MOre gullibe money spam from GMail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 28 May 2022 15:01:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nv3Xf-000HIi-VA
for dave@doctor.nl2k.ab.ca;
Sat, 28 May 2022 15:00:11 -0600
Resent-From: The Doctor
Resent-Date: Sat, 28 May 2022 15:00:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wr1-f67.google.com ([209.85.221.67]:46820)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nuzYd-0000tQ-1n
for sales@nk.ca;
Sat, 28 May 2022 10:44:58 -0600
Received: by mail-wr1-f67.google.com with SMTP id d26so3865301wrb.13
for; Sat, 28 May 2022 09:44:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=q0NOor8eIg/ea3rdbLnGhkBMqP4RNhpkxe1nfNB8SwY=;
b=e4/EGaMsSygaUfR52F8K1M/sX/tkaOcpgN7I2TNq9FQSeccYix8heiktbPUfFEsGHh
0I7lZTvpbO00hJ7Wp49kv6XuAjRr++xw2asGqhw8SjQuPunzEvi/ndBf/7pfREjyCDzo
jpKmN5HJ/aA5yftkKoJS0Ft6f5WiXZC8nWmCiybjoeApxIVjKoKkt9TujdIl6Xe8uEdl
SR5qiRu/9OFgKALU4T+q2zLCfKDADXSbUYG6Y8b1nSWrop4l6PogLaNn/cz5wvZkv10C
jAX+stdn7uLUX6Ksp3W/Ue/f/+c5xwVrNlWUEYWqkx3ZP8/Yc3rPagQ9dPk0SC9p25dE
yUSQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=q0NOor8eIg/ea3rdbLnGhkBMqP4RNhpkxe1nfNB8SwY=;
b=OdUpcbw49udXnw0Y/ZvyogmD6fe/OMlv8pxvEFut/AslOg2KYl0YTOZStEYH/LzdCW
DXexymC64fn4NJcevixkDbi9pjMB1wP94kX+gUJ8fp6GyeMgTf9pcFmmdKit9Sm1OWFu
L5Sfm1NO5h3WmL/X01kel7YAGaYJrUkrgPFNstZAa0BBjqROj7Zj07tbw2zV/+67MdHn
Gn3N5qAQl6ywxCJoAfcj3f7V29hPUu71GHvsjpm5uUFoAh6Z+PjwvnQCmRfGCmFRnVzR
TWtzMad9xBoekS+w1TRc9gLSfxJZTY1pCbw/HPp8/mKKxj7BZPpnnLWidEtggZvZ2FzR
tCfg==
X-Gm-Message-State: AOAM533DMhiE1+dVvvDLre3g+4VIn/45MwfEOO+NaVXP1svan0/FAFYV
18+xdX/AajW4sh6EccD/okYzBMLRyFcVHe1MgVU=
X-Google-Smtp-Source: ABdhPJw2Hwv+7TQMsFApNTRWvf9y0SCWeC+YVFA8muPz6GCbYdjIRc3vZURdxNVJJ4hFDugv0WTIcbksbLlqL0jw0ik=
X-Received: by 2002:a5d:610f:0:b0:210:e8b:7890 with SMTP id
v15-20020a5d610f000000b002100e8b7890mr9893058wrt.411.1653756271413; Sat, 28
May 2022 09:44:31 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6000:1082:0:0:0:0 with HTTP; Sat, 28 May 2022 09:44:30
-0700 (PDT)
Reply-To: wallace.robert46@yahoo.com
From: "Robert Wallace."
Date: Sat, 28 May 2022 18:44:30 +0200
Message-ID:
Subject: Re: Re: Urgent Respond Needed.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: sales@nk.ca
X-Spam_score: 7.6
X-Spam_score_int: 76
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Hello. This is a personal email directed to you for your
consideration alone. I request that it remain and be treated as such only.
Content analysis details: (7.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.67 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[bryonhher[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[wallace.robert46[at]yahoo.com]
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Re: Re: Urgent Respond Needed.
--
Hello.
This is a personal email directed to you for your consideration alone.
I request that it remain and be treated as such only.
My name is Robert Wallace. I'm a Belgian/British Citizen an Attorney. I
have an interesting business proposal for you that will be of immense
benefit to both of us, although this may be hard for you to believe, we
stand to gain 9.7 Million Dollars between us in a matter of weeks. This is
fully legal and 100% genuine. I need you to signify your interest by
replying to my email. Most importantly, I need you to keep whatever
information between us confidential even if you decide not to go along with
me. I will make more details available to you on receipt of your positive
response.
Regards,
Robert Wallace.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 28 May 2022 15:01:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nv3Xf-000HIi-VA
for dave@doctor.nl2k.ab.ca;
Sat, 28 May 2022 15:00:11 -0600
Resent-From: The Doctor
Resent-Date: Sat, 28 May 2022 15:00:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wr1-f67.google.com ([209.85.221.67]:46820)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nuzYd-0000tQ-1n
for sales@nk.ca;
Sat, 28 May 2022 10:44:58 -0600
Received: by mail-wr1-f67.google.com with SMTP id d26so3865301wrb.13
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=q0NOor8eIg/ea3rdbLnGhkBMqP4RNhpkxe1nfNB8SwY=;
b=e4/EGaMsSygaUfR52F8K1M/sX/tkaOcpgN7I2TNq9FQSeccYix8heiktbPUfFEsGHh
0I7lZTvpbO00hJ7Wp49kv6XuAjRr++xw2asGqhw8SjQuPunzEvi/ndBf/7pfREjyCDzo
jpKmN5HJ/aA5yftkKoJS0Ft6f5WiXZC8nWmCiybjoeApxIVjKoKkt9TujdIl6Xe8uEdl
SR5qiRu/9OFgKALU4T+q2zLCfKDADXSbUYG6Y8b1nSWrop4l6PogLaNn/cz5wvZkv10C
jAX+stdn7uLUX6Ksp3W/Ue/f/+c5xwVrNlWUEYWqkx3ZP8/Yc3rPagQ9dPk0SC9p25dE
yUSQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=q0NOor8eIg/ea3rdbLnGhkBMqP4RNhpkxe1nfNB8SwY=;
b=OdUpcbw49udXnw0Y/ZvyogmD6fe/OMlv8pxvEFut/AslOg2KYl0YTOZStEYH/LzdCW
DXexymC64fn4NJcevixkDbi9pjMB1wP94kX+gUJ8fp6GyeMgTf9pcFmmdKit9Sm1OWFu
L5Sfm1NO5h3WmL/X01kel7YAGaYJrUkrgPFNstZAa0BBjqROj7Zj07tbw2zV/+67MdHn
Gn3N5qAQl6ywxCJoAfcj3f7V29hPUu71GHvsjpm5uUFoAh6Z+PjwvnQCmRfGCmFRnVzR
TWtzMad9xBoekS+w1TRc9gLSfxJZTY1pCbw/HPp8/mKKxj7BZPpnnLWidEtggZvZ2FzR
tCfg==
X-Gm-Message-State: AOAM533DMhiE1+dVvvDLre3g+4VIn/45MwfEOO+NaVXP1svan0/FAFYV
18+xdX/AajW4sh6EccD/okYzBMLRyFcVHe1MgVU=
X-Google-Smtp-Source: ABdhPJw2Hwv+7TQMsFApNTRWvf9y0SCWeC+YVFA8muPz6GCbYdjIRc3vZURdxNVJJ4hFDugv0WTIcbksbLlqL0jw0ik=
X-Received: by 2002:a5d:610f:0:b0:210:e8b:7890 with SMTP id
v15-20020a5d610f000000b002100e8b7890mr9893058wrt.411.1653756271413; Sat, 28
May 2022 09:44:31 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6000:1082:0:0:0:0 with HTTP; Sat, 28 May 2022 09:44:30
-0700 (PDT)
Reply-To: wallace.robert46@yahoo.com
From: "Robert Wallace."
Date: Sat, 28 May 2022 18:44:30 +0200
Message-ID:
Subject: Re: Re: Urgent Respond Needed.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: sales@nk.ca
X-Spam_score: 7.6
X-Spam_score_int: 76
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Hello. This is a personal email directed to you for your
consideration alone. I request that it remain and be treated as such only.
Content analysis details: (7.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.67 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[bryonhher[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[wallace.robert46[at]yahoo.com]
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Re: Re: Urgent Respond Needed.
--
Hello.
This is a personal email directed to you for your consideration alone.
I request that it remain and be treated as such only.
My name is Robert Wallace. I'm a Belgian/British Citizen an Attorney. I
have an interesting business proposal for you that will be of immense
benefit to both of us, although this may be hard for you to believe, we
stand to gain 9.7 Million Dollars between us in a matter of weeks. This is
fully legal and 100% genuine. I need you to signify your interest by
replying to my email. Most importantly, I need you to keep whatever
information between us confidential even if you decide not to go along with
me. I will make more details available to you on receipt of your positive
response.
Regards,
Robert Wallace.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments