Business proposal spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 20 Feb 2023 08:52:16 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pU8RV-000DvN-2N

for dave@doctor.nl2k.ab.ca;

Mon, 20 Feb 2023 08:51:05 -0700

Resent-From: The Doctor

Resent-Date: Mon, 20 Feb 2023 08:51:05 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f193.google.com ([209.85.128.193]:45853)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pU7D9-0004iV-2V

for doctor@doctor.nl2k.ab.ca;

Mon, 20 Feb 2023 07:32:11 -0700

Received: by mail-yw1-f193.google.com with SMTP id 00721157ae682-536bf92b55cso10926287b3.12

for ; Mon, 20 Feb 2023 06:30:06 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=8iIb7wNdY9y7asFnA366yOF3AoWVw2V1fgCfZgYiuNk=;

b=Ln1PAljonpFKm0wMHjQh9fzzfFWHw8+RnoIbOHVmWCG3w8rnulFjW1yhmXesCwZfzo

3xzSH2jdaVmI5anJphjZtHuAq1jOtKR8KekyF0UeQbCLJ2lzbxYaJkIJsayt3ybslVoE

/lxu3BVI0hAjzfn/QQi8fcwXS8WekbKYw3x+pqKyAZ1eDRc90dPjYG1r17qWoNPTpZVO

Ib1yclx0JRRaKnQ6oI2ub/R1Bpz3kbksop7HhMvBdDgizocYDE+lHIt/I32MW9okF5Qg

Avv2jAQ7XZ/Ug283a4OQAOjRpy4+oH8JLE06RzRBGKM1ByFXOhgx8xJccdE0WzbsCduU

H9NA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=8iIb7wNdY9y7asFnA366yOF3AoWVw2V1fgCfZgYiuNk=;

b=XJsVARcowo6/H8M3w7zMlRDVRV1dyu+Mz2Wp0OprRMbrFqcoXSdcMQ1PkNBSPRYDWg

fgEdllsO6sJALoJikHKHysZ9mNwMPHl6sZ183LczWJida3N+ZmojhvAvcsZJHPFeFdcK

yFyc2lZZgPCKxIMcJNcR1N21AUfe4EFOCfm/CMCM3Dn7H7ZhmIj/dw/2BL9b9ETUX7kI

92Df4G6O9V9Orr6R4IUGmSz9iNVPi1Z7FoYuPe2PFWGms9BoqSBvqaeAT542JP8MtdSa

kupEASpiUJPxL66Zx/SUeuWrxSEfZNsDh9iayIjfAOJTjMlKHHOaDa1NCHv7dlL8BLq7

yI7Q==

X-Gm-Message-State: AO0yUKUpMrY+KhEG37sZABDu/cbXfxKnpENFhV51VqvvVPPk5p42jG/9

S+8vUH2MYRPMCCXFzyZNo6K69NLnfVxYGe2qBY4=

X-Google-Smtp-Source: AK7set/Aos3OlNyPR2joUSvoNqHG7UFvVFYENcYoMDt9i2DoKdVmA7NzMT8VxaAcCJbuFhNeZXC/Kd9EwDE2xFS0nM0=

X-Received: by 2002:a81:ac5c:0:b0:533:9b80:a30e with SMTP id

z28-20020a81ac5c000000b005339b80a30emr234042ywj.10.1676903400781; Mon, 20 Feb

2023 06:30:00 -0800 (PST)

MIME-Version: 1.0

Reply-To: EngKellyWilliams40@gmail.com

From: "Eng. Kelly Williams"

Date: Mon, 20 Feb 2023 14:29:48 +0000

Message-ID:

Subject: My Greetings To You,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000086bb2005f5227f0a"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 13.1

X-Spam_score_int: 131

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: My Greetings To You, My name is Eng. Kelly Williams I work

with Texas oil and gas Association USA. I need your honest cooperation to

partner with me to invest in your company or in any other viable business

opportunity in [...]



Content analysis details: (13.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.193 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[annabruun102(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[engkellywilliams40(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[engkellywilliams41(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.1 RISK_FREE No risk!

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.193 listed in wl.mailspike.net]

Subject: {SPAM?} My Greetings To You,



--00000000000086bb2005f5227f0a

Content-Type: text/plain; charset="UTF-8"



My Greetings To You,





My name is Eng. Kelly Williams I work with Texas oil and gas Association

USA. I need your honest cooperation to partner with me to invest in your

company or in any other viable business opportunity in your country under

mutual interest benefits. Our partnership will be absolutely risk free,

Please I will also like to know the laws as it concerns foreign investors

like me.



I look forward to your cordial response.





Best Regards,

Eng. Kelly Williams,



--00000000000086bb2005f5227f0a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



My Greetings To You,


My name is Eng. Kelly Will=

iams I work with Texas oil and gas Association USA. I need your honest coop=

eration to partner with me to invest in your company or in any other viable=

business opportunity in your country under mutual interest benefits. Our p=

artnership will be absolutely risk free, Please I will also like to know th=

e laws as it concerns foreign investors like me.

I look forward to y=

our cordial response.


Best Regards,
Eng. Kelly Williams,
<=

/div>



--00000000000086bb2005f5227f0a--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA