Urgency spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 23 May 2022 17:16:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1ntHGO-000Fit-Ur
for dave@doctor.nl2k.ab.ca;
Mon, 23 May 2022 17:15:00 -0600
Resent-From: The Doctor
Resent-Date: Mon, 23 May 2022 17:15:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f50.google.com ([209.85.217.50]:34347)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1ntGlN-000Dz4-Oy
for doctor@doctor.nl2k.ab.ca;
Mon, 23 May 2022 16:43:01 -0600
Received: by mail-vs1-f50.google.com with SMTP id b7so16549929vsq.1
for; Mon, 23 May 2022 15:42:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:sender:from:date:message-id:subject:to;
bh=uETXtarVwZqoq55uxf85U5YgwPdkdqdQ5+5+F1r3C0I=;
b=RvHckCG1eoH1Wn0LcvlVGl0aRZmTkkzD9vCo9Preb5OH6xas9y1OL2uB/1AXk85CMr
Em9313VvMs7cRyckN8i5kq8tWPopAaz/RwIKAsFp2BjJWQtjC9cWp9Iro9X4Hp8mpAoD
3yw8GPnJKeJvQPOpQV9YkQkofAJ0e9I77ZfAb44iYh42kfYwD2gVftuyGhBV5PmV+Skj
Y7da/e3NtSPRP1ZxRTkQeWqHN2UjF76k1Rlv7le/wpPZUBABWSzZ8uDKAWoAL04nFtP/
+SWm4QslfXzPss3pkilGCSdvVmdHKKz5GqqJfYoWOTF7EclIxk7ZWnX54wMXhGOj73r9
6OlA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:sender:from:date
:message-id:subject:to;
bh=uETXtarVwZqoq55uxf85U5YgwPdkdqdQ5+5+F1r3C0I=;
b=Lt7NwXeaJkTlGokhkZKWUA11RIE0MwkWS0F0Hvsu9kFMTxMEIj+LW+Z9vyuvZFWtWf
YxXbwbjFTz7TGMCmMl91Z65iEyJZOLPfITgi+6pBO7y1dfNic+K1tXC1nkP/p+OIGEoB
1xE1pqqMJeYvaUQie2mOjZA9erSDapoRmHdgfPEpQLRie4nh2MHOdsOzSAwmMvgVUvKv
6yH88qVzclayFfjO+3f6jKEaBjbHYTRcIkV0tR0DnIAW+uX51sKbK4CiwvySdD6cZa9C
HzDWDrShrx+NI9OD9XWN+nZHdK1V1wUGzGAKvTugz6Ua7jNNVP1LtUJpJVnEJXmYrYUV
4vKg==
X-Gm-Message-State: AOAM533IvV21/pKWx5c0o1AQvUMptLQU73YXAzmJCo9Zi3TRZ7R8yYkp
YU0xqaO6ddCfLjkJsCQfVShPHkJsOtHqISS4qjo=
X-Google-Smtp-Source: ABdhPJx9gXo6Xogw2ENloN1XgIbts04FiISBMx1i62M163rQ06lUHQnlJWGnF0LhrMnj9EmIkllHmaJm61wti95P9k0=
X-Received: by 2002:a67:dc82:0:b0:325:58cc:51c7 with SMTP id
g2-20020a67dc82000000b0032558cc51c7mr10234065vsk.63.1653345754756; Mon, 23
May 2022 15:42:34 -0700 (PDT)
MIME-Version: 1.0
Reply-To: mihirpat55@gmail.com
Sender: mrrobertdadams780@gmail.com
Received: by 2002:a05:612c:70b:b0:2ba:1307:6c0a with HTTP; Mon, 23 May 2022
15:42:33 -0700 (PDT)
From: "Mr. Mihir Patel"
Date: Mon, 23 May 2022 15:42:33 -0700
X-Google-Sender-Auth: lNWdzOySJv9ehlWbcvHK2EyqRNw
Message-ID:
Subject: Your Response Is Needed
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 12.8
X-Spam_score_int: 128
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings, I am contacting you for us to work together on
a profitable business because you bear the same last name with a late client
of our bank. I want to present you as his true next of kin to inherit his
fu [...]
Content analysis details: (12.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mrrobertdadams780[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.50 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrrobertdadams780[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mihirpat55[at]gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 HK_SCAM No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Your Response Is Needed
Greetings,
I am contacting you for us to work together on a profitable business
because you bear the same last name with a late client of our bank. I
want to present you as his true next of kin to inherit his fund in our
bank. As his account officer I have some necessary documents in my
disposal to achieve this.
I therefore reckoned that you could receive this fund as you are
qualified by your last name. All the legal papers will be processed in
your name as the deceased's true next of kin.
Please revert back to me for further details if you can handle this with me.
Mr. Mihir Patel
Customer relation officer
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 23 May 2022 17:16:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1ntHGO-000Fit-Ur
for dave@doctor.nl2k.ab.ca;
Mon, 23 May 2022 17:15:00 -0600
Resent-From: The Doctor
Resent-Date: Mon, 23 May 2022 17:15:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f50.google.com ([209.85.217.50]:34347)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1ntGlN-000Dz4-Oy
for doctor@doctor.nl2k.ab.ca;
Mon, 23 May 2022 16:43:01 -0600
Received: by mail-vs1-f50.google.com with SMTP id b7so16549929vsq.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:sender:from:date:message-id:subject:to;
bh=uETXtarVwZqoq55uxf85U5YgwPdkdqdQ5+5+F1r3C0I=;
b=RvHckCG1eoH1Wn0LcvlVGl0aRZmTkkzD9vCo9Preb5OH6xas9y1OL2uB/1AXk85CMr
Em9313VvMs7cRyckN8i5kq8tWPopAaz/RwIKAsFp2BjJWQtjC9cWp9Iro9X4Hp8mpAoD
3yw8GPnJKeJvQPOpQV9YkQkofAJ0e9I77ZfAb44iYh42kfYwD2gVftuyGhBV5PmV+Skj
Y7da/e3NtSPRP1ZxRTkQeWqHN2UjF76k1Rlv7le/wpPZUBABWSzZ8uDKAWoAL04nFtP/
+SWm4QslfXzPss3pkilGCSdvVmdHKKz5GqqJfYoWOTF7EclIxk7ZWnX54wMXhGOj73r9
6OlA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:sender:from:date
:message-id:subject:to;
bh=uETXtarVwZqoq55uxf85U5YgwPdkdqdQ5+5+F1r3C0I=;
b=Lt7NwXeaJkTlGokhkZKWUA11RIE0MwkWS0F0Hvsu9kFMTxMEIj+LW+Z9vyuvZFWtWf
YxXbwbjFTz7TGMCmMl91Z65iEyJZOLPfITgi+6pBO7y1dfNic+K1tXC1nkP/p+OIGEoB
1xE1pqqMJeYvaUQie2mOjZA9erSDapoRmHdgfPEpQLRie4nh2MHOdsOzSAwmMvgVUvKv
6yH88qVzclayFfjO+3f6jKEaBjbHYTRcIkV0tR0DnIAW+uX51sKbK4CiwvySdD6cZa9C
HzDWDrShrx+NI9OD9XWN+nZHdK1V1wUGzGAKvTugz6Ua7jNNVP1LtUJpJVnEJXmYrYUV
4vKg==
X-Gm-Message-State: AOAM533IvV21/pKWx5c0o1AQvUMptLQU73YXAzmJCo9Zi3TRZ7R8yYkp
YU0xqaO6ddCfLjkJsCQfVShPHkJsOtHqISS4qjo=
X-Google-Smtp-Source: ABdhPJx9gXo6Xogw2ENloN1XgIbts04FiISBMx1i62M163rQ06lUHQnlJWGnF0LhrMnj9EmIkllHmaJm61wti95P9k0=
X-Received: by 2002:a67:dc82:0:b0:325:58cc:51c7 with SMTP id
g2-20020a67dc82000000b0032558cc51c7mr10234065vsk.63.1653345754756; Mon, 23
May 2022 15:42:34 -0700 (PDT)
MIME-Version: 1.0
Reply-To: mihirpat55@gmail.com
Sender: mrrobertdadams780@gmail.com
Received: by 2002:a05:612c:70b:b0:2ba:1307:6c0a with HTTP; Mon, 23 May 2022
15:42:33 -0700 (PDT)
From: "Mr. Mihir Patel"
Date: Mon, 23 May 2022 15:42:33 -0700
X-Google-Sender-Auth: lNWdzOySJv9ehlWbcvHK2EyqRNw
Message-ID:
Subject: Your Response Is Needed
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 12.8
X-Spam_score_int: 128
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings, I am contacting you for us to work together on
a profitable business because you bear the same last name with a late client
of our bank. I want to present you as his true next of kin to inherit his
fu [...]
Content analysis details: (12.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mrrobertdadams780[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.50 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrrobertdadams780[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mihirpat55[at]gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 HK_SCAM No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Your Response Is Needed
Greetings,
I am contacting you for us to work together on a profitable business
because you bear the same last name with a late client of our bank. I
want to present you as his true next of kin to inherit his fund in our
bank. As his account officer I have some necessary documents in my
disposal to achieve this.
I therefore reckoned that you could receive this fund as you are
qualified by your last name. All the legal papers will be processed in
your name as the deceased's true next of kin.
Please revert back to me for further details if you can handle this with me.
Mr. Mihir Patel
Customer relation officer
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments