An
Email with the Subject "Business Proposal!" was
received in one of Scamdex's honeypot email accounts on Tue, 29 Sep 2020 16:55:22 -0700 (PDT)
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as info@spuredge.com.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
opportunitybusinessproposalmailaharaldpaul@gmail.com will dear
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[delivered-to:] => scamdex@gmail.com
[received:] => Array
(
[0] => by 2002:a02:5e45:0:0:0:0:0 with SMTP id h66csp1226513jab; Tue, 29 Sep 2020 16:55:22 -0700 (PDT)
[1] => from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id k2sor15115pjp.31.2020.09.29.16.55.21 for (Google Transport Security); Tue, 29 Sep 2020 16:55:21 -0700 (PDT)
[2] => from 162-241-204-248.unifiedlayer.com ([162.241.204.248]) by gmr-mx.google.com with ESMTPS id mm16si2630pjb.2.2020.09.29.16.55.21 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 29 Sep 2020 16:55:21 -0700 (PDT)
[3] => from h88-150-227-110.host.redstation.co.uk ([88.150.227.110]:65500 helo=spuredge.com) by server.buczilowskic.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1kNPSM-0000Cr-HW for scam@scamdex.com; Tue, 29 Sep 2020 23:54:50 +0000
)
[x-received:] => Array
(
[0] => by 2002:a17:902:988c:b029:d2:2f2a:8aa6 with SMTP id s12-20020a170902988cb02900d22f2a8aa6mr6922219plp.17.1601423721959; Tue, 29 Sep 2020 16:55:21 -0700 (PDT)
[1] => by 2002:a17:90a:ec06:: with SMTP id l6mr31043pjy.66.1601423721802; Tue, 29 Sep 2020 16:55:21 -0700 (PDT)
)
[arc-seal:] => Array
(
[0] => i=2; a=rsa-sha256; t=1601423721; cv=pass; d=google.com; s=arc-20160816; b=Wf7jTIuQ6wqBT/WC74SNN1e7i9TVjT3NgoGVc7qr2k9ziEEjAJNIPB/iIXuORJLZKo C23nvwUYMR9OQSoyu0lU0EfHPFh0nWfl+4Q+AJfyKTZ0cBQ8+IvlaNJ1oPEpp47tx6sm dLROuY9iXDwkTu1mCgLXQpxc3FPMHSOV8/jPa+EISScBI75RXRmc8ScOm57H6afnazoH I+Z1qkJ4LaQBGUkTlHpXHdcQpNHI4EB3Q2+STVBCYzI3vvrzT5DYSUrOVizjWBlNLcHR DnHKm84hTk2a4X3SSaAacjrOy1NIpJWFi0taK8EARZmWQukJy5ghOqtdLM9S8dYmOZM0 omHg==
[1] => i=1; a=rsa-sha256; t=1601423721; cv=none; d=google.com; s=arc-20160816; b=0/vJ+5nzQm+W9Rr98dQ1aULwsYOosar0G6z5Z9FKdhUWdJ2nyd5ij61MHiKreVb18X 3/BxGLS22yiMgX9deorqyl+6YIoFbf9opiyQpbYW5szf5yDsfX/UsvZRC/wdUj29gLnB 2yCQkOy9yWWJ5dou+Th1gYjK1NmAXGkUgpgXpktLS/p7gRbL0xf7XcsVK91iKl6kwmvu E8d1TbMmJ99qh09fQUChsec1zAliuQPvTguLNIkrM/btFrnAgMYK6ElYs2RmEoZnv5k5 6NBvD3RErCqko4AyNCtpz5AEFChaQxynFkRvn+TwwxaNuXFXDH0KieOVcFpcLFHpsyZ+ iW9Q==
)
[arc-message-signature:] => Array
(
[0] => i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:reply-to; bh=Lm/HNnxyJ821K0A9AR+r0EBJCuJqKwdzv2apbRhvOKA=; b=0+qJqQDXboC4fMHx6X+9tVUOP+hg+yOD+D6wnfEgz2ojCjCHEy97nmIlP6vZOArn0O ATOwsewWQeXLNOAvHIdIXexhf2HZ15lLkeHQR5OdoKS5HGS2GvLg3Ar67oxAk/m++fl8 A6yLgsUCjO+OO2p24L2SVpIYdu3fOdmxpsabOGoGC2ONCkmrITdsmXZhV8lvBcu861LH sbIrEMj48o254krTZT6o4zcMcQvMRrX0yHKpu8j0yS5lybsWa6JO3sb5cMZeAYtrCr3a BTmeJs8aQdQ+7sa0ArFp6rvWvUp1m0tUIc9ZvZeYkMzR1eXVhxhNueLQFJ5M1359cqHo mZcw==
[1] => i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:reply-to; bh=Lm/HNnxyJ821K0A9AR+r0EBJCuJqKwdzv2apbRhvOKA=; b=Wd+jQYJXOiuQ7lIG591wrmUEWQWsRuLmJ1gQMUZhrtAd8CtGchNk+UDHqDQwxyPt5b 1wjYFbNdGULb4aB/zFXBDJuElk3UNozRRXGZLDDiOmEpKmonH4Edkpz+cx+GVFRyesWR CDbRmVzvBmGnJwQkpfQBsFduQ1xF30jbXgWBD5c6qfxqxQJ11wVKeOvRVLskrIeaAYVv iMMg3qHMq2HCcd7tBglxX71U88GpDqRoL77LI2jrSA4CGzsEq+RQSKNRQgcmZrRPKx+1 L/K1mGb4uchUmncccYyh1lrEVHEbFIfCmgtdXafaJcUHtwU8hRfAPB4/XYj+Yr96rLk4 xNtA==
)
[arc-authentication-results:] => Array
(
[0] => i=2; mx.google.com; arc=pass (i=1 spf=pass spfdomain=spuredge.com); spf=softfail (google.com: domain of transitioning info@spuredge.com does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=info@spuredge.com
[1] => i=1; gmr-mx.google.com; spf=pass (google.com: domain of info@spuredge.com designates 162.241.204.248 as permitted sender) smtp.mailfrom=info@spuredge.com
)
[return-path:] => Array
(
[0] =>
[1] =>
)
[received-spf:] => Array
(
[0] => softfail (google.com: domain of transitioning info@spuredge.com does not designate 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
[1] => pass (google.com: domain of info@spuredge.com designates 162.241.204.248 as permitted sender) client-ip=162.241.204.248;
)
[authentication-results:] => mx.google.com; arc=pass (i=1 spf=pass spfdomain=spuredge.com); spf=softfail (google.com: domain of transitioning info@spuredge.com does not designate 209.85.220.41 as permitted sender) smtp.mailfrom=info@spuredge.com
[x-google-dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-original-authentication-results:x-gm-message-state:reply-to:from :to:subject:date:message-id:mime-version:content-transfer-encoding; bh=Lm/HNnxyJ821K0A9AR+r0EBJCuJqKwdzv2apbRhvOKA=; b=oRcuBqi4gHkEUIeftLiTNJtUtejIBnQ2sav+lPW+nJvlTEp34ieLsYD9AfMOJpmNEq L7YhFIh6vC+hweFZxxZwMKDYMlUn2Vg++RjmyPpRjov+3Ec2fWNxXCnBRBlGPxOJuEF8 RLIlJlR0Z+u4BzHxSwKF3XwnyB7pnPbVpGw3sYZO0cN4pLo3JDkMBZPEbGP6aDt/LN2F T8o1XcgpqZ/450OQwi9s0QjU/r62lm62+mCWcebuxkA+MmsX2zmsa4KpEgYA2zkKyZeE HV/EDvkEDyLp0q0mWCm8x0QHBvmSXt0EfjW9vFsNPMVFGIcXRmobzCvrxD2qxSC0RSTl csjQ==
[x-original-authentication-results:] => gmr-mx.google.com; spf=pass (google.com: domain of info@spuredge.com designates 162.241.204.248 as permitted sender) smtp.mailfrom=info@spuredge.com
[x-gm-message-state:] => AOAM532suSFlJS8DwV5k/T0nhBWtueLNOK/cDkzkb43FSIOitRe6D8Wj Zmdy/hg/RAV4k+TdOUO0hQRfaPanQcrhJqCTsg==
[x-google-smtp-source:] => ABdhPJzuPp+W1mkirAv2KjfD+CmLLH7JdYf316D3zK5rddqoGFReJG2wFDp/xxxWJG40WXy4xFq7sgcF4C7ioZ1cdGHBtZAjyk0=
[reply-to:] => aharaldpaul@gmail.com
[from:] => info@spuredge.com
[to:] => scam@scamdex.com
[subject:] => Business Proposal!
[date:] => 29 Sep 2020 16:54:46 -0700
[message-id:] => <20200929165446.788B4A951FA5CD6D@spuredge.com>
[mime-version:] => 1.0
[content-type:] => text/html
[content-transfer-encoding:] => quoted-printable
[x-antiabuse:] => Array
(
[0] => This header was added to track abuse, please include it with any abuse report
[1] => Primary Hostname - server.buczilowskic.com
[2] => Original Domain - scamdex.com
[3] => Originator/Caller UID/GID - [47 12] / [47 12]
[4] => Sender Address Domain - spuredge.com
)
[x-get-message-sender-via:] => server.buczilowskic.com: authenticated_id: info@emexleathersuppies.solutions
[x-authenticated-sender:] => server.buczilowskic.com: info@emexleathersuppies.solutions
[x-source:] =>
[x-source-args:] =>
[x-source-dir:] =>
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Dear, I am Harald Paul Alker Research Assistant of Whitman Laboratories Ltd UK . I have a business proposal for you which is worth a substantial amount and will save lives. I would be glad to receive your acknowledgement of this email so I can furnish you more with details of my proposal for your consideration. Please send your reply to my message and give me the opportunity to explain to you in detail what the business is all about by replying back to my private email
aharaldpaul@gmail.com. Note: You have the right to quit by the end of my detailed explanation and you don't feel like moving forward with me. But Trust me, you won't regret it. Harald Paul Alker, Whitman Laboratories Ltd
Dear, I am Harald Paul Alker Research Assistant of Whitman Laboratories Ltd UK . I have a business proposal for you which is worth a substantial amount and will save lives. I would be glad to receive your acknowledgement of this email so I can furnish you more with details of my proposal for your consideration. Please send your reply to my message and give me the opportunity to explain to you in detail what the business is all about by replying back to my private email
aharaldpaul@gmail.com. Note: You have the right to quit by the end of my detailed explanation and you don't feel like moving forward with me. But Trust me, you won't regret it. Harald Paul Alker, Whitman Laboratories Ltd
