Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 03 Aug 2022 11:58:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oJIcV-000NDZ-DE
for dave@doctor.nl2k.ab.ca;
Wed, 03 Aug 2022 11:57:23 -0600
Resent-From: The Doctor
Resent-Date: Wed, 3 Aug 2022 11:57:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f65.google.com ([209.85.166.65]:34813)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oJF5B-000I0t-HF
for doctor@nl2k.ab.ca;
Wed, 03 Aug 2022 08:10:49 -0600
Received: by mail-io1-f65.google.com with SMTP id x64so12971724iof.1
for; Wed, 03 Aug 2022 07:10:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=O+cYsWop0ahmbYhZ9xW4Ys7gR1G24pACccWsZkdl/f0=;
b=SE1LnaTi/r9ExA/BR7qXmJT+QwWfNW7gXlnnVVFBvxC4mk3DHkAQFF9pajef5Phsgl
5H1umur3+F4/OogenAXqrwvITCRrdbfqqhEl/32zHJYZ5R0J0ashXQ/TrvyR0UI72C1h
zT69NCSSbAiTIFPM+RCuPYLbUiTc55FNV/zwTNZ30Vb74WSWLJzbP3pE7HEceLSyo/5k
LQz98+w8lJgyDwaite+0DjPxxK8NwO1oIpLyTg/n6eA9mLTH0kMxJ9X9DD1geK6g51Qs
Kh394vEOPeEkej6rOIZiBO4yR1SAe/UubDrudML/Tb48cvO5B0fU7EFNp0TE6/J9ZldY
SPXg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=O+cYsWop0ahmbYhZ9xW4Ys7gR1G24pACccWsZkdl/f0=;
b=pceX4/flFGtKhtgPmMwgARXGH8Xi9SeqBy580xNs2ZAoWXuBAGqaveUtxfLFTJ7Ht9
x/Jn1ZtuaP0QSVVB8wJa+8ndO2v5QPY4qpevJI0MqquKecl3GqbVgaDWiudmk2bCEGqs
ZY45TQQiqQsvcfsgNKhbskB9G3lLklEfPeoEkLlQ75icjzY4UrlWxng2xnmZqb55nJsy
o3bl3l1VfsFkyY9UdLiGVMJBW/knW2kp8xZvNtgHojiGJHlqZEpji/LMP1Xl9FelcBl7
+ZIxLj0GubhLAes3nOL2oAnDpWHNCi9wdgA3etCm3o5AcjYeLPJrjb122n7TcW2hGeia
zHwA==
X-Gm-Message-State: AJIora8xkl4jwOfQdPkGIpGg9SlxXyon+jhnP39TRmRyjNbKEzs5B/ft
8s2bQzpFgyuIeppgFfTag7lGZFnndf4sgUDDXKA=
X-Google-Smtp-Source: AGRyM1s0QjN533qYTJoDvRk/CAxHrgBtQ98cntsv/grVVXlkomAoqW9q+QZ5istZbIH+CadCVIMwqH6twjMIMCLCyH8=
X-Received: by 2002:a02:23c7:0:b0:341:7ba4:f670 with SMTP id
u190-20020a0223c7000000b003417ba4f670mr10534623jau.104.1659535822017; Wed, 03
Aug 2022 07:10:22 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a92:b111:0:0:0:0:0 with HTTP; Wed, 3 Aug 2022 07:10:21 -0700 (PDT)
Reply-To: mahmoudalhamou@gmail.com
From: Mahmoud Al Hamoud
Date: Wed, 3 Aug 2022 15:10:21 +0100
Message-ID:
Subject: LOAN/ PROJECT.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 7.5
X-Spam_score_int: 75
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Sir We are a United Arab Emirates based investment company
known as AbuDhabi Investment Authority working on expanding its portfolio
globally and financing projects. We are offering Corporate and Personal Loan
at 3.5% Interest Rate for a duration of 5 to 10 years.
Content analysis details: (7.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.65 listed in wl.mailspike.net]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[rolanddubois945[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[rolanddubois945[at]gmail.com]
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} LOAN/ PROJECT.
Dear Sir
We are a United Arab Emirates based investment company known as
AbuDhabi Investment Authority working on expanding its portfolio
globally and financing projects.
We are offering Corporate and Personal Loan at 3.5% Interest Rate for
a duration of 5 to 10 years.
We also pay 2% commission to brokers who introduce project owners for
finance or other opportunities.
Please get back to us if you are interested for further embellishment.
Yours truly,
Mahmoud Al Hamoud
(Personal Assistant)
Abu Dhabi Investment Authority
211 Corniche, PO Box 3600
Abu Dhabi,United Arab Emirates
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 03 Aug 2022 11:58:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oJIcV-000NDZ-DE
for dave@doctor.nl2k.ab.ca;
Wed, 03 Aug 2022 11:57:23 -0600
Resent-From: The Doctor
Resent-Date: Wed, 3 Aug 2022 11:57:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f65.google.com ([209.85.166.65]:34813)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oJF5B-000I0t-HF
for doctor@nl2k.ab.ca;
Wed, 03 Aug 2022 08:10:49 -0600
Received: by mail-io1-f65.google.com with SMTP id x64so12971724iof.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=O+cYsWop0ahmbYhZ9xW4Ys7gR1G24pACccWsZkdl/f0=;
b=SE1LnaTi/r9ExA/BR7qXmJT+QwWfNW7gXlnnVVFBvxC4mk3DHkAQFF9pajef5Phsgl
5H1umur3+F4/OogenAXqrwvITCRrdbfqqhEl/32zHJYZ5R0J0ashXQ/TrvyR0UI72C1h
zT69NCSSbAiTIFPM+RCuPYLbUiTc55FNV/zwTNZ30Vb74WSWLJzbP3pE7HEceLSyo/5k
LQz98+w8lJgyDwaite+0DjPxxK8NwO1oIpLyTg/n6eA9mLTH0kMxJ9X9DD1geK6g51Qs
Kh394vEOPeEkej6rOIZiBO4yR1SAe/UubDrudML/Tb48cvO5B0fU7EFNp0TE6/J9ZldY
SPXg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=O+cYsWop0ahmbYhZ9xW4Ys7gR1G24pACccWsZkdl/f0=;
b=pceX4/flFGtKhtgPmMwgARXGH8Xi9SeqBy580xNs2ZAoWXuBAGqaveUtxfLFTJ7Ht9
x/Jn1ZtuaP0QSVVB8wJa+8ndO2v5QPY4qpevJI0MqquKecl3GqbVgaDWiudmk2bCEGqs
ZY45TQQiqQsvcfsgNKhbskB9G3lLklEfPeoEkLlQ75icjzY4UrlWxng2xnmZqb55nJsy
o3bl3l1VfsFkyY9UdLiGVMJBW/knW2kp8xZvNtgHojiGJHlqZEpji/LMP1Xl9FelcBl7
+ZIxLj0GubhLAes3nOL2oAnDpWHNCi9wdgA3etCm3o5AcjYeLPJrjb122n7TcW2hGeia
zHwA==
X-Gm-Message-State: AJIora8xkl4jwOfQdPkGIpGg9SlxXyon+jhnP39TRmRyjNbKEzs5B/ft
8s2bQzpFgyuIeppgFfTag7lGZFnndf4sgUDDXKA=
X-Google-Smtp-Source: AGRyM1s0QjN533qYTJoDvRk/CAxHrgBtQ98cntsv/grVVXlkomAoqW9q+QZ5istZbIH+CadCVIMwqH6twjMIMCLCyH8=
X-Received: by 2002:a02:23c7:0:b0:341:7ba4:f670 with SMTP id
u190-20020a0223c7000000b003417ba4f670mr10534623jau.104.1659535822017; Wed, 03
Aug 2022 07:10:22 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a92:b111:0:0:0:0:0 with HTTP; Wed, 3 Aug 2022 07:10:21 -0700 (PDT)
Reply-To: mahmoudalhamou@gmail.com
From: Mahmoud Al Hamoud
Date: Wed, 3 Aug 2022 15:10:21 +0100
Message-ID:
Subject: LOAN/ PROJECT.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 7.5
X-Spam_score_int: 75
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Sir We are a United Arab Emirates based investment company
known as AbuDhabi Investment Authority working on expanding its portfolio
globally and financing projects. We are offering Corporate and Personal Loan
at 3.5% Interest Rate for a duration of 5 to 10 years.
Content analysis details: (7.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.65 listed in wl.mailspike.net]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[rolanddubois945[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[rolanddubois945[at]gmail.com]
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} LOAN/ PROJECT.
Dear Sir
We are a United Arab Emirates based investment company known as
AbuDhabi Investment Authority working on expanding its portfolio
globally and financing projects.
We are offering Corporate and Personal Loan at 3.5% Interest Rate for
a duration of 5 to 10 years.
We also pay 2% commission to brokers who introduce project owners for
finance or other opportunities.
Please get back to us if you are interested for further embellishment.
Yours truly,
Mahmoud Al Hamoud
(Personal Assistant)
Abu Dhabi Investment Authority
211 Corniche, PO Box 3600
Abu Dhabi,United Arab Emirates
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments