Financial spam from Google gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 14 Nov 2024 06:44:03 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1tBZ4v-00000000Flw-1ORZ
for dave@doctor.nl2k.ab.ca;
Thu, 14 Nov 2024 05:36:05 -0700
Resent-From: The Doctor
Resent-Date: Thu, 14 Nov 2024 05:36:05 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f173.google.com ([209.85.222.173]:42133)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1tBRvq-000000006Zt-2Qf8
for doctor@doctor.nl2k.ab.ca;
Wed, 13 Nov 2024 21:58:57 -0700
Received: by mail-qk1-f173.google.com with SMTP id af79cd13be357-7b18da94ba9so14737285a.0
for; Wed, 13 Nov 2024 20:56:24 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1731560178; x=1732164978; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=WiTCoIbwCVgfhBAroZzOJahjv2gbNJpyJFAhpXiRxe4=;
b=CAw6wQ4V6BHy/BeNFn30WK7ar9vGdRQlt7OgYwPU032HAFTw86oIXmykgBReLigDDq
i6nuQGqmqMux70zn+o5V+584lIe3srYspPpL6FWLfU8hlSXN9acXwV7oL+BK0parG8ap
ItlGChA16ax5wdvW0T5YccT5XTNg3Z5Gk9GkCOrLfu7StLXpU3CJpsmDteMabqiFQe+A
S4KDMllkMYxaXtAg993/D1gPiZru1Vpmyml9By7KwhxnZAuCVBXhTqh4dimG29rcIgnU
jGgtQPfnjYOMUKrdTLYEw3UEzTIyd4+jSMR6IBsbkPVcXQ0EL65fdZjH4CbFypdoI9Fu
fysA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1731560178; x=1732164978;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=WiTCoIbwCVgfhBAroZzOJahjv2gbNJpyJFAhpXiRxe4=;
b=fL6eLLY/KIlKc0ZbgEzqPtaKCmRZna3ih55D4J2Mj4QejT0rlznfVEu35qDbtWfQaN
1P3uzKAfBpowygT2WkenBJTKRr+KTo9uaO1nZ0mWDmSdRXlubR/6gmXNKbEOJy0lt+xQ
6FSEbL7sWnrm53rSCNpymULQrF1Q+ANq99rLkmL1qDpuBFsbhB/r9Of3AmjdTCue1Rhc
JCXMMBodp21yVDL0cQKOREh3L9UE3DVUDV+h2eyknQj0UKnCP8hZTbSZYSo32LvYtvN8
kHPq9SvdrQELrhLSlXbro2PRhytynOR2i9zvXBQkkmkObBQtw5jEWMxIKQbtXN4ckRoq
ohvQ==
X-Forwarded-Encrypted: i=1; AJvYcCX6im7Ks2lxOniwnKW3wppaot8nGJ/Pi4lvRnfYYnaDqAoNHs4moynN0VVBeOC6eDmRpwIRSJM=@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YwdcH8YvZiHinO+QLqIBIqVVVcHdeGdNvuj1Tqrhx7RwfG7N1DD
fAHUt2KaeBmYokjxO68ASA3LCEN4nPdPJvdYWsk+XrnDguouSJMBiWMx0xwXm0EV4N/LgIJytAs
duUP4H7L5ZpvQuCYabjg0MZrLCo0=
X-Google-Smtp-Source: AGHT+IEnF053b15ALAfLcVY49tWFFajBKOyxHUoFBFTktIfIEjyhL8q/XrJtt+lsBdSkErWT08CWUOfSbPDKRR+w1p4=
X-Received: by 2002:a05:620a:3904:b0:7ac:dd88:cc80 with SMTP id
af79cd13be357-7b35a47efd9mr334321985a.8.1731560178322; Wed, 13 Nov 2024
20:56:18 -0800 (PST)
MIME-Version: 1.0
From: James Furry
Date: Wed, 13 Nov 2024 20:56:05 -0800
Message-ID:
Subject: RE: LOW INTEREST RATE
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000005612c00626d8456f"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings, We understand that your industry or business may
require a large sum of money to invest in growth, expansion, or other significant
projects. That's why we're reaching out to offer our financing soluti [...]
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.222.173 listed in will-spam-for-food.eu.org]
[209.85.222.173 listed in will-spam-for-food.eu.org]
[209.85.222.173 listed in will-spam-for-food.eu.org]
[209.85.222.173 listed in will-spam-for-food.eu.org]
[209.85.222.173 listed in will-spam-for-food.eu.org]
[209.85.222.173 listed in will-spam-for-food.eu.org]
[209.85.222.173 listed in will-spam-for-food.eu.org]
[209.85.222.173 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.222.173 listed in dnsbl.ahbl.org]
[209.85.222.173 listed in dnsbl.ahbl.org]
[209.85.222.173 listed in dnsbl.ahbl.org]
[209.85.222.173 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.222.173 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.222.173 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.222.173 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.222.173 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.173 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.173 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[jfurry1975(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[jfurry1975(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
Subject: {SPAM?} RE: LOW INTEREST RATE
--0000000000005612c00626d8456f
Content-Type: text/plain; charset="UTF-8"
Greetings,
We understand that your industry or business may require a large sum of
money to invest in growth, expansion, or other significant projects. That's
why we're reaching out to offer our financing solutions to help you achieve
your goals.
I am a financial Facilitator, I have a number of core investors at hand who
are ready to provide high-value loans to businesses and industries across
various sectors. We offer flexible repayment terms, competitive/lower
interest rates, and customized loan packages to meet your specific needs.
Whether you're looking to fund an acquisition, purchase new equipment, or
invest in marketing initiatives, we have the resources to support you. We
understand that securing a large loan can be a daunting process, but we
promise to work closely with you to make the process as smooth as possible.
If you're interested in learning more about our financing options or have
questions, please don't hesitate to contact us.
Thank you for your time, and we look forward to the opportunity to support
your business.
Best regards,
Furry James.
Financial Facilitators
--0000000000005612c00626d8456f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000005612c00626d8456f--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 14 Nov 2024 06:44:03 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1tBZ4v-00000000Flw-1ORZ
for dave@doctor.nl2k.ab.ca;
Thu, 14 Nov 2024 05:36:05 -0700
Resent-From: The Doctor
Resent-Date: Thu, 14 Nov 2024 05:36:05 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f173.google.com ([209.85.222.173]:42133)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1tBRvq-000000006Zt-2Qf8
for doctor@doctor.nl2k.ab.ca;
Wed, 13 Nov 2024 21:58:57 -0700
Received: by mail-qk1-f173.google.com with SMTP id af79cd13be357-7b18da94ba9so14737285a.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1731560178; x=1732164978; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=WiTCoIbwCVgfhBAroZzOJahjv2gbNJpyJFAhpXiRxe4=;
b=CAw6wQ4V6BHy/BeNFn30WK7ar9vGdRQlt7OgYwPU032HAFTw86oIXmykgBReLigDDq
i6nuQGqmqMux70zn+o5V+584lIe3srYspPpL6FWLfU8hlSXN9acXwV7oL+BK0parG8ap
ItlGChA16ax5wdvW0T5YccT5XTNg3Z5Gk9GkCOrLfu7StLXpU3CJpsmDteMabqiFQe+A
S4KDMllkMYxaXtAg993/D1gPiZru1Vpmyml9By7KwhxnZAuCVBXhTqh4dimG29rcIgnU
jGgtQPfnjYOMUKrdTLYEw3UEzTIyd4+jSMR6IBsbkPVcXQ0EL65fdZjH4CbFypdoI9Fu
fysA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1731560178; x=1732164978;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=WiTCoIbwCVgfhBAroZzOJahjv2gbNJpyJFAhpXiRxe4=;
b=fL6eLLY/KIlKc0ZbgEzqPtaKCmRZna3ih55D4J2Mj4QejT0rlznfVEu35qDbtWfQaN
1P3uzKAfBpowygT2WkenBJTKRr+KTo9uaO1nZ0mWDmSdRXlubR/6gmXNKbEOJy0lt+xQ
6FSEbL7sWnrm53rSCNpymULQrF1Q+ANq99rLkmL1qDpuBFsbhB/r9Of3AmjdTCue1Rhc
JCXMMBodp21yVDL0cQKOREh3L9UE3DVUDV+h2eyknQj0UKnCP8hZTbSZYSo32LvYtvN8
kHPq9SvdrQELrhLSlXbro2PRhytynOR2i9zvXBQkkmkObBQtw5jEWMxIKQbtXN4ckRoq
ohvQ==
X-Forwarded-Encrypted: i=1; AJvYcCX6im7Ks2lxOniwnKW3wppaot8nGJ/Pi4lvRnfYYnaDqAoNHs4moynN0VVBeOC6eDmRpwIRSJM=@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YwdcH8YvZiHinO+QLqIBIqVVVcHdeGdNvuj1Tqrhx7RwfG7N1DD
fAHUt2KaeBmYokjxO68ASA3LCEN4nPdPJvdYWsk+XrnDguouSJMBiWMx0xwXm0EV4N/LgIJytAs
duUP4H7L5ZpvQuCYabjg0MZrLCo0=
X-Google-Smtp-Source: AGHT+IEnF053b15ALAfLcVY49tWFFajBKOyxHUoFBFTktIfIEjyhL8q/XrJtt+lsBdSkErWT08CWUOfSbPDKRR+w1p4=
X-Received: by 2002:a05:620a:3904:b0:7ac:dd88:cc80 with SMTP id
af79cd13be357-7b35a47efd9mr334321985a.8.1731560178322; Wed, 13 Nov 2024
20:56:18 -0800 (PST)
MIME-Version: 1.0
From: James Furry
Date: Wed, 13 Nov 2024 20:56:05 -0800
Message-ID:
Subject: RE: LOW INTEREST RATE
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000005612c00626d8456f"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings, We understand that your industry or business may
require a large sum of money to invest in growth, expansion, or other significant
projects. That's why we're reaching out to offer our financing soluti [...]
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.222.173 listed in will-spam-for-food.eu.org]
[209.85.222.173 listed in will-spam-for-food.eu.org]
[209.85.222.173 listed in will-spam-for-food.eu.org]
[209.85.222.173 listed in will-spam-for-food.eu.org]
[209.85.222.173 listed in will-spam-for-food.eu.org]
[209.85.222.173 listed in will-spam-for-food.eu.org]
[209.85.222.173 listed in will-spam-for-food.eu.org]
[209.85.222.173 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.222.173 listed in dnsbl.ahbl.org]
[209.85.222.173 listed in dnsbl.ahbl.org]
[209.85.222.173 listed in dnsbl.ahbl.org]
[209.85.222.173 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.222.173 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.222.173 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.222.173 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.222.173 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.173 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.173 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[jfurry1975(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[jfurry1975(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
Subject: {SPAM?} RE: LOW INTEREST RATE
--0000000000005612c00626d8456f
Content-Type: text/plain; charset="UTF-8"
Greetings,
We understand that your industry or business may require a large sum of
money to invest in growth, expansion, or other significant projects. That's
why we're reaching out to offer our financing solutions to help you achieve
your goals.
I am a financial Facilitator, I have a number of core investors at hand who
are ready to provide high-value loans to businesses and industries across
various sectors. We offer flexible repayment terms, competitive/lower
interest rates, and customized loan packages to meet your specific needs.
Whether you're looking to fund an acquisition, purchase new equipment, or
invest in marketing initiatives, we have the resources to support you. We
understand that securing a large loan can be a daunting process, but we
promise to work closely with you to make the process as smooth as possible.
If you're interested in learning more about our financing options or have
questions, please don't hesitate to contact us.
Thank you for your time, and we look forward to the opportunity to support
your business.
Best regards,
Furry James.
Financial Facilitators
--0000000000005612c00626d8456f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Greetings,
We understand that your industry or busi=
ness may require a large sum of money to invest in growth, expansion, or ot=
her significant projects. That's why we're reaching out to offer ou=
r financing solutions to help you achieve your goals.
I am a financi=
al=C2=A0Facilitator, I have a number of core investors at hand who are read=
y=C2=A0to provide high-value loans to businesses and industries across vari=
ous sectors. We offer flexible repayment terms, competitive/lower interest =
rates, and customized loan packages to meet your specific needs.
Whe=
ther you're looking to fund an acquisition, purchase new equipment, or =
invest in marketing initiatives, we have the resources to support you. We u=
nderstand that securing a large loan can be a daunting process, but we prom=
ise to work closely with you to make the process as smooth as possible.
=
If you're interested in learning more about our financing options o=
r have questions, please don't hesitate to contact us.
Thank you=
for your time, and we look forward to the opportunity to support your busi=
ness.
Best regards,
Furry James.
We understand that your industry or busi=
ness may require a large sum of money to invest in growth, expansion, or ot=
her significant projects. That's why we're reaching out to offer ou=
r financing solutions to help you achieve your goals.
I am a financi=
al=C2=A0Facilitator, I have a number of core investors at hand who are read=
y=C2=A0to provide high-value loans to businesses and industries across vari=
ous sectors. We offer flexible repayment terms, competitive/lower interest =
rates, and customized loan packages to meet your specific needs.
Whe=
ther you're looking to fund an acquisition, purchase new equipment, or =
invest in marketing initiatives, we have the resources to support you. We u=
nderstand that securing a large loan can be a daunting process, but we prom=
ise to work closely with you to make the process as smooth as possible.
=
If you're interested in learning more about our financing options o=
r have questions, please don't hesitate to contact us.
Thank you=
for your time, and we look forward to the opportunity to support your busi=
ness.
Best regards,
Furry James.
Financial Facilitato=
rs=C2=A0
rs=C2=A0
--0000000000005612c00626d8456f--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments