Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 08 Aug 2022 23:37:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oLHuk-000CI6-RF
for dave@doctor.nl2k.ab.ca;
Mon, 08 Aug 2022 23:36:26 -0600
Resent-From: The Doctor
Resent-Date: Mon, 8 Aug 2022 23:36:26 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f169.google.com ([209.85.167.169]:40749)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oLDrg-000Jzq-6l
for doctor@nl2k.ab.ca;
Mon, 08 Aug 2022 19:17:04 -0600
Received: by mail-oi1-f169.google.com with SMTP id c185so12312233oia.7
for; Mon, 08 Aug 2022 18:16:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=08n2Pki5hWvUaWv8Oict/orf2N13lVHmi4U4+y2Dnp8=;
b=GbU+gvK6sQ/5LHUKWoIlkrquUWXxaFmDm23+2T0COmmg3fABCiH+54mCegpjJO8pA0
M8T3bFUNsjmv0MSPwRqQWfDB7Nfu8r6SwCkuAp6HR0NQyn0GpwngX1Bi6k7+90i6fyon
WGmIGU+cPEd8m8bXBuThZMs7Q+yfJJgjbwsyZIPJpsfHeKcT/ySL5YpjqVIGD7xR7k7x
pcsmZAa0JJ2oxgninBr0lDVWb/6z+bSkH1J914GAvHYxXhHF6PJbgPyg1mBAfsZt7HFu
D94Zu304+67FBnvdjJYZYKdiqZ85qgALWdElGo/LDTBbZCXBDsiM7hZy/CRLztgfM9eJ
7Mpg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=08n2Pki5hWvUaWv8Oict/orf2N13lVHmi4U4+y2Dnp8=;
b=e88j9iBA/Yw+nBMN4iz3xf7vWTnEBXaB8T5arSIinKHENVRX2CQde1q36+IoSwYTJK
Pa9Rx+MjCxb8ma38JWNQ2v9Ns3clV6m3dIw5dF1FLRdhWNwfHuJ9KKaM2G169uE4VM0E
6W5Zig2gBxNe8PPASvUwv7V1F3JQcO68WzBwA4/tMT1UpwETHiMMGKu3I1ZJyxMy88cr
/z+RlhlwfO5CptiPAs1jU4KQJZ1v05ihikJie0mDxvd3HqiWgFqNTf0xT82InOMc+Vh2
BozHgLQOreI7SLYTs5bt+ZLv49eDfoP7WTHrEig9EI8jg/rmSzn51HnZu5Sz+Ffj0Utw
IuCQ==
X-Gm-Message-State: ACgBeo3Bwi9CnAcFyd9oK5IPy0AyFUjFkmkYs7P6JCTf3tB/HNH86gRI
c4IxTB4Asq1Mw5I3GABsgj/iTmprzDVonG1d/Ne6F3vqStU=
X-Google-Smtp-Source: AA6agR6XTN+CRRBPabs+1kWi/7PasnTAnSf3MGaeIDWr2OfO0iKOH+dDV1SBcN90s4U+HayToy5I1CRC6HSn3T46iSk=
X-Received: by 2002:a05:6808:d49:b0:33a:a95f:8b6f with SMTP id
w9-20020a0568080d4900b0033aa95f8b6fmr9276449oik.251.1660007796866; Mon, 08
Aug 2022 18:16:36 -0700 (PDT)
MIME-Version: 1.0
Reply-To: dhlcompany259@gmail.com
From: "Mr.Geroge Whit"
Date: Mon, 8 Aug 2022 18:16:08 -0700
Message-ID:
Subject:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000000e83ac05e5c4af2f"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 20.9
X-Spam_score_int: 209
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- DHL International Benin Lot No. 23 Patte D'Oie 03 BP 2147
Porto Novo, Benin Republic. DHL PACKAGE DELIVERY NOTIFICATION
Content analysis details: (20.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: office.it]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.169 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[dhlcompany259[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[yayabastou34[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[yayabastou34[at]gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 MONEY_ATM_CARD Lots of money on an ATM card
1.0 ACCT_PHISHING Possible phishing for account information
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?}
--0000000000000e83ac05e5c4af2f
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--=20
DHL International Benin
Lot No. 23 Patte D'Oie 03
BP 2147 Porto Novo, Benin Republic.
DHL PACKAGE DELIVERY NOTIFICATION
Your package worth the total sum of $3,500,000 United State Dollar in
an ATM CARD is here in our office.It was deposited to this office by
the United Nations {HEAD CONSULTANT} saying that it was won by your
email address in their ongoing online random selection Compensation
Program 2022 in association with the International Corporation Benin
Republic OIL & GAS LTD.
What you have to do now is to contact our delivery department with
your information and as soon as we confirm your details our delivery
team will commence with the delivery of your package to your
designated address immediately.
You would required to submit information below:
Your Full Name:.............
Your Home address where the ATM CARD will be delivered:......
Your Phone Number:..............
YOUR NEAREST AIRPORT:...........
Your Country:..................
We shall proceed on your delivery as soon as we confirm your
information.
NOTE THAT;,you are to contact our Head Dispatch Officer MR George White
with all this information to avoid wrong delivery thanks.
We Await your prompt positive response.
*******************************************
DHL Express =C2=AECourier Company.
Mr.George White {Head Dispatch Officer}
Office Number +22953119766.
open 8am-8pm.
Email:dhlcompany259@gmail.com
--0000000000000e83ac05e5c4af2f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--
lass=3D"gmail_signature" data-smartmail=3D"gmail_signature">
DHL Interna=
tional Benin
Lot No. 23 Patte D'Oie 03
BP 2147 Porto Novo, Benin =
Republic.
DHL PACKAGE DELIVERY NOTIFICATION
Your package wort=
h the total sum of $3,500,000 United State Dollar in
an ATM CARD is here=
in our office.It was deposited to this office by
the United Nations {HE=
AD CONSULTANT} saying that it was won by your
email address in their ong=
oing online random selection Compensation
Program 2022 in association wi=
th the International Corporation Benin
Republic OIL & GAS LTD.
r>What you have to do now is to contact our delivery department with
you=
r information and as soon as we confirm your details our delivery
team w=
ill commence with the delivery of your package to your
designated addres=
s immediately.
You would required to submit information below:
r>
Your Full Name:.............
Your Home address where the ATM CARD =
will be delivered:......
Your Phone Number:..............
YOUR NEARES=
T AIRPORT:...........
Your Country:..................
We shall pr=
oceed on your delivery as soon as we confirm your
information.
NO=
TE THAT;,you are to contact our Head Dispatch Officer MR George White with =
all this information to avoid wrong delivery thanks.
We Await your p=
rompt positive response.
*******************************************=
DHL Express =C2=AECourier Company.
Mr.George White {Head Dispatch Of=
ficer}
Office Number +22953119766.
open 8am-8pm.
=3D"mailto:Email%3Adhlcompany259@gmail.com" target=3D"_blank">Email:dhlcomp=
any259@gmail.com
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 08 Aug 2022 23:37:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oLHuk-000CI6-RF
for dave@doctor.nl2k.ab.ca;
Mon, 08 Aug 2022 23:36:26 -0600
Resent-From: The Doctor
Resent-Date: Mon, 8 Aug 2022 23:36:26 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f169.google.com ([209.85.167.169]:40749)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oLDrg-000Jzq-6l
for doctor@nl2k.ab.ca;
Mon, 08 Aug 2022 19:17:04 -0600
Received: by mail-oi1-f169.google.com with SMTP id c185so12312233oia.7
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=08n2Pki5hWvUaWv8Oict/orf2N13lVHmi4U4+y2Dnp8=;
b=GbU+gvK6sQ/5LHUKWoIlkrquUWXxaFmDm23+2T0COmmg3fABCiH+54mCegpjJO8pA0
M8T3bFUNsjmv0MSPwRqQWfDB7Nfu8r6SwCkuAp6HR0NQyn0GpwngX1Bi6k7+90i6fyon
WGmIGU+cPEd8m8bXBuThZMs7Q+yfJJgjbwsyZIPJpsfHeKcT/ySL5YpjqVIGD7xR7k7x
pcsmZAa0JJ2oxgninBr0lDVWb/6z+bSkH1J914GAvHYxXhHF6PJbgPyg1mBAfsZt7HFu
D94Zu304+67FBnvdjJYZYKdiqZ85qgALWdElGo/LDTBbZCXBDsiM7hZy/CRLztgfM9eJ
7Mpg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=08n2Pki5hWvUaWv8Oict/orf2N13lVHmi4U4+y2Dnp8=;
b=e88j9iBA/Yw+nBMN4iz3xf7vWTnEBXaB8T5arSIinKHENVRX2CQde1q36+IoSwYTJK
Pa9Rx+MjCxb8ma38JWNQ2v9Ns3clV6m3dIw5dF1FLRdhWNwfHuJ9KKaM2G169uE4VM0E
6W5Zig2gBxNe8PPASvUwv7V1F3JQcO68WzBwA4/tMT1UpwETHiMMGKu3I1ZJyxMy88cr
/z+RlhlwfO5CptiPAs1jU4KQJZ1v05ihikJie0mDxvd3HqiWgFqNTf0xT82InOMc+Vh2
BozHgLQOreI7SLYTs5bt+ZLv49eDfoP7WTHrEig9EI8jg/rmSzn51HnZu5Sz+Ffj0Utw
IuCQ==
X-Gm-Message-State: ACgBeo3Bwi9CnAcFyd9oK5IPy0AyFUjFkmkYs7P6JCTf3tB/HNH86gRI
c4IxTB4Asq1Mw5I3GABsgj/iTmprzDVonG1d/Ne6F3vqStU=
X-Google-Smtp-Source: AA6agR6XTN+CRRBPabs+1kWi/7PasnTAnSf3MGaeIDWr2OfO0iKOH+dDV1SBcN90s4U+HayToy5I1CRC6HSn3T46iSk=
X-Received: by 2002:a05:6808:d49:b0:33a:a95f:8b6f with SMTP id
w9-20020a0568080d4900b0033aa95f8b6fmr9276449oik.251.1660007796866; Mon, 08
Aug 2022 18:16:36 -0700 (PDT)
MIME-Version: 1.0
Reply-To: dhlcompany259@gmail.com
From: "Mr.Geroge Whit"
Date: Mon, 8 Aug 2022 18:16:08 -0700
Message-ID:
Subject:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000000e83ac05e5c4af2f"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 20.9
X-Spam_score_int: 209
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- DHL International Benin Lot No. 23 Patte D'Oie 03 BP 2147
Porto Novo, Benin Republic. DHL PACKAGE DELIVERY NOTIFICATION
Content analysis details: (20.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: office.it]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.169 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[dhlcompany259[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[yayabastou34[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[yayabastou34[at]gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 MONEY_ATM_CARD Lots of money on an ATM card
1.0 ACCT_PHISHING Possible phishing for account information
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?}
--0000000000000e83ac05e5c4af2f
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--=20
DHL International Benin
Lot No. 23 Patte D'Oie 03
BP 2147 Porto Novo, Benin Republic.
DHL PACKAGE DELIVERY NOTIFICATION
Your package worth the total sum of $3,500,000 United State Dollar in
an ATM CARD is here in our office.It was deposited to this office by
the United Nations {HEAD CONSULTANT} saying that it was won by your
email address in their ongoing online random selection Compensation
Program 2022 in association with the International Corporation Benin
Republic OIL & GAS LTD.
What you have to do now is to contact our delivery department with
your information and as soon as we confirm your details our delivery
team will commence with the delivery of your package to your
designated address immediately.
You would required to submit information below:
Your Full Name:.............
Your Home address where the ATM CARD will be delivered:......
Your Phone Number:..............
YOUR NEAREST AIRPORT:...........
Your Country:..................
We shall proceed on your delivery as soon as we confirm your
information.
NOTE THAT;,you are to contact our Head Dispatch Officer MR George White
with all this information to avoid wrong delivery thanks.
We Await your prompt positive response.
*******************************************
DHL Express =C2=AECourier Company.
Mr.George White {Head Dispatch Officer}
Office Number +22953119766.
open 8am-8pm.
Email:dhlcompany259@gmail.com
--0000000000000e83ac05e5c4af2f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
lass=3D"gmail_signature" data-smartmail=3D"gmail_signature">
DHL Interna=
tional Benin
Lot No. 23 Patte D'Oie 03
BP 2147 Porto Novo, Benin =
Republic.
DHL PACKAGE DELIVERY NOTIFICATION
Your package wort=
h the total sum of $3,500,000 United State Dollar in
an ATM CARD is here=
in our office.It was deposited to this office by
the United Nations {HE=
AD CONSULTANT} saying that it was won by your
email address in their ong=
oing online random selection Compensation
Program 2022 in association wi=
th the International Corporation Benin
Republic OIL & GAS LTD.
r>What you have to do now is to contact our delivery department with
you=
r information and as soon as we confirm your details our delivery
team w=
ill commence with the delivery of your package to your
designated addres=
s immediately.
You would required to submit information below:
r>
Your Full Name:.............
Your Home address where the ATM CARD =
will be delivered:......
Your Phone Number:..............
YOUR NEARES=
T AIRPORT:...........
Your Country:..................
We shall pr=
oceed on your delivery as soon as we confirm your
information.
NO=
TE THAT;,you are to contact our Head Dispatch Officer MR George White with =
all this information to avoid wrong delivery thanks.
We Await your p=
rompt positive response.
*******************************************=
DHL Express =C2=AECourier Company.
Mr.George White {Head Dispatch Of=
ficer}
Office Number +22953119766.
open 8am-8pm.
=3D"mailto:Email%3Adhlcompany259@gmail.com" target=3D"_blank">Email:dhlcomp=
any259@gmail.com
--0000000000000e83ac05e5c4af2f--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments