urgency spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 27 Jun 2022 15:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1o5vrb-000NLZ-Cq
for dave@doctor.nl2k.ab.ca;
Mon, 27 Jun 2022 15:01:43 -0600
Resent-From: The Doctor
Resent-Date: Mon, 27 Jun 2022 15:01:43 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f169.google.com ([209.85.208.169]:40727)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1o5rK1-000Fzj-8A
for root@nk.ca;
Mon, 27 Jun 2022 10:10:49 -0600
Received: by mail-lj1-f169.google.com with SMTP id b23so11564789ljh.7
for; Mon, 27 Jun 2022 09:10:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:from:date:message-id:subject:to;
bh=uU1SXdw4hPvKNdhQDIZEAxVwhuTPrO4NVZJP+u7dgcE=;
b=gIdO+n8A40NQrbXzvpBva3gc52oTdlfDu3EtgIgG7crdgHwzR7dZqWfuE6s9Qi6nf4
WP4VVyUDnlXJ7xA5UGRZA9YSqMJS8T8ku9Y3QmIARqpmasfm6MQVoaHTV5O+S1SMEyxC
5HnFy0DV9wVeQF3cdL+WPLJrt7/CY+qmz0Raw35if/UdhulyM/cP9nc7/oqI3ILSDK4L
djYLTwiLkC6FHBiCVnzVYd4Zcvtn6+u21fBoU3gcvjD4dzVrrAFaWRj/BRmylhWwrY3t
LZ27pUEf87VPO5nXquapuOLlKdXTlkNnP3yqFul0IEsVMPNYvG+wv2W06LFeFz+LZeup
+uYw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=uU1SXdw4hPvKNdhQDIZEAxVwhuTPrO4NVZJP+u7dgcE=;
b=jle7hwlGzqGOJqKNb9GT6Pf2XGLCIyfgtMEMYBPNhkClL0KK9VBCfZ5pApeAHBLefF
aACvH+lppiwo/DEftzGmjaGVnHEhCqeGo/HiMbIp8QH/CAWlK7YuiQC+LbRsM7yEvt37
IcD5wrSygP8DoauN1wiydq3lWFM62+Ut6HMe/wXpEutHpWREbq1HmTZ112iNEgPwKBfk
H+VkVy7PGxmz3P5T3Kcdx9wzZFtQ9UP97yArLUFH1lgYRRDbcfHtYqacJ45g23alGSSx
ZLWc7AfjypeRntJKMqij/SY9Iqv6Rz2ctnaobP/gpaKlbQa8aLZ2WLd0ZlBRCtxQYXO1
2obg==
X-Gm-Message-State: AJIora88mlmUBJASPmoK5k34yiNzI8+g6JWFlfJC4m9OmWRa7AEj0evO
s33BTMHhxaAkf6sghUiUL3IB1VvTvD/5716q0UY=
X-Google-Smtp-Source: AGRyM1us1yC+iJOhJGVawieQxO0U9OvgQEaMtIBcFnTz5dJ4Eg2+vWhwFIfxXy34n+ASChj9FUxFOKDv2vZBiocCrb0=
X-Received: by 2002:a2e:7805:0:b0:25b:ca27:ffac with SMTP id
t5-20020a2e7805000000b0025bca27ffacmr1248510ljc.415.1656346217299; Mon, 27
Jun 2022 09:10:17 -0700 (PDT)
MIME-Version: 1.0
From: Andrew Santos
Date: Tue, 28 Jun 2022 00:09:51 +0800
Message-ID:
Subject: Re: Finally, your payment is here.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000e8437005e27027f1"
Bcc: root@nk.ca
X-Spam_score: 7.4
X-Spam_score_int: 74
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello I am Andrew Santos, following up on your payment (Next
of Kin / Contract payments) already approved a year ago but I understand
you were not able to claim the same due to the charges that are in [...]
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.169 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[lindarich111[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[lindarich111[at]gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 HK_SCAM No description available.
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Re: Finally, your payment is here.
--000000000000e8437005e27027f1
Content-Type: text/plain; charset="UTF-8"
Hello
I am Andrew Santos, following up on your payment (Next of Kin / Contract
payments) already approved a year ago but I understand you were not able to
claim the same due to the charges that are involved.
You were not able to make the payment hence the funds could not be released
to you.
However, I was contacted to review your case and recommend, if possible,
the outright cancellation of the payment since you were not able to pay the
fees before the release of funds to you either through an ATM card or wire
transfer.
If you are interested to receive your payment kindly confirm the following:
1. Your full names and address
2. Your telephone numbers
3. Any ID
Best Regards,
Andrew Santos
--000000000000e8437005e27027f1
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000e8437005e27027f1--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 27 Jun 2022 15:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1o5vrb-000NLZ-Cq
for dave@doctor.nl2k.ab.ca;
Mon, 27 Jun 2022 15:01:43 -0600
Resent-From: The Doctor
Resent-Date: Mon, 27 Jun 2022 15:01:43 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f169.google.com ([209.85.208.169]:40727)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1o5rK1-000Fzj-8A
for root@nk.ca;
Mon, 27 Jun 2022 10:10:49 -0600
Received: by mail-lj1-f169.google.com with SMTP id b23so11564789ljh.7
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:from:date:message-id:subject:to;
bh=uU1SXdw4hPvKNdhQDIZEAxVwhuTPrO4NVZJP+u7dgcE=;
b=gIdO+n8A40NQrbXzvpBva3gc52oTdlfDu3EtgIgG7crdgHwzR7dZqWfuE6s9Qi6nf4
WP4VVyUDnlXJ7xA5UGRZA9YSqMJS8T8ku9Y3QmIARqpmasfm6MQVoaHTV5O+S1SMEyxC
5HnFy0DV9wVeQF3cdL+WPLJrt7/CY+qmz0Raw35if/UdhulyM/cP9nc7/oqI3ILSDK4L
djYLTwiLkC6FHBiCVnzVYd4Zcvtn6+u21fBoU3gcvjD4dzVrrAFaWRj/BRmylhWwrY3t
LZ27pUEf87VPO5nXquapuOLlKdXTlkNnP3yqFul0IEsVMPNYvG+wv2W06LFeFz+LZeup
+uYw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=uU1SXdw4hPvKNdhQDIZEAxVwhuTPrO4NVZJP+u7dgcE=;
b=jle7hwlGzqGOJqKNb9GT6Pf2XGLCIyfgtMEMYBPNhkClL0KK9VBCfZ5pApeAHBLefF
aACvH+lppiwo/DEftzGmjaGVnHEhCqeGo/HiMbIp8QH/CAWlK7YuiQC+LbRsM7yEvt37
IcD5wrSygP8DoauN1wiydq3lWFM62+Ut6HMe/wXpEutHpWREbq1HmTZ112iNEgPwKBfk
H+VkVy7PGxmz3P5T3Kcdx9wzZFtQ9UP97yArLUFH1lgYRRDbcfHtYqacJ45g23alGSSx
ZLWc7AfjypeRntJKMqij/SY9Iqv6Rz2ctnaobP/gpaKlbQa8aLZ2WLd0ZlBRCtxQYXO1
2obg==
X-Gm-Message-State: AJIora88mlmUBJASPmoK5k34yiNzI8+g6JWFlfJC4m9OmWRa7AEj0evO
s33BTMHhxaAkf6sghUiUL3IB1VvTvD/5716q0UY=
X-Google-Smtp-Source: AGRyM1us1yC+iJOhJGVawieQxO0U9OvgQEaMtIBcFnTz5dJ4Eg2+vWhwFIfxXy34n+ASChj9FUxFOKDv2vZBiocCrb0=
X-Received: by 2002:a2e:7805:0:b0:25b:ca27:ffac with SMTP id
t5-20020a2e7805000000b0025bca27ffacmr1248510ljc.415.1656346217299; Mon, 27
Jun 2022 09:10:17 -0700 (PDT)
MIME-Version: 1.0
From: Andrew Santos
Date: Tue, 28 Jun 2022 00:09:51 +0800
Message-ID:
Subject: Re: Finally, your payment is here.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000e8437005e27027f1"
Bcc: root@nk.ca
X-Spam_score: 7.4
X-Spam_score_int: 74
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello I am Andrew Santos, following up on your payment (Next
of Kin / Contract payments) already approved a year ago but I understand
you were not able to claim the same due to the charges that are in [...]
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.169 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[lindarich111[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[lindarich111[at]gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 HK_SCAM No description available.
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Re: Finally, your payment is here.
--000000000000e8437005e27027f1
Content-Type: text/plain; charset="UTF-8"
Hello
I am Andrew Santos, following up on your payment (Next of Kin / Contract
payments) already approved a year ago but I understand you were not able to
claim the same due to the charges that are involved.
You were not able to make the payment hence the funds could not be released
to you.
However, I was contacted to review your case and recommend, if possible,
the outright cancellation of the payment since you were not able to pay the
fees before the release of funds to you either through an ATM card or wire
transfer.
If you are interested to receive your payment kindly confirm the following:
1. Your full names and address
2. Your telephone numbers
3. Any ID
Best Regards,
Andrew Santos
--000000000000e8437005e27027f1
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello
I am Andrew Santos, following up on your payment =
(Next of Kin / Contract payments) already approved a year ago but I underst=
and you were not able to claim the same due to the charges that are involve=
d.
You were not able to make the payment hence the funds could not be re=
leased to you.
However, I was contacted to review your case and recommen=
d, if possible, the outright cancellation of the payment since you were not=
able to pay the fees before the release of funds to you either through an =
ATM card or wire transfer.
If you are interested to receive your payment=
kindly confirm the following:
1. Your full names and address
2. =
Your telephone numbers
3. Any ID
Best Regards,
Andrew Santos
r>
I am Andrew Santos, following up on your payment =
(Next of Kin / Contract payments) already approved a year ago but I underst=
and you were not able to claim the same due to the charges that are involve=
d.
You were not able to make the payment hence the funds could not be re=
leased to you.
However, I was contacted to review your case and recommen=
d, if possible, the outright cancellation of the payment since you were not=
able to pay the fees before the release of funds to you either through an =
ATM card or wire transfer.
If you are interested to receive your payment=
kindly confirm the following:
1. Your full names and address
2. =
Your telephone numbers
3. Any ID
Best Regards,
Andrew Santos
r>
--000000000000e8437005e27027f1--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments