Gig business spam from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Nov 2022 07:12:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1os2pZ-000IYH-QC

for dave@doctor.nl2k.ab.ca;

Mon, 07 Nov 2022 07:10:29 -0700

Resent-From: The Doctor

Resent-Date: Mon, 7 Nov 2022 07:10:29 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [213.243.61.84] (port=55308 helo=mailg.kanald.com.tr)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1os2TN-00050T-2K

for sales@nk.ca;

Mon, 07 Nov 2022 06:47:37 -0700

X-AuditID: d5f33d5a-58f71a8000002bc6-c3-63690b908bc7

Received: from gmail.com (Unknown_Domain [194.99.45.19])

by mailg.kanald.com.tr (Symantec Messaging Gateway) with SMTP id 58.4E.11206.09B09636; Mon, 7 Nov 2022 16:43:44 +0300 (+03)

Reply-To: zqinluv1@gmail.com

From: "Mz Qin"

To: sales@nk.ca

Subject: A GIG BIZNESS ESTABLISHMENT !

Date: 07 Nov 2022 05:43:44 -0800

Message-ID: <20221107054343.FCA7A3E15830DFE2@gmail.com>

MIME-Version: 1.0

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrBJMWRmVeSWpSXmKPExsVyKFlXWHcCd2aywanrEhYt984xOjB6bPux

iSWAMYrLJiU1J7MstUjfLoEr49LlPvaCp4IVT3svsTYwzufrYuTkkBAwkdhwYitrFyMXh5DA

dkaJ05O3sHcxcgA5MhIvWqNAatgElCQm37vCCmKLCPBLHDj3EcwWFlCTmP/qHCOIzSKgIPHi

7mYwm1fAXOLVnE0sELagxMmZT8BsZgFtiac3n8LZyxa+Zp7AyD0LSdksJGWzkJQtYGRexSiZ

m5iZk16ul5Kam1mUX5SaV1Kml5yfq1dStIkRGBBXP9tG7WB8Pt3lECMTB+MhRmkOFiVx3qnZ

JfFCAumJJanZqakFqUXxRaU5qcUgJZxSDYxsqtcez350ODftvkCpxdO7nTvF65X17mjf91m6

ee4Vce39TW0TMy+z7Whjv8LttEspY5mrYNkL21Txjctbr4lKGbz7KML8VGhznor2p09vs+/9

iq7Y9H/FFKPcuD8LEr6tnn2g56DrtYfTLWassxEQdL71rkmLN8ZzydYCvpWdKQKbrvm8Y5is

xFKckWioxVxUnAgA+Tab/9sBAAA=

X-Spam_score: 21.3

X-Spam_score_int: 213

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi my friend, I'm Mrs Qin. I work in a bank. Please excuse

my english, if there are errors! First off, if we both survived the Covid-19

epidemic out break, then I believe that God has given each of us [...]



Content analysis details: (21.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[194.99.45.19 listed in zen.spamhaus.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[213.243.61.84 listed in bb.barracudacentral.org]

1.4 FSL_HELO_FAKE No description available.

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[zqinluv1[at]gmail.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[zqinluv[at]gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

2.5 HK_SCAM_N2 BODY: No description available.

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[213.243.61.84 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 HK_SCAM No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS

0.0 SPOOFED_FREEMAIL No description available.

2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail

reply-to

0.0 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be...

Subject: {SPAM?} A GIG BIZNESS ESTABLISHMENT !



Hi my friend, I'm Mrs Qin. I work in a bank. Please excuse my

english, if there are errors! First off, if we both survived the

Covid-19 epidemic out break, then I believe that God has given

each of us all a chance to do better and help humanity. Well, as

a banker, I have a 100 percent guaranteed opportunity we can

profit from without having to hurt anybody. We can both support

the less privileged financially, and also our families in a very

legal and risk free way. I have a deal worth a substantial amount

of money, and I wish for us to partner together to accomplish it.

Currently; I=E2=80=99m in total control of a dormant escrow account and

the customer is deceased. But, that notwithstanding, my lawyer

can appoint you as a relative to our deceased customer and have

all his deposits directed to you as the next of kin without

creating any problem for us. It will only take a little time to

get the Paper-Works ready and once they are ready, then we are

good to go. I can easily arrange this because our deceased

customer recorded no next of kin. He opened his escrow account

with our private banking department and my official capacity

dictates that I am the only party to supervise and monitor the

account. I hope you understand that rare opportunities like this

only come one's way once in a lifetime? I mean, I cannot let this

chance pass me by and I hope you understand because for once I

found myself in total control and face to face with my destiny.

These chances won't pass me by. I am a family woman and this is

an occasion for me to provide them with new opportunities and a

good life and also to help the less privileged. A maximum of

fifty (50) percent may be offered as your share for being my

partner. Therefore; if you agree to partner with me, then be rest

assured that everything would be done accordingly to meet all

legal requirement. I am using a very good lawyer who already has

experience in such matters. We will do everything discreetly and

quietly without any hitches. But you must promise to follow my

instructions at all times. This is my field and I must guide you

in order fo us not to make mistakes. Give me a chance for us to

achieve this in a very easy way. Please let me know. Thanks!

Regards, Qin

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA