Urgency spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 22 May 2022 14:49:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nssUa-000ECF-Qy
for dave@doctor.nl2k.ab.ca;
Sun, 22 May 2022 14:48:00 -0600
Resent-From: The Doctor
Resent-Date: Sun, 22 May 2022 14:48:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f194.google.com ([209.85.210.194]:33293)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nskoo-000BBS-Ch
for doctor@nl2k.ab.ca;
Sun, 22 May 2022 06:36:28 -0600
Received: by mail-pf1-f194.google.com with SMTP id 202so4444704pfu.0
for; Sun, 22 May 2022 05:36:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=E2C1F8rlKnxoG4iasqEa8mt3rudZatV8G4EwW9yIhaw=;
b=Niy6pjcF0sfRM/WAl43ndUMyoylgdpaCqsWjh3EYA8l6WB51S8KnskHYXrUnR0XRcd
TSgmVa7JO/O9EESJNZV7+B6uLTdyhNTHx/6GuMUqUtHgd7iZFVn1Crzk9v48pJTCMg7z
QU1d2qZNRCbo5RYZTQCaKj2XxOjK+LPbrkAqTE1FjCsoJIhSeaLxMbrKuOpABihDvII8
9y1ybeRJukuvAoMQ04+8QN/QvOaaFFKq5CIMT01pQKkrkwDGd9XL2xsLzikAsvHuZoZm
PzkSENUJcYTwamZfiJMrciiNrZDzD66oGPz3jcX9AeH7H79UPloSPZ6CWOVUiQpr5cvu
pthQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=E2C1F8rlKnxoG4iasqEa8mt3rudZatV8G4EwW9yIhaw=;
b=iP465aw0AO+eSFgydtgF01lY2ri2Ic1RIA4ClGTp5TDCbXXlDJMQp8KrjUJvBaP7LT
5QBNWqOqKKm3bgOXuJUQLswcXOSSoJaH7aO6zfsSEt/TzFDF4gAmTVcL+cJhhwX5fMYQ
fVQoxf+magvmsTS9reZY2ShayR1kvwe3FNs+6lWgov74lTXoaAJJXlnHBLzNgACs5SHq
RWhaFLWqdYzEf4Dobtvqum0dzlpOjNbfIUbuXApegDp0tIA4uQnZlLT3AtAuF2XkG5/x
rdyqdKKEuII0dvDzqA5U9e7wqDfvNemY7F/jmDWEqlqc34CmsJozyk/ys4fHc+dwFuhc
vE2w==
X-Gm-Message-State: AOAM530K6Zyct4u/yHXeNBf2xe8xzF7XYqUzyNOlk2guUJ2ax4ZJMIZg
4t/EM/geLcTlvPWhc4wp87QAcmB6pQv0CdfORQ==
X-Google-Smtp-Source: ABdhPJxWDQOt7uRrofXb93+B1FOzWavpGCBm+Z8pkj5QxgkDH8VnjAggG1hy3fr9zNUorFORrJ8Bp3PBM5Wo4cqhxwY=
X-Received: by 2002:a05:6a00:170c:b0:510:865f:bf34 with SMTP id
h12-20020a056a00170c00b00510865fbf34mr19303314pfc.60.1653222958837; Sun, 22
May 2022 05:35:58 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:90b:3e8b:0:0:0:0 with HTTP; Sun, 22 May 2022 05:35:57
-0700 (PDT)
Reply-To: kuntarose0@gmail.com
From: Rose Kunta
Date: Sun, 22 May 2022 13:35:57 +0100
Message-ID:
Subject: From Rose, Please get back now
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 15.7
X-Spam_score_int: 157
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: From Rose Kunta Abidjan Cote d'Ivoire, West Africa. Good day
I am writing this letter in confidence believing that if it is your wish
to help me, I promise you that you will never ever regret helping me after
hearing my situation.
Content analysis details: (15.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
1.0 HK_RANDOM_FROM From username looks random
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.194 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[rrrrrkunta[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[kuntarose0[at]gmail.com]
0.9 URG_BIZ BODY: Contains urgent matter
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} From Rose, Please get back now
>From Rose Kunta
Abidjan Cote d'Ivoire,
West Africa.
Good day
I am writing this letter in confidence believing that if it is your
wish to help me, I promise you that you will never ever regret helping
me after hearing my situation.
My name is Miss Rose Kunta, 19 years old. My father and my Mom with my
younger brother was involved in a ghastly motor accident. My Mom and
my younger brother died instantly, while my father later died in the
hospital while he was taking treatment. Before his death, he told me
that he deposited the sum of Three Million, US Dollars with a Bank
here. I have succeeded in locating the bank and also confirmed the
money is in the account. I cannot claim the money myself because i am
not up to the age of 25 which my late father and the bank agreed when
the deposit was made. I urgently need your assistance.I want you to
stand as my guardian and claim the money for me for proper investment
in your country, so that i can come over there to continue with my
education which i stopped.
I will surely compensate you after the transfer has been completed,
for your help and kindness to me.
I will be Waiting anxiously to hear from you.
Please reply me back here kuntarose0@gmail.com
Yours sincerely,
Rose.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 22 May 2022 14:49:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nssUa-000ECF-Qy
for dave@doctor.nl2k.ab.ca;
Sun, 22 May 2022 14:48:00 -0600
Resent-From: The Doctor
Resent-Date: Sun, 22 May 2022 14:48:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f194.google.com ([209.85.210.194]:33293)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nskoo-000BBS-Ch
for doctor@nl2k.ab.ca;
Sun, 22 May 2022 06:36:28 -0600
Received: by mail-pf1-f194.google.com with SMTP id 202so4444704pfu.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=E2C1F8rlKnxoG4iasqEa8mt3rudZatV8G4EwW9yIhaw=;
b=Niy6pjcF0sfRM/WAl43ndUMyoylgdpaCqsWjh3EYA8l6WB51S8KnskHYXrUnR0XRcd
TSgmVa7JO/O9EESJNZV7+B6uLTdyhNTHx/6GuMUqUtHgd7iZFVn1Crzk9v48pJTCMg7z
QU1d2qZNRCbo5RYZTQCaKj2XxOjK+LPbrkAqTE1FjCsoJIhSeaLxMbrKuOpABihDvII8
9y1ybeRJukuvAoMQ04+8QN/QvOaaFFKq5CIMT01pQKkrkwDGd9XL2xsLzikAsvHuZoZm
PzkSENUJcYTwamZfiJMrciiNrZDzD66oGPz3jcX9AeH7H79UPloSPZ6CWOVUiQpr5cvu
pthQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=E2C1F8rlKnxoG4iasqEa8mt3rudZatV8G4EwW9yIhaw=;
b=iP465aw0AO+eSFgydtgF01lY2ri2Ic1RIA4ClGTp5TDCbXXlDJMQp8KrjUJvBaP7LT
5QBNWqOqKKm3bgOXuJUQLswcXOSSoJaH7aO6zfsSEt/TzFDF4gAmTVcL+cJhhwX5fMYQ
fVQoxf+magvmsTS9reZY2ShayR1kvwe3FNs+6lWgov74lTXoaAJJXlnHBLzNgACs5SHq
RWhaFLWqdYzEf4Dobtvqum0dzlpOjNbfIUbuXApegDp0tIA4uQnZlLT3AtAuF2XkG5/x
rdyqdKKEuII0dvDzqA5U9e7wqDfvNemY7F/jmDWEqlqc34CmsJozyk/ys4fHc+dwFuhc
vE2w==
X-Gm-Message-State: AOAM530K6Zyct4u/yHXeNBf2xe8xzF7XYqUzyNOlk2guUJ2ax4ZJMIZg
4t/EM/geLcTlvPWhc4wp87QAcmB6pQv0CdfORQ==
X-Google-Smtp-Source: ABdhPJxWDQOt7uRrofXb93+B1FOzWavpGCBm+Z8pkj5QxgkDH8VnjAggG1hy3fr9zNUorFORrJ8Bp3PBM5Wo4cqhxwY=
X-Received: by 2002:a05:6a00:170c:b0:510:865f:bf34 with SMTP id
h12-20020a056a00170c00b00510865fbf34mr19303314pfc.60.1653222958837; Sun, 22
May 2022 05:35:58 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:90b:3e8b:0:0:0:0 with HTTP; Sun, 22 May 2022 05:35:57
-0700 (PDT)
Reply-To: kuntarose0@gmail.com
From: Rose Kunta
Date: Sun, 22 May 2022 13:35:57 +0100
Message-ID:
Subject: From Rose, Please get back now
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 15.7
X-Spam_score_int: 157
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: From Rose Kunta Abidjan Cote d'Ivoire, West Africa. Good day
I am writing this letter in confidence believing that if it is your wish
to help me, I promise you that you will never ever regret helping me after
hearing my situation.
Content analysis details: (15.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
1.0 HK_RANDOM_FROM From username looks random
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.194 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[rrrrrkunta[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[kuntarose0[at]gmail.com]
0.9 URG_BIZ BODY: Contains urgent matter
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} From Rose, Please get back now
>From Rose Kunta
Abidjan Cote d'Ivoire,
West Africa.
Good day
I am writing this letter in confidence believing that if it is your
wish to help me, I promise you that you will never ever regret helping
me after hearing my situation.
My name is Miss Rose Kunta, 19 years old. My father and my Mom with my
younger brother was involved in a ghastly motor accident. My Mom and
my younger brother died instantly, while my father later died in the
hospital while he was taking treatment. Before his death, he told me
that he deposited the sum of Three Million, US Dollars with a Bank
here. I have succeeded in locating the bank and also confirmed the
money is in the account. I cannot claim the money myself because i am
not up to the age of 25 which my late father and the bank agreed when
the deposit was made. I urgently need your assistance.I want you to
stand as my guardian and claim the money for me for proper investment
in your country, so that i can come over there to continue with my
education which i stopped.
I will surely compensate you after the transfer has been completed,
for your help and kindness to me.
I will be Waiting anxiously to hear from you.
Please reply me back here kuntarose0@gmail.com
Yours sincerely,
Rose.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments