Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 25 Sep 2022 00:50:52 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1ocLTB-0001pr-Jt
for dave@doctor.nl2k.ab.ca;
Sun, 25 Sep 2022 00:50:29 -0600
Resent-From: The Doctor
Resent-Date: Sun, 25 Sep 2022 00:50:29 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-il1-f179.google.com ([209.85.166.179]:42673)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1ocFB0-000Lqr-MC
for doctor@doctor.nl2k.ab.ca;
Sat, 24 Sep 2022 18:07:24 -0600
Received: by mail-il1-f179.google.com with SMTP id m16so1899738ili.9
for; Sat, 24 Sep 2022 17:07:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=Zsix8YMAcE9wGFZncQmB6dTWvxueIrSdBdSdOONjbas=;
b=KX80SObv9ebP52ghOY88/UsMtEn1PJJxTHgh0EeULumbzBAszN8dPK6tgvHm8pKHn7
Cr36yPRtmojltqh8Q7z3NCYh5StmlAJeRPR2bK/dARB4cwyu0zx+nygrpZTarM3jgbo/
G3XKZfdehOW11TO9T/EOhyUTXN1VIJ5vo5FSQVTlnuKbu1RUU0Lof1vPNtOhnEdJBfjW
BW0r/tmF8F1ZPx67TEYJNBeZXfdvAIFIjQA16eBR4ESnVUq+EgKMvnPk91UJfvvLpZTA
gUihODKohOUlrMMMwciveP+Xq+Vx+eAoXvdIRj8LvpdjX1NsYEhfDaLfXrsBAZOKW0/S
hD5w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=Zsix8YMAcE9wGFZncQmB6dTWvxueIrSdBdSdOONjbas=;
b=Gujs05ATKusPYrlNpy/hl0qLQZqSMMTITxFgdCxD8xxQW/by2ePh/5OgxiLYUWqjW4
cAtdX6L1FhhQCw5Ry5wAYNBxntXK3goIez8V5SEK/VMKl8c6WE8lMQpnxSH232KIf5wL
UAAlyHBpFxRKXdkU2+xQUo1XrAXslZmw3m6R+Qdk7G4wzS2r0+uoycy1Jsac1XlLNjQ6
T9qzAm4pcp0iwRQcBpkm1gE9PrLvRz0ptBTq3H1SUqAW8HMkHcyxnKwwNkT05E/PpibI
5+I52YxuIlDheRNQ82O3ykXWr6Fkoigc/8+0ehB1rtVM5EBL5L5q0MQp7C+42R9KZxX4
cwpw==
X-Gm-Message-State: ACrzQf28fd/yNv6bfC6KOf8S+LWizPNowALNL4D+JT8BmW90kTw6SIj7
+CS2dop7WBPNUNsnCE+DG7/Il2LrjV3ISoKbLF0=
X-Google-Smtp-Source: AMsMyM6o1qMnm26altgdMHxTrUPc9qP9w0fxZxHa4rhyf72iCriUGJms/IeWVq0gMbBaAkll3jfvoaZvU0vofCFTs+Y=
X-Received: by 2002:a05:6e02:1a48:b0:2f3:2e91:b78 with SMTP id
u8-20020a056e021a4800b002f32e910b78mr7508713ilv.96.1664064415846; Sat, 24 Sep
2022 17:06:55 -0700 (PDT)
MIME-Version: 1.0
Reply-To: monicaroxanne_pereira@aol.com
From: "Monica .R. Pereira"
Date: Sun, 25 Sep 2022 01:06:44 +0100
Message-ID:
Subject: =?UTF-8?Q?Confirma=C8=9Bi_calitatea_de_proprietar_al_e=2Dmailului?=
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000063d5e905e97530d4"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.3
X-Spam_score_int: 103
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: *Stimate proprietar de e-mail,Vă rugăm să confirmați calitatea
de proprietar al e-mailului dvs. A fost selectat aleatoriu în urma unei
extrageri electronice Spinball, pentru a primi o donație de [...]
Content analysis details: (10.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.179 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[boltcars8[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[boltcars8[at]gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} =?UTF-8?Q?Confirma=C8=9Bi_calitatea_de_proprietar_al_e=2Dmailului?=
--00000000000063d5e905e97530d4
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Stimate proprietar de e-mail,V=C4=83 rug=C4=83m s=C4=83 confirma=C8=9Bi ca=
litatea de
proprietar al e-mailului dvs. A fost selectat aleatoriu =C3=AEn urma unei
extrageri electronice Spinball, pentru a primi o dona=C8=9Bie de 1.700.000,=
00
USD de la Funda=C8=9Bia Monica Roxanne Pereira. Trimite=C8=9Bi un e-mail de
confirmare la monicaroxanne_pereira@aol.com
pentru mai multe detalii.Monica Roxanne Pereira.Fondator:Funda=C8=9Bia Moni=
ca
Roxanne Pereira.
Dear Email Owner,Please kindly confirm ownership of your email. It was
randomly selected after an electronic computer Spin ball draw, to receive a
donation of $1,700,000.00 USD from Monica Roxanne Pereira Foundation. Send
a confirmation Email to monicaroxanne_pereira@aol.com
for more details.Monica Roxanne
Pereira.Founder:Monica Roxanne Pereira Foundation.
--00000000000063d5e905e97530d4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--00000000000063d5e905e97530d4--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 25 Sep 2022 00:50:52 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1ocLTB-0001pr-Jt
for dave@doctor.nl2k.ab.ca;
Sun, 25 Sep 2022 00:50:29 -0600
Resent-From: The Doctor
Resent-Date: Sun, 25 Sep 2022 00:50:29 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-il1-f179.google.com ([209.85.166.179]:42673)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1ocFB0-000Lqr-MC
for doctor@doctor.nl2k.ab.ca;
Sat, 24 Sep 2022 18:07:24 -0600
Received: by mail-il1-f179.google.com with SMTP id m16so1899738ili.9
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=Zsix8YMAcE9wGFZncQmB6dTWvxueIrSdBdSdOONjbas=;
b=KX80SObv9ebP52ghOY88/UsMtEn1PJJxTHgh0EeULumbzBAszN8dPK6tgvHm8pKHn7
Cr36yPRtmojltqh8Q7z3NCYh5StmlAJeRPR2bK/dARB4cwyu0zx+nygrpZTarM3jgbo/
G3XKZfdehOW11TO9T/EOhyUTXN1VIJ5vo5FSQVTlnuKbu1RUU0Lof1vPNtOhnEdJBfjW
BW0r/tmF8F1ZPx67TEYJNBeZXfdvAIFIjQA16eBR4ESnVUq+EgKMvnPk91UJfvvLpZTA
gUihODKohOUlrMMMwciveP+Xq+Vx+eAoXvdIRj8LvpdjX1NsYEhfDaLfXrsBAZOKW0/S
hD5w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=Zsix8YMAcE9wGFZncQmB6dTWvxueIrSdBdSdOONjbas=;
b=Gujs05ATKusPYrlNpy/hl0qLQZqSMMTITxFgdCxD8xxQW/by2ePh/5OgxiLYUWqjW4
cAtdX6L1FhhQCw5Ry5wAYNBxntXK3goIez8V5SEK/VMKl8c6WE8lMQpnxSH232KIf5wL
UAAlyHBpFxRKXdkU2+xQUo1XrAXslZmw3m6R+Qdk7G4wzS2r0+uoycy1Jsac1XlLNjQ6
T9qzAm4pcp0iwRQcBpkm1gE9PrLvRz0ptBTq3H1SUqAW8HMkHcyxnKwwNkT05E/PpibI
5+I52YxuIlDheRNQ82O3ykXWr6Fkoigc/8+0ehB1rtVM5EBL5L5q0MQp7C+42R9KZxX4
cwpw==
X-Gm-Message-State: ACrzQf28fd/yNv6bfC6KOf8S+LWizPNowALNL4D+JT8BmW90kTw6SIj7
+CS2dop7WBPNUNsnCE+DG7/Il2LrjV3ISoKbLF0=
X-Google-Smtp-Source: AMsMyM6o1qMnm26altgdMHxTrUPc9qP9w0fxZxHa4rhyf72iCriUGJms/IeWVq0gMbBaAkll3jfvoaZvU0vofCFTs+Y=
X-Received: by 2002:a05:6e02:1a48:b0:2f3:2e91:b78 with SMTP id
u8-20020a056e021a4800b002f32e910b78mr7508713ilv.96.1664064415846; Sat, 24 Sep
2022 17:06:55 -0700 (PDT)
MIME-Version: 1.0
Reply-To: monicaroxanne_pereira@aol.com
From: "Monica .R. Pereira"
Date: Sun, 25 Sep 2022 01:06:44 +0100
Message-ID:
Subject: =?UTF-8?Q?Confirma=C8=9Bi_calitatea_de_proprietar_al_e=2Dmailului?=
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000063d5e905e97530d4"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.3
X-Spam_score_int: 103
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: *Stimate proprietar de e-mail,Vă rugăm să confirmați calitatea
de proprietar al e-mailului dvs. A fost selectat aleatoriu în urma unei
extrageri electronice Spinball, pentru a primi o donație de [...]
Content analysis details: (10.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.179 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[boltcars8[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[boltcars8[at]gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} =?UTF-8?Q?Confirma=C8=9Bi_calitatea_de_proprietar_al_e=2Dmailului?=
--00000000000063d5e905e97530d4
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Stimate proprietar de e-mail,V=C4=83 rug=C4=83m s=C4=83 confirma=C8=9Bi ca=
litatea de
proprietar al e-mailului dvs. A fost selectat aleatoriu =C3=AEn urma unei
extrageri electronice Spinball, pentru a primi o dona=C8=9Bie de 1.700.000,=
00
USD de la Funda=C8=9Bia Monica Roxanne Pereira. Trimite=C8=9Bi un e-mail de
confirmare la monicaroxanne_pereira@aol.com
pentru mai multe detalii.Monica Roxanne Pereira.Fondator:Funda=C8=9Bia Moni=
ca
Roxanne Pereira.
Dear Email Owner,Please kindly confirm ownership of your email. It was
randomly selected after an electronic computer Spin ball draw, to receive a
donation of $1,700,000.00 USD from Monica Roxanne Pereira Foundation. Send
a confirmation Email to monicaroxanne_pereira@aol.com
Pereira.Founder:Monica Roxanne Pereira Foundation.
--00000000000063d5e905e97530d4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Stimate proprietar de e-mail,
V=C4=83 rug=C4=83m=
s=C4=83 confirma=C8=9Bi calitatea de proprietar al e-mailului dvs. A fost =
selectat aleatoriu =C3=AEn urma unei extrageri electronice Spinball, pentru=
a primi o dona=C8=9Bie de 1.700.000,00 USD de la Funda=C8=9Bia Monica Roxa=
nne Pereira. Trimite=C8=9Bi un e-mail de confirmare la
nicaroxanne_pereira@aol.com">monicaroxanne_pereira@aol.com pentru mai m=
ulte detalii.
Monica Roxanne Pereira.
Fondator:
Funda=C8=9Bia =
Monica Roxanne Pereira.
=
V=C4=83 rug=C4=83m=
s=C4=83 confirma=C8=9Bi calitatea de proprietar al e-mailului dvs. A fost =
selectat aleatoriu =C3=AEn urma unei extrageri electronice Spinball, pentru=
a primi o dona=C8=9Bie de 1.700.000,00 USD de la Funda=C8=9Bia Monica Roxa=
nne Pereira. Trimite=C8=9Bi un e-mail de confirmare la
nicaroxanne_pereira@aol.com">monicaroxanne_pereira@aol.com pentru mai m=
ulte detalii.
Monica Roxanne Pereira.
Fondator:
Funda=C8=9Bia =
Monica Roxanne Pereira.
Dear Email Owner,
Please kindly confirm ownership of your em=
ail. It was randomly selected after an electronic computer Spin ball draw, =
to receive a donation of $1,700,000.00 USD from Monica Roxanne Pereira =C2=
=A0Foundation. Send a confirmation Email to =C2=A0
oxanne_pereira@aol.com">monicaroxanne_pereira@aol.com for more details.=
Monica Roxanne Pereira.
Founder:
Monica Roxanne Pereira =C2=
=A0Foundation.
Please kindly confirm ownership of your em=
ail. It was randomly selected after an electronic computer Spin ball draw, =
to receive a donation of $1,700,000.00 USD from Monica Roxanne Pereira =C2=
=A0Foundation. Send a confirmation Email to =C2=A0
oxanne_pereira@aol.com">monicaroxanne_pereira@aol.com for more details.=
Monica Roxanne Pereira.
Founder:
Monica Roxanne Pereira =C2=
=A0Foundation.
--00000000000063d5e905e97530d4--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments