business proposal spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 19 Nov 2022 07:04:02 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1owOKf-000DhS-St
for dave@doctor.nl2k.ab.ca;
Sat, 19 Nov 2022 06:56:33 -0700
Resent-From: The Doctor
Resent-Date: Sat, 19 Nov 2022 06:56:33 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f68.google.com ([209.85.160.68]:34635)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1owGXf-000OZP-6l
for doctor@doctor.nl2k.ab.ca;
Fri, 18 Nov 2022 22:37:32 -0700
Received: by mail-oa1-f68.google.com with SMTP id 586e51a60fabf-14263779059so7533741fac.1
for; Fri, 18 Nov 2022 21:34:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=dfVa+q5Q7IxFRReO5JM1X+AL4MPNKMoC/yMSOjYMNyA=;
b=WaPUTcOoED8b3L4h/GL3tOfkvwSG3tcbBrPC1a/ELBuB/w6rz/kcSvhw8/mv5bDNrU
sVSb4DG2d+eLRJCtY7v5Gk9/YLqCPOU4/Sm3M1OKUAq09GWj+Z6GFS5wo5VbPKXUg+fs
O3Kp/sMVtdv9h725v9tWd8ADc3R5ctHQQCgYsL+LOWn7gQE+gFNPlzeW8BwSK7S2S357
a4RqbsGP6SA4IK8cD6Ypx8WR0goZASrjG3zu0W7JDuVQF2gqiSL5zNh0KPgkXEUKjU6a
d6R4msia7KUf6lxa4r5CMbpYCDJ+/7cymlY+o6W4NVbisC1uT6Gi+XWyq7DCUNnvwx3U
8brg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=dfVa+q5Q7IxFRReO5JM1X+AL4MPNKMoC/yMSOjYMNyA=;
b=5I2dV/vKJ/iHszplHGYxY5LKOzHZjpqUYJKE6ici2P2zmH572t800ahdahq4vE1RUr
aVPOQfnBQW0jv9C0p83HcSqso6LE2t4dSyBIaccKeMDOY/UpQxH1VLnNNssBkfDQ4Nc9
ZcgwIIeL5fdBY9FR832WBr9t6HjeoDE8PVVf796RbS51LrUNKrYKKP5fYGYUABz8INsJ
xF7odIuhzrhEgZY4ssRRbOhR4FlpFm648eaHHsLh3kuPlBQS07kSoJC7qSCuHj/qGAAb
JNbzUennrnT1FOJSHX1Q8tobjH/QQ72hNBkECWOeWtrrpnuYboOXo75HLDMQRCX7d283
7whg==
X-Gm-Message-State: ANoB5pkV6VdZ9Bw7ECWHL+owfEHLuJcyJhq0tqK2B4+Ghb3mL17RL0Yq
3XY1N537+3KWkpidBH+rjbu+DdDSeA0Jhr4Wnqg=
X-Google-Smtp-Source: AA0mqf7BAM4i74AdZ1H5t8TfE3STg/5/dUuS8lbuDiTR8ihLyovdM35Q9EebJ1pvP7tdNbGopAXOQNq41b5PJQxN7uE=
X-Received: by 2002:a05:6871:83:b0:142:7cce:ba1b with SMTP id
u3-20020a056871008300b001427cceba1bmr4852000oaa.11.1668836092826; Fri, 18 Nov
2022 21:34:52 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a8a:b4e:0:0:0:0:0 with HTTP; Fri, 18 Nov 2022 21:34:52 -0800 (PST)
Reply-To: mrmohammedshamekh64@gmail.com
From: mr mohammed shamekh
Date: Fri, 18 Nov 2022 21:34:52 -0800
Message-ID:
Subject: URGENTBUSINESSPROPOSAL
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 17.3
X-Spam_score_int: 173
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear friend, Greetings. How are you today, I hope well?
Content analysis details: (17.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.160.68 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.68 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[aljoharahahmed7139[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrmohammedshamekh64[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[aljoharahahmed7139[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.9 URG_BIZ BODY: Contains urgent matter
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 TVD_PH_BODY_META No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} URGENTBUSINESSPROPOSAL
--
Dear friend,
Greetings.
How are you today, I hope well?
I found your email contact before a search
private while I needed your help. My name is Mr. Mohammed
Shamekh. Work with the audit department and manager of
bookkeeping here at UBA Bank of Africa. There is this fund
kept in my custody years ago and I need your help to transfer
this fund to your bank account. for both investment benefit of
for life and the amount is (US$ 27,500. Million Dollars).
I have all the details of the query for the bank to believe and
release the fund to your bank account within 7 business days
banks with your full cooperation with me after success Please note
account 50% for you and 50% for me after the success of the
transfer the funds to your bank account ok.
WAITING TO HEAR FROM YOU.
THANK YOU.
mr mohammed sheikh
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 19 Nov 2022 07:04:02 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1owOKf-000DhS-St
for dave@doctor.nl2k.ab.ca;
Sat, 19 Nov 2022 06:56:33 -0700
Resent-From: The Doctor
Resent-Date: Sat, 19 Nov 2022 06:56:33 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f68.google.com ([209.85.160.68]:34635)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1owGXf-000OZP-6l
for doctor@doctor.nl2k.ab.ca;
Fri, 18 Nov 2022 22:37:32 -0700
Received: by mail-oa1-f68.google.com with SMTP id 586e51a60fabf-14263779059so7533741fac.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=dfVa+q5Q7IxFRReO5JM1X+AL4MPNKMoC/yMSOjYMNyA=;
b=WaPUTcOoED8b3L4h/GL3tOfkvwSG3tcbBrPC1a/ELBuB/w6rz/kcSvhw8/mv5bDNrU
sVSb4DG2d+eLRJCtY7v5Gk9/YLqCPOU4/Sm3M1OKUAq09GWj+Z6GFS5wo5VbPKXUg+fs
O3Kp/sMVtdv9h725v9tWd8ADc3R5ctHQQCgYsL+LOWn7gQE+gFNPlzeW8BwSK7S2S357
a4RqbsGP6SA4IK8cD6Ypx8WR0goZASrjG3zu0W7JDuVQF2gqiSL5zNh0KPgkXEUKjU6a
d6R4msia7KUf6lxa4r5CMbpYCDJ+/7cymlY+o6W4NVbisC1uT6Gi+XWyq7DCUNnvwx3U
8brg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=dfVa+q5Q7IxFRReO5JM1X+AL4MPNKMoC/yMSOjYMNyA=;
b=5I2dV/vKJ/iHszplHGYxY5LKOzHZjpqUYJKE6ici2P2zmH572t800ahdahq4vE1RUr
aVPOQfnBQW0jv9C0p83HcSqso6LE2t4dSyBIaccKeMDOY/UpQxH1VLnNNssBkfDQ4Nc9
ZcgwIIeL5fdBY9FR832WBr9t6HjeoDE8PVVf796RbS51LrUNKrYKKP5fYGYUABz8INsJ
xF7odIuhzrhEgZY4ssRRbOhR4FlpFm648eaHHsLh3kuPlBQS07kSoJC7qSCuHj/qGAAb
JNbzUennrnT1FOJSHX1Q8tobjH/QQ72hNBkECWOeWtrrpnuYboOXo75HLDMQRCX7d283
7whg==
X-Gm-Message-State: ANoB5pkV6VdZ9Bw7ECWHL+owfEHLuJcyJhq0tqK2B4+Ghb3mL17RL0Yq
3XY1N537+3KWkpidBH+rjbu+DdDSeA0Jhr4Wnqg=
X-Google-Smtp-Source: AA0mqf7BAM4i74AdZ1H5t8TfE3STg/5/dUuS8lbuDiTR8ihLyovdM35Q9EebJ1pvP7tdNbGopAXOQNq41b5PJQxN7uE=
X-Received: by 2002:a05:6871:83:b0:142:7cce:ba1b with SMTP id
u3-20020a056871008300b001427cceba1bmr4852000oaa.11.1668836092826; Fri, 18 Nov
2022 21:34:52 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a8a:b4e:0:0:0:0:0 with HTTP; Fri, 18 Nov 2022 21:34:52 -0800 (PST)
Reply-To: mrmohammedshamekh64@gmail.com
From: mr mohammed shamekh
Date: Fri, 18 Nov 2022 21:34:52 -0800
Message-ID:
Subject: URGENTBUSINESSPROPOSAL
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 17.3
X-Spam_score_int: 173
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear friend, Greetings. How are you today, I hope well?
Content analysis details: (17.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.160.68 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.68 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[aljoharahahmed7139[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrmohammedshamekh64[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[aljoharahahmed7139[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.9 URG_BIZ BODY: Contains urgent matter
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 TVD_PH_BODY_META No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} URGENTBUSINESSPROPOSAL
--
Dear friend,
Greetings.
How are you today, I hope well?
I found your email contact before a search
private while I needed your help. My name is Mr. Mohammed
Shamekh. Work with the audit department and manager of
bookkeeping here at UBA Bank of Africa. There is this fund
kept in my custody years ago and I need your help to transfer
this fund to your bank account. for both investment benefit of
for life and the amount is (US$ 27,500. Million Dollars).
I have all the details of the query for the bank to believe and
release the fund to your bank account within 7 business days
banks with your full cooperation with me after success Please note
account 50% for you and 50% for me after the success of the
transfer the funds to your bank account ok.
WAITING TO HEAR FROM YOU.
THANK YOU.
mr mohammed sheikh
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments