beneficiary spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 11 Jan 2023 08:11:44 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pFch9-000080-0G
for dave@doctor.nl2k.ab.ca;
Wed, 11 Jan 2023 08:07:15 -0700
Resent-From: The Doctor
Resent-Date: Wed, 11 Jan 2023 08:07:15 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f52.google.com ([209.85.128.52]:43683)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pFX8D-000H5Y-0Z
for root@nk.ca;
Wed, 11 Jan 2023 02:10:57 -0700
Received: by mail-wm1-f52.google.com with SMTP id k22-20020a05600c1c9600b003d1ee3a6289so12089476wms.2
for; Wed, 11 Jan 2023 01:08:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=jkuEDO3pjR9xlbbgpLma+OZcCdmGE1i5Xh7sDXulwH0=;
b=qu8XiLkNJIT3CAT5qG4wHiTJTzdyVTjA0RQpZOLWIM4uCW1SClqzxbzRZ2ttP/GnfP
3oKAXLcbAfpTt8Q8xqrJ4ROVyP7ECm4KhGGvR6ECF6JYw+ynukhX0uF7AE68QKbPz1jJ
VuljspJg0645Y/3a+w5hEP9SXzMMMuLd+C3iRYkJc+tDUydWgbq6MeX4Rea6+74/+TFj
cGrzXfrXY0P4J0TEGG/TDU066iJtLnkz2SFqCgnkOMHJsxZm7sy8FpbIGh6PIwWGIl5A
r51571/AL2gp6tli85JDICRrNxUifu7HDsRjLBeGQzL5c+5PSKMiMjDFXsNAiugeeM/H
EoXw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=jkuEDO3pjR9xlbbgpLma+OZcCdmGE1i5Xh7sDXulwH0=;
b=RyzMhgii722lqYv+6bICtjFj5+GO+wTnInjT9L0v5iurxCzfy5RQCIDquXtqp6TomL
/66hLQVrr/VEdpX7YtTZG7mX3J1j5JHijYfHoRn3LaE8Z3aQT3VLyYXylfw2zae1U2o5
bmZerucmA7lOOe3VeYNCwTwA8cjyOZHZd4FTrxVxd7K5Iw2fOE3bdRZuu4TxVWONbA02
VTKYPW69CjKXLikkdpP308JWU9zUn6SWhS8Uks9q5sZcWLRfT5RowfrE7L5ekpflJigT
q3Y9ZUPUWqNoVtLaoC9f5GPjwNdJzALzIYzonD0PoaRhwPUYORfdXvWFsrh9ExT6HOan
rW+w==
X-Gm-Message-State: AFqh2koVLlXesH++U0g66kOsYIGEnRzaiZg60tkRPdfHH/iMMPxm+HRF
dPAcbZn0ix4+7mqC5onvAPgFtbkFgaCESdXvJxw=
X-Google-Smtp-Source: AMrXdXuq8AHIze/PEV83OO7IKLgzyjIRzLzh2lWEskyWsZ9oYvM0k5QB1MZQk68pt+RDG6LvEt1eBMpPrUidVVbj+a4=
X-Received: by 2002:a7b:c358:0:b0:3cf:87c6:890b with SMTP id
l24-20020a7bc358000000b003cf87c6890bmr5126464wmj.194.1673428092336; Wed, 11
Jan 2023 01:08:12 -0800 (PST)
MIME-Version: 1.0
Reply-To: sun.hor13@gmail.com
From: Sun hor
Date: Wed, 11 Jan 2023 16:08:02 +0700
Message-ID:
Subject: I want to present to you as a beneficiary,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000000047a305f1f95718"
Bcc: root@nk.ca
X-Spam_score: 10.6
X-Spam_score_int: 106
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good Day Friend, I am Chief Accountant/Executive with Foreign
Trade Bank of (FTB) . I want to present to you as a beneficiary of $32,640,000
here in my bank. Get back to me for more details. Best Regards, Mr. SUN HOR
Account Manager
Content analysis details: (10.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.52 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.52 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[sun.hor13(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[inforsunho11(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[inforsunho11(at)gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 REPTO_419_FRAUD_GM_LOOSE Ends-in-digits Reply-To is similar to known
advance fee fraud collector mailbox
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} I want to present to you as a beneficiary,
--0000000000000047a305f1f95718
Content-Type: text/plain; charset="UTF-8"
Good Day Friend,
I am Chief Accountant/Executive with Foreign Trade Bank of (FTB) . I want
to present to you as a beneficiary of $32,640,000 here in my bank. Get back
to me for more details.
Best Regards,
Mr. SUN HOR
Account Manager
--0000000000000047a305f1f95718
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000000047a305f1f95718--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 11 Jan 2023 08:11:44 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pFch9-000080-0G
for dave@doctor.nl2k.ab.ca;
Wed, 11 Jan 2023 08:07:15 -0700
Resent-From: The Doctor
Resent-Date: Wed, 11 Jan 2023 08:07:15 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f52.google.com ([209.85.128.52]:43683)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pFX8D-000H5Y-0Z
for root@nk.ca;
Wed, 11 Jan 2023 02:10:57 -0700
Received: by mail-wm1-f52.google.com with SMTP id k22-20020a05600c1c9600b003d1ee3a6289so12089476wms.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=jkuEDO3pjR9xlbbgpLma+OZcCdmGE1i5Xh7sDXulwH0=;
b=qu8XiLkNJIT3CAT5qG4wHiTJTzdyVTjA0RQpZOLWIM4uCW1SClqzxbzRZ2ttP/GnfP
3oKAXLcbAfpTt8Q8xqrJ4ROVyP7ECm4KhGGvR6ECF6JYw+ynukhX0uF7AE68QKbPz1jJ
VuljspJg0645Y/3a+w5hEP9SXzMMMuLd+C3iRYkJc+tDUydWgbq6MeX4Rea6+74/+TFj
cGrzXfrXY0P4J0TEGG/TDU066iJtLnkz2SFqCgnkOMHJsxZm7sy8FpbIGh6PIwWGIl5A
r51571/AL2gp6tli85JDICRrNxUifu7HDsRjLBeGQzL5c+5PSKMiMjDFXsNAiugeeM/H
EoXw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=jkuEDO3pjR9xlbbgpLma+OZcCdmGE1i5Xh7sDXulwH0=;
b=RyzMhgii722lqYv+6bICtjFj5+GO+wTnInjT9L0v5iurxCzfy5RQCIDquXtqp6TomL
/66hLQVrr/VEdpX7YtTZG7mX3J1j5JHijYfHoRn3LaE8Z3aQT3VLyYXylfw2zae1U2o5
bmZerucmA7lOOe3VeYNCwTwA8cjyOZHZd4FTrxVxd7K5Iw2fOE3bdRZuu4TxVWONbA02
VTKYPW69CjKXLikkdpP308JWU9zUn6SWhS8Uks9q5sZcWLRfT5RowfrE7L5ekpflJigT
q3Y9ZUPUWqNoVtLaoC9f5GPjwNdJzALzIYzonD0PoaRhwPUYORfdXvWFsrh9ExT6HOan
rW+w==
X-Gm-Message-State: AFqh2koVLlXesH++U0g66kOsYIGEnRzaiZg60tkRPdfHH/iMMPxm+HRF
dPAcbZn0ix4+7mqC5onvAPgFtbkFgaCESdXvJxw=
X-Google-Smtp-Source: AMrXdXuq8AHIze/PEV83OO7IKLgzyjIRzLzh2lWEskyWsZ9oYvM0k5QB1MZQk68pt+RDG6LvEt1eBMpPrUidVVbj+a4=
X-Received: by 2002:a7b:c358:0:b0:3cf:87c6:890b with SMTP id
l24-20020a7bc358000000b003cf87c6890bmr5126464wmj.194.1673428092336; Wed, 11
Jan 2023 01:08:12 -0800 (PST)
MIME-Version: 1.0
Reply-To: sun.hor13@gmail.com
From: Sun hor
Date: Wed, 11 Jan 2023 16:08:02 +0700
Message-ID:
Subject: I want to present to you as a beneficiary,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000000047a305f1f95718"
Bcc: root@nk.ca
X-Spam_score: 10.6
X-Spam_score_int: 106
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good Day Friend, I am Chief Accountant/Executive with Foreign
Trade Bank of (FTB) . I want to present to you as a beneficiary of $32,640,000
here in my bank. Get back to me for more details. Best Regards, Mr. SUN HOR
Account Manager
Content analysis details: (10.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.52 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.52 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[sun.hor13(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[inforsunho11(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[inforsunho11(at)gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 REPTO_419_FRAUD_GM_LOOSE Ends-in-digits Reply-To is similar to known
advance fee fraud collector mailbox
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} I want to present to you as a beneficiary,
--0000000000000047a305f1f95718
Content-Type: text/plain; charset="UTF-8"
Good Day Friend,
I am Chief Accountant/Executive with Foreign Trade Bank of (FTB) . I want
to present to you as a beneficiary of $32,640,000 here in my bank. Get back
to me for more details.
Best Regards,
Mr. SUN HOR
Account Manager
--0000000000000047a305f1f95718
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Good Day Friend,
I am Chief Accountant/Executive wi=
th Foreign Trade Bank of (FTB) . I want to present to you as a beneficiary =
of $32,640,000 here in my bank. Get back to me for more details.
Bes=
t Regards,
Mr. SUN HOR
Account Manager
I am Chief Accountant/Executive wi=
th Foreign Trade Bank of (FTB) . I want to present to you as a beneficiary =
of $32,640,000 here in my bank. Get back to me for more details.
Bes=
t Regards,
Mr. SUN HOR
Account Manager
--0000000000000047a305f1f95718--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments