Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 30 Jun 2022 10:09:52 -0600
Received: from mail-qv1-f48.google.com ([209.85.219.48]:45632)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1o6wiw-00093H-2I
for dave@doctor.nl2k.ab.ca;
Thu, 30 Jun 2022 10:09:02 -0600
Received: by mail-qv1-f48.google.com with SMTP id n15so30360212qvh.12
for; Thu, 30 Jun 2022 09:08:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=cWS1am+uprIJ5RpbwWzKNlLt8rftXriaOPrJnumURBg=;
b=h64NCeVKZNRcekIF544T6+IpTq8GWiZ1ZRAydzKQCb6rDzXhNs5wzpFrTKcuOsUoww
HMPQIXt5qxH3iqZeGsIolY4wBPTuybY95IUsBxZCIgHSEtg5Aw+FbRQkAWCKkFILKOfL
nllSo/7yk4MCQlOb2Iuvacd5rZC8HUdGelIuk0u9OqemlF+/bKkWEAzWSYkMJbSeN2D5
KIqcE/YsibZsdnXSRnfWHry8vbrOjVaNYijzkwayKX7xqxRc/MPWbkw3KUZR+8D1CyVm
2p1ejNobdw98E3Vct4s7CdN9PIhCOhgbzofTrSFAtH2XbVsU0h4/AfQ+W+NHdCaMzzdP
04ig==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=cWS1am+uprIJ5RpbwWzKNlLt8rftXriaOPrJnumURBg=;
b=6hZPVoPQRsUjA5Ik+YOr9hlDlRtbFH6Kb2kKnsluQiJRAKfcJdUSPF8sfwkhzixgcH
K/z/nNuxZW3JTtcosRI7XBuPyGm/B//kVKz2ZP+z23kTp0JqekWX+fknX/bRtx0QfRoP
HfhkLnzLs2rBBiRhAv8a0M/EppkKgKZJWxjKvjbQODuhzFzbyHz6ARZM2efgN7z5cV5t
AbRyC1Ug+k7yR3/FyTp/XOyxSqz+ZBxSKtXMef1FYQCf6/31mDrqM7vRY6KizIWPmtm6
HiyV+uPEDf4+EDglayGrIvaudeVklcSm4piqy/nKDIFPatX529aIXlucjkNnfrTGO7mr
mFPg==
X-Gm-Message-State: AJIora8BNwnW8M+xtpJd6Ll08x1e4ilO6Q/D1O3/7nBxKEXSmge5/H3h
GxAch0nI/4ssv3JyM84oCDD6aD9lpPGts3yzEEc=
X-Google-Smtp-Source: AGRyM1uTLs04UCbJGuV1uxKVjSHeGmKX3bRmT18PrppDXswGdQn/vHrA7DoKURU8haLRIFVVdAswhkqZayyJcmbL4K4=
X-Received: by 2002:a05:622a:1b9e:b0:31d:2909:bf4d with SMTP id
bp30-20020a05622a1b9e00b0031d2909bf4dmr6460579qtb.283.1656605311441; Thu, 30
Jun 2022 09:08:31 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:620a:807:0:0:0:0 with HTTP; Thu, 30 Jun 2022 09:08:31
-0700 (PDT)
Reply-To: alhmed444ali@gmail.com
From: ALI AHMED
Date: Thu, 30 Jun 2022 09:08:31 -0700
Message-ID:
Subject: READ AND GET BACK TO ME
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 12.2
X-Spam_score_int: 122
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: RE-REMITTANCE OF USD$15MILLION I am Mr.Ali Ahmed,from Burkina
Faso in West Africa,i am auditing manager Africa Development Bank,In my department
we discovered an abandoned USD$15 Milton. In an account that belongs to this
our forei [...]
Content analysis details: (12.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.48 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[alhmed777[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[alhmed777[at]gmail.com]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} READ AND GET BACK TO ME
RE-REMITTANCE OF USD$15MILLION
I am Mr.Ali Ahmed,from Burkina Faso in West Africa,i am auditing
manager Africa Development Bank,In my department we discovered an
abandoned USD$15 Milton. In an account that belongs to this our
foreign customer who died in a plane crash .I will give you more
details on your reply of this mail , which will benefit us as well as
our families
Waiting to hear from you
Ali Ahmed
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 30 Jun 2022 10:09:52 -0600
Received: from mail-qv1-f48.google.com ([209.85.219.48]:45632)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1o6wiw-00093H-2I
for dave@doctor.nl2k.ab.ca;
Thu, 30 Jun 2022 10:09:02 -0600
Received: by mail-qv1-f48.google.com with SMTP id n15so30360212qvh.12
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=cWS1am+uprIJ5RpbwWzKNlLt8rftXriaOPrJnumURBg=;
b=h64NCeVKZNRcekIF544T6+IpTq8GWiZ1ZRAydzKQCb6rDzXhNs5wzpFrTKcuOsUoww
HMPQIXt5qxH3iqZeGsIolY4wBPTuybY95IUsBxZCIgHSEtg5Aw+FbRQkAWCKkFILKOfL
nllSo/7yk4MCQlOb2Iuvacd5rZC8HUdGelIuk0u9OqemlF+/bKkWEAzWSYkMJbSeN2D5
KIqcE/YsibZsdnXSRnfWHry8vbrOjVaNYijzkwayKX7xqxRc/MPWbkw3KUZR+8D1CyVm
2p1ejNobdw98E3Vct4s7CdN9PIhCOhgbzofTrSFAtH2XbVsU0h4/AfQ+W+NHdCaMzzdP
04ig==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=cWS1am+uprIJ5RpbwWzKNlLt8rftXriaOPrJnumURBg=;
b=6hZPVoPQRsUjA5Ik+YOr9hlDlRtbFH6Kb2kKnsluQiJRAKfcJdUSPF8sfwkhzixgcH
K/z/nNuxZW3JTtcosRI7XBuPyGm/B//kVKz2ZP+z23kTp0JqekWX+fknX/bRtx0QfRoP
HfhkLnzLs2rBBiRhAv8a0M/EppkKgKZJWxjKvjbQODuhzFzbyHz6ARZM2efgN7z5cV5t
AbRyC1Ug+k7yR3/FyTp/XOyxSqz+ZBxSKtXMef1FYQCf6/31mDrqM7vRY6KizIWPmtm6
HiyV+uPEDf4+EDglayGrIvaudeVklcSm4piqy/nKDIFPatX529aIXlucjkNnfrTGO7mr
mFPg==
X-Gm-Message-State: AJIora8BNwnW8M+xtpJd6Ll08x1e4ilO6Q/D1O3/7nBxKEXSmge5/H3h
GxAch0nI/4ssv3JyM84oCDD6aD9lpPGts3yzEEc=
X-Google-Smtp-Source: AGRyM1uTLs04UCbJGuV1uxKVjSHeGmKX3bRmT18PrppDXswGdQn/vHrA7DoKURU8haLRIFVVdAswhkqZayyJcmbL4K4=
X-Received: by 2002:a05:622a:1b9e:b0:31d:2909:bf4d with SMTP id
bp30-20020a05622a1b9e00b0031d2909bf4dmr6460579qtb.283.1656605311441; Thu, 30
Jun 2022 09:08:31 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:620a:807:0:0:0:0 with HTTP; Thu, 30 Jun 2022 09:08:31
-0700 (PDT)
Reply-To: alhmed444ali@gmail.com
From: ALI AHMED
Date: Thu, 30 Jun 2022 09:08:31 -0700
Message-ID:
Subject: READ AND GET BACK TO ME
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 12.2
X-Spam_score_int: 122
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: RE-REMITTANCE OF USD$15MILLION I am Mr.Ali Ahmed,from Burkina
Faso in West Africa,i am auditing manager Africa Development Bank,In my department
we discovered an abandoned USD$15 Milton. In an account that belongs to this
our forei [...]
Content analysis details: (12.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.48 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[alhmed777[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[alhmed777[at]gmail.com]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} READ AND GET BACK TO ME
RE-REMITTANCE OF USD$15MILLION
I am Mr.Ali Ahmed,from Burkina Faso in West Africa,i am auditing
manager Africa Development Bank,In my department we discovered an
abandoned USD$15 Milton. In an account that belongs to this our
foreign customer who died in a plane crash .I will give you more
details on your reply of this mail , which will benefit us as well as
our families
Waiting to hear from you
Ali Ahmed
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments