Investment spam from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 08 Mar 2023 08:24:57 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pZveS-0008ik-1d
for dave@doctor.nl2k.ab.ca;
Wed, 08 Mar 2023 08:24:24 -0700
Resent-From: The Doctor
Resent-Date: Wed, 8 Mar 2023 08:24:24 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f194.google.com ([209.85.210.194]:43678)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pZrOz-000G76-1m
for doctor@doctor.nl2k.ab.ca;
Wed, 08 Mar 2023 03:52:12 -0700
Received: by mail-pf1-f194.google.com with SMTP id a7so9884081pfx.10
for; Wed, 08 Mar 2023 02:50:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1678272604;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=QuQtN7l7cYNGvF48ROOn8pSwVGBDKCA5nMJmOxI2ceQ=;
b=GFudQZQ0NX8YBC1xRR/4Af5wb6d8do0vR2BUMDISZEcjma0wOh1hMA+Y6zvymXDywf
bfliTn21mz+p3H7rZsFTowV115NtQmgyoWDhBLYMUpGBER71et0z8NpXX3yJJqtqktXj
Z3Gdc2LT+ROozkI/nUWek+CHAK8B/DR0M9LFASy9wOEfEh1W8GP3NIHTiSSDaL4/jIns
m4clPmg8cYyFu3TSKatuzYbgIfcKGNwE9RjvQPUz3Vdbcrq3Gr7SGYLkAhwLnYEqctwp
mi5WCGiaNfALIQdf+fMbS4hipCnOCQyMuHddVXJcnzllgfGOF0/vZOJc7X6QWxflDjFY
JtjA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1678272604;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=QuQtN7l7cYNGvF48ROOn8pSwVGBDKCA5nMJmOxI2ceQ=;
b=msd9Fn7rHcvhx8Wz80cu5c6BpwpkHJFM6Pa6VU8yyiT8X1gzOYA7q511/A4YyC0nj3
0T3YRT2HVOZorwoTUmEt/eyzPwMOVA1AJO0AYfaYarAZFNPQALUepDEv8CuDd4sKs44P
YuytX18OvF/U1iUrwc4WKndF1Yuyp8DnxDAu5vO265mftHT2xgwPVjShu2PGjrWpkAHj
g7aOxEjkZQMO4NQxb4JdqF1bVoegIlj0DDpIhEzVpjcn/hDaw+W2T73bgcz7PYUiG7U1
tL3RFcYan3HliQmJQvVe2qRwrkDcnoS8tAgcxdqvw4HAz5FVZTNNrsdmjgwK88fubS3X
b77Q==
X-Gm-Message-State: AO0yUKUV1S2UoHYd2ZWj1qDX3tEbtOb+ArpAvzoeG0UgOmEntNUpsEtb
qnyNXbDsSNLeNEthP9ajrzaRfYOW1wP4n1s9CV0=
X-Google-Smtp-Source: AK7set+n1oohFWSYF/IZ/V1drNiRxey2cXCSUYgpBOm/OkU8wtbKdIrfopU5+kThdLSbCBx8+EViTSQRQH++pIvZRq4=
X-Received: by 2002:a63:3747:0:b0:503:2d50:5bf1 with SMTP id
g7-20020a633747000000b005032d505bf1mr5740920pgn.7.1678272604511; Wed, 08 Mar
2023 02:50:04 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a17:522:4b06:b0:4cd:9857:2ae with HTTP; Wed, 8 Mar 2023
02:50:03 -0800 (PST)
From: Kazim Taylor
Date: Wed, 8 Mar 2023 10:50:03 +0000
Message-ID:
Subject: Business Investment
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.0
X-Spam_score_int: 70
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good day, Please I need your assistance for investment in
any good business in your country, My interest is in CONSTRUCTION, REAL ESTATES,
AGRICULTURE ,TRANSPORTATION or any business you got more knowledge in i [...]
Content analysis details: (7.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kazimtaylor0032(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kazimtaylor0032(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.194 listed in list.dnswl.org]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLY From and body contain different freemails
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.194 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} Business Investment
Good day,
Please I need your assistance for investment in any good business in
your country, My interest is in CONSTRUCTION, REAL ESTATES,
AGRICULTURE ,TRANSPORTATION or any business you got more knowledge in
it, if you are interested kindly contact me through email
(kazimtaylor05@gmail.com) or phone number +27736394004.
Yours faithfully,
Mr. Kazim Taylor.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 08 Mar 2023 08:24:57 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pZveS-0008ik-1d
for dave@doctor.nl2k.ab.ca;
Wed, 08 Mar 2023 08:24:24 -0700
Resent-From: The Doctor
Resent-Date: Wed, 8 Mar 2023 08:24:24 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f194.google.com ([209.85.210.194]:43678)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pZrOz-000G76-1m
for doctor@doctor.nl2k.ab.ca;
Wed, 08 Mar 2023 03:52:12 -0700
Received: by mail-pf1-f194.google.com with SMTP id a7so9884081pfx.10
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1678272604;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=QuQtN7l7cYNGvF48ROOn8pSwVGBDKCA5nMJmOxI2ceQ=;
b=GFudQZQ0NX8YBC1xRR/4Af5wb6d8do0vR2BUMDISZEcjma0wOh1hMA+Y6zvymXDywf
bfliTn21mz+p3H7rZsFTowV115NtQmgyoWDhBLYMUpGBER71et0z8NpXX3yJJqtqktXj
Z3Gdc2LT+ROozkI/nUWek+CHAK8B/DR0M9LFASy9wOEfEh1W8GP3NIHTiSSDaL4/jIns
m4clPmg8cYyFu3TSKatuzYbgIfcKGNwE9RjvQPUz3Vdbcrq3Gr7SGYLkAhwLnYEqctwp
mi5WCGiaNfALIQdf+fMbS4hipCnOCQyMuHddVXJcnzllgfGOF0/vZOJc7X6QWxflDjFY
JtjA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1678272604;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=QuQtN7l7cYNGvF48ROOn8pSwVGBDKCA5nMJmOxI2ceQ=;
b=msd9Fn7rHcvhx8Wz80cu5c6BpwpkHJFM6Pa6VU8yyiT8X1gzOYA7q511/A4YyC0nj3
0T3YRT2HVOZorwoTUmEt/eyzPwMOVA1AJO0AYfaYarAZFNPQALUepDEv8CuDd4sKs44P
YuytX18OvF/U1iUrwc4WKndF1Yuyp8DnxDAu5vO265mftHT2xgwPVjShu2PGjrWpkAHj
g7aOxEjkZQMO4NQxb4JdqF1bVoegIlj0DDpIhEzVpjcn/hDaw+W2T73bgcz7PYUiG7U1
tL3RFcYan3HliQmJQvVe2qRwrkDcnoS8tAgcxdqvw4HAz5FVZTNNrsdmjgwK88fubS3X
b77Q==
X-Gm-Message-State: AO0yUKUV1S2UoHYd2ZWj1qDX3tEbtOb+ArpAvzoeG0UgOmEntNUpsEtb
qnyNXbDsSNLeNEthP9ajrzaRfYOW1wP4n1s9CV0=
X-Google-Smtp-Source: AK7set+n1oohFWSYF/IZ/V1drNiRxey2cXCSUYgpBOm/OkU8wtbKdIrfopU5+kThdLSbCBx8+EViTSQRQH++pIvZRq4=
X-Received: by 2002:a63:3747:0:b0:503:2d50:5bf1 with SMTP id
g7-20020a633747000000b005032d505bf1mr5740920pgn.7.1678272604511; Wed, 08 Mar
2023 02:50:04 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a17:522:4b06:b0:4cd:9857:2ae with HTTP; Wed, 8 Mar 2023
02:50:03 -0800 (PST)
From: Kazim Taylor
Date: Wed, 8 Mar 2023 10:50:03 +0000
Message-ID:
Subject: Business Investment
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.0
X-Spam_score_int: 70
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good day, Please I need your assistance for investment in
any good business in your country, My interest is in CONSTRUCTION, REAL ESTATES,
AGRICULTURE ,TRANSPORTATION or any business you got more knowledge in i [...]
Content analysis details: (7.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kazimtaylor0032(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kazimtaylor0032(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.194 listed in list.dnswl.org]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLY From and body contain different freemails
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.194 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} Business Investment
Good day,
Please I need your assistance for investment in any good business in
your country, My interest is in CONSTRUCTION, REAL ESTATES,
AGRICULTURE ,TRANSPORTATION or any business you got more knowledge in
it, if you are interested kindly contact me through email
(kazimtaylor05@gmail.com) or phone number +27736394004.
Yours faithfully,
Mr. Kazim Taylor.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments