Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 10 Aug 2022 06:51:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oLlAD-00030A-MP
for dave@doctor.nl2k.ab.ca;
Wed, 10 Aug 2022 06:50:21 -0600
Resent-From: The Doctor
Resent-Date: Wed, 10 Aug 2022 06:50:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f196.google.com ([209.85.160.196]:36711)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oLkCb-000LzU-Ec
for doctor@doctor.nl2k.ab.ca;
Wed, 10 Aug 2022 05:48:49 -0600
Received: by mail-qt1-f196.google.com with SMTP id h22so10951793qta.3
for; Wed, 10 Aug 2022 04:48:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=LcyB6qGbjGNNHk28Jru3xZ4PwluqjVOS1SdS9UchuLc=;
b=LVuVF8QjpmYwEeMO1AeFbNFKlVhzQAZgajIl/1vl+riXeB7dy9YjRu2XwBf5ZySSWn
3HBERDLyKJFSLDJPFCfzXPEY77oq/9y1yhAz/VL2Go2A0526uPIJc1WTQUGOJabKN/lR
knmznDIh8kt/+/f21E3wrivHUki9UT4qyMGbzxkmbd02cuaqWtMKAS1JQ6ajg3xxlvvG
mM27ZqB5/j2xZ+Qw3rl4r9zB9HPIXVBhRZAKryvLFX4GfNUmAyhdwG7PfQEIOFVkirbM
JLbRrR8hmKcaAKW5496dYncqXh+AIImlAo6dAg1DgvkzGJ8fUP2R/UTnsdev0hpdhAe6
PZWA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=LcyB6qGbjGNNHk28Jru3xZ4PwluqjVOS1SdS9UchuLc=;
b=zRmR6YF983jHPz8EwB+PIq56SlSd/xlqXkjLW1u1hgFuFT3D9t6pgHnjHvLcYdxKhv
FnYn73yBE/GfX/BYhloZ7Z1RKugZNbc9a/xx+AxapuwCypIK+19Dc0Q538iAcpwUNgTw
h4fp8ruvNFAFLBlsL+mlNaTS6szU1aYWT0ogtZh8H9LG9Cnuc2tyQUSIgequBeif94Vh
MEciyrtZcPGcARxlHcD0LJ+ZxQbmHHoDu/Of2n40OHabgBn11bgTySHK48lnzAnb1spu
njI0ylxFqBgvMqTBcu4T+G0bitIaf6OzDsPU0+Xa0iU42ci/h8tksUKQAVzQoJBp65h7
UOyg==
X-Gm-Message-State: ACgBeo0FEvYxFwBzIWtVzddNDcZuR1vY+p7QpE5Xqh7v0AolPJqJy8fk
wIzrpXz7PynkjI8Y4A44OyKzEnPIUu/PYKp8dO3zGdkUTsqU1g==
X-Google-Smtp-Source: AA6agR6cap36Yn45DSfawFZV7RA7MFN/yg14gCa41aTFj5oAS8l5yodYDgTEKgxpBvrGlRfiFfPTKsdzCkslnWKik+Y=
X-Received: by 2002:a05:620a:f0d:b0:6a9:b3e9:dc3f with SMTP id
v13-20020a05620a0f0d00b006a9b3e9dc3fmr20598568qkl.437.1660132090256; Wed, 10
Aug 2022 04:48:10 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6214:913:0:0:0:0 with HTTP; Wed, 10 Aug 2022 04:48:09
-0700 (PDT)
Reply-To: drharunabello4@gmail.com
From: Dr Haruna Bello
Date: Wed, 10 Aug 2022 04:48:09 -0700
Message-ID:
Subject: GOOD DAY
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 24.0
X-Spam_score_int: 240
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- My Greetings to you I am Dr Haruna Bello I have a project
of $58.7Million Us Dollars which I will like you to support me so that the
fund will be transfer into your bank account. Please if you are capable and
willing , kindly reply back to me so that i will give more details about
this project. my private e-mail at (drharunabello4@gmail.com)
Content analysis details: (24.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.196 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[drharunabello4[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[eirientreprise[at]gmail.com]
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.9 URG_BIZ BODY: Contains urgent matter
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_DR No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of
money
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
Subject: {SPAM?} GOOD DAY
--
My Greetings to you
I am Dr Haruna Bello I have a project of $58.7Million Us Dollars
which I will like you to support me so that the fund will be transfer
into your bank account.
Please if you are capable and willing , kindly reply back to me so
that i will give more details about this project. my private e-mail at
(drharunabello4@gmail.com)
Sorry if you received this letter in your spam or junk Email, is due to recent
connection error here in the country.
further details of the Project will be forwarded to you as soon as I
receive your wiliness to join hand with me.
Am awaiting your urgent response with this informations
Name:...................
Sex:...............
Age:...................
Occupation:........
Address:...............
Pasport/Id Card.........
Tel/ Fax:...............
State:.............
Country Of origin:..........
Have a nice day!!
Dr Haruna Bello
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 10 Aug 2022 06:51:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oLlAD-00030A-MP
for dave@doctor.nl2k.ab.ca;
Wed, 10 Aug 2022 06:50:21 -0600
Resent-From: The Doctor
Resent-Date: Wed, 10 Aug 2022 06:50:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f196.google.com ([209.85.160.196]:36711)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oLkCb-000LzU-Ec
for doctor@doctor.nl2k.ab.ca;
Wed, 10 Aug 2022 05:48:49 -0600
Received: by mail-qt1-f196.google.com with SMTP id h22so10951793qta.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=LcyB6qGbjGNNHk28Jru3xZ4PwluqjVOS1SdS9UchuLc=;
b=LVuVF8QjpmYwEeMO1AeFbNFKlVhzQAZgajIl/1vl+riXeB7dy9YjRu2XwBf5ZySSWn
3HBERDLyKJFSLDJPFCfzXPEY77oq/9y1yhAz/VL2Go2A0526uPIJc1WTQUGOJabKN/lR
knmznDIh8kt/+/f21E3wrivHUki9UT4qyMGbzxkmbd02cuaqWtMKAS1JQ6ajg3xxlvvG
mM27ZqB5/j2xZ+Qw3rl4r9zB9HPIXVBhRZAKryvLFX4GfNUmAyhdwG7PfQEIOFVkirbM
JLbRrR8hmKcaAKW5496dYncqXh+AIImlAo6dAg1DgvkzGJ8fUP2R/UTnsdev0hpdhAe6
PZWA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=LcyB6qGbjGNNHk28Jru3xZ4PwluqjVOS1SdS9UchuLc=;
b=zRmR6YF983jHPz8EwB+PIq56SlSd/xlqXkjLW1u1hgFuFT3D9t6pgHnjHvLcYdxKhv
FnYn73yBE/GfX/BYhloZ7Z1RKugZNbc9a/xx+AxapuwCypIK+19Dc0Q538iAcpwUNgTw
h4fp8ruvNFAFLBlsL+mlNaTS6szU1aYWT0ogtZh8H9LG9Cnuc2tyQUSIgequBeif94Vh
MEciyrtZcPGcARxlHcD0LJ+ZxQbmHHoDu/Of2n40OHabgBn11bgTySHK48lnzAnb1spu
njI0ylxFqBgvMqTBcu4T+G0bitIaf6OzDsPU0+Xa0iU42ci/h8tksUKQAVzQoJBp65h7
UOyg==
X-Gm-Message-State: ACgBeo0FEvYxFwBzIWtVzddNDcZuR1vY+p7QpE5Xqh7v0AolPJqJy8fk
wIzrpXz7PynkjI8Y4A44OyKzEnPIUu/PYKp8dO3zGdkUTsqU1g==
X-Google-Smtp-Source: AA6agR6cap36Yn45DSfawFZV7RA7MFN/yg14gCa41aTFj5oAS8l5yodYDgTEKgxpBvrGlRfiFfPTKsdzCkslnWKik+Y=
X-Received: by 2002:a05:620a:f0d:b0:6a9:b3e9:dc3f with SMTP id
v13-20020a05620a0f0d00b006a9b3e9dc3fmr20598568qkl.437.1660132090256; Wed, 10
Aug 2022 04:48:10 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6214:913:0:0:0:0 with HTTP; Wed, 10 Aug 2022 04:48:09
-0700 (PDT)
Reply-To: drharunabello4@gmail.com
From: Dr Haruna Bello
Date: Wed, 10 Aug 2022 04:48:09 -0700
Message-ID:
Subject: GOOD DAY
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 24.0
X-Spam_score_int: 240
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- My Greetings to you I am Dr Haruna Bello I have a project
of $58.7Million Us Dollars which I will like you to support me so that the
fund will be transfer into your bank account. Please if you are capable and
willing , kindly reply back to me so that i will give more details about
this project. my private e-mail at (drharunabello4@gmail.com)
Content analysis details: (24.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.196 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[drharunabello4[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[eirientreprise[at]gmail.com]
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.9 URG_BIZ BODY: Contains urgent matter
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_DR No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of
money
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
Subject: {SPAM?} GOOD DAY
--
My Greetings to you
I am Dr Haruna Bello I have a project of $58.7Million Us Dollars
which I will like you to support me so that the fund will be transfer
into your bank account.
Please if you are capable and willing , kindly reply back to me so
that i will give more details about this project. my private e-mail at
(drharunabello4@gmail.com)
Sorry if you received this letter in your spam or junk Email, is due to recent
connection error here in the country.
further details of the Project will be forwarded to you as soon as I
receive your wiliness to join hand with me.
Am awaiting your urgent response with this informations
Name:...................
Sex:...............
Age:...................
Occupation:........
Address:...............
Pasport/Id Card.........
Tel/ Fax:...............
State:.............
Country Of origin:..........
Have a nice day!!
Dr Haruna Bello
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments