Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 17 Aug 2022 06:49:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oOISx-000GE2-GS
for dave@doctor.nl2k.ab.ca;
Wed, 17 Aug 2022 06:48:11 -0600
Resent-From: The Doctor
Resent-Date: Wed, 17 Aug 2022 06:48:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f172.google.com ([209.85.214.172]:35683)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oOHk9-000FTx-5g
for doctor@doctor.nl2k.ab.ca;
Wed, 17 Aug 2022 06:01:56 -0600
Received: by mail-pl1-f172.google.com with SMTP id y4so172775plb.2
for; Wed, 17 Aug 2022 05:01:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc;
bh=N1i0CHGm80wg7L5IBw+GLpKeTUxSGsMYcFfITqqz9QU=;
b=OzHraF7OF4f6oyK4/42SgqfuoTobZva02ohxeHL4gEAz/ZVlIo15woCfq/Fe5Ol/n3
aZpim7NOHxsX7RRIG/fC9rQWy5iTBJsz4rJsZP+EIvE0FTu39mL/KaEWD3zh09Aq+zVN
IUiyx8yUtk4cLkE5Otqn4RDs9VqA69uHgDrh5Cag4Ll5h8k53pthXAWzL6yRkWzHXByI
blK1O7Zs1BrqTRu+rkSQE80dHfCbcuAKA4+YCNEDLvTE9fdbil6ms6kd0/rJhQ5CANtI
P4CWsIJhcGK1g9jkWJ13u+MwBo81+mfJG4DKfkwks7ADPSxp4vr+ShO17pyKQ4UWy5Ue
nE7Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc;
bh=N1i0CHGm80wg7L5IBw+GLpKeTUxSGsMYcFfITqqz9QU=;
b=xgPcB3/hlKY+l/l9cgfuP2LH7ZszvfVZFU4Q2VUgdkNRHs0KlEwPq+94cwYSKylcU9
7RLkMZQ/mr9/BpxpDnta8cAXOpYCC7tOViQcr3EHl0D6B7NmPccfpvCHzQ0Fq4VXumn/
iwI1UO2URuRcoH/MPrOCM4myx+SoLqSe9fBe72CzoE13LkaK/MAV7ATcXKsSOyWaZ9iE
bSjY1DBGob5OsZy8e0S5MqNBrOzSoeMySoXrvvRwSJDX0un8khE+oBo65EsJxfzVOr2w
smd7dp1mbTDttSfgak0ofvc3Jv2z/A+Xeu0wLN9v7D2f+cDhXrDifGUoES9Jq0+Uxp+A
w7Lw==
X-Gm-Message-State: ACgBeo3BhsAz2+Bo2+gl7qyoQrgTvGaeTd2GKHuFEq8KcZJcH66/Oihh
PGL8wW1KDWo1Bb2EB18Z9wyzX1qIjTaO3L5do2k=
X-Google-Smtp-Source: AA6agR4ktby6GkeIqBr6/iXOI0cRGsQDrGuiFd04M09BNPZg/0kNjfk7Rfk0eP+YCCg4ABn2nSchkdlB+Ybzz7ikWIw=
X-Received: by 2002:a17:90b:3b4d:b0:1f4:d1b6:cb69 with SMTP id
ot13-20020a17090b3b4d00b001f4d1b6cb69mr3403982pjb.229.1660737690240; Wed, 17
Aug 2022 05:01:30 -0700 (PDT)
MIME-Version: 1.0
From: Dr Umar Bello
Date: Wed, 17 Aug 2022 12:00:18 -0700
Message-ID:
Subject: GREETINGS:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000178c0305e66ea0d2"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.5
X-Spam_score_int: 115
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: GREETINGS: I am contacting you on a business deal of $19.5
Million US Dollars, ready for transfer into your account if we make this
claim, we will share it 60%/40%.100% risk free and it will be legally backed
up with government approved If you are interested reply for more details.
Content analysis details: (11.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.214.172 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[umarbellod46[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[davidfelldavid5[at]gmail.com]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
-0.0 SPF_PASS SPF: sender matches SPF record
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 T_HK_NAME_FM_DR No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.1 RISK_FREE No risk!
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} GREETINGS:
--000000000000178c0305e66ea0d2
Content-Type: text/plain; charset="UTF-8"
GREETINGS:
I am contacting you on a business deal of $19.5 Million US Dollars,
ready for transfer into your account
if we make this claim, we will share it 60%/40%.100% risk free and it
will be legally backed up with government approved If you are
interested reply for more details.
Kindly reply for more details Waiting for your reply Make Sure You
Write To My Via E-mail Address...(umarbellod46@gmail.com)
Best regards
Dr.Umar Bello,
--000000000000178c0305e66ea0d2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000178c0305e66ea0d2--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 17 Aug 2022 06:49:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oOISx-000GE2-GS
for dave@doctor.nl2k.ab.ca;
Wed, 17 Aug 2022 06:48:11 -0600
Resent-From: The Doctor
Resent-Date: Wed, 17 Aug 2022 06:48:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f172.google.com ([209.85.214.172]:35683)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oOHk9-000FTx-5g
for doctor@doctor.nl2k.ab.ca;
Wed, 17 Aug 2022 06:01:56 -0600
Received: by mail-pl1-f172.google.com with SMTP id y4so172775plb.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc;
bh=N1i0CHGm80wg7L5IBw+GLpKeTUxSGsMYcFfITqqz9QU=;
b=OzHraF7OF4f6oyK4/42SgqfuoTobZva02ohxeHL4gEAz/ZVlIo15woCfq/Fe5Ol/n3
aZpim7NOHxsX7RRIG/fC9rQWy5iTBJsz4rJsZP+EIvE0FTu39mL/KaEWD3zh09Aq+zVN
IUiyx8yUtk4cLkE5Otqn4RDs9VqA69uHgDrh5Cag4Ll5h8k53pthXAWzL6yRkWzHXByI
blK1O7Zs1BrqTRu+rkSQE80dHfCbcuAKA4+YCNEDLvTE9fdbil6ms6kd0/rJhQ5CANtI
P4CWsIJhcGK1g9jkWJ13u+MwBo81+mfJG4DKfkwks7ADPSxp4vr+ShO17pyKQ4UWy5Ue
nE7Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc;
bh=N1i0CHGm80wg7L5IBw+GLpKeTUxSGsMYcFfITqqz9QU=;
b=xgPcB3/hlKY+l/l9cgfuP2LH7ZszvfVZFU4Q2VUgdkNRHs0KlEwPq+94cwYSKylcU9
7RLkMZQ/mr9/BpxpDnta8cAXOpYCC7tOViQcr3EHl0D6B7NmPccfpvCHzQ0Fq4VXumn/
iwI1UO2URuRcoH/MPrOCM4myx+SoLqSe9fBe72CzoE13LkaK/MAV7ATcXKsSOyWaZ9iE
bSjY1DBGob5OsZy8e0S5MqNBrOzSoeMySoXrvvRwSJDX0un8khE+oBo65EsJxfzVOr2w
smd7dp1mbTDttSfgak0ofvc3Jv2z/A+Xeu0wLN9v7D2f+cDhXrDifGUoES9Jq0+Uxp+A
w7Lw==
X-Gm-Message-State: ACgBeo3BhsAz2+Bo2+gl7qyoQrgTvGaeTd2GKHuFEq8KcZJcH66/Oihh
PGL8wW1KDWo1Bb2EB18Z9wyzX1qIjTaO3L5do2k=
X-Google-Smtp-Source: AA6agR4ktby6GkeIqBr6/iXOI0cRGsQDrGuiFd04M09BNPZg/0kNjfk7Rfk0eP+YCCg4ABn2nSchkdlB+Ybzz7ikWIw=
X-Received: by 2002:a17:90b:3b4d:b0:1f4:d1b6:cb69 with SMTP id
ot13-20020a17090b3b4d00b001f4d1b6cb69mr3403982pjb.229.1660737690240; Wed, 17
Aug 2022 05:01:30 -0700 (PDT)
MIME-Version: 1.0
From: Dr Umar Bello
Date: Wed, 17 Aug 2022 12:00:18 -0700
Message-ID:
Subject: GREETINGS:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000178c0305e66ea0d2"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.5
X-Spam_score_int: 115
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: GREETINGS: I am contacting you on a business deal of $19.5
Million US Dollars, ready for transfer into your account if we make this
claim, we will share it 60%/40%.100% risk free and it will be legally backed
up with government approved If you are interested reply for more details.
Content analysis details: (11.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.214.172 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[umarbellod46[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[davidfelldavid5[at]gmail.com]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
-0.0 SPF_PASS SPF: sender matches SPF record
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 T_HK_NAME_FM_DR No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.1 RISK_FREE No risk!
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} GREETINGS:
--000000000000178c0305e66ea0d2
Content-Type: text/plain; charset="UTF-8"
GREETINGS:
I am contacting you on a business deal of $19.5 Million US Dollars,
ready for transfer into your account
if we make this claim, we will share it 60%/40%.100% risk free and it
will be legally backed up with government approved If you are
interested reply for more details.
Kindly reply for more details Waiting for your reply Make Sure You
Write To My Via E-mail Address...(umarbellod46@gmail.com)
Best regards
Dr.Umar Bello,
--000000000000178c0305e66ea0d2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
GREETINGS:
=C2=A0 =C2=A0
=C2=A0 I am contacting you=
on a business deal of $19.5 Million US Dollars,
ready for transfer into=
your account
if we make this claim, we will share it 60%/40%.100% r=
isk free and it
will be legally backed up with government approved If yo=
u are
interested reply for more details.
Kindly reply =C2=A0for m=
ore details Waiting for your reply =C2=A0Make Sure You
Write To My Via E=
-mail Address...(umarbellod46@gma=
il.com)
Best regards
Dr.Umar Bello,
=C2=A0 =C2=A0
=C2=A0 I am contacting you=
on a business deal of $19.5 Million US Dollars,
ready for transfer into=
your account
if we make this claim, we will share it 60%/40%.100% r=
isk free and it
will be legally backed up with government approved If yo=
u are
interested reply for more details.
Kindly reply =C2=A0for m=
ore details Waiting for your reply =C2=A0Make Sure You
Write To My Via E=
-mail Address...(umarbellod46@gma=
il.com)
Best regards
Dr.Umar Bello,
--000000000000178c0305e66ea0d2--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments