Urgency spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 22 Aug 2022 07:11:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oQ7CD-000Ed8-HJ
for dave@doctor.nl2k.ab.ca;
Mon, 22 Aug 2022 07:10:25 -0600
Resent-From: The Doctor
Resent-Date: Mon, 22 Aug 2022 07:10:25 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ua1-f68.google.com ([209.85.222.68]:44715)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oQ4yq-0002YV-4c
for doctor@doctor.nl2k.ab.ca;
Mon, 22 Aug 2022 04:48:34 -0600
Received: by mail-ua1-f68.google.com with SMTP id d15so4143986uak.11
for; Mon, 22 Aug 2022 03:48:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=hVoPx4feUzG26W5InovkrRf1vJ8ssGkDRfR+ZIZA11Q=;
b=HVT00tVAN5O7Gen07sB92D4KHfcLiWBMmiN0pbJ1jmvJJYsVOSqKvGza3Esohup74Z
gGpHOVSPlCEcN5nU4742WAPwnjQTBWUWgP5bGksS4853iN3qFesZfUegTNMs1dJpzx8w
ap5KZgJh/ShxA0mgnfKmHgprddxP7lkJNSITzdJ1/rEDGgQTr/SrvY3ASC+A3noE1kDe
YwkIkI33b5b7fy+919khqkXDTKYpKTm//Q3LeoPOMcJItkdY7HIqYW2Jph8eKHxXKi29
5Q/tSN2TFHNDQH3QE/AqYWNqxa2VtRHsFlRj9KGlkYJhiAqKP/7ZLRT1OepT3D+kaDQw
iqVQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=hVoPx4feUzG26W5InovkrRf1vJ8ssGkDRfR+ZIZA11Q=;
b=cD2/nHcGZ9+wl9Z1ZO0XYGdDFBkZPLgubfG2tQM2u7D0StW9SK+3n82hwnrZ5bAusw
VR7UHqQBsBPxC5799BO5RoE254X2nPuRKaIDWJZu6x+wCBiOxJeFGJQfpCzWYTUaqnke
3g7FuhitUNKWyVK7clvZO4lJruF9+hVh7L/0mpPAmGfvFh5bTCVeitzE1Q2F0lL8RtlL
y9xPC6IMeTDYpusgrlqUDrgqausdCAQopVsfz0oqD+PUwF4CMN4fJy43NSdUPxNb2jnJ
rGQqArRc2bwQqOABd1d63cs0evSuHjrnk/tex50f76mxIMb/phm4nutBF+NBSnoxNlU4
6PKw==
X-Gm-Message-State: ACgBeo33Zp1Mnv3ZPlt+RNTfh7PR7i3VCZo3c1awoODsxhmm/ig2aXbn
JMGxDdwqGMC+X/xf/MOii3GPAKgGtLju65qUeZM=
X-Google-Smtp-Source: AA6agR6IVUs8k/J7QI5bSzJJcB26IwJ4+OHD7YlMXt3+q17Ry481EhXhyrPtcxbTIJlR6bUIu9i9GsfF49Vpz9fMEaY=
X-Received: by 2002:ab0:30ca:0:b0:397:6ac7:9465 with SMTP id
c10-20020ab030ca000000b003976ac79465mr7048474uam.61.1661165284798; Mon, 22
Aug 2022 03:48:04 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a59:d8d0:0:b0:2e3:4535:e14 with HTTP; Mon, 22 Aug 2022
03:48:04 -0700 (PDT)
Reply-To: mrsaifemohammed2018@outlook.fr
From: Mr Saife Mohammed
Date: Mon, 22 Aug 2022 10:48:04 +0000
Message-ID:
Subject: VERY URGENT
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 16.7
X-Spam_score_int: 167
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello Dear, How are you today with your family, Hope all is
well?. Please, I would like you to give an urgent attention to this proposal.
I have a very lucrative business transaction which requires your utmost di
[...]
Content analysis details: (16.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.68 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrsaifemohammed12[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mrsaifemohammed12[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrsaifemohammed2018[at]outlook.fr]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
2.6 HK_SCAM_N13 BODY: No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} VERY URGENT
Hello Dear,
How are you today with your family, Hope all is well?. Please, I would
like you to give an urgent attention to this proposal.
I have a very lucrative business transaction which requires your
utmost discretion.
Though, I know it would come to you at uttermost surprise. I am Mr.
Saife Mohammed, A banker by profession.
Please, I want to transfer the sum of ($15.5M) dollars into your bank
account. This business is 100% risk free.
Your share will be 40% while 60% for me.
E-mail Address: (mrsaifemohammed2018@outlook.fr)
Thanks for your anticipated co-operation.
Best regards.
Mr. Saife Mohammed,
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 22 Aug 2022 07:11:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oQ7CD-000Ed8-HJ
for dave@doctor.nl2k.ab.ca;
Mon, 22 Aug 2022 07:10:25 -0600
Resent-From: The Doctor
Resent-Date: Mon, 22 Aug 2022 07:10:25 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ua1-f68.google.com ([209.85.222.68]:44715)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oQ4yq-0002YV-4c
for doctor@doctor.nl2k.ab.ca;
Mon, 22 Aug 2022 04:48:34 -0600
Received: by mail-ua1-f68.google.com with SMTP id d15so4143986uak.11
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=hVoPx4feUzG26W5InovkrRf1vJ8ssGkDRfR+ZIZA11Q=;
b=HVT00tVAN5O7Gen07sB92D4KHfcLiWBMmiN0pbJ1jmvJJYsVOSqKvGza3Esohup74Z
gGpHOVSPlCEcN5nU4742WAPwnjQTBWUWgP5bGksS4853iN3qFesZfUegTNMs1dJpzx8w
ap5KZgJh/ShxA0mgnfKmHgprddxP7lkJNSITzdJ1/rEDGgQTr/SrvY3ASC+A3noE1kDe
YwkIkI33b5b7fy+919khqkXDTKYpKTm//Q3LeoPOMcJItkdY7HIqYW2Jph8eKHxXKi29
5Q/tSN2TFHNDQH3QE/AqYWNqxa2VtRHsFlRj9KGlkYJhiAqKP/7ZLRT1OepT3D+kaDQw
iqVQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=hVoPx4feUzG26W5InovkrRf1vJ8ssGkDRfR+ZIZA11Q=;
b=cD2/nHcGZ9+wl9Z1ZO0XYGdDFBkZPLgubfG2tQM2u7D0StW9SK+3n82hwnrZ5bAusw
VR7UHqQBsBPxC5799BO5RoE254X2nPuRKaIDWJZu6x+wCBiOxJeFGJQfpCzWYTUaqnke
3g7FuhitUNKWyVK7clvZO4lJruF9+hVh7L/0mpPAmGfvFh5bTCVeitzE1Q2F0lL8RtlL
y9xPC6IMeTDYpusgrlqUDrgqausdCAQopVsfz0oqD+PUwF4CMN4fJy43NSdUPxNb2jnJ
rGQqArRc2bwQqOABd1d63cs0evSuHjrnk/tex50f76mxIMb/phm4nutBF+NBSnoxNlU4
6PKw==
X-Gm-Message-State: ACgBeo33Zp1Mnv3ZPlt+RNTfh7PR7i3VCZo3c1awoODsxhmm/ig2aXbn
JMGxDdwqGMC+X/xf/MOii3GPAKgGtLju65qUeZM=
X-Google-Smtp-Source: AA6agR6IVUs8k/J7QI5bSzJJcB26IwJ4+OHD7YlMXt3+q17Ry481EhXhyrPtcxbTIJlR6bUIu9i9GsfF49Vpz9fMEaY=
X-Received: by 2002:ab0:30ca:0:b0:397:6ac7:9465 with SMTP id
c10-20020ab030ca000000b003976ac79465mr7048474uam.61.1661165284798; Mon, 22
Aug 2022 03:48:04 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a59:d8d0:0:b0:2e3:4535:e14 with HTTP; Mon, 22 Aug 2022
03:48:04 -0700 (PDT)
Reply-To: mrsaifemohammed2018@outlook.fr
From: Mr Saife Mohammed
Date: Mon, 22 Aug 2022 10:48:04 +0000
Message-ID:
Subject: VERY URGENT
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 16.7
X-Spam_score_int: 167
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello Dear, How are you today with your family, Hope all is
well?. Please, I would like you to give an urgent attention to this proposal.
I have a very lucrative business transaction which requires your utmost di
[...]
Content analysis details: (16.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.68 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrsaifemohammed12[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mrsaifemohammed12[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrsaifemohammed2018[at]outlook.fr]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
2.6 HK_SCAM_N13 BODY: No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} VERY URGENT
Hello Dear,
How are you today with your family, Hope all is well?. Please, I would
like you to give an urgent attention to this proposal.
I have a very lucrative business transaction which requires your
utmost discretion.
Though, I know it would come to you at uttermost surprise. I am Mr.
Saife Mohammed, A banker by profession.
Please, I want to transfer the sum of ($15.5M) dollars into your bank
account. This business is 100% risk free.
Your share will be 40% while 60% for me.
E-mail Address: (mrsaifemohammed2018@outlook.fr)
Thanks for your anticipated co-operation.
Best regards.
Mr. Saife Mohammed,
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments