Nigerian spam from Digital Ocean
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 19 Apr 2024 21:19:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1ry1FY-000000006OY-0leK
for dave@doctor.nl2k.ab.ca;
Fri, 19 Apr 2024 21:18:48 -0600
Resent-From: The Doctor
Resent-Date: Fri, 19 Apr 2024 21:18:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.toolfor.ru ([31.148.13.220]:58762)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rxyyJ-00000000BxH-3ecn
for doctor@nl2k.ab.ca;
Fri, 19 Apr 2024 18:52:57 -0600
Received: from localhost (localhost [127.0.0.1])
by mail.toolfor.ru (Postfix) with ESMTP id 6A80BD3AF4A;
Sat, 20 Apr 2024 02:22:07 +0300 (MSK)
Received: from mail.toolfor.ru ([127.0.0.1])
by localhost (mail.toolfor.ru [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id EwalstJ-75SI; Sat, 20 Apr 2024 02:22:07 +0300 (MSK)
Received: from mail.toolfor.ru (localhost [127.0.0.1])
by mail.toolfor.ru (Postfix) with ESMTPS id 0F8BBD3AF68;
Sat, 20 Apr 2024 02:22:07 +0300 (MSK)
Received: from [169.254.124.168] (unknown [46.101.113.182])
by mail.toolfor.ru (Postfix) with ESMTPSA id 6EBE7D3AF4A;
Sat, 20 Apr 2024 02:22:02 +0300 (MSK)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: =?utf-8?b?RG9uYXRpb24gb2Yg4oKsMyw2MDAsMDAwLjAw?=
To: Recipients
From: "Schaeffler Group AG"
Date: Fri, 19 Apr 2024 16:21:57 -0700
Reply-To: schaefflerariaelisabeth@outlook.de
Message-Id: <20240419232202.6EBE7D3AF4A@mail.toolfor.ru>
X-Spam_score: 14.5
X-Spam_score_int: 145
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I'm Ms. Maria Elisabeth Schaeffler, a German business
magnate, Investor and philanthropist. I am the chairman of Wipro Limited.
25 percent of my personal wealth is spent on charity. And I also [...]
Content analysis details: (14.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[31.148.13.220 listed in dnsbl.ahbl.org]
[31.148.13.220 listed in dnsbl.ahbl.org]
[31.148.13.220 listed in dnsbl.ahbl.org]
[31.148.13.220 listed in dnsbl.ahbl.org]
[46.101.113.182 listed in dnsbl.ahbl.org]
[46.101.113.182 listed in dnsbl.ahbl.org]
[46.101.113.182 listed in dnsbl.ahbl.org]
[46.101.113.182 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[31.148.13.220 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[31.148.13.220 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[31.148.13.220 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[31.148.13.220 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[31.148.13.220 listed in will-spam-for-food.eu.org]
[31.148.13.220 listed in will-spam-for-food.eu.org]
[31.148.13.220 listed in will-spam-for-food.eu.org]
[31.148.13.220 listed in will-spam-for-food.eu.org]
[31.148.13.220 listed in will-spam-for-food.eu.org]
[31.148.13.220 listed in will-spam-for-food.eu.org]
[31.148.13.220 listed in will-spam-for-food.eu.org]
[31.148.13.220 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[31.148.13.220 listed in psbl.surriel.com]
1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)
[31.148.13.220 listed in ix.dnsbl.manitu.net]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 LOTS_OF_MONEY Huge... sums of money
1.3 MONEY_NOHTML Lots of money in plain text
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
Subject: {SPAM?} =?utf-8?b?RG9uYXRpb24gb2Yg4oKsMyw2MDAsMDAwLjAw?=
Hello,
I'm Ms. Maria Elisabeth Schaeffler, a German business magnate, Investor and=
philanthropist. I am the chairman of Wipro Limited. 25 percent of my perso=
nal wealth is spent on charity. And I also promised to give the rest of 25%=
away to individuals this year 2024 . I have decided to donate =E2=82=AC3,=
600,000.00 euros to you. If you are interested in my donation, contact me f=
or more information.
You can also read more about me using the link below
https://en.wikipedia.org/wiki/Maria-Elisabeth_Schaeffler
Contact me via my email:: schaefflerariaelisabeth@outlook.de
Greetings
Managing Director Wipro Limited
Maria Elisabeth Schaeffler
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 19 Apr 2024 21:19:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1ry1FY-000000006OY-0leK
for dave@doctor.nl2k.ab.ca;
Fri, 19 Apr 2024 21:18:48 -0600
Resent-From: The Doctor
Resent-Date: Fri, 19 Apr 2024 21:18:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.toolfor.ru ([31.148.13.220]:58762)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rxyyJ-00000000BxH-3ecn
for doctor@nl2k.ab.ca;
Fri, 19 Apr 2024 18:52:57 -0600
Received: from localhost (localhost [127.0.0.1])
by mail.toolfor.ru (Postfix) with ESMTP id 6A80BD3AF4A;
Sat, 20 Apr 2024 02:22:07 +0300 (MSK)
Received: from mail.toolfor.ru ([127.0.0.1])
by localhost (mail.toolfor.ru [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id EwalstJ-75SI; Sat, 20 Apr 2024 02:22:07 +0300 (MSK)
Received: from mail.toolfor.ru (localhost [127.0.0.1])
by mail.toolfor.ru (Postfix) with ESMTPS id 0F8BBD3AF68;
Sat, 20 Apr 2024 02:22:07 +0300 (MSK)
Received: from [169.254.124.168] (unknown [46.101.113.182])
by mail.toolfor.ru (Postfix) with ESMTPSA id 6EBE7D3AF4A;
Sat, 20 Apr 2024 02:22:02 +0300 (MSK)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: =?utf-8?b?RG9uYXRpb24gb2Yg4oKsMyw2MDAsMDAwLjAw?=
To: Recipients
From: "Schaeffler Group AG"
Date: Fri, 19 Apr 2024 16:21:57 -0700
Reply-To: schaefflerariaelisabeth@outlook.de
Message-Id: <20240419232202.6EBE7D3AF4A@mail.toolfor.ru>
X-Spam_score: 14.5
X-Spam_score_int: 145
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I'm Ms. Maria Elisabeth Schaeffler, a German business
magnate, Investor and philanthropist. I am the chairman of Wipro Limited.
25 percent of my personal wealth is spent on charity. And I also [...]
Content analysis details: (14.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[31.148.13.220 listed in dnsbl.ahbl.org]
[31.148.13.220 listed in dnsbl.ahbl.org]
[31.148.13.220 listed in dnsbl.ahbl.org]
[31.148.13.220 listed in dnsbl.ahbl.org]
[46.101.113.182 listed in dnsbl.ahbl.org]
[46.101.113.182 listed in dnsbl.ahbl.org]
[46.101.113.182 listed in dnsbl.ahbl.org]
[46.101.113.182 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[31.148.13.220 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[31.148.13.220 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[31.148.13.220 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[31.148.13.220 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[31.148.13.220 listed in will-spam-for-food.eu.org]
[31.148.13.220 listed in will-spam-for-food.eu.org]
[31.148.13.220 listed in will-spam-for-food.eu.org]
[31.148.13.220 listed in will-spam-for-food.eu.org]
[31.148.13.220 listed in will-spam-for-food.eu.org]
[31.148.13.220 listed in will-spam-for-food.eu.org]
[31.148.13.220 listed in will-spam-for-food.eu.org]
[31.148.13.220 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
[46.101.113.182 listed in will-spam-for-food.eu.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[31.148.13.220 listed in psbl.surriel.com]
1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)
[31.148.13.220 listed in ix.dnsbl.manitu.net]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 LOTS_OF_MONEY Huge... sums of money
1.3 MONEY_NOHTML Lots of money in plain text
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
Subject: {SPAM?} =?utf-8?b?RG9uYXRpb24gb2Yg4oKsMyw2MDAsMDAwLjAw?=
Hello,
I'm Ms. Maria Elisabeth Schaeffler, a German business magnate, Investor and=
philanthropist. I am the chairman of Wipro Limited. 25 percent of my perso=
nal wealth is spent on charity. And I also promised to give the rest of 25%=
away to individuals this year 2024 . I have decided to donate =E2=82=AC3,=
600,000.00 euros to you. If you are interested in my donation, contact me f=
or more information.
You can also read more about me using the link below
https://en.wikipedia.org/wiki/Maria-Elisabeth_Schaeffler
Contact me via my email:: schaefflerariaelisabeth@outlook.de
Greetings
Managing Director Wipro Limited
Maria Elisabeth Schaeffler