money spam from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 09 Sep 2022 14:49:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oWklK-000FR0-Uh
for dave@doctor.nl2k.ab.ca;
Fri, 09 Sep 2022 14:38:06 -0600
Resent-From: The Doctor
Resent-Date: Fri, 9 Sep 2022 14:38:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ua1-f46.google.com ([209.85.222.46]:45635)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oWgdU-00096e-Mk
for doctor@doctor.nl2k.ab.ca;
Fri, 09 Sep 2022 10:13:48 -0600
Received: by mail-ua1-f46.google.com with SMTP id a18so800353uak.12
for; Fri, 09 Sep 2022 09:13:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=txGjIaM3LfmxDV9bWB1cnjV5M3E57yF3rztzp8u5Chw=;
b=MLN3Ce1UDM7HHnbz5mDD2zureGzndxSSAVj8WPp5i0OWiHmz2TFZaGtDiIVtyyqU8h
fldwgh5DZn4bhFAbn9Gavw/twKmmYJDBuGsRQYuRvCjkHUsfhUkkpj4b1HgG+RW/nJ9+
FWC099IeUyjjoxT2N4bXowPS+HD/FaRPuWLAuvlBso4xrFz6BQFRUkO+DU3r/pd4nsOc
ZdfDVcCvk6EAA4+XwJ0RNe7cqCbo+GirpoCUJV/PrJ81Wch1XcLLfGC06fDbqvgDNAKl
6AQoEPvfYrgAFeDDmhmZsSFG7tCkh5Rps2aRZoRV08QkBN+MG6InrfTF1NnLJm6Okxky
1bHg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=txGjIaM3LfmxDV9bWB1cnjV5M3E57yF3rztzp8u5Chw=;
b=8IreEoDLCvI6E33NXQwPBjp1/lg1/FHArRkUX3jR6SIZH3dAfefeI3sfgHRi+U4+UU
bQ0KjQ0XtHkY2Wlu+6+8wxP4+MeoLvHrmFcPX9En0zFLx4L8UkUmQsL7JC8YvM5zgejm
8IuJ1MIMPTONuvpne67hpejwJHbmU6A711P09n9TaHKKc259UwG6fvyca3sVLRIjGDRV
FeeY/DjcY0yh5DyMusLhA4E4qRDmCJCze6PXRaA/pvYu+brA5zQohpSWlunLZ4zNuW0T
lNscE6BRkOtYSRHivqWuA8gStq8i8qz0AmewaBibLHF4BcNl2cr2sZjhg3BBq4VWy9my
a6sQ==
X-Gm-Message-State: ACgBeo3bot3jGsRw+63kHpotmIziNpswD1mvsCXS4Jtn7AlL7bq/ejar
MYmz/qqNcXho5RyRqMn22OCCJGwbzW1NTsb9Y7w=
X-Google-Smtp-Source: AA6agR4pZUKUYl39lxJSOfoeDtTaMxXBlPo1PgfD6n7H0x9Y6dICvLoyw+L1DEiArnTX7t/YJdNClBM1Zr3utEul65Q=
X-Received: by 2002:ab0:32d1:0:b0:3ab:7f86:2121 with SMTP id
f17-20020ab032d1000000b003ab7f862121mr5263247uao.86.1662739998281; Fri, 09
Sep 2022 09:13:18 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a59:ca08:0:b0:2d2:736d:758 with HTTP; Fri, 9 Sep 2022
09:13:17 -0700 (PDT)
Reply-To: werinammawussi@gmail.com
From: Werinam Mawussi
Date: Fri, 9 Sep 2022 18:13:17 +0200
Message-ID:
Subject: Important Notification
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.8
X-Spam_score_int: 78
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am bringing this notice to your attention in respect of
the death of a client of mine that has the same surname as you and his fund
valued at $19.9M to be paid to you.contact me at werinammawussi@gm [...]
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[christopher.mulei12[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.46 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[christopher.mulei12[at]gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Important Notification
I am bringing this notice to your attention in respect of the death of
a client of mine that has the same surname as you and his fund valued
at $19.9M to be paid to you.contact me at werinammawussi@gmail.com for
more details.
Yours Sincerely,
Werinam Mawussi,
Attorney At Law.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 09 Sep 2022 14:49:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oWklK-000FR0-Uh
for dave@doctor.nl2k.ab.ca;
Fri, 09 Sep 2022 14:38:06 -0600
Resent-From: The Doctor
Resent-Date: Fri, 9 Sep 2022 14:38:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ua1-f46.google.com ([209.85.222.46]:45635)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oWgdU-00096e-Mk
for doctor@doctor.nl2k.ab.ca;
Fri, 09 Sep 2022 10:13:48 -0600
Received: by mail-ua1-f46.google.com with SMTP id a18so800353uak.12
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=txGjIaM3LfmxDV9bWB1cnjV5M3E57yF3rztzp8u5Chw=;
b=MLN3Ce1UDM7HHnbz5mDD2zureGzndxSSAVj8WPp5i0OWiHmz2TFZaGtDiIVtyyqU8h
fldwgh5DZn4bhFAbn9Gavw/twKmmYJDBuGsRQYuRvCjkHUsfhUkkpj4b1HgG+RW/nJ9+
FWC099IeUyjjoxT2N4bXowPS+HD/FaRPuWLAuvlBso4xrFz6BQFRUkO+DU3r/pd4nsOc
ZdfDVcCvk6EAA4+XwJ0RNe7cqCbo+GirpoCUJV/PrJ81Wch1XcLLfGC06fDbqvgDNAKl
6AQoEPvfYrgAFeDDmhmZsSFG7tCkh5Rps2aRZoRV08QkBN+MG6InrfTF1NnLJm6Okxky
1bHg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=txGjIaM3LfmxDV9bWB1cnjV5M3E57yF3rztzp8u5Chw=;
b=8IreEoDLCvI6E33NXQwPBjp1/lg1/FHArRkUX3jR6SIZH3dAfefeI3sfgHRi+U4+UU
bQ0KjQ0XtHkY2Wlu+6+8wxP4+MeoLvHrmFcPX9En0zFLx4L8UkUmQsL7JC8YvM5zgejm
8IuJ1MIMPTONuvpne67hpejwJHbmU6A711P09n9TaHKKc259UwG6fvyca3sVLRIjGDRV
FeeY/DjcY0yh5DyMusLhA4E4qRDmCJCze6PXRaA/pvYu+brA5zQohpSWlunLZ4zNuW0T
lNscE6BRkOtYSRHivqWuA8gStq8i8qz0AmewaBibLHF4BcNl2cr2sZjhg3BBq4VWy9my
a6sQ==
X-Gm-Message-State: ACgBeo3bot3jGsRw+63kHpotmIziNpswD1mvsCXS4Jtn7AlL7bq/ejar
MYmz/qqNcXho5RyRqMn22OCCJGwbzW1NTsb9Y7w=
X-Google-Smtp-Source: AA6agR4pZUKUYl39lxJSOfoeDtTaMxXBlPo1PgfD6n7H0x9Y6dICvLoyw+L1DEiArnTX7t/YJdNClBM1Zr3utEul65Q=
X-Received: by 2002:ab0:32d1:0:b0:3ab:7f86:2121 with SMTP id
f17-20020ab032d1000000b003ab7f862121mr5263247uao.86.1662739998281; Fri, 09
Sep 2022 09:13:18 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a59:ca08:0:b0:2d2:736d:758 with HTTP; Fri, 9 Sep 2022
09:13:17 -0700 (PDT)
Reply-To: werinammawussi@gmail.com
From: Werinam Mawussi
Date: Fri, 9 Sep 2022 18:13:17 +0200
Message-ID:
Subject: Important Notification
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.8
X-Spam_score_int: 78
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am bringing this notice to your attention in respect of
the death of a client of mine that has the same surname as you and his fund
valued at $19.9M to be paid to you.contact me at werinammawussi@gm [...]
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[christopher.mulei12[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.46 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[christopher.mulei12[at]gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Important Notification
I am bringing this notice to your attention in respect of the death of
a client of mine that has the same surname as you and his fund valued
at $19.9M to be paid to you.contact me at werinammawussi@gmail.com for
more details.
Yours Sincerely,
Werinam Mawussi,
Attorney At Law.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments