Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 16 Apr 2023 16:10:18 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1poAYO-0004QA-Om
for dave@doctor.nl2k.ab.ca;
Sun, 16 Apr 2023 16:09:00 -0600
Resent-From: The Doctor
Resent-Date: Sun, 16 Apr 2023 16:09:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f174.google.com ([209.85.222.174]:38637)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1poABx-0002Bk-SE
for doctor@doctor.nl2k.ab.ca;
Sun, 16 Apr 2023 15:45:55 -0600
Received: by mail-qk1-f174.google.com with SMTP id f11so13391143qka.5
for; Sun, 16 Apr 2023 14:43:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1681681424; x=1684273424;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=EPXp3H8Ej+vb0tioMZH5AyrM1/VP/p9yBNdCv8KAoQ0=;
b=LNv0j0QEZsSAT0NRvd20l+17xVBi33fx2o/OvUNGp56NMll8aerch+TLW1A+sRjGlt
KdLvieYnre9emeWoG9ojrWgE0ORoqrh0AoMp2X4CiFOYccbvKpcfT0PP7mfWaXaIVAd7
8dqF9RQac5m9m68AV5JqpkvJ1Es6jGkASLLeYGs1exarb7QxmXdxuTlpKsPADZVPysko
jsHl3HE0swOmrT0Q4/QnbMCQeUsFyWFVj1b1ayzHRivhPM8ajN6/p6l2jpNKrMWx/AfY
dgicPch/DdVz37h2M0uv/oWwUeYdWb51YJrumQra8ti60f3L69PRQJkce06FFpBYOb5B
EzIQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1681681424; x=1684273424;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=EPXp3H8Ej+vb0tioMZH5AyrM1/VP/p9yBNdCv8KAoQ0=;
b=SgLsIK1ruMI1jPDcv1QyBV4ImAf0Xuil2d8SsEjivjTXXSJQFW0rL8s929WgABTO85
a/2suwreiH63Fsa6D/k1rgQKvXaAPXiaGev83EJFolwMhUgCgd41hLJkoQFcnTrKE8z9
6p58BjxuZuHcBgheMIrZs9ivaKKaax/Akbca0bPzKmxWYIVyarAyuo+TQYNzEe61CJIF
qh52nsykddvacMFwldNHb/MyC69D1rcPK5NNAIcqlaqEseg8U69yUBvinKl1li/kYL9O
P/fOpC/ZEoyWWqXZ4TFZ3jw/8qS8LOrSzz4IeCzpdUcG3wSqvUApuZR+irPhAk4Rh9KV
JoTA==
X-Gm-Message-State: AAQBX9cwYjJAVO26MAoBXZpKjyz2LyLllKq4I6TMooPjde2ojU6ftZlj
5Ife4Bxgjh7pmvB4RqU0dlz7x79qeY1pmr0kFuM=
X-Google-Smtp-Source: AKy350aWFniWQfCdL/rq+3vMmESkSU6NPDEsZ9wN+WnXeAyb475Pc+9NPc6J36Sqz3zI2YRKr4OgASU41EolsYLn0ug=
X-Received: by 2002:a05:620a:132e:b0:74d:dcc:c9b7 with SMTP id
p14-20020a05620a132e00b0074d0dccc9b7mr537674qkj.0.1681681424483; Sun, 16 Apr
2023 14:43:44 -0700 (PDT)
MIME-Version: 1.0
Reply-To: alinadm0142@gmail.com
From: Alina Dmitro
Date: Sun, 16 Apr 2023 23:43:32 +0200
Message-ID:
Subject: Hello
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000ee8aa005f97af725"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.4
X-Spam_score_int: 74
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, My name is Alina Dmitro from Ukraine. I contacted you
to assist me secure my funds (an Inheritance) left to me by my late husband.
Due to the prolonged Russia and Ukraine war. I have decided to reloca [...]
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.174 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[yurrishevchenko5(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[alinadm0142(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[yurrishevchenko5(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.174 listed in wl.mailspike.net]
Subject: {SPAM?} Hello
--000000000000ee8aa005f97af725
Content-Type: text/plain; charset="UTF-8"
Hello,
My name is Alina Dmitro from Ukraine. I contacted you to assist me secure
my funds (an Inheritance) left to me by my late husband. Due to the
prolonged Russia and Ukraine war. I have decided to relocate to your
country to start a new life, set up a joint business with you and stay
under your care. Should you be interested in helping me, please feel free
to send me an email so that I can provide you with more details.
Alina Dmitro.
--000000000000ee8aa005f97af725
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000ee8aa005f97af725--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 16 Apr 2023 16:10:18 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1poAYO-0004QA-Om
for dave@doctor.nl2k.ab.ca;
Sun, 16 Apr 2023 16:09:00 -0600
Resent-From: The Doctor
Resent-Date: Sun, 16 Apr 2023 16:09:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f174.google.com ([209.85.222.174]:38637)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1poABx-0002Bk-SE
for doctor@doctor.nl2k.ab.ca;
Sun, 16 Apr 2023 15:45:55 -0600
Received: by mail-qk1-f174.google.com with SMTP id f11so13391143qka.5
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1681681424; x=1684273424;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=EPXp3H8Ej+vb0tioMZH5AyrM1/VP/p9yBNdCv8KAoQ0=;
b=LNv0j0QEZsSAT0NRvd20l+17xVBi33fx2o/OvUNGp56NMll8aerch+TLW1A+sRjGlt
KdLvieYnre9emeWoG9ojrWgE0ORoqrh0AoMp2X4CiFOYccbvKpcfT0PP7mfWaXaIVAd7
8dqF9RQac5m9m68AV5JqpkvJ1Es6jGkASLLeYGs1exarb7QxmXdxuTlpKsPADZVPysko
jsHl3HE0swOmrT0Q4/QnbMCQeUsFyWFVj1b1ayzHRivhPM8ajN6/p6l2jpNKrMWx/AfY
dgicPch/DdVz37h2M0uv/oWwUeYdWb51YJrumQra8ti60f3L69PRQJkce06FFpBYOb5B
EzIQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1681681424; x=1684273424;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=EPXp3H8Ej+vb0tioMZH5AyrM1/VP/p9yBNdCv8KAoQ0=;
b=SgLsIK1ruMI1jPDcv1QyBV4ImAf0Xuil2d8SsEjivjTXXSJQFW0rL8s929WgABTO85
a/2suwreiH63Fsa6D/k1rgQKvXaAPXiaGev83EJFolwMhUgCgd41hLJkoQFcnTrKE8z9
6p58BjxuZuHcBgheMIrZs9ivaKKaax/Akbca0bPzKmxWYIVyarAyuo+TQYNzEe61CJIF
qh52nsykddvacMFwldNHb/MyC69D1rcPK5NNAIcqlaqEseg8U69yUBvinKl1li/kYL9O
P/fOpC/ZEoyWWqXZ4TFZ3jw/8qS8LOrSzz4IeCzpdUcG3wSqvUApuZR+irPhAk4Rh9KV
JoTA==
X-Gm-Message-State: AAQBX9cwYjJAVO26MAoBXZpKjyz2LyLllKq4I6TMooPjde2ojU6ftZlj
5Ife4Bxgjh7pmvB4RqU0dlz7x79qeY1pmr0kFuM=
X-Google-Smtp-Source: AKy350aWFniWQfCdL/rq+3vMmESkSU6NPDEsZ9wN+WnXeAyb475Pc+9NPc6J36Sqz3zI2YRKr4OgASU41EolsYLn0ug=
X-Received: by 2002:a05:620a:132e:b0:74d:dcc:c9b7 with SMTP id
p14-20020a05620a132e00b0074d0dccc9b7mr537674qkj.0.1681681424483; Sun, 16 Apr
2023 14:43:44 -0700 (PDT)
MIME-Version: 1.0
Reply-To: alinadm0142@gmail.com
From: Alina Dmitro
Date: Sun, 16 Apr 2023 23:43:32 +0200
Message-ID:
Subject: Hello
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000ee8aa005f97af725"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.4
X-Spam_score_int: 74
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, My name is Alina Dmitro from Ukraine. I contacted you
to assist me secure my funds (an Inheritance) left to me by my late husband.
Due to the prolonged Russia and Ukraine war. I have decided to reloca [...]
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.174 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[yurrishevchenko5(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[alinadm0142(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[yurrishevchenko5(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.174 listed in wl.mailspike.net]
Subject: {SPAM?} Hello
--000000000000ee8aa005f97af725
Content-Type: text/plain; charset="UTF-8"
Hello,
My name is Alina Dmitro from Ukraine. I contacted you to assist me secure
my funds (an Inheritance) left to me by my late husband. Due to the
prolonged Russia and Ukraine war. I have decided to relocate to your
country to start a new life, set up a joint business with you and stay
under your care. Should you be interested in helping me, please feel free
to send me an email so that I can provide you with more details.
Alina Dmitro.
--000000000000ee8aa005f97af725
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello,
My name is Alina Dmitro from Ukraine. I cont=
acted you to assist me secure my funds (an Inheritance) left to me by my la=
te husband. Due to the prolonged Russia and Ukraine war. I have decided to =
relocate to your country to start a new life, set up a joint business with =
you and stay under your care. Should you be interested in helping me, pleas=
e feel free to send me an email so that I can provide you with more details=
.
Alina Dmitro.
My name is Alina Dmitro from Ukraine. I cont=
acted you to assist me secure my funds (an Inheritance) left to me by my la=
te husband. Due to the prolonged Russia and Ukraine war. I have decided to =
relocate to your country to start a new life, set up a joint business with =
you and stay under your care. Should you be interested in helping me, pleas=
e feel free to send me an email so that I can provide you with more details=
.
Alina Dmitro.
--000000000000ee8aa005f97af725--