Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 16 Aug 2022 07:28:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oNwbl-0000dz-De
for dave@doctor.nl2k.ab.ca;
Tue, 16 Aug 2022 07:27:49 -0600
Resent-From: The Doctor
Resent-Date: Tue, 16 Aug 2022 07:27:49 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f179.google.com ([209.85.128.179]:46066)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oNwW6-000Pke-Mj
for doctor@doctor.nl2k.ab.ca;
Tue, 16 Aug 2022 07:22:02 -0600
Received: by mail-yw1-f179.google.com with SMTP id 00721157ae682-3246910dac3so149934577b3.12
for; Tue, 16 Aug 2022 06:21:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc;
bh=XJcCtdzHlHc6RVHmnid6Iplysw0jrvS/xcLsOeW1J6o=;
b=kq7bjDTRPAV1YCSmK4zVotYwBJSN36XtBWRA4w1mV6xA2TB3Qw54ZAlw1NkMBRnXa3
oGdpQzHQArYjWFTv85+GTxNrHT+Z7W79HBV6VmBdzyQE6DCRrJ330LUBA3GesZ5gT0PS
wpikDW0nxIIqudn7I4xVUpNzEwWK6s1NmfzwkLKzOq2+RJAbxRC+fp0ajZAU1HYGcw2l
xVkEaSBNHAlWKTHLaHs0Q3xyET8FsEfbWFGs/afhwiVT/vqYrhQHoM00XppuO+no94+B
f/jjC2NEoLW1kCxmzhMWOzLpMhVXR7HAwOsylHiJbHfxPbip40SdZVzNJo+4IibX6fzy
JUEA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc;
bh=XJcCtdzHlHc6RVHmnid6Iplysw0jrvS/xcLsOeW1J6o=;
b=PrtYtm2LSq9+Mjko93uWe9QbOSuUhyfQiv2rejlAS8AceUePlcWGTxpp06SaAxWEYD
sXByDDXpWLb6gW1COSMQJBA++Ebe8NgOjHlIcnsMxjTQ5ApCmrPbsBpu6x0PASXN1xBz
5Bpav6daAk63HQaUX+1dWenvwJQbqks6xR29g6oW9TSpbcHxMUapYVg7nOIlUYIqmpTp
G+gTWrAb1uMGnEosbSg3wEGbtx7oXnLPqDCvy/q7TbTde8gDYD4P0ZBf4I0YszErdJIr
gcvdKRjc9sSI/9X55vbpLoa3IWnFPiZS6R5CTEnz1E+eMUO6uUuQxmhtoxbCJUPHmZfP
Ia1w==
X-Gm-Message-State: ACgBeo1JFRxa+/jS5JE7D18FaCrcq1a+tZ7JqAgZhfHV2Gx2Ho8qlBoL
P+O/A9iYBp8Iofnwz29qRIvM4JSjlrFq4c4gSjo=
X-Google-Smtp-Source: AA6agR5X6fViq9W7CcqyvwV/iu8YTq+iZ9eiZXW/w3hdT01aSCwxJFbtYQERgfTaafxeygbpFy7JdI1EFuwc2hGut+I=
X-Received: by 2002:a0d:e28c:0:b0:334:2a33:b923 with SMTP id
l134-20020a0de28c000000b003342a33b923mr1016304ywe.177.1660656095172; Tue, 16
Aug 2022 06:21:35 -0700 (PDT)
MIME-Version: 1.0
From: "Dr. Umar Bello"
Date: Tue, 16 Aug 2022 06:21:22 -0700
Message-ID:
Subject: GREETINGS:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000a59cba05e65ba04f"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.5
X-Spam_score_int: 115
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: GREETINGS: I am contacting you on a business deal of $19.5
Million US Dollars, ready for transfer into your account if we make this
claim, we will share it 60%/40%.100% risk free and it will be legally backed
up with government approved If you are interested reply for more details.
Content analysis details: (11.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.179 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[bellalogan584[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[bellalogan584[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 T_HK_NAME_FM_DR No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.1 RISK_FREE No risk!
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} GREETINGS:
--000000000000a59cba05e65ba04f
Content-Type: text/plain; charset="UTF-8"
GREETINGS:
I am contacting you on a business deal of $19.5 Million US Dollars,
ready for transfer into your account
if we make this claim, we will share it 60%/40%.100% risk free and it
will be legally backed up with government approved If you are
interested reply for more details.
Kindly reply for more details Waiting for your reply Make Sure You
Write To My Via E-mail Address...(umarbellod46@gmail.com)
Best regards
Dr.Umar Bello,
--000000000000a59cba05e65ba04f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000a59cba05e65ba04f--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 16 Aug 2022 07:28:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oNwbl-0000dz-De
for dave@doctor.nl2k.ab.ca;
Tue, 16 Aug 2022 07:27:49 -0600
Resent-From: The Doctor
Resent-Date: Tue, 16 Aug 2022 07:27:49 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f179.google.com ([209.85.128.179]:46066)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oNwW6-000Pke-Mj
for doctor@doctor.nl2k.ab.ca;
Tue, 16 Aug 2022 07:22:02 -0600
Received: by mail-yw1-f179.google.com with SMTP id 00721157ae682-3246910dac3so149934577b3.12
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc;
bh=XJcCtdzHlHc6RVHmnid6Iplysw0jrvS/xcLsOeW1J6o=;
b=kq7bjDTRPAV1YCSmK4zVotYwBJSN36XtBWRA4w1mV6xA2TB3Qw54ZAlw1NkMBRnXa3
oGdpQzHQArYjWFTv85+GTxNrHT+Z7W79HBV6VmBdzyQE6DCRrJ330LUBA3GesZ5gT0PS
wpikDW0nxIIqudn7I4xVUpNzEwWK6s1NmfzwkLKzOq2+RJAbxRC+fp0ajZAU1HYGcw2l
xVkEaSBNHAlWKTHLaHs0Q3xyET8FsEfbWFGs/afhwiVT/vqYrhQHoM00XppuO+no94+B
f/jjC2NEoLW1kCxmzhMWOzLpMhVXR7HAwOsylHiJbHfxPbip40SdZVzNJo+4IibX6fzy
JUEA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc;
bh=XJcCtdzHlHc6RVHmnid6Iplysw0jrvS/xcLsOeW1J6o=;
b=PrtYtm2LSq9+Mjko93uWe9QbOSuUhyfQiv2rejlAS8AceUePlcWGTxpp06SaAxWEYD
sXByDDXpWLb6gW1COSMQJBA++Ebe8NgOjHlIcnsMxjTQ5ApCmrPbsBpu6x0PASXN1xBz
5Bpav6daAk63HQaUX+1dWenvwJQbqks6xR29g6oW9TSpbcHxMUapYVg7nOIlUYIqmpTp
G+gTWrAb1uMGnEosbSg3wEGbtx7oXnLPqDCvy/q7TbTde8gDYD4P0ZBf4I0YszErdJIr
gcvdKRjc9sSI/9X55vbpLoa3IWnFPiZS6R5CTEnz1E+eMUO6uUuQxmhtoxbCJUPHmZfP
Ia1w==
X-Gm-Message-State: ACgBeo1JFRxa+/jS5JE7D18FaCrcq1a+tZ7JqAgZhfHV2Gx2Ho8qlBoL
P+O/A9iYBp8Iofnwz29qRIvM4JSjlrFq4c4gSjo=
X-Google-Smtp-Source: AA6agR5X6fViq9W7CcqyvwV/iu8YTq+iZ9eiZXW/w3hdT01aSCwxJFbtYQERgfTaafxeygbpFy7JdI1EFuwc2hGut+I=
X-Received: by 2002:a0d:e28c:0:b0:334:2a33:b923 with SMTP id
l134-20020a0de28c000000b003342a33b923mr1016304ywe.177.1660656095172; Tue, 16
Aug 2022 06:21:35 -0700 (PDT)
MIME-Version: 1.0
From: "Dr. Umar Bello"
Date: Tue, 16 Aug 2022 06:21:22 -0700
Message-ID:
Subject: GREETINGS:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000a59cba05e65ba04f"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.5
X-Spam_score_int: 115
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: GREETINGS: I am contacting you on a business deal of $19.5
Million US Dollars, ready for transfer into your account if we make this
claim, we will share it 60%/40%.100% risk free and it will be legally backed
up with government approved If you are interested reply for more details.
Content analysis details: (11.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.179 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[bellalogan584[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[bellalogan584[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 T_HK_NAME_FM_DR No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.1 RISK_FREE No risk!
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} GREETINGS:
--000000000000a59cba05e65ba04f
Content-Type: text/plain; charset="UTF-8"
GREETINGS:
I am contacting you on a business deal of $19.5 Million US Dollars,
ready for transfer into your account
if we make this claim, we will share it 60%/40%.100% risk free and it
will be legally backed up with government approved If you are
interested reply for more details.
Kindly reply for more details Waiting for your reply Make Sure You
Write To My Via E-mail Address...(umarbellod46@gmail.com)
Best regards
Dr.Umar Bello,
--000000000000a59cba05e65ba04f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
GREETINGS:
=C2=A0 =C2=A0
=C2=A0 I am contacting you=
on a business deal of $19.5 Million US Dollars,
ready for transfer into=
your account
if we make this claim, we will share it 60%/40%.100% r=
isk free and it
will be legally backed up with government approved If yo=
u are
interested reply for more details.
Kindly reply =C2=A0for m=
ore details Waiting for your reply =C2=A0Make Sure You
Write To My Via E=
-mail Address...(umarbellod46@gma=
il.com)
Best regards
Dr.Umar Bello,
=C2=A0 =C2=A0
=C2=A0 I am contacting you=
on a business deal of $19.5 Million US Dollars,
ready for transfer into=
your account
if we make this claim, we will share it 60%/40%.100% r=
isk free and it
will be legally backed up with government approved If yo=
u are
interested reply for more details.
Kindly reply =C2=A0for m=
ore details Waiting for your reply =C2=A0Make Sure You
Write To My Via E=
-mail Address...(umarbellod46@gma=
il.com)
Best regards
Dr.Umar Bello,
--000000000000a59cba05e65ba04f--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments