Investment spam from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 07 Mar 2023 09:02:13 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pZZl8-000OgQ-0M
for dave@doctor.nl2k.ab.ca;
Tue, 07 Mar 2023 09:01:50 -0700
Resent-From: The Doctor
Resent-Date: Tue, 7 Mar 2023 09:01:50 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f193.google.com ([209.85.210.193]:39475)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pZUob-000DTQ-0v
for sales@nk.ca;
Tue, 07 Mar 2023 03:45:08 -0700
Received: by mail-pf1-f193.google.com with SMTP id b20so7706402pfo.6
for; Tue, 07 Mar 2023 02:43:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1678185780;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=RQom9jiEm1srmwxPJuxe1SH/mgtvX3gpalINzdjIk3U=;
b=brXTdfdJ1dfjWVKYC/I62Dhqv/OQ9PuG7alxe19Bzb8y1Ri8aCJFptbakYEA0Dt39s
ubiQAUbctPXdj9Nyla3QxHIMTZI8+cFiyHA4wk33zUCvGfDJHO8y7c/HuW6NdZUZOYs8
ZROSQqA9Z0VAAQ9cwrvVZzpTFOaByRO2SHLvygZRNZJU4Sa0s0dyKuMMXw+REiOuT2l4
ZRzgiR9qXoBC3BCodrpVTvLqixTx7Z7ZqbqG5YIIhV2xn7Iv+/A3Xfo3tq/RAEnZck6W
QZzJrxTc2qFjdGO90GPHTdW+o/KcRmDpPU5NTwS1p6y+IKopabl/l1nTE41zTOTMYdsd
ipfw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1678185780;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=RQom9jiEm1srmwxPJuxe1SH/mgtvX3gpalINzdjIk3U=;
b=juou+2IQPKv+/szGDWjGr6rUd4udy03c/uaiVT+ggz1le//vNJnZvVQZQRunIM/yXC
NaCWcvXjh1yVh+2IRRk/oeIXf+H8Pt/6lCy7XgOhTzOXQBKl3FkjffJLxJPK3FyThLFL
hkkPsFuSpXy9B+KKP4nK9U8WpeGi5az5/sRmpDp85F+WsdB5D8tc/wvNqyaT6Z2GdatQ
5fC4w81opCFBb012iRrn7hADitZ08nfdPZQ3uElwy/r5/0B63/oSnNUxtCzffxxrLS7S
4VtUflGCxetsQ4gWEkoArW8bHbgOwtU6TwTkwJCIq1ow/rm5SB5lCN5K1IPDte4yfyWx
pZCQ==
X-Gm-Message-State: AO0yUKVt0/Pb287gxmH8hOz4nUmzCZ38UpFFe3FHVnmmx0vmOCsptrtH
dob2OSCExKJ5xAhD69F9UFLU6+dpN2XTmpFMJCU=
X-Google-Smtp-Source: AK7set8oiZUMjwQLIR5Hxvx63UIkuGb83MExLauirsBZm/SfAFuBHVTwB4OZUQ9F9m8YKCAf0q/8GDS6RpxT5RQGwiQ=
X-Received: by 2002:a63:b95b:0:b0:4fc:2058:fa29 with SMTP id
v27-20020a63b95b000000b004fc2058fa29mr4722998pgo.1.1678185780191; Tue, 07 Mar
2023 02:43:00 -0800 (PST)
MIME-Version: 1.0
Reply-To: mrterrygreg@gmail.com
From: Terry Greg
Date: Tue, 7 Mar 2023 10:42:52 +0000
Message-ID:
Subject: Interesting Proposal
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: sales@nk.ca
X-Spam_score: 9.0
X-Spam_score_int: 90
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello My name is Mr Terry Greg, I am the Head Operation Manager
Investors Direct Capital Funds with Reputable Bank here UK, I wish to state
that I am impressed with your brief profile details on the interne [...]
Content analysis details: (9.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.193 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[ericconnor00(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ericconnor00(at)gmail.com]
0.2 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.193 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} Interesting Proposal
Hello
My name is Mr Terry Greg, I am the Head Operation Manager Investors
Direct Capital Funds with Reputable Bank here UK, I wish to state that
I am impressed with your brief profile details on the internet network
and I feel that it will be good to share this cooperation with you.
I represent a Deal interest totalling =C2=A346,950.000.00 (forty Six
Million Nine Hundred and Fifty Thousand Pounds). I hope this
cooperation will be of interest to you and we can go ahead with the
details upon your response
Regards
Mr Terry Greg
Head Operation Manager
Investors Direct Capital Funds
Phone Contact: Tel: +447436905348
1 Cabot Square, Canary Wharf, London E14 4QJ
The Consultant. All Rights Reserved. | =C2=A9 2000-2022
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 07 Mar 2023 09:02:13 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pZZl8-000OgQ-0M
for dave@doctor.nl2k.ab.ca;
Tue, 07 Mar 2023 09:01:50 -0700
Resent-From: The Doctor
Resent-Date: Tue, 7 Mar 2023 09:01:50 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f193.google.com ([209.85.210.193]:39475)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pZUob-000DTQ-0v
for sales@nk.ca;
Tue, 07 Mar 2023 03:45:08 -0700
Received: by mail-pf1-f193.google.com with SMTP id b20so7706402pfo.6
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1678185780;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=RQom9jiEm1srmwxPJuxe1SH/mgtvX3gpalINzdjIk3U=;
b=brXTdfdJ1dfjWVKYC/I62Dhqv/OQ9PuG7alxe19Bzb8y1Ri8aCJFptbakYEA0Dt39s
ubiQAUbctPXdj9Nyla3QxHIMTZI8+cFiyHA4wk33zUCvGfDJHO8y7c/HuW6NdZUZOYs8
ZROSQqA9Z0VAAQ9cwrvVZzpTFOaByRO2SHLvygZRNZJU4Sa0s0dyKuMMXw+REiOuT2l4
ZRzgiR9qXoBC3BCodrpVTvLqixTx7Z7ZqbqG5YIIhV2xn7Iv+/A3Xfo3tq/RAEnZck6W
QZzJrxTc2qFjdGO90GPHTdW+o/KcRmDpPU5NTwS1p6y+IKopabl/l1nTE41zTOTMYdsd
ipfw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1678185780;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=RQom9jiEm1srmwxPJuxe1SH/mgtvX3gpalINzdjIk3U=;
b=juou+2IQPKv+/szGDWjGr6rUd4udy03c/uaiVT+ggz1le//vNJnZvVQZQRunIM/yXC
NaCWcvXjh1yVh+2IRRk/oeIXf+H8Pt/6lCy7XgOhTzOXQBKl3FkjffJLxJPK3FyThLFL
hkkPsFuSpXy9B+KKP4nK9U8WpeGi5az5/sRmpDp85F+WsdB5D8tc/wvNqyaT6Z2GdatQ
5fC4w81opCFBb012iRrn7hADitZ08nfdPZQ3uElwy/r5/0B63/oSnNUxtCzffxxrLS7S
4VtUflGCxetsQ4gWEkoArW8bHbgOwtU6TwTkwJCIq1ow/rm5SB5lCN5K1IPDte4yfyWx
pZCQ==
X-Gm-Message-State: AO0yUKVt0/Pb287gxmH8hOz4nUmzCZ38UpFFe3FHVnmmx0vmOCsptrtH
dob2OSCExKJ5xAhD69F9UFLU6+dpN2XTmpFMJCU=
X-Google-Smtp-Source: AK7set8oiZUMjwQLIR5Hxvx63UIkuGb83MExLauirsBZm/SfAFuBHVTwB4OZUQ9F9m8YKCAf0q/8GDS6RpxT5RQGwiQ=
X-Received: by 2002:a63:b95b:0:b0:4fc:2058:fa29 with SMTP id
v27-20020a63b95b000000b004fc2058fa29mr4722998pgo.1.1678185780191; Tue, 07 Mar
2023 02:43:00 -0800 (PST)
MIME-Version: 1.0
Reply-To: mrterrygreg@gmail.com
From: Terry Greg
Date: Tue, 7 Mar 2023 10:42:52 +0000
Message-ID:
Subject: Interesting Proposal
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: sales@nk.ca
X-Spam_score: 9.0
X-Spam_score_int: 90
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello My name is Mr Terry Greg, I am the Head Operation Manager
Investors Direct Capital Funds with Reputable Bank here UK, I wish to state
that I am impressed with your brief profile details on the interne [...]
Content analysis details: (9.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.193 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[ericconnor00(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ericconnor00(at)gmail.com]
0.2 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.193 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} Interesting Proposal
Hello
My name is Mr Terry Greg, I am the Head Operation Manager Investors
Direct Capital Funds with Reputable Bank here UK, I wish to state that
I am impressed with your brief profile details on the internet network
and I feel that it will be good to share this cooperation with you.
I represent a Deal interest totalling =C2=A346,950.000.00 (forty Six
Million Nine Hundred and Fifty Thousand Pounds). I hope this
cooperation will be of interest to you and we can go ahead with the
details upon your response
Regards
Mr Terry Greg
Head Operation Manager
Investors Direct Capital Funds
Phone Contact: Tel: +447436905348
1 Cabot Square, Canary Wharf, London E14 4QJ
The Consultant. All Rights Reserved. | =C2=A9 2000-2022
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments