Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 10 Jun 2022 14:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nzlMC-0009BJ-1n
for dave@doctor.nl2k.ab.ca;
Fri, 10 Jun 2022 14:35:48 -0600
Resent-From: The Doctor
Resent-Date: Fri, 10 Jun 2022 14:35:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f194.google.com ([209.85.167.194]:41581)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nzkUJ-0006cZ-1j
for doctor@doctor.nl2k.ab.ca;
Fri, 10 Jun 2022 13:40:10 -0600
Received: by mail-oi1-f194.google.com with SMTP id r206so409912oib.8
for; Fri, 10 Jun 2022 12:39:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to
:content-transfer-encoding;
bh=caLTEN6jNRy8G1eIrBN7aB+ew513NNVLj/5ALbmPHf4=;
b=SxXPUwnGOtsz+QvQVWTV/R9++n2jTEb3kfxUYwGqY7We6Sju+pG9qXYZ6sq/uB+UFW
wgrg83EbLAxpSU3RA3kmP2gS0f7tSaFq8iRQHNheYNIEyIIAXmadISJGGC8v7vIUA3K1
yh3Dv4dubQHdmn0FQNwfBWrKVb5VP6g7pbjpwUtM6948jWNWNF0rs95zqY7k09XGeVni
mRTSTnL1wleEzjJGRoEqh40R+XxYQgHhDQ7SFnHcxNw7tU86eKLEg69sAy/mC+8fDbdz
BjygSmeDuGaAx03rYqnwXUPCOkLm4Z0FfdOhZ56Ydc0Z3njC5kId02VS4uk0Y/IQMdT9
6dFw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to:content-transfer-encoding;
bh=caLTEN6jNRy8G1eIrBN7aB+ew513NNVLj/5ALbmPHf4=;
b=F7pJWcpxJ4Pliw3xAhXhirQtsaLRPSwbb38qKa7rB6SKcf7fy6iNVvIHnpTPR1X6ti
Hmu5ma5430GnsVEVSkdit9/K58K44Ot/R3YdZVFWBOJKpWTFjNNQaF6CKsQENY05f4eY
+GlvmNfNQkii02ZW1ZaoniYy6HtzrQbv87K72xBIM8mxzce3TUdlBPhlXehOHwOR12V7
DHbJrkbTLb2Gu27TPC1y7g60W/L9tpfn7GOFK8xxaQKfLSQ8UTUVDH/RHeTZXjt4GPAP
/p8T+2cugDVF8OFQOaavyDBHQdgIAh9fWiCWYF8QJzJapDTLXrAU/FNoQhB9hzpUGsYy
pi6g==
X-Gm-Message-State: AOAM53132cshgex5ClrtHvEUEVPT6gxiKgqYV9LKVu5d454ZTUeyFydu
f1Lm2qX54uqYVa6bW0WZpc0FDJGyKWw311XQxGw=
X-Google-Smtp-Source: ABdhPJwF8geTSPtsTpVg4/FAvZQYXQ6SUEbewqN3u0JCSDtGHlNkJChLRMb/yrgW5A6+naTnUiwIVwqChExfL3E5JGY=
X-Received: by 2002:a05:6808:f03:b0:32b:c8d7:a98 with SMTP id
m3-20020a0568080f0300b0032bc8d70a98mr778010oiw.158.1654889983887; Fri, 10 Jun
2022 12:39:43 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6839:1172:0:0:0:0 with HTTP; Fri, 10 Jun 2022 12:39:43
-0700 (PDT)
Reply-To: lawfirmshawnm@gmail.com
From: Addin
Date: Fri, 10 Jun 2022 21:39:43 +0200
Message-ID:
Subject: Investment Opportunity,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am Mr. Shawn Dlamini, a lawyer by profession; however this
Correspondent is private. I am a financial consultant to an investor from
a Mineral – Rich African Country with political background who [...]
Content analysis details: (5.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[unheadquarters21[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.194 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[unheadquarters21[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Investment Opportunity,
I am Mr. Shawn Dlamini, a lawyer by profession; however this
Correspondent is private. I am a financial consultant to an investor
from a Mineral =E2=80=93 Rich African Country with political background who
Wants to invest outside his country.
As stated above, my client had approached me with a mandate to seek
For a firm or reputable well- established individual that has the
Experience in investment management that can help him channel some
funds into a profitable investment outside Africa, where he can get
Good yield for his money.
Due to the sensitive position he holds in his country and the unstable
Investment environment, my client decided not to retain any of his
Assets in the country.
Kindly let me know your acceptance to this offer and furnish me with a
Comprehensive draft of your terms and conditions.
Yours sincerely,
Mr. Shawn Dlamini.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 10 Jun 2022 14:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nzlMC-0009BJ-1n
for dave@doctor.nl2k.ab.ca;
Fri, 10 Jun 2022 14:35:48 -0600
Resent-From: The Doctor
Resent-Date: Fri, 10 Jun 2022 14:35:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f194.google.com ([209.85.167.194]:41581)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nzkUJ-0006cZ-1j
for doctor@doctor.nl2k.ab.ca;
Fri, 10 Jun 2022 13:40:10 -0600
Received: by mail-oi1-f194.google.com with SMTP id r206so409912oib.8
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to
:content-transfer-encoding;
bh=caLTEN6jNRy8G1eIrBN7aB+ew513NNVLj/5ALbmPHf4=;
b=SxXPUwnGOtsz+QvQVWTV/R9++n2jTEb3kfxUYwGqY7We6Sju+pG9qXYZ6sq/uB+UFW
wgrg83EbLAxpSU3RA3kmP2gS0f7tSaFq8iRQHNheYNIEyIIAXmadISJGGC8v7vIUA3K1
yh3Dv4dubQHdmn0FQNwfBWrKVb5VP6g7pbjpwUtM6948jWNWNF0rs95zqY7k09XGeVni
mRTSTnL1wleEzjJGRoEqh40R+XxYQgHhDQ7SFnHcxNw7tU86eKLEg69sAy/mC+8fDbdz
BjygSmeDuGaAx03rYqnwXUPCOkLm4Z0FfdOhZ56Ydc0Z3njC5kId02VS4uk0Y/IQMdT9
6dFw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to:content-transfer-encoding;
bh=caLTEN6jNRy8G1eIrBN7aB+ew513NNVLj/5ALbmPHf4=;
b=F7pJWcpxJ4Pliw3xAhXhirQtsaLRPSwbb38qKa7rB6SKcf7fy6iNVvIHnpTPR1X6ti
Hmu5ma5430GnsVEVSkdit9/K58K44Ot/R3YdZVFWBOJKpWTFjNNQaF6CKsQENY05f4eY
+GlvmNfNQkii02ZW1ZaoniYy6HtzrQbv87K72xBIM8mxzce3TUdlBPhlXehOHwOR12V7
DHbJrkbTLb2Gu27TPC1y7g60W/L9tpfn7GOFK8xxaQKfLSQ8UTUVDH/RHeTZXjt4GPAP
/p8T+2cugDVF8OFQOaavyDBHQdgIAh9fWiCWYF8QJzJapDTLXrAU/FNoQhB9hzpUGsYy
pi6g==
X-Gm-Message-State: AOAM53132cshgex5ClrtHvEUEVPT6gxiKgqYV9LKVu5d454ZTUeyFydu
f1Lm2qX54uqYVa6bW0WZpc0FDJGyKWw311XQxGw=
X-Google-Smtp-Source: ABdhPJwF8geTSPtsTpVg4/FAvZQYXQ6SUEbewqN3u0JCSDtGHlNkJChLRMb/yrgW5A6+naTnUiwIVwqChExfL3E5JGY=
X-Received: by 2002:a05:6808:f03:b0:32b:c8d7:a98 with SMTP id
m3-20020a0568080f0300b0032bc8d70a98mr778010oiw.158.1654889983887; Fri, 10 Jun
2022 12:39:43 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6839:1172:0:0:0:0 with HTTP; Fri, 10 Jun 2022 12:39:43
-0700 (PDT)
Reply-To: lawfirmshawnm@gmail.com
From: Addin
Date: Fri, 10 Jun 2022 21:39:43 +0200
Message-ID:
Subject: Investment Opportunity,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am Mr. Shawn Dlamini, a lawyer by profession; however this
Correspondent is private. I am a financial consultant to an investor from
a Mineral – Rich African Country with political background who [...]
Content analysis details: (5.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[unheadquarters21[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.194 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[unheadquarters21[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Investment Opportunity,
I am Mr. Shawn Dlamini, a lawyer by profession; however this
Correspondent is private. I am a financial consultant to an investor
from a Mineral =E2=80=93 Rich African Country with political background who
Wants to invest outside his country.
As stated above, my client had approached me with a mandate to seek
For a firm or reputable well- established individual that has the
Experience in investment management that can help him channel some
funds into a profitable investment outside Africa, where he can get
Good yield for his money.
Due to the sensitive position he holds in his country and the unstable
Investment environment, my client decided not to retain any of his
Assets in the country.
Kindly let me know your acceptance to this offer and furnish me with a
Comprehensive draft of your terms and conditions.
Yours sincerely,
Mr. Shawn Dlamini.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments