Business proposal spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 17 Oct 2022 15:41:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1okXr0-000O8I-GY
for dave@doctor.nl2k.ab.ca;
Mon, 17 Oct 2022 15:40:58 -0600
Resent-From: The Doctor
Resent-Date: Mon, 17 Oct 2022 15:40:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f175.google.com ([209.85.210.175]:43997)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1okX5M-000H2B-FT
for doctor@doctor.nl2k.ab.ca;
Mon, 17 Oct 2022 14:51:47 -0600
Received: by mail-pf1-f175.google.com with SMTP id 204so12164329pfx.10
for; Mon, 17 Oct 2022 13:49:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=DcIP7sVO2A0wryRpupzUPWQywPt7sc4xyWCvZop1t1s=;
b=lVtpr0qm6foSZvw17U1NqZ0HnVqqGHZuk1T0BhF17ZusSUW8SyRHxpSQuA+LfT6/JT
qqbEsY+Mp9OVcFnV/cWOiFNI47cs2h2ToIB3fL6aQXUVaQgZmNPcjesG7fe+uqvGwROo
MrD99hdSk1YPSulLPcaKxZnxOX5XVIIyGDKn8Mf9BXekQGY5VdUpDHCSfeEubjt3QOUn
mzCzrtqlwZ0Q2/2aqfYiBXDPcOf1lBboQ6uDywhuJyorzvTx2WNfc1rlgF1Gl/dvYuYB
c6DHJecubT9Uipl3qGVSOnz2c4yvk2tMFhmYx2d60RQ9z+EUX9uUpk81MQFNTXOaxIBg
cHQA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=DcIP7sVO2A0wryRpupzUPWQywPt7sc4xyWCvZop1t1s=;
b=zAwqx1ULTRLoB9oTvtk0qlU+TimVSNh36UiDlL0GhnPYrZNDf/5DUzeyVsM0hUJ+5U
oMtImpucPIo4hI1nrz7MaIhE888JPCqORmcrXIQ0xkJYSnbH6iwJNUVbtav339SJAaMZ
fabaih0RPOcKrG3DNw9vwtDzyFN64tNBHJzD5l+9vQqBQpw7uK0LBT34VuWFu1St11Kq
xnTw5rZVfn+8ud6fjp/wVgYV/pIZBDZEtw/W0vbhG4Xb9QV9DoeYaevsa1QheWT2tnMf
v54q1uPh73MBiKTi0SRqlVzVfhhm4ZnVFlCbmxMLiFadlGXxApVy2iWB0Yvd7sJz+sj1
ZMAQ==
X-Gm-Message-State: ACrzQf0xTHSGATqW3WpA+WSIy0Glc6p1axcXwtV14iCnBBORh+/BKwyY
VGLTSnujIRxBXXEFJeTokkcrrYCUBbzu2ndj1qA=
X-Google-Smtp-Source: AMsMyM6YCxkaHJaB3yM1zIHb1HWyY+3W6DgtUpsvhnNJhcGnTalx3mPvRtjYvmiMvSYIlxHPyU9SL8OaWaCbSEESamg=
X-Received: by 2002:a65:42c8:0:b0:41a:8138:f47f with SMTP id
l8-20020a6542c8000000b0041a8138f47fmr12308115pgp.476.1666039735359; Mon, 17
Oct 2022 13:48:55 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7022:6083:b0:46:c21:fa4c with HTTP; Mon, 17 Oct 2022
13:48:54 -0700 (PDT)
Reply-To: ch4781.r@proton.me
From: Mrs Chanta
Date: Mon, 17 Oct 2022 20:48:54 +0000
Message-ID:
Subject: Greetings, I am Mrs. Chantal. I got your contact information from a
reputable business/professional directory.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.6
X-Spam_score_int: 106
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear friend I have a business proposal worth the sum of 6
million dollars, Kindly notify me if interested. Thanks Mrs Chantel
Content analysis details: (10.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.210.175 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[sethdoda1[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[sethdoda1[at]gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Greetings, I am Mrs. Chantal. I got your contact information from a
reputable business/professional directory.
Dear friend
I have a business proposal worth the sum of 6 million dollars, Kindly
notify me if interested.
Thanks
Mrs Chantel
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 17 Oct 2022 15:41:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1okXr0-000O8I-GY
for dave@doctor.nl2k.ab.ca;
Mon, 17 Oct 2022 15:40:58 -0600
Resent-From: The Doctor
Resent-Date: Mon, 17 Oct 2022 15:40:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f175.google.com ([209.85.210.175]:43997)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1okX5M-000H2B-FT
for doctor@doctor.nl2k.ab.ca;
Mon, 17 Oct 2022 14:51:47 -0600
Received: by mail-pf1-f175.google.com with SMTP id 204so12164329pfx.10
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=DcIP7sVO2A0wryRpupzUPWQywPt7sc4xyWCvZop1t1s=;
b=lVtpr0qm6foSZvw17U1NqZ0HnVqqGHZuk1T0BhF17ZusSUW8SyRHxpSQuA+LfT6/JT
qqbEsY+Mp9OVcFnV/cWOiFNI47cs2h2ToIB3fL6aQXUVaQgZmNPcjesG7fe+uqvGwROo
MrD99hdSk1YPSulLPcaKxZnxOX5XVIIyGDKn8Mf9BXekQGY5VdUpDHCSfeEubjt3QOUn
mzCzrtqlwZ0Q2/2aqfYiBXDPcOf1lBboQ6uDywhuJyorzvTx2WNfc1rlgF1Gl/dvYuYB
c6DHJecubT9Uipl3qGVSOnz2c4yvk2tMFhmYx2d60RQ9z+EUX9uUpk81MQFNTXOaxIBg
cHQA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=DcIP7sVO2A0wryRpupzUPWQywPt7sc4xyWCvZop1t1s=;
b=zAwqx1ULTRLoB9oTvtk0qlU+TimVSNh36UiDlL0GhnPYrZNDf/5DUzeyVsM0hUJ+5U
oMtImpucPIo4hI1nrz7MaIhE888JPCqORmcrXIQ0xkJYSnbH6iwJNUVbtav339SJAaMZ
fabaih0RPOcKrG3DNw9vwtDzyFN64tNBHJzD5l+9vQqBQpw7uK0LBT34VuWFu1St11Kq
xnTw5rZVfn+8ud6fjp/wVgYV/pIZBDZEtw/W0vbhG4Xb9QV9DoeYaevsa1QheWT2tnMf
v54q1uPh73MBiKTi0SRqlVzVfhhm4ZnVFlCbmxMLiFadlGXxApVy2iWB0Yvd7sJz+sj1
ZMAQ==
X-Gm-Message-State: ACrzQf0xTHSGATqW3WpA+WSIy0Glc6p1axcXwtV14iCnBBORh+/BKwyY
VGLTSnujIRxBXXEFJeTokkcrrYCUBbzu2ndj1qA=
X-Google-Smtp-Source: AMsMyM6YCxkaHJaB3yM1zIHb1HWyY+3W6DgtUpsvhnNJhcGnTalx3mPvRtjYvmiMvSYIlxHPyU9SL8OaWaCbSEESamg=
X-Received: by 2002:a65:42c8:0:b0:41a:8138:f47f with SMTP id
l8-20020a6542c8000000b0041a8138f47fmr12308115pgp.476.1666039735359; Mon, 17
Oct 2022 13:48:55 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7022:6083:b0:46:c21:fa4c with HTTP; Mon, 17 Oct 2022
13:48:54 -0700 (PDT)
Reply-To: ch4781.r@proton.me
From: Mrs Chanta
Date: Mon, 17 Oct 2022 20:48:54 +0000
Message-ID:
Subject: Greetings, I am Mrs. Chantal. I got your contact information from a
reputable business/professional directory.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.6
X-Spam_score_int: 106
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear friend I have a business proposal worth the sum of 6
million dollars, Kindly notify me if interested. Thanks Mrs Chantel
Content analysis details: (10.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.210.175 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[sethdoda1[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[sethdoda1[at]gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Greetings, I am Mrs. Chantal. I got your contact information from a
reputable business/professional directory.
Dear friend
I have a business proposal worth the sum of 6 million dollars, Kindly
notify me if interested.
Thanks
Mrs Chantel
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments