Beneficiary spam from GMail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 29 Aug 2022 22:09:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oSsYI-0000HQ-UO
for dave@doctor.nl2k.ab.ca;
Mon, 29 Aug 2022 22:08:38 -0600
Resent-From: The Doctor
Resent-Date: Mon, 29 Aug 2022 22:08:38 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f174.google.com ([209.85.128.174]:36466)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oSrTJ-000KTQ-Gi
for root@nk.ca;
Mon, 29 Aug 2022 20:59:31 -0600
Received: by mail-yw1-f174.google.com with SMTP id 00721157ae682-33dc345ad78so241948627b3.3
for; Mon, 29 Aug 2022 19:59:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=b/dJqjvro8BJ/kzC645+T2th6n/14HuvWb65i+FVzao=;
b=NaAajMNWbtSzwYM4nJNlb3A4OUq04kWJb86Y7B6S17/LL1GCR6W/p2lw/9vgDcS+6a
8uj6EmdDtrxqwHCm2RH21X9UtQBQpRixfPP0cguomrjQRrnlpJOEJUnVBoAKN7+unr11
2zwqpz1ZQKVe0SY26gs4Qpp1f9TRZ9vVivYNC5Tdap346hq5Jh58ISdeEtpwzF8qzjfD
IRyeu1Y63PdA+i56Vw4xoMSfxEtCFPavYjeQVd5yW/5ojWUU7BJ2yY1sjTSnJCcH6AQ2
h1H9DT0bTk/kNC7swdO3PwWDcWzy1M08Jswo7jXTO3dB+FCllqplAOrARj7Fd8oyVTZC
+7KA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=b/dJqjvro8BJ/kzC645+T2th6n/14HuvWb65i+FVzao=;
b=Vt8gM5uyElzPW0roDp5GxBiqS3YWSCKniuW8ocRsnmTKnBXkwK+pIHEN/WRSrwatp8
NxW5Rb89sazgNnD2zYA5NBz9TVfNMcmu2JhgsfLOTJLExT6L9RxIxuCrIgX4exanijpT
PgwN5nXrzQHvIZD+FfKBMRvcSCy5mfSW7KMAQXqhoC8pwXZ20oCcoI7xT2nHtM9TowK+
sCZ6y/YrNjtIwLp/BNHqZecL37uq4aQdes4dl1DMzBAIN9h+sqhItmDYQuR2sl50nbwq
DtkDVVBhauq4/Tcajhd73iz3a6qtD7C8k5lHne0fFJOwMecr9nl9+qlqOysIh3oar63Y
4MVw==
X-Gm-Message-State: ACgBeo3IMRIYmpoyV9uxaWeKstsfiivU8atcVUNT5hpA4Wj/Er4REihe
cSJ+ZidjdbBPHHgoUUfRXsv889ITPuEoyO7n8+Q=
X-Google-Smtp-Source: AA6agR4oq1VAYBUCPVGOb+oxvQVboDviUW201EcAP6XUurUI2g+Fw8aaLibacPZVKoeKFOcNz1Eg+AehvF2YofvxaHc=
X-Received: by 2002:a0d:c6c7:0:b0:33d:c81b:fd14 with SMTP id
i190-20020a0dc6c7000000b0033dc81bfd14mr11972893ywd.286.1661828342301; Mon, 29
Aug 2022 19:59:02 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7110:b04a:b0:191:b97a:258c with HTTP; Mon, 29 Aug 2022
19:59:01 -0700 (PDT)
Reply-To: officceinfo11321@yahoo.co.jp
From: RICHARD JAMES
Date: Tue, 30 Aug 2022 03:59:01 +0100
Message-ID:
Subject: Greetings To You!!!
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 13.1
X-Spam_score_int: 131
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings To You! My name is Richard James. I need your assistance
and would like to be sure of your ability and Willingness to execute this
business within areas of Investment and financial partnership. I am writing
t [...]
Content analysis details: (13.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.174 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[chobaudekwe[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[officceinfo11321[at]yahoo.co.jp]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of
money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Greetings To You!!!
Greetings To You!
My name is Richard James. I need your assistance and would like to be
sure of your ability and Willingness to execute this business within
areas of Investment and financial partnership. I am writing to
acquaint you with a transaction and monetary transfer of US$85.2M that
was Deposited with a Financial Institution.
Ultimately, I need an Honest and Trusted Foreigner / Partner that will
play a role of Beneficiary to receive the above said Fund and we both
can Invest on any good Investment which will be profitable to both of
us now and the near future. If it was possible for me alone to do it,
I would not have bothered contacting you.
Kindly get back to me with your complete information such as your full
name, home address, occupation, copy of valid identity card and direct
phone number if you are interested in this deal. Send your acceptance
email to :(officceinfo11321@yahoo.co.jp)
Best Regard
Richard James
BUSINESS PARTNER NEEDED
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 29 Aug 2022 22:09:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oSsYI-0000HQ-UO
for dave@doctor.nl2k.ab.ca;
Mon, 29 Aug 2022 22:08:38 -0600
Resent-From: The Doctor
Resent-Date: Mon, 29 Aug 2022 22:08:38 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f174.google.com ([209.85.128.174]:36466)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oSrTJ-000KTQ-Gi
for root@nk.ca;
Mon, 29 Aug 2022 20:59:31 -0600
Received: by mail-yw1-f174.google.com with SMTP id 00721157ae682-33dc345ad78so241948627b3.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=b/dJqjvro8BJ/kzC645+T2th6n/14HuvWb65i+FVzao=;
b=NaAajMNWbtSzwYM4nJNlb3A4OUq04kWJb86Y7B6S17/LL1GCR6W/p2lw/9vgDcS+6a
8uj6EmdDtrxqwHCm2RH21X9UtQBQpRixfPP0cguomrjQRrnlpJOEJUnVBoAKN7+unr11
2zwqpz1ZQKVe0SY26gs4Qpp1f9TRZ9vVivYNC5Tdap346hq5Jh58ISdeEtpwzF8qzjfD
IRyeu1Y63PdA+i56Vw4xoMSfxEtCFPavYjeQVd5yW/5ojWUU7BJ2yY1sjTSnJCcH6AQ2
h1H9DT0bTk/kNC7swdO3PwWDcWzy1M08Jswo7jXTO3dB+FCllqplAOrARj7Fd8oyVTZC
+7KA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=b/dJqjvro8BJ/kzC645+T2th6n/14HuvWb65i+FVzao=;
b=Vt8gM5uyElzPW0roDp5GxBiqS3YWSCKniuW8ocRsnmTKnBXkwK+pIHEN/WRSrwatp8
NxW5Rb89sazgNnD2zYA5NBz9TVfNMcmu2JhgsfLOTJLExT6L9RxIxuCrIgX4exanijpT
PgwN5nXrzQHvIZD+FfKBMRvcSCy5mfSW7KMAQXqhoC8pwXZ20oCcoI7xT2nHtM9TowK+
sCZ6y/YrNjtIwLp/BNHqZecL37uq4aQdes4dl1DMzBAIN9h+sqhItmDYQuR2sl50nbwq
DtkDVVBhauq4/Tcajhd73iz3a6qtD7C8k5lHne0fFJOwMecr9nl9+qlqOysIh3oar63Y
4MVw==
X-Gm-Message-State: ACgBeo3IMRIYmpoyV9uxaWeKstsfiivU8atcVUNT5hpA4Wj/Er4REihe
cSJ+ZidjdbBPHHgoUUfRXsv889ITPuEoyO7n8+Q=
X-Google-Smtp-Source: AA6agR4oq1VAYBUCPVGOb+oxvQVboDviUW201EcAP6XUurUI2g+Fw8aaLibacPZVKoeKFOcNz1Eg+AehvF2YofvxaHc=
X-Received: by 2002:a0d:c6c7:0:b0:33d:c81b:fd14 with SMTP id
i190-20020a0dc6c7000000b0033dc81bfd14mr11972893ywd.286.1661828342301; Mon, 29
Aug 2022 19:59:02 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7110:b04a:b0:191:b97a:258c with HTTP; Mon, 29 Aug 2022
19:59:01 -0700 (PDT)
Reply-To: officceinfo11321@yahoo.co.jp
From: RICHARD JAMES
Date: Tue, 30 Aug 2022 03:59:01 +0100
Message-ID:
Subject: Greetings To You!!!
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 13.1
X-Spam_score_int: 131
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings To You! My name is Richard James. I need your assistance
and would like to be sure of your ability and Willingness to execute this
business within areas of Investment and financial partnership. I am writing
t [...]
Content analysis details: (13.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.174 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[chobaudekwe[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[officceinfo11321[at]yahoo.co.jp]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of
money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Greetings To You!!!
Greetings To You!
My name is Richard James. I need your assistance and would like to be
sure of your ability and Willingness to execute this business within
areas of Investment and financial partnership. I am writing to
acquaint you with a transaction and monetary transfer of US$85.2M that
was Deposited with a Financial Institution.
Ultimately, I need an Honest and Trusted Foreigner / Partner that will
play a role of Beneficiary to receive the above said Fund and we both
can Invest on any good Investment which will be profitable to both of
us now and the near future. If it was possible for me alone to do it,
I would not have bothered contacting you.
Kindly get back to me with your complete information such as your full
name, home address, occupation, copy of valid identity card and direct
phone number if you are interested in this deal. Send your acceptance
email to :(officceinfo11321@yahoo.co.jp)
Best Regard
Richard James
BUSINESS PARTNER NEEDED
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments