Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 20 Mar 2023 14:26:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1peM4s-000FJf-0B
for dave@doctor.nl2k.ab.ca;
Mon, 20 Mar 2023 14:25:58 -0600
Resent-From: The Doctor
Resent-Date: Mon, 20 Mar 2023 14:25:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f44.google.com ([209.85.216.44]:39865)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1peFZH-0007TY-21
for doctor@doctor.nl2k.ab.ca;
Mon, 20 Mar 2023 07:28:58 -0600
Received: by mail-pj1-f44.google.com with SMTP id mp3-20020a17090b190300b0023fcc8ce113so1518239pjb.4
for; Mon, 20 Mar 2023 06:26:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1679318811;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=KiG9ZLaMk/Nwb4qC1MPEkplnlH43Iiex/5EO/zOLJEc=;
b=S79YPL6bFjnXfmP6V/rJ7c/rohy4INCOSJKw5fgPHryRSDcFrkO+nId2szSUPJ+Tx4
fOrLtrxUDGNcZvKCAOz97yN6hhK5TShyjfYitrQfvME/BEsWsv9mb224eIBlubAwj6kD
waA/eFLmkJChJDgtihMsqC2oFyiPMIF6hpABkrESvk28iya+HLP6zU7HSLv1YHDmiJg9
CPJnU/QsnfqDzlVo770U0GrCZ67C4F/F/sPDnypb8FwAdtGkffnFU0vcA4TmmQQNXw1f
XBm4UzGfTtvlcYbQXaASvgiizkHJWhoStWLmlvHUMKecT+U1iicj7ACQsfPB7+shWe5F
YaCg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1679318811;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=KiG9ZLaMk/Nwb4qC1MPEkplnlH43Iiex/5EO/zOLJEc=;
b=tSLqRTvmxET1LIBANVH8+OiEAceqNVDnhAz5M4wuAYCHaDoB02aW9EjRDv8KyGpH+V
MqZh4WYimajnhxBUq2Vzqh9/JVbhRDAql3DkVdmox7sRVof2Pmn03ENJr4VMJGkf6r4R
m4Fr9c12/sUn9nZurMyDiN9V1WgltHJGPRxq/iYcJAiIIMkM5P67pA/SgqrYRtPgUGSM
n2VgOOASlPk7T6tWFLCBrxwvpaoaJZLjjGD1gT6NcGIOcRQzmcqc0/7BQeMU+y13PEuu
NoYOjWI8HyNa385F7rTskxBgrIQ34ODKd+7wA2TvXXx7htxdStxlAnQIlqn5rQr7lpEi
VI/w==
X-Gm-Message-State: AO0yUKUvdfVFrucHDW7xZYiDnLupv1ZJO2dDLAsZqwV0Tbifwrt3TOpR
pGegdnOG/fboUKTL2rtip/zkCSVayfinWe9r8Ic=
X-Google-Smtp-Source: AK7set9R7/7K4H3Gle6tCzO8JMUmvCSDozLZQsvaqHbj9g6tGCL9xpoJa77YIZdMdQe+j9arf9yo+P6J3TSUcpJyIj8=
X-Received: by 2002:a17:903:482:b0:199:1a40:dccc with SMTP id
jj2-20020a170903048200b001991a40dcccmr6293984plb.9.1679318810779; Mon, 20 Mar
2023 06:26:50 -0700 (PDT)
MIME-Version: 1.0
Reply-To: drrhamahassan22@gmail.com
From: DR RHAMA ALI
Date: Mon, 20 Mar 2023 14:26:24 -0700
Message-ID:
Subject: Thanks,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000002e657c05f754e172"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.1
X-Spam_score_int: 101
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: From: Dr Rhama Ali. This message might meet you in utmost
surprise. However, it's just my urgent need for foreign partner that made
me contact you for this transaction. This business opportunity also comes
out from the b [...]
Content analysis details: (10.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.44 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[drrhamahassan12(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[drrhamahassan22(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[drrhamahassan12(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.44 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_HK_NAME_FM_DR No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} Thanks,
--0000000000002e657c05f754e172
Content-Type: text/plain; charset="UTF-8"
From: Dr Rhama Ali.
This message might meet you in utmost surprise. However, it's just my
urgent need for foreign partner that made me contact you for this
transaction. This business opportunity also comes out from the bank.
Am a banker manager in West Africa, I have the opportunity to transfer the
sum of ($5.5M Dollars) this fund belongs to our deceased customer who died
along with his entire family in a plane crash. the ratio of 60/40 if you
agree to this business is free risk hence i work in the same bank more
details will give you for this. Please indicate your willingness by filling
your details once i get ur detail, i will give you more detail of this
business.
Expenses, I will take care of the expenses, if the bank asks money, don't
pay,
(1)YOUR FULL NAME..........
(2)CONTACT ADDRESS.........
(3)PRIVATE PHONE N0........
(4)COUNTRY OF ORIGIN.........
(5)OCCUPATION................
Dr Rhama Ali,
--0000000000002e657c05f754e172
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000002e657c05f754e172--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 20 Mar 2023 14:26:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1peM4s-000FJf-0B
for dave@doctor.nl2k.ab.ca;
Mon, 20 Mar 2023 14:25:58 -0600
Resent-From: The Doctor
Resent-Date: Mon, 20 Mar 2023 14:25:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f44.google.com ([209.85.216.44]:39865)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1peFZH-0007TY-21
for doctor@doctor.nl2k.ab.ca;
Mon, 20 Mar 2023 07:28:58 -0600
Received: by mail-pj1-f44.google.com with SMTP id mp3-20020a17090b190300b0023fcc8ce113so1518239pjb.4
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1679318811;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=KiG9ZLaMk/Nwb4qC1MPEkplnlH43Iiex/5EO/zOLJEc=;
b=S79YPL6bFjnXfmP6V/rJ7c/rohy4INCOSJKw5fgPHryRSDcFrkO+nId2szSUPJ+Tx4
fOrLtrxUDGNcZvKCAOz97yN6hhK5TShyjfYitrQfvME/BEsWsv9mb224eIBlubAwj6kD
waA/eFLmkJChJDgtihMsqC2oFyiPMIF6hpABkrESvk28iya+HLP6zU7HSLv1YHDmiJg9
CPJnU/QsnfqDzlVo770U0GrCZ67C4F/F/sPDnypb8FwAdtGkffnFU0vcA4TmmQQNXw1f
XBm4UzGfTtvlcYbQXaASvgiizkHJWhoStWLmlvHUMKecT+U1iicj7ACQsfPB7+shWe5F
YaCg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1679318811;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=KiG9ZLaMk/Nwb4qC1MPEkplnlH43Iiex/5EO/zOLJEc=;
b=tSLqRTvmxET1LIBANVH8+OiEAceqNVDnhAz5M4wuAYCHaDoB02aW9EjRDv8KyGpH+V
MqZh4WYimajnhxBUq2Vzqh9/JVbhRDAql3DkVdmox7sRVof2Pmn03ENJr4VMJGkf6r4R
m4Fr9c12/sUn9nZurMyDiN9V1WgltHJGPRxq/iYcJAiIIMkM5P67pA/SgqrYRtPgUGSM
n2VgOOASlPk7T6tWFLCBrxwvpaoaJZLjjGD1gT6NcGIOcRQzmcqc0/7BQeMU+y13PEuu
NoYOjWI8HyNa385F7rTskxBgrIQ34ODKd+7wA2TvXXx7htxdStxlAnQIlqn5rQr7lpEi
VI/w==
X-Gm-Message-State: AO0yUKUvdfVFrucHDW7xZYiDnLupv1ZJO2dDLAsZqwV0Tbifwrt3TOpR
pGegdnOG/fboUKTL2rtip/zkCSVayfinWe9r8Ic=
X-Google-Smtp-Source: AK7set9R7/7K4H3Gle6tCzO8JMUmvCSDozLZQsvaqHbj9g6tGCL9xpoJa77YIZdMdQe+j9arf9yo+P6J3TSUcpJyIj8=
X-Received: by 2002:a17:903:482:b0:199:1a40:dccc with SMTP id
jj2-20020a170903048200b001991a40dcccmr6293984plb.9.1679318810779; Mon, 20 Mar
2023 06:26:50 -0700 (PDT)
MIME-Version: 1.0
Reply-To: drrhamahassan22@gmail.com
From: DR RHAMA ALI
Date: Mon, 20 Mar 2023 14:26:24 -0700
Message-ID:
Subject: Thanks,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000002e657c05f754e172"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.1
X-Spam_score_int: 101
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: From: Dr Rhama Ali. This message might meet you in utmost
surprise. However, it's just my urgent need for foreign partner that made
me contact you for this transaction. This business opportunity also comes
out from the b [...]
Content analysis details: (10.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.44 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[drrhamahassan12(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[drrhamahassan22(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[drrhamahassan12(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.44 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_HK_NAME_FM_DR No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} Thanks,
--0000000000002e657c05f754e172
Content-Type: text/plain; charset="UTF-8"
From: Dr Rhama Ali.
This message might meet you in utmost surprise. However, it's just my
urgent need for foreign partner that made me contact you for this
transaction. This business opportunity also comes out from the bank.
Am a banker manager in West Africa, I have the opportunity to transfer the
sum of ($5.5M Dollars) this fund belongs to our deceased customer who died
along with his entire family in a plane crash. the ratio of 60/40 if you
agree to this business is free risk hence i work in the same bank more
details will give you for this. Please indicate your willingness by filling
your details once i get ur detail, i will give you more detail of this
business.
Expenses, I will take care of the expenses, if the bank asks money, don't
pay,
(1)YOUR FULL NAME..........
(2)CONTACT ADDRESS.........
(3)PRIVATE PHONE N0........
(4)COUNTRY OF ORIGIN.........
(5)OCCUPATION................
Dr Rhama Ali,
--0000000000002e657c05f754e172
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
From: Dr Rhama Ali.
This message might meet you in =
utmost surprise. However, it's just my urgent need for foreign partner =
that made me contact you for this transaction.=C2=A0 This business opportun=
ity also comes out from the bank.
Am a banker manager in West Africa=
, I have the opportunity to transfer the sum of ($5.5M Dollars) this fund b=
elongs to our deceased customer who died along with his entire family in a =
plane crash. the ratio of 60/40 if you agree to this business is free risk =
hence i work in the same bank more details will give you for this. Please i=
ndicate your willingness by filling your details once i get ur detail, i wi=
ll give you more detail of this business.
Expenses, I will take car=
e of the expenses, if the bank asks =C2=A0money, don't pay,
(1)Y=
OUR FULL NAME..........
(2)CONTACT ADDRESS.........
(3)PRIVATE PHONE =
N0........
(4)COUNTRY OF ORIGIN.........
(5)OCCUPATION...............=
.
Dr Rhama Ali,
This message might meet you in =
utmost surprise. However, it's just my urgent need for foreign partner =
that made me contact you for this transaction.=C2=A0 This business opportun=
ity also comes out from the bank.
Am a banker manager in West Africa=
, I have the opportunity to transfer the sum of ($5.5M Dollars) this fund b=
elongs to our deceased customer who died along with his entire family in a =
plane crash. the ratio of 60/40 if you agree to this business is free risk =
hence i work in the same bank more details will give you for this. Please i=
ndicate your willingness by filling your details once i get ur detail, i wi=
ll give you more detail of this business.
Expenses, I will take car=
e of the expenses, if the bank asks =C2=A0money, don't pay,
(1)Y=
OUR FULL NAME..........
(2)CONTACT ADDRESS.........
(3)PRIVATE PHONE =
N0........
(4)COUNTRY OF ORIGIN.........
(5)OCCUPATION...............=
.
Dr Rhama Ali,
--0000000000002e657c05f754e172--