Business proposal spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 04 Sep 2022 09:37:00 -0600

Received: from mail-ua1-f68.google.com ([209.85.222.68]:45001)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oUrfO-000FFY-JI

for dave@doctor.nl2k.ab.ca;

Sun, 04 Sep 2022 09:36:16 -0600

Received: by mail-ua1-f68.google.com with SMTP id p17so1786914uao.11

for ; Sun, 04 Sep 2022 08:35:53 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date;

bh=hMD4T/XxDYaXtm+A8MGYoFMryqQe8Z2ajmb3ZG8MKS4=;

b=YbdOyRlUDalyeccvNRNIxSnDFBpCKWCf5TtPWWOw10QqWyh4DX+mcAd4lDnDYutRjZ

UzMjot2UK1MJx9xHEggl5kc3LtLG7+SH7sFl427VNOwb1Vbt2H6ggwDc1ScmVevL0tbq

SYGqn/Co9njaWyRFNE1wloCfBf+U1JBlB8uuww1XQlL8iGRfyydLvgrRciqx5JS4D0xd

Q/ruv9XsnMkfArLEq+ciKD40o1zAXNZmryFgrm/Br4PyCVqux1vPrWHLfWz1VAhcHsuy

gDYHcDBYEKicFOHLMLO6yrq19V1t80qY2ymthrbrcKh3VIuQ0Ls1voOuZEBRmouEHGut

cuSQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date;

bh=hMD4T/XxDYaXtm+A8MGYoFMryqQe8Z2ajmb3ZG8MKS4=;

b=O2EkIQ+Apo0IuMc2QGPRsGl8+AfYjocoz+j/xRZyrLT8g5dPVC9kFIDTIHTohAqsb7

BzNIcdgCU6Gnte/ZOnTcMwlL6+QN1jHGoF+YGuMQnnKt8L9ezBO3PAdIdeqdDDPzooDA

BXgB/Cw1ymR0NdmClc9EpJwFk68RSe8XJsbPfIp9/2eX59E4TcsiMS6SsWXBJvA/Zb46

Wf4Slj13jAqgWAp5wBSWFnWdepA2SUwYMqbEXbT3YIo7iTFwmEPrc4Fmzbgj39dsd3Qx

z/mZi7cYuB2as3vWBBKSFFtGs4wZVSoxnq/jAspBlOxHG1DjLVfWapex4zTkWX4N+lBQ

upLA==

X-Gm-Message-State: ACgBeo1HIGMsHK7stKQbuDopVx1tefO1/obab0FifyrO7mFIjm/QOa8o

Gx97bP7ACVnEjGIOAayQ6smWfVUSlD96DtOo0Ws=

X-Google-Smtp-Source: AA6agR7NPqg/tZQgOqHroN2Jdvsz8MMvDVlbtzxVfaqYm8DAqrc6Bi4nLKsHHb7g4n+4nMLs0BljvAJ0gvjLK2XY96M=

X-Received: by 2002:ab0:6154:0:b0:398:c252:23d8 with SMTP id

w20-20020ab06154000000b00398c25223d8mr13333889uan.65.1662305747202; Sun, 04

Sep 2022 08:35:47 -0700 (PDT)

MIME-Version: 1.0

Reply-To: nn9122250@gmail.com

From: "Mr.Khader Mashal"

Date: Sun, 4 Sep 2022 08:35:18 -0700

Message-ID:

Subject: Profitable Business Concept.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000091f90a05e7dbb7b7"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Dear , Nice to connect with you. I have a crucial transaction

to discuss and disclose with you.more details: dalh52179@gmail.com Kind Regards,





Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[nn9122250[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[ahoutda[at]gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.68 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?} Profitable Business Concept.



--00000000000091f90a05e7dbb7b7

Content-Type: text/plain; charset="UTF-8"



Hello Dear ,



Nice to connect with you. I have a crucial transaction to discuss and

disclose with you.more details: dalh52179@gmail.com





Kind Regards,



Mr.Khader Mashal

( dalh52179@gmail.com )



--00000000000091f90a05e7dbb7b7

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




Hello Dear ,

Nice to connect with you. I have a=

crucial transaction to discuss and disclose with you.more details:
=3D"mailto:dalh52179@gmail.com">dalh52179@gmail.com



Kind Re=

gards,

Mr.Khader Mashal
( =

dalh52179@gmail.com
)




--00000000000091f90a05e7dbb7b7--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA