Charity Spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jun 2022 15:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o720f-0004Cr-QW

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jun 2022 15:47:37 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jun 2022 15:47:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f67.google.com ([209.85.217.67]:40740)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o6yqc-000Cki-ST

for doctor@doctor.nl2k.ab.ca;

Thu, 30 Jun 2022 12:25:07 -0600

Received: by mail-vs1-f67.google.com with SMTP id q28so55442vsp.7

for ; Thu, 30 Jun 2022 11:24:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:in-reply-to:references:from:date:message-id

:subject:to;

bh=G2yMnG041gZYeaIpg50j66p/8KpxTxhfLNfnIIwtk1o=;

b=CY7AU+/x43TX8ThSZLY8iV9Lh1kH8pt/bOEB3gIbl72gJTtWJ7Cnx1IRPkuQuiW/Yc

JX5moqMq3u1tirfJviaj1evv9yzOcW9jbYZYxjdU9+hJEiHCsAK0KpEvbYP8/GvfkiFo

2elUhdRf7XQVflq3hhcRxt4oIireCbh8035ZmXaoGkRvwOtgWYjsxSoqx1A1RrQYIKzg

BcWr5c6iWS60PFFUBzq0VhJiWPZ2SQoEM9BERdyBU1ZVJQCAG2jOoqLDMF8DXsny3HMJ

h5T2SdnqXFyv3EfOUT8hvIyfQyymp+DEOFY0sGjtnqWu7Bd1i95tX7fUCCDVBEae2eVo

xkTA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:in-reply-to:references

:from:date:message-id:subject:to;

bh=G2yMnG041gZYeaIpg50j66p/8KpxTxhfLNfnIIwtk1o=;

b=SLb/zt3aANPvjC2TOGjqbOg852BWNxMUTSh0/oD5cpBlaAsHSS2VnxYjrxFhY0ozP7

cy9HIlUreTrUta05bXM9vyI4IF4Mnn5PrdP8qFQVj+60CHQ01wZavWglB6BNh8r2keut

Sqn2VoawG7E+kENYeV7OD80QVURQfyilECiDPKoUdbfjqfid1DCFlRPqjPerL5i4xOV7

N30NQkf5ygxn7tH+uSVTIu3vaoCj332SXjMNAu5SX1dZ0NNMNPzqjqjAkKrBmmUOF/C4

EL5EKVuVCPQOKrSkiROp0qFaV41jnCu9QnPzhgywRVV81b0BdpDYL/IDGqoPbt5d9DoD

pr+g==

X-Gm-Message-State: AJIora8pfUdD3Ex4jed8PUv0JIxKxyi2vsOBD4AxWSlgjlTBeoxoWiJr

Kmuz0iyo31TXxjONmJvB0kgMC4Z651aM/x/np2Q=

X-Google-Smtp-Source: AGRyM1vK8FUBklTQK7sw3bKgJ22DNGXxsrNJCG80q/z27X9vfTXeTcSrjFZ1kNqeG7NzherUkvbg7cTp9RtabpYj09Y=

X-Received: by 2002:a67:7282:0:b0:356:da1:6876 with SMTP id

n124-20020a677282000000b003560da16876mr9001703vsc.29.1656613479652; Thu, 30

Jun 2022 11:24:39 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a59:ca62:0:b0:2d0:cef4:ae38 with HTTP; Thu, 30 Jun 2022

11:24:39 -0700 (PDT)

Reply-To: buffettwarrenusa@gmail.com

In-Reply-To:

References:





From: Warren Buffett

Date: Thu, 30 Jun 2022 11:24:39 -0700

Message-ID:

Subject: Fwd: Warren Buffett from America

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca



I want to open Charity Foundation Company and help the covid19 victims

on your behalf back to me for more details Warren Buffett from America.





Sincerely,

Warren Buffett

buffettwarrenusa@gmail.com

Chief Executive Officer: Berkshire Hathaway

aphy/Warren-Edward-Buffett

Nigerian Gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jun 2022 10:09:52 -0600

Received: from mail-qv1-f48.google.com ([209.85.219.48]:45632)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o6wiw-00093H-2I

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jun 2022 10:09:02 -0600

Received: by mail-qv1-f48.google.com with SMTP id n15so30360212qvh.12

for ; Thu, 30 Jun 2022 09:08:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=cWS1am+uprIJ5RpbwWzKNlLt8rftXriaOPrJnumURBg=;

b=h64NCeVKZNRcekIF544T6+IpTq8GWiZ1ZRAydzKQCb6rDzXhNs5wzpFrTKcuOsUoww

HMPQIXt5qxH3iqZeGsIolY4wBPTuybY95IUsBxZCIgHSEtg5Aw+FbRQkAWCKkFILKOfL

nllSo/7yk4MCQlOb2Iuvacd5rZC8HUdGelIuk0u9OqemlF+/bKkWEAzWSYkMJbSeN2D5

KIqcE/YsibZsdnXSRnfWHry8vbrOjVaNYijzkwayKX7xqxRc/MPWbkw3KUZR+8D1CyVm

2p1ejNobdw98E3Vct4s7CdN9PIhCOhgbzofTrSFAtH2XbVsU0h4/AfQ+W+NHdCaMzzdP

04ig==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=cWS1am+uprIJ5RpbwWzKNlLt8rftXriaOPrJnumURBg=;

b=6hZPVoPQRsUjA5Ik+YOr9hlDlRtbFH6Kb2kKnsluQiJRAKfcJdUSPF8sfwkhzixgcH

K/z/nNuxZW3JTtcosRI7XBuPyGm/B//kVKz2ZP+z23kTp0JqekWX+fknX/bRtx0QfRoP

HfhkLnzLs2rBBiRhAv8a0M/EppkKgKZJWxjKvjbQODuhzFzbyHz6ARZM2efgN7z5cV5t

AbRyC1Ug+k7yR3/FyTp/XOyxSqz+ZBxSKtXMef1FYQCf6/31mDrqM7vRY6KizIWPmtm6

HiyV+uPEDf4+EDglayGrIvaudeVklcSm4piqy/nKDIFPatX529aIXlucjkNnfrTGO7mr

mFPg==

X-Gm-Message-State: AJIora8BNwnW8M+xtpJd6Ll08x1e4ilO6Q/D1O3/7nBxKEXSmge5/H3h

GxAch0nI/4ssv3JyM84oCDD6aD9lpPGts3yzEEc=

X-Google-Smtp-Source: AGRyM1uTLs04UCbJGuV1uxKVjSHeGmKX3bRmT18PrppDXswGdQn/vHrA7DoKURU8haLRIFVVdAswhkqZayyJcmbL4K4=

X-Received: by 2002:a05:622a:1b9e:b0:31d:2909:bf4d with SMTP id

bp30-20020a05622a1b9e00b0031d2909bf4dmr6460579qtb.283.1656605311441; Thu, 30

Jun 2022 09:08:31 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:620a:807:0:0:0:0 with HTTP; Thu, 30 Jun 2022 09:08:31

-0700 (PDT)

Reply-To: alhmed444ali@gmail.com

From: ALI AHMED

Date: Thu, 30 Jun 2022 09:08:31 -0700

Message-ID:

Subject: READ AND GET BACK TO ME

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 12.2

X-Spam_score_int: 122

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: RE-REMITTANCE OF USD$15MILLION I am Mr.Ali Ahmed,from Burkina

Faso in West Africa,i am auditing manager Africa Development Bank,In my department

we discovered an abandoned USD$15 Milton. In an account that belongs to this

our forei [...]



Content analysis details: (12.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.48 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[alhmed777[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[alhmed777[at]gmail.com]

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

2.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} READ AND GET BACK TO ME



RE-REMITTANCE OF USD$15MILLION



I am Mr.Ali Ahmed,from Burkina Faso in West Africa,i am auditing

manager Africa Development Bank,In my department we discovered an

abandoned USD$15 Milton. In an account that belongs to this our

foreign customer who died in a plane crash .I will give you more

details on your reply of this mail , which will benefit us as well as

our families



Waiting to hear from you

Ali Ahmed

Mass e-mail spam from GMail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 29 Jun 2022 21:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o6kvn-000Fwg-Ub

for dave@doctor.nl2k.ab.ca;

Wed, 29 Jun 2022 21:33:27 -0600

Resent-From: The Doctor

Resent-Date: Wed, 29 Jun 2022 21:33:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f52.google.com ([209.85.160.52]:42776)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o6gqF-000AF9-Jn

for doctor@doctor.nl2k.ab.ca;

Wed, 29 Jun 2022 17:11:31 -0600

Received: by mail-oa1-f52.google.com with SMTP id 586e51a60fabf-f2a4c51c45so23473273fac.9

for ; Wed, 29 Jun 2022 16:11:06 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=zAa7qKlzfevcl3qRy7g4ZnbWWV/RZWtOqNYW1FKzlFY=;

b=cGagBLeCHKOHoRCBMh3MMBHvheE3oVQvFyzNXaDA+M5RVs6y/keyxLYSMbTxldHQ19

nrFcOYO9sRFv0e1RNW54/C6z5uGa0DLnNe6VLVD45tIVfCZc8LThTVHBSnE0y6POck8j

PBWZKVCMur2Z1IW9ot9yl/1uJ4r8B/VFcwuLGiA/iiRYKf7JtyBp1+N2LdFvOT3dVeb9

dTF5b/v6DhZQTpdwrZjomfif++YE9YcyX0ibEfNcHyBuQGaqMAdtK4T7SP0ldoERtN+J

UszcPhsOZNbaljTBjgud0NyxMC8p/2extMcupitu6OpfUvL8CnvNrfuurgOFzcWy0/aK

h5cQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=zAa7qKlzfevcl3qRy7g4ZnbWWV/RZWtOqNYW1FKzlFY=;

b=ny4WKtqSg4oocr4LsspuZqUcI5EmT9vCgUtMM0XgnjraNt9Siz0QXuftJnLhvAcjQW

LuzvyupFg7DR5c4vPwzkl6kjw2+dIy7py5BxxtYSPY37OcvMnk+OqI1+h0j5X6m3rIgU

UPrGuNBJx3KdCIlBwFAzZwFO/6Tfl1YVIZfNF7lc8PkbDbcJu5UK5jaEZVHkG4Dfua8W

hRW5l3sWtd2zZD/wlMfwZYlnA9pj0nK2ovPB33E3gc73p/ZZsYeu7hh4ZXE06Q2UvbG8

idebg6cLoB1r88ADvNN5GkFcyAvXjPnhTMYo3yX8wLY1X8enqQx3mFSskEoML7x21M1s

ifaA==

X-Gm-Message-State: AJIora8bvLDerMcSwlewo97ll+x3iISFCkbPK3ZjDsj0fICfHYU92OqX

2zpxXv4mu4g28gwkC3AJmx4IKwcqUi38FJHmWAw=

X-Google-Smtp-Source: AGRyM1tWtI5yffykoThS2KhnMac+1cTgXpwSC5GFjUePqVWhCDkXnYqh19vB0WcPEfE0nU0L4hZtFzUTOIRLQqBIbZM=

X-Received: by 2002:a05:6871:460f:b0:108:51e2:4545 with SMTP id

nf15-20020a056871460f00b0010851e24545mr4360731oab.280.1656544260405; Wed, 29

Jun 2022 16:11:00 -0700 (PDT)

MIME-Version: 1.0

Reply-To: gilbertbawara96@gmail.com

From: Gilbert Bawara

Date: Wed, 29 Jun 2022 23:10:40 +0000

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000003244db05e29e4468"

Bcc: doctor@doctor.nl2k.ab.ca



--0000000000003244db05e29e4468

Content-Type: text/plain; charset="UTF-8"



please Kindly let me know if you received my previous message



Mr, Gilbert Bawara



--0000000000003244db05e29e4468

Content-Type: text/html; charset="UTF-8"



please Kindly let me know if you received my previous message

Mr, Gilbert Bawara




--0000000000003244db05e29e4468--