Urgency spam Part 3
Posted by Dave Yadallee on0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mrmaqsoodahmed60(at)gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.6 J_CHICKENPOX_61 BODY: 6alpha-pock-1alpha
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.187 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.187 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.187 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.187 listed in wl.mailspike.net]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list
manager
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.187 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.128.187 listed in bl.score.senderscore.com]
Subject: {SPAM?} REPLY URGENTLY
--00000000000033dd61064e7b6145
Content-Type: text/plain; charset="UTF-8"
Dear Friend,I know this means of communication may not be morally right to
you as a person but I also have had a great thought about it and I have
come to this conclusion which I am about to share with you.
INTRODUCTION: I am Mr. Maqsood Ahmed a banker and in one way or the other
was hoping you will cooperate with me as a partner in a project of
transferring an abandoned fund of a late customer of the bank worth of
$18,000,000 (Eighteen Million Dollars US).
This will be disbursed or shared between the both of us in these
percentages, 55% for me and 45% for you. Contact me immediately if that is
alright for you so that we can enter in agreement before we start
processing for the transfer of the funds. If you are satisfied with this
proposal, please provide the below details for the Mutual Confidentiality
Agreement:
(1) Full Name and Address...
(2) Private telephone number...
(3) Your Age...
(4) Nationalities...
(5) Occupations..
(6) A scan copy of your identification,
I wait for your response so that we can commence on this transaction as
soon as possible.
Regards,
Mr. Maqsood Ahmed.
--
You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.
To view this discussion, visit https://groups.google.com/d/msgid/dece15-912025586/CA%2BU7FrBD6j7FpPqv8f-X1ARxyYVd8ZCTnN31qEgwy3U4PhQE3Q%40mail.gmail.com.
--00000000000033dd61064e7b6145
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Dear Friend,I know this means of communication may not=
be morally right to you as a person but I also have had a great thought ab=
out it and I have come to this conclusion which I am about to share with yo=
u.
=C2=A0
INTRODUCTION: I am Mr. Maqsood Ahmed a banker and in one wa=
y or the other was hoping you will cooperate with me as a partner in a proj=
ect of transferring an abandoned fund of a late customer of the bank worth =
of $18,000,000 (Eighteen Million Dollars US).
=C2=A0
This will be dis=
bursed or shared between the both of us in these percentages, 55% for me an=
d 45% for you. Contact me immediately if that is alright for you so that we=
can enter in agreement before we start processing for the transfer of the =
funds. If you are satisfied with this proposal, please provide the below de=
tails for the Mutual Confidentiality Agreement:
=C2=A0
(1) Full Name =
and Address...
(2) Private telephone number...
(3) Your Age...
(4)=
Nationalities...
(5) Occupations..
(6) A scan copy of your identific=
ation,
=C2=A0
I wait for your response so that we can commence on thi=
s transaction as soon as possible.
Regards,
Mr. Maqsood Ahmed.
>
--
You received this message because you are subscribed to the Google Groups &=
quot;Dece15-912025586" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to de=
ce15-912025586+unsubscribe@googlegroups.com.
To view this discussion, visit
/dece15-912025586/CA%2BU7FrBD6j7FpPqv8f-X1ARxyYVd8ZCTnN31qEgwy3U4PhQE3Q%40m=
ail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google=
.com/d/msgid/dece15-912025586/CA%2BU7FrBD6j7FpPqv8f-X1ARxyYVd8ZCTnN31qEgwy3=
U4PhQE3Q%40mail.gmail.com.
--00000000000033dd61064e7b6145--