:
Subject: Investment Business Synergy
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 14.8
X-Spam_score_int: 148
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: For your kind Attention Sir, I am looking to work with a
reputable individual/firm to engage in a profit oriented ventures. I have
the directive of investor to source for partner who can manage $350 Million
USD. The sums are deri [...]
Content analysis details: (14.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.194 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[dr.collinsbaron9[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[dr.collinsbaron9[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[regoldenrule2021[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 MILLION_USD BODY: Talks about millions of dollars
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 XFER_LOTSA_MONEY Transfer a lot of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} Investment Business Synergy
For your kind Attention Sir,
I am looking to work with a reputable individual/firm to engage in a
profit oriented ventures. I have the directive of investor to source
for partner who can manage $350 Million USD. The sums are derived from
Mr. Alexandrovich Borisovich sanctioned Russian citizen who had his
assets frozen by the US.
If you are taking the fund directly as a company and supervise the
total investment over there and proceeds will be shared 50/50.
We need to maintain absolute confidentiality in the transaction as the
fund provider want to remain silent and Hard copy of (MOU) AGREEMENT
will be sign on our meeting.
We shall apply for the necessary paper work required to re-profile
your name as the fund recipient and also ensure payment is made via
T.T Telegraphic Transfer to your bank account in your name. I guaranty
we would execute this business under a legitimate arrangement without
breach of the law.
For further details contact on private EMAIL:
goldenrulelegacy@gmail.com or regoldenrule2021@gmail.com
Best Regards
Mr. M Abdullah
Fund Manager c/o
Mr. Bryan Samson Muller
Fund administrator.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 15 Aug 2022 06:59:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oNZfT-0003OK-C6
for dave@doctor.nl2k.ab.ca;
Mon, 15 Aug 2022 06:58:07 -0600
Resent-From: The Doctor
Resent-Date: Mon, 15 Aug 2022 06:58:07 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f194.google.com ([209.85.128.194]:39579)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oNX3Q-0009Jg-54
for doctor@doctor.nl2k.ab.ca;
Mon, 15 Aug 2022 04:10:44 -0600
Received: by mail-yw1-f194.google.com with SMTP id 00721157ae682-32fd97c199fso37374367b3.6
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=kAPkUOV31PC5u+vYCs9sSvdtP7OrYW58mM2pUfrP1x4=;
b=gvY6wIAwy42OQGElY3wrbJO8/SFO7FbaHpmtK7rWDSQC0+kdAWgUDygAN3pFCZEOI4
E8QDwzyq+xSNr02SqcjyaJW2OphkqiLbHgmIarRqJ39ccdOYiM8IZd+QoGaIZidht1rO
6qZsdgVZJ8P2mndVgL8cxHc03wGEgdUQ53MDsIKKRgVcvAlvADwKywtv+E3yjDb2XpVT
p9RgMOpwrkgat/7pHsUA0A2SBxnzt1fjey3MI29379rwRKIRhZqtSrSRGUeEjz05ozmD
OXGrdvdgCosi7Jb9+iTPFM1r533n9QMkhZbqqxrCWmgF1+D/BEYMEngq9i7t6bMandgz
ZROw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=kAPkUOV31PC5u+vYCs9sSvdtP7OrYW58mM2pUfrP1x4=;
b=kEE8vCUoJT+OArsTsO8dyijyg/AwueKqr+WjNgb6pQIfyYAyzHgVSa7lOdIEORIrwz
+7/vV0SqG0GGM+63lnrseG5uyZTqqwYYH67zjOQH1gIBh9wzg7+l7rQkNH4qnQFD/5jm
PKBSXowCmXhApwhzua90Db8v53TBDyeU7EWFUhnKW6F5kI3CEtoK9u5EidA00d3SnbNc
ALOSJK4yy4NA1CsCAw3osC8XaqbNR1rYA1JwAlqgF3DADHuJD489xp1wizlnvphuXucQ
1BwKZ8lLnjvOBd1TxJM9Zvdo2SKgW2kO7ORVS07+KdqnqKOh2wdKPgEOH9balAfoxmRo
xNcQ==
X-Gm-Message-State: ACgBeo3dIZv6QGGJqntAQk1jI1h8vj6AdG9B4SJa6kexHOGo2Hsvebho
iLadW+AAEZ/r9rdbC9KF8XyXzAn1ce5N7AXn+s0=
X-Google-Smtp-Source: AA6agR7z9aQhYKMWcTJOwrNTkIhSqgM1oIpuldMAMcBpjXuXt3CdL6T+DTUQJo2jJAIuCgOsdKEoSI9CcdMV5KNHSjo=
X-Received: by 2002:a05:690c:830:b0:31f:5f93:a63f with SMTP id
by16-20020a05690c083000b0031f5f93a63fmr12308180ywb.197.1660558213397; Mon, 15
Aug 2022 03:10:13 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7010:a902:b0:2ec:d532:af96 with HTTP; Mon, 15 Aug 2022
03:10:12 -0700 (PDT)
Reply-To: regoldenrule2021@gmail.com
From: "Mr. Bryan Samson Muller"
Date: Sun, 14 Aug 2022 22:10:12 -1200
Message-ID:
Subject: Investment Business Synergy
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 14.8
X-Spam_score_int: 148
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: For your kind Attention Sir, I am looking to work with a
reputable individual/firm to engage in a profit oriented ventures. I have
the directive of investor to source for partner who can manage $350 Million
USD. The sums are deri [...]
Content analysis details: (14.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.194 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[dr.collinsbaron9[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[dr.collinsbaron9[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[regoldenrule2021[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 MILLION_USD BODY: Talks about millions of dollars
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 XFER_LOTSA_MONEY Transfer a lot of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} Investment Business Synergy
For your kind Attention Sir,
I am looking to work with a reputable individual/firm to engage in a
profit oriented ventures. I have the directive of investor to source
for partner who can manage $350 Million USD. The sums are derived from
Mr. Alexandrovich Borisovich sanctioned Russian citizen who had his
assets frozen by the US.
If you are taking the fund directly as a company and supervise the
total investment over there and proceeds will be shared 50/50.
We need to maintain absolute confidentiality in the transaction as the
fund provider want to remain silent and Hard copy of (MOU) AGREEMENT
will be sign on our meeting.
We shall apply for the necessary paper work required to re-profile
your name as the fund recipient and also ensure payment is made via
T.T Telegraphic Transfer to your bank account in your name. I guaranty
we would execute this business under a legitimate arrangement without
breach of the law.
For further details contact on private EMAIL:
goldenrulelegacy@gmail.com or regoldenrule2021@gmail.com
Best Regards
Mr. M Abdullah
Fund Manager c/o
Mr. Bryan Samson Muller
Fund administrator.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments