Business proposal spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 17 Oct 2022 09:04:39 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1okRdN-0002cc-Sd
for dave@doctor.nl2k.ab.ca;
Mon, 17 Oct 2022 09:02:29 -0600
Resent-From: The Doctor
Resent-Date: Mon, 17 Oct 2022 09:02:29 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f67.google.com ([209.85.218.67]:43862)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1okQig-0009wp-HI
for doctor@doctor.nl2k.ab.ca;
Mon, 17 Oct 2022 08:04:01 -0600
Received: by mail-ej1-f67.google.com with SMTP id d26so25101307eje.10
for; Mon, 17 Oct 2022 07:01:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=siyXWKuxKBUUkaGeMmesWlfcI503Re2s4RZg9OV6IAg=;
b=TLOkpcOuc32SSGHPi70Lcxtz+pE+NaUG+BB/gdfMH//lhNdVkU1Iq3V9FH0cUtSdey
kELdSiy5SB/dOQZadbm7Yxy2RHTsHH1PgHe7tVQe7gkWbkSqbQOaLID83jOCTY5hn1/g
fZt+kKttEAnyjcsHQrRbtn4zsYXdr2HHJYEmcChlV6oVcZbZGW8/qBsxCmIh4jNkANQj
+4c6qwZVLOuQRAoPv+KCyC5wcpFsVOJZ0pdlsvnLapZuCO4hPLv9eTht/dyMRNbWtfFY
tZaQ92Zj27R30HikxsvpPpUPDe8kVsshq9Z7Geo0ywXQpCULryZdRMW3aINExPEwuyOI
I03A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=siyXWKuxKBUUkaGeMmesWlfcI503Re2s4RZg9OV6IAg=;
b=18gt6eKqtPP1WnYtLnazJq/A0sxuv1LvemG70/sjv8ncaz0M0kfaD4cDradqDEcVcz
h2QiVlUAcV6XIxDZojoQIEsQUJaxUhFSJ8dhCVwfRLmiV0zVHQxQ/q2/yss9goNsLCax
yOUg6jGRsTUIYHH+tgIewBr+rLVJwfgNo99LjDEZOu/ZdxROKncggiE9sr+V3iEIRD05
AgQw5VGgxCoI7uned5ayNi/dqOzNN26CG4GzAW05t8HpgRDTG/+BT0XpI0pmSuABs+UL
+Ejs4mIg3qU1hl6wMPakxGCA0IQRmsnF/ETrBrWjxcYGKIsDiafa/OTG+0lE2qTzZQSP
kkAQ==
X-Gm-Message-State: ACrzQf2/Sz51o2pcn6w2zRY+i3hPaMrXlDC7UHtU7IGwyNlfGubWAsld
FK2AYFqAGpnQEzNom3V05KEgFgmcJ6IY5Uk8bw1CZJsnCanRWQ==
X-Google-Smtp-Source: AMsMyM5XH7L0t+D8/oSbUi38Tlhr4WvACZ9PEXGdh8EFAs7nNCNArt301fuug2JiUnlvyUyb+d6b9r3fzqcF2M6vE3c=
X-Received: by 2002:a17:907:845:b0:731:2f6c:6dbd with SMTP id
ww5-20020a170907084500b007312f6c6dbdmr8627856ejb.551.1666015263322; Mon, 17
Oct 2022 07:01:03 -0700 (PDT)
MIME-Version: 1.0
Sender: roseyao1983@gmail.com
Received: by 2002:a05:7208:5343:b0:5b:a777:e1c8 with HTTP; Mon, 17 Oct 2022
07:01:01 -0700 (PDT)
From: Hannah Alex
Date: Mon, 17 Oct 2022 14:01:01 +0000
X-Google-Sender-Auth: 7Ri4zAHvpykZb6gDnW_KXBbvtWk
Message-ID:
Subject: Hello
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dearest, My name is Hannah Alex, I would like to inquire about
your services to be my foreign partner / investor and help me to transfer
and manage my funds by investing in profit making ventures like [...]
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.67 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[roseyao1983[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[roseyao1983[at]gmail.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Hello
Dearest,
My name is Hannah Alex, I would like to inquire about your services to be my
foreign partner / investor and help me to transfer and manage my
funds by investing in profit making ventures like buying of company
shares or Real Estate in your country. I have a reasonable sum that I
inherited from my late father, which I would like you to help me
invest in your country.i enclose my personal photos,proof of payment
of the fund,my international passport,my late fathers death
certificate and a four page will from my late father.i am sending you
all this so that you can have confidence that you are dealing with a
real person
Note: below are the major reasons I am contacting you.
(1) To provide a new empty bank account in which this money would be
transferred. if you do not want us to use your personal account.
(2) To serve as a guardian of this fund since the bank insisted that their
agreement with my father was that I provide a foreign partner before
releasing the fund.
(3) To make arrangements for me to come over to your country to further my
education and to secure a resident permit in your country.
Please reply as soon as you read this message for more details and proof.
Kind regards.
Hannah Alex.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 17 Oct 2022 09:04:39 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1okRdN-0002cc-Sd
for dave@doctor.nl2k.ab.ca;
Mon, 17 Oct 2022 09:02:29 -0600
Resent-From: The Doctor
Resent-Date: Mon, 17 Oct 2022 09:02:29 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f67.google.com ([209.85.218.67]:43862)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1okQig-0009wp-HI
for doctor@doctor.nl2k.ab.ca;
Mon, 17 Oct 2022 08:04:01 -0600
Received: by mail-ej1-f67.google.com with SMTP id d26so25101307eje.10
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=siyXWKuxKBUUkaGeMmesWlfcI503Re2s4RZg9OV6IAg=;
b=TLOkpcOuc32SSGHPi70Lcxtz+pE+NaUG+BB/gdfMH//lhNdVkU1Iq3V9FH0cUtSdey
kELdSiy5SB/dOQZadbm7Yxy2RHTsHH1PgHe7tVQe7gkWbkSqbQOaLID83jOCTY5hn1/g
fZt+kKttEAnyjcsHQrRbtn4zsYXdr2HHJYEmcChlV6oVcZbZGW8/qBsxCmIh4jNkANQj
+4c6qwZVLOuQRAoPv+KCyC5wcpFsVOJZ0pdlsvnLapZuCO4hPLv9eTht/dyMRNbWtfFY
tZaQ92Zj27R30HikxsvpPpUPDe8kVsshq9Z7Geo0ywXQpCULryZdRMW3aINExPEwuyOI
I03A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=siyXWKuxKBUUkaGeMmesWlfcI503Re2s4RZg9OV6IAg=;
b=18gt6eKqtPP1WnYtLnazJq/A0sxuv1LvemG70/sjv8ncaz0M0kfaD4cDradqDEcVcz
h2QiVlUAcV6XIxDZojoQIEsQUJaxUhFSJ8dhCVwfRLmiV0zVHQxQ/q2/yss9goNsLCax
yOUg6jGRsTUIYHH+tgIewBr+rLVJwfgNo99LjDEZOu/ZdxROKncggiE9sr+V3iEIRD05
AgQw5VGgxCoI7uned5ayNi/dqOzNN26CG4GzAW05t8HpgRDTG/+BT0XpI0pmSuABs+UL
+Ejs4mIg3qU1hl6wMPakxGCA0IQRmsnF/ETrBrWjxcYGKIsDiafa/OTG+0lE2qTzZQSP
kkAQ==
X-Gm-Message-State: ACrzQf2/Sz51o2pcn6w2zRY+i3hPaMrXlDC7UHtU7IGwyNlfGubWAsld
FK2AYFqAGpnQEzNom3V05KEgFgmcJ6IY5Uk8bw1CZJsnCanRWQ==
X-Google-Smtp-Source: AMsMyM5XH7L0t+D8/oSbUi38Tlhr4WvACZ9PEXGdh8EFAs7nNCNArt301fuug2JiUnlvyUyb+d6b9r3fzqcF2M6vE3c=
X-Received: by 2002:a17:907:845:b0:731:2f6c:6dbd with SMTP id
ww5-20020a170907084500b007312f6c6dbdmr8627856ejb.551.1666015263322; Mon, 17
Oct 2022 07:01:03 -0700 (PDT)
MIME-Version: 1.0
Sender: roseyao1983@gmail.com
Received: by 2002:a05:7208:5343:b0:5b:a777:e1c8 with HTTP; Mon, 17 Oct 2022
07:01:01 -0700 (PDT)
From: Hannah Alex
Date: Mon, 17 Oct 2022 14:01:01 +0000
X-Google-Sender-Auth: 7Ri4zAHvpykZb6gDnW_KXBbvtWk
Message-ID:
Subject: Hello
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dearest, My name is Hannah Alex, I would like to inquire about
your services to be my foreign partner / investor and help me to transfer
and manage my funds by investing in profit making ventures like [...]
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.67 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[roseyao1983[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[roseyao1983[at]gmail.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Hello
Dearest,
My name is Hannah Alex, I would like to inquire about your services to be my
foreign partner / investor and help me to transfer and manage my
funds by investing in profit making ventures like buying of company
shares or Real Estate in your country. I have a reasonable sum that I
inherited from my late father, which I would like you to help me
invest in your country.i enclose my personal photos,proof of payment
of the fund,my international passport,my late fathers death
certificate and a four page will from my late father.i am sending you
all this so that you can have confidence that you are dealing with a
real person
Note: below are the major reasons I am contacting you.
(1) To provide a new empty bank account in which this money would be
transferred. if you do not want us to use your personal account.
(2) To serve as a guardian of this fund since the bank insisted that their
agreement with my father was that I provide a foreign partner before
releasing the fund.
(3) To make arrangements for me to come over to your country to further my
education and to secure a resident permit in your country.
Please reply as soon as you read this message for more details and proof.
Kind regards.
Hannah Alex.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments