Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 16 Aug 2022 06:44:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oNvvC-0007Ai-Jv
for dave@doctor.nl2k.ab.ca;
Tue, 16 Aug 2022 06:43:50 -0600
Resent-From: The Doctor
Resent-Date: Tue, 16 Aug 2022 06:43:50 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f169.google.com ([209.85.210.169]:37667)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oNv5W-0000vc-3f
for root@doctor.nl2k.ab.ca;
Tue, 16 Aug 2022 05:50:29 -0600
Received: by mail-pf1-f169.google.com with SMTP id f30so9136435pfq.4
for; Tue, 16 Aug 2022 04:50:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=PUvn+STq1OJAxLGd8TKdiz1s0nXuNQWcsjGVYttJSRE=;
b=pUjYnK8iMAYKuFDef5wVzX6uCrQS+cei+sL/l4+aBlrDx7Rtw4FM9z4qqKftYeTnER
fktrScMhEfHLogLfj9mGJZX2QgbC6a/bxLSyhD8A+Q6Y2UGafEQcVSBvQ8JSnOC/gWBX
VYPwvgQHWCjLcIfj62lhNzECILWDK23lajQYzRs+AN2b0p/Mr5/iZ3NwLIT4v3DmA8J2
5zQq4uSdrQLKhfUK6OBpAh2kKwfWq+LQPwtHIVEBixFC3TQNgEFLsQLjX9PrKLDxhUrM
9mKkzcxnx+aw5D2pS7JnDE0s27tnCpniKSwLty80WHdjsh2qt9cNF6wIXJ48qC7wkNbG
um9Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=PUvn+STq1OJAxLGd8TKdiz1s0nXuNQWcsjGVYttJSRE=;
b=5vEmrapjMqFLBmdAT8XlBoghb/xDnr8bWJOfu8uO75H3y+JQ3FxLN8KGFvbxS6iMNA
xdyIzBuWlPp6pP+TnCL/D9ZiXjypzmy21MChkJ3rcab7UgTsCSwVSn8IqsDnHp03P7KC
LE/l0BuG8s6eFaHVM8pwXOs5l90Rcwo0xI6Zj0tckkw0T3wtUC4pp7GWKgk/+ha6bNub
fsDjXZM9MT7/Cq7MkviYjOFYTFXQwiJui4hxADwnCj0/CrYFvgBWOYFiNUE+/oeN/3LQ
Sd2vVuj8nJ0rWM4uqrjB8XWG4xRMY7s+6wufXBbcszc2wkcpHCPAIq3t4a1rFNvwIzmf
yZCg==
X-Gm-Message-State: ACgBeo1CnQkzZzPZSRDxAT6OSBbG+TK9Kb9+9BYVJkfG2PnXQ/kQs1g1
ycmdzfCDrnuhA/DNVrCJmRtGVQ3+dsPHg9U3RrI=
X-Google-Smtp-Source: AA6agR4RY/nAIjsUD7jvZ4qqELK+KSI6nWB+iEhkSv8DzAG7+3tDZzY0R4jTeyVUw6309wXC2NQ3qpu5hA/eHpu9b8s=
X-Received: by 2002:a63:82c1:0:b0:41b:db18:73e2 with SMTP id
w184-20020a6382c1000000b0041bdb1873e2mr17557738pgd.195.1660650599615; Tue, 16
Aug 2022 04:49:59 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6a21:1515:b0:8b:65d2:8cf1 with HTTP; Tue, 16 Aug 2022
04:49:58 -0700 (PDT)
Reply-To: zhancheung88@gmail.com
From: Zhan Cheung
Date: Tue, 16 Aug 2022 04:49:58 -0700
Message-ID:
Subject: Re
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@doctor.nl2k.ab.ca
X-Spam_score: 9.0
X-Spam_score_int: 90
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- My name is Zhan Cheung, I am a public bank officer here
in Wing Hang Bank, Hong Kong and I have 18,991,674 USD. that I want to leave
the country. I need a good partner, someone I can trust. It is r [...]
Content analysis details: (9.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.169 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[cterkumbur[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[zhancheung88[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Re
--
My name is Zhan Cheung, I am a public bank officer here in Wing Hang
Bank, Hong Kong and I have 18,991,674 USD. that I want to leave the
country. I need a good partner, someone I can trust. It is risk free
and legal. Reply to my email:
zhancheung88@gmail.com
For more information:
Mr Zhan Cheung
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 16 Aug 2022 06:44:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oNvvC-0007Ai-Jv
for dave@doctor.nl2k.ab.ca;
Tue, 16 Aug 2022 06:43:50 -0600
Resent-From: The Doctor
Resent-Date: Tue, 16 Aug 2022 06:43:50 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f169.google.com ([209.85.210.169]:37667)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oNv5W-0000vc-3f
for root@doctor.nl2k.ab.ca;
Tue, 16 Aug 2022 05:50:29 -0600
Received: by mail-pf1-f169.google.com with SMTP id f30so9136435pfq.4
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=PUvn+STq1OJAxLGd8TKdiz1s0nXuNQWcsjGVYttJSRE=;
b=pUjYnK8iMAYKuFDef5wVzX6uCrQS+cei+sL/l4+aBlrDx7Rtw4FM9z4qqKftYeTnER
fktrScMhEfHLogLfj9mGJZX2QgbC6a/bxLSyhD8A+Q6Y2UGafEQcVSBvQ8JSnOC/gWBX
VYPwvgQHWCjLcIfj62lhNzECILWDK23lajQYzRs+AN2b0p/Mr5/iZ3NwLIT4v3DmA8J2
5zQq4uSdrQLKhfUK6OBpAh2kKwfWq+LQPwtHIVEBixFC3TQNgEFLsQLjX9PrKLDxhUrM
9mKkzcxnx+aw5D2pS7JnDE0s27tnCpniKSwLty80WHdjsh2qt9cNF6wIXJ48qC7wkNbG
um9Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=PUvn+STq1OJAxLGd8TKdiz1s0nXuNQWcsjGVYttJSRE=;
b=5vEmrapjMqFLBmdAT8XlBoghb/xDnr8bWJOfu8uO75H3y+JQ3FxLN8KGFvbxS6iMNA
xdyIzBuWlPp6pP+TnCL/D9ZiXjypzmy21MChkJ3rcab7UgTsCSwVSn8IqsDnHp03P7KC
LE/l0BuG8s6eFaHVM8pwXOs5l90Rcwo0xI6Zj0tckkw0T3wtUC4pp7GWKgk/+ha6bNub
fsDjXZM9MT7/Cq7MkviYjOFYTFXQwiJui4hxADwnCj0/CrYFvgBWOYFiNUE+/oeN/3LQ
Sd2vVuj8nJ0rWM4uqrjB8XWG4xRMY7s+6wufXBbcszc2wkcpHCPAIq3t4a1rFNvwIzmf
yZCg==
X-Gm-Message-State: ACgBeo1CnQkzZzPZSRDxAT6OSBbG+TK9Kb9+9BYVJkfG2PnXQ/kQs1g1
ycmdzfCDrnuhA/DNVrCJmRtGVQ3+dsPHg9U3RrI=
X-Google-Smtp-Source: AA6agR4RY/nAIjsUD7jvZ4qqELK+KSI6nWB+iEhkSv8DzAG7+3tDZzY0R4jTeyVUw6309wXC2NQ3qpu5hA/eHpu9b8s=
X-Received: by 2002:a63:82c1:0:b0:41b:db18:73e2 with SMTP id
w184-20020a6382c1000000b0041bdb1873e2mr17557738pgd.195.1660650599615; Tue, 16
Aug 2022 04:49:59 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6a21:1515:b0:8b:65d2:8cf1 with HTTP; Tue, 16 Aug 2022
04:49:58 -0700 (PDT)
Reply-To: zhancheung88@gmail.com
From: Zhan Cheung
Date: Tue, 16 Aug 2022 04:49:58 -0700
Message-ID:
Subject: Re
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@doctor.nl2k.ab.ca
X-Spam_score: 9.0
X-Spam_score_int: 90
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- My name is Zhan Cheung, I am a public bank officer here
in Wing Hang Bank, Hong Kong and I have 18,991,674 USD. that I want to leave
the country. I need a good partner, someone I can trust. It is r [...]
Content analysis details: (9.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.169 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[cterkumbur[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[zhancheung88[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Re
--
My name is Zhan Cheung, I am a public bank officer here in Wing Hang
Bank, Hong Kong and I have 18,991,674 USD. that I want to leave the
country. I need a good partner, someone I can trust. It is risk free
and legal. Reply to my email:
zhancheung88@gmail.com
For more information:
Mr Zhan Cheung
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments