Asian nigerian spam from gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 13 Aug 2022 16:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oMzH9-000DxU-Ll

for dave@doctor.nl2k.ab.ca;

Sat, 13 Aug 2022 16:06:35 -0600

Resent-From: The Doctor

Resent-Date: Sat, 13 Aug 2022 16:06:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f50.google.com ([209.85.160.50]:36845)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oMvFL-00062G-0I

for doctor@nl2k.ab.ca;

Sat, 13 Aug 2022 11:48:33 -0600

Received: by mail-oa1-f50.google.com with SMTP id 586e51a60fabf-10ea9ef5838so4158902fac.3

for ; Sat, 13 Aug 2022 10:48:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc;

bh=S5Qb933+X/53GuciIkz1oLFAw7dYE3huEF5shYerdPo=;

b=igkp3wlR0cNAtUWf2IB8n1om7rHY6Qq/MxMOzTKX1iXB34c389tWclGXI0LBuBO9Cr

HekRV8Tk3njQDm5/FqK9gX6QvLbTGnZ7GPy2gIWCe+3IC28u2KeDXu4Dnd6UCfFAJmMk

V/NEZe26xOaPvMRKaJ4F1nVgjpTTNWltnA/L28nLJsu92/NrpDeGdircVkhesYxYLStU

Auoxkjlw/oWkz+2GFZKQvOWy8vc1BkCjQ4Fb37pTiVvUg7v63hfEPq3NuJSr5v+aalzj

SP3tg06mWdWTy+yvQ4KMv6f6MWSNpoWY/gvSQ2Nv4AVwIcGnWAEE/HfibcWbuHkKt0BW

cKOw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc;

bh=S5Qb933+X/53GuciIkz1oLFAw7dYE3huEF5shYerdPo=;

b=p3JGMlN+LIGGsfisFbDGgful60MoVDOZBR9CbPwCc2eHx0fsaDym8bnoJ2ojtFaqc6

TK53Uj9dC/Bfjr/wnj4NrUiVsz8Yno60zayeGHF3WnCzGi4wscXAUi+wHFNGiX6IbFtB

xbSVnUX+21uOlrZpyGfsNyo4EsTC+xMOmkjAEJ20T0DMDGbZPO1WQYyQsn2J7kL+EZ5+

PYEAosn2zXXUo5pBjsEc6Pg0EDI28feVHp0G6kHdk/djh5QKYfVIohRkNiVGyj5hWbtP

lA+S21QcUFbycmcp1xyHLUqbWn5+Exhl95kss89kLxK5ys7EZkh2UjUUnPdak7dwvIU7

NWGA==

X-Gm-Message-State: ACgBeo0pIuUK4poN3n3t3vM8CEGomxfn++Vr+MFYUJG9B9RIlESnhwda

RVzgl5CPmFhJFt9dn57P6jMS5I0Jeg+bj4aM9cA=

X-Google-Smtp-Source: AA6agR7e1huHObv1pz/ECMzQDENtQCYgvCo1dHg/J1tnOyx+LW/9VaVdvrBieequCrmDffduAaHHQSI3h3xcmJ++TLM=

X-Received: by 2002:a05:6870:a407:b0:10e:2baa:64f6 with SMTP id

m7-20020a056870a40700b0010e2baa64f6mr7919080oal.195.1660412883502; Sat, 13

Aug 2022 10:48:03 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a4a:6f18:0:0:0:0:0 with HTTP; Sat, 13 Aug 2022 10:48:03

-0700 (PDT)

Reply-To: mrsdjessie@gmail.com

From: Mrs Jessie Daniel

Date: Sat, 13 Aug 2022 19:48:03 +0200

Message-ID:

Subject: =?UTF-8?B?4LiC4Lit4Lia4LiE4Li44LiT4Liq4Liz4Lir4Lij4Lix4Lia4LiE4Lin4Liy4Lih4Lie?=

=?UTF-8?B?4Lii4Liy4Lii4Liy4Lih4LiC4Lit4LiH4LiE4Li44LiT?=

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: base64

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: เพื่อนที่รัก วันนี้คุณเป็นอย่างไร

ฉันหวังว่าคุณและครอบครัวจะสบายดี

ฉภ[...]



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.50 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[mariepauledano427[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[mariepauledano427[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} =?UTF-8?B?4LiC4Lit4Lia4LiE4Li44LiT4Liq4Liz4Lir4Lij4Lix4Lia4LiE4Lin4Liy4Lih4Lie?=

=?UTF-8?B?4Lii4Liy4Lii4Liy4Lih4LiC4Lit4LiH4LiE4Li44LiT?=



4LmA4Lie4Li34LmI4Lit4LiZ4LiX4Li14LmI4Lij4Lix4LiBIOC4p+C4seC4meC4meC4teC5ieC4

hOC4uOC4k+C5gOC4m+C5h+C4meC4reC4ouC5iOC4suC4h+C5hOC4oyDguInguLHguJnguKvguKfg

uLHguIfguKfguYjguLLguITguLjguJPguYHguKXguLDguITguKPguK3guJrguITguKPguLHguKfg

uIjguLDguKrguJrguLLguKLguJTguLUNCuC4ieC4seC4meC4iuC4t+C5iOC4reC4hOC4uOC4k+C5

gOC4iOC4quC4i+C4teC5iCDguYHguJTguYDguJnguLXguKLguKUg4LiX4Li14LmI4LmA4LiE4Lii

4LiV4Li04LiU4LiV4LmI4Lit4LiE4Li44LiT4LmA4LiB4Li14LmI4Lii4Lin4LiB4Lix4Lia4LiJ

4Lix4LiZDQrguKHguLnguKXguJnguLTguJjguLTguIHguLLguKPguIHguLjguKjguKUuIOC4ieC4

seC4meC4q+C4p+C4seC4h+C4p+C5iOC4suC4hOC4uOC4k+C4iOC4sOC4iOC4s+C4ieC4seC4meC5

hOC4lOC5ieC5hOC4q+C4oQ0K4LiJ4Lix4LiZ4Lii4Li04LiZ4LiU4Li14LiX4Li14LmI4LiI4Liw

4LmB4LiI4LmJ4LiH4LmD4Lir4LmJ4LiE4Li44LiT4LiX4Lij4Liy4Lia4Lin4LmI4Liy4LiJ4Lix

4LiZ4Lia4Lij4Li04LiI4Liy4LiE4LmA4LiH4Li04LiZ4Liq4Liz4LmA4Lij4LmH4LiI4LmB4Lil

4LmJ4LinDQrguKrguLnguYggQUFESEFSIEZPVU5EQVRJT04gTVVLQVRJIOC4reC4tOC4meC5gOC4

lOC4teC4og0KDQrguYPguJnguILguJPguLDguYDguJTguLXguKLguKfguIHguLHguJnguInguLHg

uJnguIHguYfguYTguKHguYjguKrguLLguKHguLLguKPguJbguKXguLfguKHguITguKfguLLguKHg

uJ7guKLguLLguKLguLLguKHguYHguKXguLDguITguKfguLLguKHguKvguYjguKfguIfguYPguKLg

uYPguJnguK3guJTguLXguJXguILguK3guIfguITguLjguJPguJfguLXguYjguIjguLDguIrguYjg

uKfguKLguInguLHguJnguYTguJTguYnguYHguKHguYnguKfguYjguLLguYDguKPguLLguIjguLAN

CuC5hOC4oeC5iOC5hOC4lOC5ieC5gOC4geC5h+C4muC4quC4tOC5iOC4h+C4meC4teC5ieC5hOC4

p+C5ieC4lOC5ieC4p+C4ouC4geC4seC4mSDguYHguJXguYjguInguLHguJnguKHguLXguILguYjg

uLLguKfguJTguLXguKrguLPguKvguKPguLHguJrguITguLjguJMg4LiU4LmJ4Lin4Lii4Lie4Lij

4Liw4Lih4Lir4Liy4LiB4Lij4Li44LiT4Liy4LiY4Li04LiE4Li44LiTDQrguJfguYjguLLguJng

uKXguK3guKPguYzguJQg4LiJ4Lix4LiZ4LiV4LmJ4Lit4LiH4LiB4Liy4Lij4LiI4Liw4LiK4LiU

4LmD4LiK4LmJ4LmD4Lir4LmJ4LiE4Li44LiT4LmA4Lib4LmH4LiZ4LmA4LiK4LmH4LiE4LiJ4Lia

4Lix4Lia4Lij4LmI4Liy4LiH4LiI4Liz4LiZ4Lin4LiZICQ1NTAsMDAwLjAwIOC4lOC4reC4peC4

peC4suC4o+C5jA0K4LiZ4Li14LmI4LiE4Li34Lit4LiC4Lit4LiH4LiC4Lin4Lix4LiN4LiC4Lit

4LiH4LiJ4Lix4LiZ4LmB4Lil4Liw4LiB4Liy4Lij4Liq4LiZ4Lix4Lia4Liq4LiZ4Li44LiZ4LmA

4Lie4Li14Lii4LiH4LmA4Lil4LmH4LiB4LiZ4LmJ4Lit4Lii4Liq4Liz4Lir4Lij4Lix4Lia4LiE

4Li44LiT4LmB4Lil4Liw4LiE4Lij4Lit4Lia4LiE4Lij4Lix4Lin4LiC4Lit4LiH4LiE4Li44LiT

DQrguILguYnguLLguJ7guYDguIjguYnguLLguYTguJTguYnguYPguKvguYnguYDguIrguYfguITg

uYHguIHguYjguYDguIjguYnguLLguK3guLLguKfguLLguKrguKfguLHguJTguILguK3guIfguYDg

uKPguLLguYHguKXguYnguKcg4LiE4Lij4Li04Liq4LmC4LiV4LmA4Lif4Lit4Lij4LmMIOC5guC4

o+C4iuC4suC4o+C5jOC4pSDguJ7guKPguYnguK3guKHguKrguYjguIcNCuC5gOC4nuC4t+C5iOC4

reC5g+C4q+C5ieC4hOC4uOC4k+C4quC4suC4oeC4suC4o+C4luC4neC4suC4geC5gOC4iuC5h+C4

hOC5g+C4meC4mOC4meC4suC4hOC4suC4o+C4guC4reC4h+C4hOC4uOC4k+C5gOC4nuC4t+C5iOC4

reC5geC4peC4geC5gOC4m+C5h+C4meC5gOC4h+C4tOC4meC4quC4lOC5hOC4lOC5iQ0KDQrguJXg

uLTguJTguJXguYjguK3guKvguKXguKfguIfguJ7guYjguK0g4LiE4Lij4Li04Liq4LmC4LiV4LmA

4Lif4Lit4Lij4LmM4LiV4Liy4Lih4LiX4Li14LmI4Lit4Lii4Li54LmI4Lit4Li14LmA4Lih4Lil

4LiU4LmJ4Liy4LiZ4Lil4LmI4Liy4LiHIOC4muC4reC4geC5gOC4guC4suC4p+C5iOC4suC4ieC4

seC4mQ0K4LiE4Li44LiT4LiZ4Liy4Lii4LmA4LiI4Liq4LiL4Li1IOC5geC4lOC5gOC4meC4teC4

ouC4pSDguILguK3guYPguKvguYnguYDguILguLLguIrguYjguKfguKLguIjguLHguJTguKrguYjg

uIcNCuC4leC4o+C4p+C4iOC4quC4reC4muC5hOC4m+C4ouC4seC4h+C4l+C4teC5iOC4reC4ouC4

ueC5iOC4guC4reC4h+C4hOC4uOC4kw0K4Lit4Li14LmA4Lih4Lil4LmMOiByZXYuY2hyaXNyb2No

YXNAZ21haWwuY29tDQrguYLguJfguKPguKjguLHguJ7guJfguYw6ICsyMjUgMDU3NiA1MDcgODY1

DQrguYDguKHguLfguYjguK3guITguLjguJPguYTguJTguYnguKPguLHguJrguYDguIrguYfguITg

uYHguKXguLDguJnguLPguYDguIfguLTguJnguK3guK3guIEg4LmC4Lib4Lij4LiU4Lia4Lij4Li0

4LiI4Liy4LiEICQyMDAsMDAwLjAwIOC5g+C4q+C5ieC4geC4seC4mg0K4Liq4Li04LiX4LiY4Li0

4Lie4Li04LmA4Lio4Lip4LiZ4LmJ4Lit4Lii4LiB4Lin4LmI4Liy4Lij4Lit4Lia4LiV4Lix4Lin

4LiE4Li44LiT4LmB4Lil4Liw4Lij4Lix4LiB4Lip4Liy4Liq4Lih4LiU4Li44Lil4LmD4Lir4LmJ

4LiB4Lix4Lia4LiV4Lix4Lin4LiE4Li44LiT4LmA4Lit4LiHDQoNCuC5gOC4ouC5h+C4meC4meC4

teC5ieC4ieC4seC4meC4iOC4sOC5gOC4lOC4tOC4meC4l+C4suC4h+C5hOC4m+C4reC4tOC4meC5

gOC4lOC4teC4ouC5gOC4nuC4t+C5iOC4reC4o+C4seC4muC4geC4suC4o+C4o+C4seC4geC4qeC4

suC4leC4suC4oeC4hOC4s+C5geC4meC4sOC4meC4sw0K4Lic4Li54LmJ4LmA4LiK4Li14LmI4Lii

4Lin4LiK4Liy4LiN4LiU4LmJ4Liy4LiZ4Lih4Liw4LmA4Lij4LmH4LiH4LiB4Liy4Lij4LmB4Lie

4LiX4Lii4LmM4Lit4Li04LiZ4LmA4LiU4Li14Lii4LiZIOC4leC4o+C4suC5guC4lA0K4LmC4Lib

4Lij4LiU4Lit4LiY4Li04Lip4LiQ4Liy4LiZ4LmA4Lic4Li34LmI4Lit4LiJ4Lix4LiZ4LmA4Liq

4Lih4LitDQrguJnguLLguIfguYDguIjguKrguIvguLXguYgg4LmB4LiU4LmA4LiZ4Li14Lii4Lil

DQo=

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA