Urgency spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 29 Aug 2022 05:25:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oSXHM-000D7T-4O
for dave@doctor.nl2k.ab.ca;
Sun, 28 Aug 2022 23:25:44 -0600
Resent-From: The Doctor
Resent-Date: Sun, 28 Aug 2022 23:25:44 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f49.google.com ([209.85.218.49]:45671)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oSV9i-0001RZ-61
for doctor@doctor.nl2k.ab.ca;
Sun, 28 Aug 2022 21:09:45 -0600
Received: by mail-ej1-f49.google.com with SMTP id lx1so13063639ejb.12
for; Sun, 28 Aug 2022 20:09:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=9IBKKLgkfhER1wfKS3CqqCBd7PzkoxFQ7y7PLeB7PlI=;
b=YoATawWjhvJI7g3ouyz/CRbYO24XVDwIf+6T1iU2/cQ3kl46N7S/CUkBdQMLAA+tXz
K/xvVsv2wqbIzrUyMRo37zgmEuJOqeCpDi53ybamDYSjj0Gmo+gsb9zC4pCYnKXRxIJy
m/wTkHIqKXPEfw2VhE8JruX2RTBbnYvxksMEgQQqLotoIcY1aYR4wjVuArxNzKYZuqEW
EtGhiPmp3JQj5X5nnQL4wahAQhqd0dE0FIcvi+NV/jX1l72Nt2Oua3s8W1M8vRAQg9jN
WXjdp3mkDZYDxzOLdGDf2/EePSeQdu+qqu01VIshjNX55y6deodgInbAxst2hG2R1QzQ
HOfQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=9IBKKLgkfhER1wfKS3CqqCBd7PzkoxFQ7y7PLeB7PlI=;
b=E9vVmDV+LDyxGenQMIxvU09MhjMF/iS+tDkS2swQIKuRaInm5fUil0nezwXHzkKfBY
1k7n7ejE/Noo9RKAzDYyDkksjMvAIdCCRuAt51zWG4UzH7OOW7qYcKrnI/vU9Q+bUUnx
ey/LqOToQ9QkxKZ3jatzX808u6xo18VbttTBiL4lceEC5a4AP9aDExQ/6jT2ORu5T7pc
T4y93GmcXelliu8gt1+ONvmbWDkTtCRHbk5G2YoMy7zYO/aCYDMiTjFNZTh6k5lv3AHk
aYq3C83jV/3Ch5HpC98SG+v75HizZ+2f/EBt6YoA6eeqGRP4wNXBkTur1llzbfiwTa49
DMAA==
X-Gm-Message-State: ACgBeo1V7yX/rIcFWmWJVKVYb1OawoQn5CcQ/0zl+8Dzn8pBdc70uRr4
Aoc1bSL65lZ3agezbCeetf+StqVBaE1P6KKqK9g=
X-Google-Smtp-Source: AA6agR4OxazLTN2h0/13IRjnuB5IUylSTggwWLbbqBtE8EhWmiMXA65u8HaXtzFlR8cePX3u6ZTwdKEZ2OXBSTScsts=
X-Received: by 2002:a17:907:608b:b0:731:8a9d:5a2d with SMTP id
ht11-20020a170907608b00b007318a9d5a2dmr12037934ejc.443.1661742558681; Sun, 28
Aug 2022 20:09:18 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:906:b04:b0:73d:fcdd:ecdd with HTTP; Sun, 28 Aug 2022
20:09:17 -0700 (PDT)
Reply-To: mrsaifemohammed2018@outlook.fr
From: Mr Saife Mohammed
Date: Mon, 29 Aug 2022 03:09:17 +0000
Message-ID:
Subject: VERY URGENT
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 24.0
X-Spam_score_int: 240
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, How are you today?. Please, I would like you
to give an urgent attention to this proposal. I have a very lucrative business
transaction which requires your utmost discretion. Though, I know it would
c [...]
Content analysis details: (24.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.49 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrezekieljeremiah21[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mrezekieljeremiah21[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrsaifemohammed2018[at]outlook.fr]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.9 URG_BIZ BODY: Contains urgent matter
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.6 HK_SCAM_N13 BODY: No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} VERY URGENT
Dear Friend,
How are you today?. Please, I would like you to give an urgent
attention to this proposal.
I have a very lucrative business transaction which requires your
utmost discretion.
Though, I know it would come to you at uttermost surprise. I am Mr.
Saife Mohammed, A banker by profession.
Please, I want to transfer the sum of ($15.5M) dollars into your bank
account. This business is 100% risk free.
Your share will be 40% while 60% for me.
Full details will be send to you on the receipt of your urgent
response by forwarding the following details bellow:
Here is my private E-mail Address: (mrsaifemohammed2018@outlook.fr)
1. Your Full Name................
2. Your Telephone No..........
3. Your Receiving Country................
4. Your Home Address........
Thanks.
Mr. Saife Mohammed,
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 29 Aug 2022 05:25:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oSXHM-000D7T-4O
for dave@doctor.nl2k.ab.ca;
Sun, 28 Aug 2022 23:25:44 -0600
Resent-From: The Doctor
Resent-Date: Sun, 28 Aug 2022 23:25:44 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f49.google.com ([209.85.218.49]:45671)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oSV9i-0001RZ-61
for doctor@doctor.nl2k.ab.ca;
Sun, 28 Aug 2022 21:09:45 -0600
Received: by mail-ej1-f49.google.com with SMTP id lx1so13063639ejb.12
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=9IBKKLgkfhER1wfKS3CqqCBd7PzkoxFQ7y7PLeB7PlI=;
b=YoATawWjhvJI7g3ouyz/CRbYO24XVDwIf+6T1iU2/cQ3kl46N7S/CUkBdQMLAA+tXz
K/xvVsv2wqbIzrUyMRo37zgmEuJOqeCpDi53ybamDYSjj0Gmo+gsb9zC4pCYnKXRxIJy
m/wTkHIqKXPEfw2VhE8JruX2RTBbnYvxksMEgQQqLotoIcY1aYR4wjVuArxNzKYZuqEW
EtGhiPmp3JQj5X5nnQL4wahAQhqd0dE0FIcvi+NV/jX1l72Nt2Oua3s8W1M8vRAQg9jN
WXjdp3mkDZYDxzOLdGDf2/EePSeQdu+qqu01VIshjNX55y6deodgInbAxst2hG2R1QzQ
HOfQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=9IBKKLgkfhER1wfKS3CqqCBd7PzkoxFQ7y7PLeB7PlI=;
b=E9vVmDV+LDyxGenQMIxvU09MhjMF/iS+tDkS2swQIKuRaInm5fUil0nezwXHzkKfBY
1k7n7ejE/Noo9RKAzDYyDkksjMvAIdCCRuAt51zWG4UzH7OOW7qYcKrnI/vU9Q+bUUnx
ey/LqOToQ9QkxKZ3jatzX808u6xo18VbttTBiL4lceEC5a4AP9aDExQ/6jT2ORu5T7pc
T4y93GmcXelliu8gt1+ONvmbWDkTtCRHbk5G2YoMy7zYO/aCYDMiTjFNZTh6k5lv3AHk
aYq3C83jV/3Ch5HpC98SG+v75HizZ+2f/EBt6YoA6eeqGRP4wNXBkTur1llzbfiwTa49
DMAA==
X-Gm-Message-State: ACgBeo1V7yX/rIcFWmWJVKVYb1OawoQn5CcQ/0zl+8Dzn8pBdc70uRr4
Aoc1bSL65lZ3agezbCeetf+StqVBaE1P6KKqK9g=
X-Google-Smtp-Source: AA6agR4OxazLTN2h0/13IRjnuB5IUylSTggwWLbbqBtE8EhWmiMXA65u8HaXtzFlR8cePX3u6ZTwdKEZ2OXBSTScsts=
X-Received: by 2002:a17:907:608b:b0:731:8a9d:5a2d with SMTP id
ht11-20020a170907608b00b007318a9d5a2dmr12037934ejc.443.1661742558681; Sun, 28
Aug 2022 20:09:18 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:906:b04:b0:73d:fcdd:ecdd with HTTP; Sun, 28 Aug 2022
20:09:17 -0700 (PDT)
Reply-To: mrsaifemohammed2018@outlook.fr
From: Mr Saife Mohammed
Date: Mon, 29 Aug 2022 03:09:17 +0000
Message-ID:
Subject: VERY URGENT
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 24.0
X-Spam_score_int: 240
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, How are you today?. Please, I would like you
to give an urgent attention to this proposal. I have a very lucrative business
transaction which requires your utmost discretion. Though, I know it would
c [...]
Content analysis details: (24.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.49 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrezekieljeremiah21[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mrezekieljeremiah21[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrsaifemohammed2018[at]outlook.fr]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.9 URG_BIZ BODY: Contains urgent matter
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.6 HK_SCAM_N13 BODY: No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} VERY URGENT
Dear Friend,
How are you today?. Please, I would like you to give an urgent
attention to this proposal.
I have a very lucrative business transaction which requires your
utmost discretion.
Though, I know it would come to you at uttermost surprise. I am Mr.
Saife Mohammed, A banker by profession.
Please, I want to transfer the sum of ($15.5M) dollars into your bank
account. This business is 100% risk free.
Your share will be 40% while 60% for me.
Full details will be send to you on the receipt of your urgent
response by forwarding the following details bellow:
Here is my private E-mail Address: (mrsaifemohammed2018@outlook.fr)
1. Your Full Name................
2. Your Telephone No..........
3. Your Receiving Country................
4. Your Home Address........
Thanks.
Mr. Saife Mohammed,
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments