Nigerian spam from Digital Ocean

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Apr 2024 21:19:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ry1FY-000000006OY-0leK

for dave@doctor.nl2k.ab.ca;

Fri, 19 Apr 2024 21:18:48 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Apr 2024 21:18:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.toolfor.ru ([31.148.13.220]:58762)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxyyJ-00000000BxH-3ecn

for doctor@nl2k.ab.ca;

Fri, 19 Apr 2024 18:52:57 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.toolfor.ru (Postfix) with ESMTP id 6A80BD3AF4A;

Sat, 20 Apr 2024 02:22:07 +0300 (MSK)

Received: from mail.toolfor.ru ([127.0.0.1])

by localhost (mail.toolfor.ru [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id EwalstJ-75SI; Sat, 20 Apr 2024 02:22:07 +0300 (MSK)

Received: from mail.toolfor.ru (localhost [127.0.0.1])

by mail.toolfor.ru (Postfix) with ESMTPS id 0F8BBD3AF68;

Sat, 20 Apr 2024 02:22:07 +0300 (MSK)

Received: from [169.254.124.168] (unknown [46.101.113.182])

by mail.toolfor.ru (Postfix) with ESMTPSA id 6EBE7D3AF4A;

Sat, 20 Apr 2024 02:22:02 +0300 (MSK)

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: =?utf-8?b?RG9uYXRpb24gb2Yg4oKsMyw2MDAsMDAwLjAw?=

To: Recipients

From: "Schaeffler Group AG"

Date: Fri, 19 Apr 2024 16:21:57 -0700

Reply-To: schaefflerariaelisabeth@outlook.de

Message-Id: <20240419232202.6EBE7D3AF4A@mail.toolfor.ru>

X-Spam_score: 14.5

X-Spam_score_int: 145

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I'm Ms. Maria Elisabeth Schaeffler, a German business

magnate, Investor and philanthropist. I am the chairman of Wipro Limited.

25 percent of my personal wealth is spent on charity. And I also [...]



Content analysis details: (14.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[31.148.13.220 listed in dnsbl.ahbl.org]

[31.148.13.220 listed in dnsbl.ahbl.org]

[31.148.13.220 listed in dnsbl.ahbl.org]

[31.148.13.220 listed in dnsbl.ahbl.org]

[46.101.113.182 listed in dnsbl.ahbl.org]

[46.101.113.182 listed in dnsbl.ahbl.org]

[46.101.113.182 listed in dnsbl.ahbl.org]

[46.101.113.182 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[31.148.13.220 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[31.148.13.220 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[31.148.13.220 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[31.148.13.220 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[31.148.13.220 listed in will-spam-for-food.eu.org]

[31.148.13.220 listed in will-spam-for-food.eu.org]

[31.148.13.220 listed in will-spam-for-food.eu.org]

[31.148.13.220 listed in will-spam-for-food.eu.org]

[31.148.13.220 listed in will-spam-for-food.eu.org]

[31.148.13.220 listed in will-spam-for-food.eu.org]

[31.148.13.220 listed in will-spam-for-food.eu.org]

[31.148.13.220 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[31.148.13.220 listed in psbl.surriel.com]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[31.148.13.220 listed in ix.dnsbl.manitu.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 LOTS_OF_MONEY Huge... sums of money

1.3 MONEY_NOHTML Lots of money in plain text

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} =?utf-8?b?RG9uYXRpb24gb2Yg4oKsMyw2MDAsMDAwLjAw?=



Hello,

I'm Ms. Maria Elisabeth Schaeffler, a German business magnate, Investor and=

philanthropist. I am the chairman of Wipro Limited. 25 percent of my perso=

nal wealth is spent on charity. And I also promised to give the rest of 25%=

away to individuals this year 2024 . I have decided to donate =E2=82=AC3,=

600,000.00 euros to you. If you are interested in my donation, contact me f=

or more information.



You can also read more about me using the link below



https://en.wikipedia.org/wiki/Maria-Elisabeth_Schaeffler



Contact me via my email:: schaefflerariaelisabeth@outlook.de



Greetings

Managing Director Wipro Limited

Maria Elisabeth Schaeffler