Business proposal spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 02 Oct 2022 15:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1of6c2-000Hz7-1U
for dave@doctor.nl2k.ab.ca;
Sun, 02 Oct 2022 15:35:02 -0600
Resent-From: The Doctor
Resent-Date: Sun, 2 Oct 2022 15:35:02 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ua1-f49.google.com ([209.85.222.49]:38581)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oeyPV-000LOe-4y
for doctor@netknow.ca;
Sun, 02 Oct 2022 06:49:36 -0600
Received: by mail-ua1-f49.google.com with SMTP id e22so3278040uar.5
for; Sun, 02 Oct 2022 05:49:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=iMgfh4dNrbZNC0zackE+NFoHodFU+BrSQXwCeyK59sA=;
b=TTqLI0WyRWRfrTTwYoETp/soov/vokg2HtjcMxYuaDi7F9YUPqG6qZB0NzqH4hZlEM
7UEMsIFaNEySKYKybNaYAlGCvZK2gK3k6dz77qFU/kKRr0RE858DUNMnLE7J0/U0IS5y
V8Y/hG4NGjQL5RRB779hjtrRKNH3psLt7I8IPyjZWCIiVvZTF+8A/HwX+tZyJ7sQ4yqS
p4384h5fVcJUF/eWtshebeRlL5F6NalwK8xj5I6QtXn+ItnIlQWSyq9uINpLrpAZelBC
ohYpeBzxpunlO75YoDpKs3i2dcx2nfRVZ1Lu8XuCU35/ODUBhAyH3ABIqAJwjqoSYS2C
nveQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=iMgfh4dNrbZNC0zackE+NFoHodFU+BrSQXwCeyK59sA=;
b=TIBV0pNRlUa6CWKuuq1vvJ8uLEE+oxVoi3uP/SkdFtY+Fuqf1oWqU3sXK6aknoLK97
19y/aWdyKJxsK1WXKI09Lt2aT/rILlWRGwl5djL3/AePo8sk0oq5mMCL3EtTIeOosNEJ
/7izl8avuES+b6xte3B7wgTyvE0RIxf7TeZRxwSoDfYj6w1xS67VpMsvuj/MuWgYO2d3
s4wlxbLRaJvU8nEZ8tt74VSMD1ondtqNCoEJS24+srtAmpj2Z9IoKHHVfMdqAEEwxFIy
O4WrNEugqo0yCy4ifYU76gPUIMdtWLDFangbVMw9jLuLmddRVky98rq/SdjEmfF3g7IW
5tSA==
X-Gm-Message-State: ACrzQf0YngXx0vLINWNhsFTaKKjFVGBCelP2AMoswfi47s3tcElmtbWr
pnm8ardnq7lJSiV7EuFVXV8zu4w1AQISW9Z06ww=
X-Google-Smtp-Source: AMsMyM59t8HIeBjJOlC+xsDbq/9TRcGCKf0uSpSjexvZTRT89Jsu/Em8pAKhn6TS44IjmkyQc2uLQO/9cgMlQ71X6dA=
X-Received: by 2002:ab0:4303:0:b0:3d3:62e0:34b2 with SMTP id
k3-20020ab04303000000b003d362e034b2mr7849197uak.62.1664714945951; Sun, 02 Oct
2022 05:49:05 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a67:e184:0:0:0:0:0 with HTTP; Sun, 2 Oct 2022 05:49:05 -0700 (PDT)
Reply-To: nn9122250@gmail.com
From: "Mr.K.Mashal"
Date: Sun, 2 Oct 2022 05:49:05 -0700
Message-ID:
Subject: Opportunity
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@netknow.ca
X-Spam_score: 16.2
X-Spam_score_int: 162
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Sir I have a Lucrative Investment business proposal/Next
of Kin opportunity if interested kindly contact me for more details:( dalh52179@gmail.com
) Regards Mr.Khader Mashal ( dalh52179@gmail.com )
Content analysis details: (16.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[nn9122250[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[okorookoro437[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.49 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[okorookoro437[at]gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 HK_SCAM No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Opportunity
Dear Sir
I have a Lucrative Investment business proposal/Next of Kin
opportunity if interested kindly contact me for more details:(
dalh52179@gmail.com )
Regards
Mr.Khader Mashal
( dalh52179@gmail.com )
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 02 Oct 2022 15:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1of6c2-000Hz7-1U
for dave@doctor.nl2k.ab.ca;
Sun, 02 Oct 2022 15:35:02 -0600
Resent-From: The Doctor
Resent-Date: Sun, 2 Oct 2022 15:35:02 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ua1-f49.google.com ([209.85.222.49]:38581)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oeyPV-000LOe-4y
for doctor@netknow.ca;
Sun, 02 Oct 2022 06:49:36 -0600
Received: by mail-ua1-f49.google.com with SMTP id e22so3278040uar.5
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=iMgfh4dNrbZNC0zackE+NFoHodFU+BrSQXwCeyK59sA=;
b=TTqLI0WyRWRfrTTwYoETp/soov/vokg2HtjcMxYuaDi7F9YUPqG6qZB0NzqH4hZlEM
7UEMsIFaNEySKYKybNaYAlGCvZK2gK3k6dz77qFU/kKRr0RE858DUNMnLE7J0/U0IS5y
V8Y/hG4NGjQL5RRB779hjtrRKNH3psLt7I8IPyjZWCIiVvZTF+8A/HwX+tZyJ7sQ4yqS
p4384h5fVcJUF/eWtshebeRlL5F6NalwK8xj5I6QtXn+ItnIlQWSyq9uINpLrpAZelBC
ohYpeBzxpunlO75YoDpKs3i2dcx2nfRVZ1Lu8XuCU35/ODUBhAyH3ABIqAJwjqoSYS2C
nveQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=iMgfh4dNrbZNC0zackE+NFoHodFU+BrSQXwCeyK59sA=;
b=TIBV0pNRlUa6CWKuuq1vvJ8uLEE+oxVoi3uP/SkdFtY+Fuqf1oWqU3sXK6aknoLK97
19y/aWdyKJxsK1WXKI09Lt2aT/rILlWRGwl5djL3/AePo8sk0oq5mMCL3EtTIeOosNEJ
/7izl8avuES+b6xte3B7wgTyvE0RIxf7TeZRxwSoDfYj6w1xS67VpMsvuj/MuWgYO2d3
s4wlxbLRaJvU8nEZ8tt74VSMD1ondtqNCoEJS24+srtAmpj2Z9IoKHHVfMdqAEEwxFIy
O4WrNEugqo0yCy4ifYU76gPUIMdtWLDFangbVMw9jLuLmddRVky98rq/SdjEmfF3g7IW
5tSA==
X-Gm-Message-State: ACrzQf0YngXx0vLINWNhsFTaKKjFVGBCelP2AMoswfi47s3tcElmtbWr
pnm8ardnq7lJSiV7EuFVXV8zu4w1AQISW9Z06ww=
X-Google-Smtp-Source: AMsMyM59t8HIeBjJOlC+xsDbq/9TRcGCKf0uSpSjexvZTRT89Jsu/Em8pAKhn6TS44IjmkyQc2uLQO/9cgMlQ71X6dA=
X-Received: by 2002:ab0:4303:0:b0:3d3:62e0:34b2 with SMTP id
k3-20020ab04303000000b003d362e034b2mr7849197uak.62.1664714945951; Sun, 02 Oct
2022 05:49:05 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a67:e184:0:0:0:0:0 with HTTP; Sun, 2 Oct 2022 05:49:05 -0700 (PDT)
Reply-To: nn9122250@gmail.com
From: "Mr.K.Mashal"
Date: Sun, 2 Oct 2022 05:49:05 -0700
Message-ID:
Subject: Opportunity
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@netknow.ca
X-Spam_score: 16.2
X-Spam_score_int: 162
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Sir I have a Lucrative Investment business proposal/Next
of Kin opportunity if interested kindly contact me for more details:( dalh52179@gmail.com
) Regards Mr.Khader Mashal ( dalh52179@gmail.com )
Content analysis details: (16.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[nn9122250[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[okorookoro437[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.49 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[okorookoro437[at]gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 HK_SCAM No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Opportunity
Dear Sir
I have a Lucrative Investment business proposal/Next of Kin
opportunity if interested kindly contact me for more details:(
dalh52179@gmail.com )
Regards
Mr.Khader Mashal
( dalh52179@gmail.com )
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments