Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 15 Sep 2022 12:24:00 -0600
Received: from mail-ej1-f47.google.com ([209.85.218.47]:40821)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oYt2Y-000BDg-Pf
for dave@doctor.nl2k.ab.ca;
Thu, 15 Sep 2022 11:52:46 -0600
Received: by mail-ej1-f47.google.com with SMTP id l14so43861542eja.7
for; Thu, 15 Sep 2022 10:52:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=FgHLnAc9pRmU05YDbRjWFj0eGjXezdjo2mOozZqYCw8=;
b=DrvhZxjuD7qOhpEPFBIrRnmH7dfWa24AoIBiR49Tu4WPge6oo6RdbNMuiRjD06WvbW
BYmA94D/ncBDJM4VD+iMZq2s7EmLQIIE9J3x80O3H68fIXZ1iVwRLAFdPNnRfqEd+bRr
LJIJWLHy+vMsN6BLjWeqAon0E7r3zGZvPuNqSVtlYGKR86+MqZflNBywGYghVnTb0rLP
WjoA6g3ih2HgvpBkDgV6nu1AiQqW+cn8eRywCP7l0YbdXAbyoUBFkexD/igSzzoGPOAT
djN3y6zmZ+5F8Yw+waeNAK15X5+z/wrr/yaVySVtCsvBR0u9kuFI7o7cKvp+FYGV+sNj
HJVQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=FgHLnAc9pRmU05YDbRjWFj0eGjXezdjo2mOozZqYCw8=;
b=I8dgEybNa0VhTo9U5kXrTKIG9JpmHKHdKDFDfd70KbH0Dby7Py56xa2RMebd2T87Ah
R26nrVppLfXf7cwSdMkSP+ykHXUYVLlNir+bkXinU2uzHfDLaq0ewfoRdBC3X8eddQ80
+dgjVJgm1+J5gk3AhWAgdBf7Ye7dA406hIXyaC6tKxtIkUItFUh39El3+0+ia9mR/qCh
6YG3AD0rCaZyK2n5j27x4uABhxNz/sSzWq/5wIMcy+AHibzW2uHhEnMxJh6FJsxYFxPp
vv0dBRU5dRzbjJ065p9IHbC5z5s8nfkMIGnpVzB4+KV1gaiZnq8idrBj4KGu7Bn3PMVp
68xA==
X-Gm-Message-State: ACrzQf3CqO74AIfIO0nG7T8sRXufoX/gHCY4CAoa09CNAOS2wCxWukvv
jkPqGD4wLNNzUkQWnWXDiLkJZo2GyoZmxYo4XpM=
X-Google-Smtp-Source: AMsMyM4F3mxXPrbjJHrbhgorHtIJg3Umn+5kBgMM25Dn0O7iL7MzUfUl3LF9VZLiZeeUUVz5Hu3jSHl4QHSU6boLoJM=
X-Received: by 2002:a17:907:1b1c:b0:72f:9aac:ee41 with SMTP id
mp28-20020a1709071b1c00b0072f9aacee41mr773323ejc.56.1663264336130; Thu, 15
Sep 2022 10:52:16 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a98:c011:0:b0:180:bf3d:19aa with HTTP; Thu, 15 Sep 2022
10:52:15 -0700 (PDT)
Reply-To: ahmedzengo6@gmail.com
From: "Mr.Ahmed Zengo,"
Date: Thu, 15 Sep 2022 17:52:15 +0000
Message-ID:
Subject: Hello
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 12.8
X-Spam_score_int: 128
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear friend, I am Mr. Ahmed zengo, I need your urgent help
to transfer the sum of 15.5 million dollars, to his account for investment
in his country, if you are ready, please contact me, I will give you all
the de [...]
Content analysis details: (12.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[ahmedzengo6[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[ahmedzengo8[at]gmail.com]
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
DNSWL was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[209.85.218.47 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.218.47 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[ahmedzengo8[at]gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hello
--
Dear friend,
I am Mr. Ahmed zengo, I need your urgent help to transfer the sum of
15.5 million dollars, to his account for investment in his country, if
you are ready, please contact me, I will give you all the details
1.) his full name .........................................
2.) Country.............................................. ....
3.) his private number .........................................
4.).Your age:...................................
5)Your photo..............................
6)Your profession....................................
As for the bank, don't be angry that it asks you for all that information about
you, I don't want to fall victim as this is the only hope I have in
life to achieve it. Email: ahmedzengo6@gmail.com
As soon as I receive it from you I will send you information on how
Contact
Thank
MR. Ahmed Zengo
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 15 Sep 2022 12:24:00 -0600
Received: from mail-ej1-f47.google.com ([209.85.218.47]:40821)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oYt2Y-000BDg-Pf
for dave@doctor.nl2k.ab.ca;
Thu, 15 Sep 2022 11:52:46 -0600
Received: by mail-ej1-f47.google.com with SMTP id l14so43861542eja.7
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=FgHLnAc9pRmU05YDbRjWFj0eGjXezdjo2mOozZqYCw8=;
b=DrvhZxjuD7qOhpEPFBIrRnmH7dfWa24AoIBiR49Tu4WPge6oo6RdbNMuiRjD06WvbW
BYmA94D/ncBDJM4VD+iMZq2s7EmLQIIE9J3x80O3H68fIXZ1iVwRLAFdPNnRfqEd+bRr
LJIJWLHy+vMsN6BLjWeqAon0E7r3zGZvPuNqSVtlYGKR86+MqZflNBywGYghVnTb0rLP
WjoA6g3ih2HgvpBkDgV6nu1AiQqW+cn8eRywCP7l0YbdXAbyoUBFkexD/igSzzoGPOAT
djN3y6zmZ+5F8Yw+waeNAK15X5+z/wrr/yaVySVtCsvBR0u9kuFI7o7cKvp+FYGV+sNj
HJVQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=FgHLnAc9pRmU05YDbRjWFj0eGjXezdjo2mOozZqYCw8=;
b=I8dgEybNa0VhTo9U5kXrTKIG9JpmHKHdKDFDfd70KbH0Dby7Py56xa2RMebd2T87Ah
R26nrVppLfXf7cwSdMkSP+ykHXUYVLlNir+bkXinU2uzHfDLaq0ewfoRdBC3X8eddQ80
+dgjVJgm1+J5gk3AhWAgdBf7Ye7dA406hIXyaC6tKxtIkUItFUh39El3+0+ia9mR/qCh
6YG3AD0rCaZyK2n5j27x4uABhxNz/sSzWq/5wIMcy+AHibzW2uHhEnMxJh6FJsxYFxPp
vv0dBRU5dRzbjJ065p9IHbC5z5s8nfkMIGnpVzB4+KV1gaiZnq8idrBj4KGu7Bn3PMVp
68xA==
X-Gm-Message-State: ACrzQf3CqO74AIfIO0nG7T8sRXufoX/gHCY4CAoa09CNAOS2wCxWukvv
jkPqGD4wLNNzUkQWnWXDiLkJZo2GyoZmxYo4XpM=
X-Google-Smtp-Source: AMsMyM4F3mxXPrbjJHrbhgorHtIJg3Umn+5kBgMM25Dn0O7iL7MzUfUl3LF9VZLiZeeUUVz5Hu3jSHl4QHSU6boLoJM=
X-Received: by 2002:a17:907:1b1c:b0:72f:9aac:ee41 with SMTP id
mp28-20020a1709071b1c00b0072f9aacee41mr773323ejc.56.1663264336130; Thu, 15
Sep 2022 10:52:16 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a98:c011:0:b0:180:bf3d:19aa with HTTP; Thu, 15 Sep 2022
10:52:15 -0700 (PDT)
Reply-To: ahmedzengo6@gmail.com
From: "Mr.Ahmed Zengo,"
Date: Thu, 15 Sep 2022 17:52:15 +0000
Message-ID:
Subject: Hello
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 12.8
X-Spam_score_int: 128
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear friend, I am Mr. Ahmed zengo, I need your urgent help
to transfer the sum of 15.5 million dollars, to his account for investment
in his country, if you are ready, please contact me, I will give you all
the de [...]
Content analysis details: (12.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[ahmedzengo6[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[ahmedzengo8[at]gmail.com]
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
DNSWL was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[209.85.218.47 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.218.47 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[ahmedzengo8[at]gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hello
--
Dear friend,
I am Mr. Ahmed zengo, I need your urgent help to transfer the sum of
15.5 million dollars, to his account for investment in his country, if
you are ready, please contact me, I will give you all the details
1.) his full name .........................................
2.) Country.............................................. ....
3.) his private number .........................................
4.).Your age:...................................
5)Your photo..............................
6)Your profession....................................
As for the bank, don't be angry that it asks you for all that information about
you, I don't want to fall victim as this is the only hope I have in
life to achieve it. Email: ahmedzengo6@gmail.com
As soon as I receive it from you I will send you information on how
Contact
Thank
MR. Ahmed Zengo