proposal spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 13 Sep 2022 18:13:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oYG0c-0005Sj-2Q
for dave@doctor.nl2k.ab.ca;
Tue, 13 Sep 2022 18:12:06 -0600
Resent-From: The Doctor
Resent-Date: Tue, 13 Sep 2022 18:12:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wr1-f66.google.com ([209.85.221.66]:39592)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oYEjp-000M4T-QH
for doctor@doctor.nl2k.ab.ca;
Tue, 13 Sep 2022 16:50:45 -0600
Received: by mail-wr1-f66.google.com with SMTP id cc5so13132868wrb.6
for; Tue, 13 Sep 2022 15:50:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=1x0Cq7lfVVVx7CAYGc036970eQK8+V/x2PMgt04SGrA=;
b=Upw3fmGKON4cR+7J3KSSWGZ2Lgmsv90wEJKPjDikzaGc9Ljk7NP6maUA2zDy9kiXLx
E4KSyY+ihel6uiGT4/uKFUctZjh8eUzMhzV8R53PvRi2EsEZB8rJUknvjHAi+7BX0Or9
dWExRL9F8wNvDUlHCY3kuOGy98+mE0UeDPWjfFr1f2vlM3Y4AF6KGb8Pir3QlU0LGWqO
pk9a16wIuRY3qvkBfMxSGJPtXxARwCSDKdgLcSUdEh1Ow2bvrX8/hlK/QNxSEBC5MlR0
2HLGAM/+mytWFma5XEQqgD3Zq8dPSxh4uN+BL85Uo1DMiR9sTM2LOJNpB4Eo869EQHf6
Ylhw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=1x0Cq7lfVVVx7CAYGc036970eQK8+V/x2PMgt04SGrA=;
b=6h8KdSKaHnnODSGfUnoLdSqduVCCz7mk/actpzenlDDxIX/BFJNnW2TArPdwlP91Oz
B+0FXUUTNNnhiR1T47FQEGLViW4UcWU0m22lK+ZDblVvvKs3qxOICAXsvFdBi0fPzLU6
s9sBj2n/dqF/XcqzQyqdGcoPNk/ByiRP82IwPLpfSb9/3Wjgg1qSBQPME2gTogCOhMR0
YR4vH5AVdPNapY+1tbyHs2yljD0ko2mAcdohtL7Wo2GdwfkgAqis9qy8wYiACNyW4rGm
h+UhkNLrVVBj0JDZjdCLX9v5xNbYaft43I7emdDwXmpEXQfBMWqKbd4HFvFDmX13AVfb
7gSA==
X-Gm-Message-State: ACgBeo2ExXBZZ3v2+q/y/zdEGQ2W/r6fqXnHSOA7CwXhxqK2ntVYx2a9
CpORYMFUnheEjG37TzLwGulWKj27FFpCZOpfHa0=
X-Google-Smtp-Source: AA6agR47wna9WvwAiv0I1z17/Ek4qxzOFgv4nLoJaBLTPNZrc8s2SNri00IkGRfJVK6haDsvhHDcsms59qB8ArJzyaE=
X-Received: by 2002:a05:6000:1aca:b0:22a:50bc:8c6c with SMTP id
i10-20020a0560001aca00b0022a50bc8c6cmr9984107wry.166.1663109418209; Tue, 13
Sep 2022 15:50:18 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6000:1f95:0:0:0:0 with HTTP; Tue, 13 Sep 2022 15:50:17
-0700 (PDT)
Reply-To: engr.jakabdullahfraam@gmail.com
From: "ENGR. JAK ABDULLAH FRAAM"
Date: Tue, 13 Sep 2022 15:50:17 -0700
Message-ID:
Subject: I have a proposal for you.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Hello Dear, I am contacting you to inform you about my
interest on business partnership with you in Agro and Real Estate Developing
and marketing investment, i saw your contact details on the net.
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.66 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[zarashippingcompany[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} I have a proposal for you.
--
Hello Dear,
I am contacting you to inform you about my interest on business
partnership with you in Agro and Real Estate Developing and marketing
investment, i saw your contact details on the net.
This is how I got interested in contacting you, i am sincerely
interested to invest my money in this specified investment, if your
interest to collaborate with me is accepted, I will get back to you
with more
details of my plans to expedite action in this partnership with you.
Thank you, I wait for your concept to proceed.
Yours faithfully,
Engr. Jak Abdullah Fraam
Managing Director
Deir Ez Zor Petroleum Company
Villat Gharbia Dar Es Saada, 16
Aleppo - Syria.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 13 Sep 2022 18:13:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oYG0c-0005Sj-2Q
for dave@doctor.nl2k.ab.ca;
Tue, 13 Sep 2022 18:12:06 -0600
Resent-From: The Doctor
Resent-Date: Tue, 13 Sep 2022 18:12:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wr1-f66.google.com ([209.85.221.66]:39592)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oYEjp-000M4T-QH
for doctor@doctor.nl2k.ab.ca;
Tue, 13 Sep 2022 16:50:45 -0600
Received: by mail-wr1-f66.google.com with SMTP id cc5so13132868wrb.6
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=1x0Cq7lfVVVx7CAYGc036970eQK8+V/x2PMgt04SGrA=;
b=Upw3fmGKON4cR+7J3KSSWGZ2Lgmsv90wEJKPjDikzaGc9Ljk7NP6maUA2zDy9kiXLx
E4KSyY+ihel6uiGT4/uKFUctZjh8eUzMhzV8R53PvRi2EsEZB8rJUknvjHAi+7BX0Or9
dWExRL9F8wNvDUlHCY3kuOGy98+mE0UeDPWjfFr1f2vlM3Y4AF6KGb8Pir3QlU0LGWqO
pk9a16wIuRY3qvkBfMxSGJPtXxARwCSDKdgLcSUdEh1Ow2bvrX8/hlK/QNxSEBC5MlR0
2HLGAM/+mytWFma5XEQqgD3Zq8dPSxh4uN+BL85Uo1DMiR9sTM2LOJNpB4Eo869EQHf6
Ylhw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=1x0Cq7lfVVVx7CAYGc036970eQK8+V/x2PMgt04SGrA=;
b=6h8KdSKaHnnODSGfUnoLdSqduVCCz7mk/actpzenlDDxIX/BFJNnW2TArPdwlP91Oz
B+0FXUUTNNnhiR1T47FQEGLViW4UcWU0m22lK+ZDblVvvKs3qxOICAXsvFdBi0fPzLU6
s9sBj2n/dqF/XcqzQyqdGcoPNk/ByiRP82IwPLpfSb9/3Wjgg1qSBQPME2gTogCOhMR0
YR4vH5AVdPNapY+1tbyHs2yljD0ko2mAcdohtL7Wo2GdwfkgAqis9qy8wYiACNyW4rGm
h+UhkNLrVVBj0JDZjdCLX9v5xNbYaft43I7emdDwXmpEXQfBMWqKbd4HFvFDmX13AVfb
7gSA==
X-Gm-Message-State: ACgBeo2ExXBZZ3v2+q/y/zdEGQ2W/r6fqXnHSOA7CwXhxqK2ntVYx2a9
CpORYMFUnheEjG37TzLwGulWKj27FFpCZOpfHa0=
X-Google-Smtp-Source: AA6agR47wna9WvwAiv0I1z17/Ek4qxzOFgv4nLoJaBLTPNZrc8s2SNri00IkGRfJVK6haDsvhHDcsms59qB8ArJzyaE=
X-Received: by 2002:a05:6000:1aca:b0:22a:50bc:8c6c with SMTP id
i10-20020a0560001aca00b0022a50bc8c6cmr9984107wry.166.1663109418209; Tue, 13
Sep 2022 15:50:18 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6000:1f95:0:0:0:0 with HTTP; Tue, 13 Sep 2022 15:50:17
-0700 (PDT)
Reply-To: engr.jakabdullahfraam@gmail.com
From: "ENGR. JAK ABDULLAH FRAAM"
Date: Tue, 13 Sep 2022 15:50:17 -0700
Message-ID:
Subject: I have a proposal for you.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Hello Dear, I am contacting you to inform you about my
interest on business partnership with you in Agro and Real Estate Developing
and marketing investment, i saw your contact details on the net.
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.66 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[zarashippingcompany[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} I have a proposal for you.
--
Hello Dear,
I am contacting you to inform you about my interest on business
partnership with you in Agro and Real Estate Developing and marketing
investment, i saw your contact details on the net.
This is how I got interested in contacting you, i am sincerely
interested to invest my money in this specified investment, if your
interest to collaborate with me is accepted, I will get back to you
with more
details of my plans to expedite action in this partnership with you.
Thank you, I wait for your concept to proceed.
Yours faithfully,
Engr. Jak Abdullah Fraam
Managing Director
Deir Ez Zor Petroleum Company
Villat Gharbia Dar Es Saada, 16
Aleppo - Syria.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments